This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json) Hash identifier: dXuim0flVIa/LwNVsHSB1u1ZFNcreL7fGNHTnguLa1s= Subject key identifier: 3E:51:5C:91:92:4C:5B:21:4F:F8:81:87:95:A3:11:39:17:B0:EE:B8 Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Certificate serial: 019BADCA7C2708ECAAE896ACF14674768325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft Manifest number: 0E92 Signing time: Sun 11 Jan 2026 16:01:26 +0000 Manifest this update: Sun 11 Jan 2026 16:01:26 +0000 Manifest next update: Mon 12 Jan 2026 16:01:26 +0000 Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: MnViud3ugp+P+NUM12kKF3v30AMDQZosZeshKY65KCU=) 2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:ca:7c:27:08:ec:aa:e8:96:ac:f1:46:74:76:83:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Validity Not Before: Jan 11 16:01:26 2026 GMT Not After : Jan 12 16:01:26 2026 GMT Subject: CN=3e515c91924c5b214ff8818795a3113917b0eeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:92:ed:cb:1c:3a:9b:b4:01:5c:d8:5d:0f: 4f:fa:7e:5f:a6:73:d9:a3:ff:00:39:39:7d:ca:af: dd:9f:53:d7:54:7c:2f:1d:cb:34:cc:77:9b:3d:03: 68:7e:4d:6b:85:b6:a5:2c:45:36:03:ff:90:08:74: 6d:b9:0f:84:04:d4:4b:1d:dc:57:a6:7a:19:96:b8: 0c:de:6e:1a:a6:53:95:50:a0:aa:fe:3b:77:45:28: a2:e2:43:5e:44:e3:11:b6:fe:6b:f8:e6:1f:26:f9: 3e:32:ee:2c:40:72:71:3c:34:43:fa:52:e5:c9:3f: 87:c3:59:d6:d3:f9:a2:ac:c6:5a:46:73:ca:39:a1: 06:3c:e4:e2:d5:5f:ef:35:16:0f:50:26:36:44:df: a9:52:d5:32:ee:6b:2d:a0:c2:79:3c:67:9d:c0:54: e4:f7:f0:7d:c7:2d:e4:3a:9a:2b:15:29:d4:72:8f: 41:a2:dc:ba:fe:5e:a2:6a:4d:8e:ab:21:8c:53:e4: 01:37:ad:bc:ca:36:77:eb:91:49:9f:13:6b:8e:43: 21:68:0f:5f:33:06:98:8b:85:2a:33:6e:52:d4:2d: de:d2:62:a6:54:61:a1:a5:ac:c6:92:d5:f8:f6:35: b8:0d:7c:73:b0:c7:55:1e:ba:ad:ff:e2:28:b1:8e: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:51:5C:91:92:4C:5B:21:4F:F8:81:87:95:A3:11:39:17:B0:EE:B8 X509v3 Authority Key Identifier: keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a2:e6:ac:9b:37:ec:48:81:91:77:5c:50:7e:62:3f:4e:5e: aa:a3:aa:b1:f2:61:15:bc:77:2a:26:aa:1a:12:3b:d4:99:74: 61:ac:f0:bf:b7:01:d3:fb:fd:e8:f2:f3:b6:91:0d:b5:60:2c: e3:f7:22:79:6c:76:e2:86:58:14:83:33:f3:18:a5:23:03:7b: 1e:64:72:b7:50:30:6e:ef:ed:5d:ec:0d:ba:0d:8d:96:3d:9e: cc:b4:79:c8:3a:23:fa:e1:5c:ed:17:98:3d:d5:f0:0e:42:42: 33:aa:b4:aa:62:67:09:4c:dd:af:e8:da:5c:93:74:7f:33:de: bd:9b:35:b7:4a:cd:65:de:ed:c5:f9:90:0b:7f:82:9f:41:a8: 71:68:22:71:b4:0d:be:89:23:32:e0:26:f0:a5:e9:15:80:6b: 78:86:ee:b0:60:6a:7a:fe:d5:c7:67:6f:71:37:bd:00:9e:11: 13:c3:2a:39:f3:88:a5:59:5b:46:d4:0a:9b:5d:61:82:78:de: 2c:ad:fb:92:ec:37:e2:d4:52:19:64:08:45:ac:11:b3:9b:76: 5d:13:b9:71:e8:17:6a:cf:37:34:ac:eb:66:b4:e1:85:5c:e4: 90:6f:4e:1b:ec:9e:6c:fa:4c:f1:b0:0a:2c:01:44:51:8f:81: e4:8b:d4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutynwnCOyq6Jas8UZ0doMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh NGQ2MzUwHhcNMjYwMTExMTYwMTI2WhcNMjYwMTEyMTYwMTI2WjAzMTEwLwYDVQQD EygzZTUxNWM5MTkyNGM1YjIxNGZmODgxODc5NWEzMTEzOTE3YjBlZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RyS7cscOpu0AVzYXQ9P+n5fpnPZ o/8AOTl9yq/dn1PXVHwvHcs0zHebPQNofk1rhbalLEU2A/+QCHRtuQ+EBNRLHdxX pnoZlrgM3m4aplOVUKCq/jt3RSii4kNeROMRtv5r+OYfJvk+Mu4sQHJxPDRD+lLl yT+Hw1nW0/mirMZaRnPKOaEGPOTi1V/vNRYPUCY2RN+pUtUy7mstoMJ5PGedwFTk 9/B9xy3kOporFSnUco9Boty6/l6iak2OqyGMU+QBN628yjZ365FJnxNrjkMhaA9f MwaYi4UqM25S1C3e0mKmVGGhpazGktX49jW4DXxzsMdVHrqt/+IosY4skQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5RXJGSTFshT/iBh5WjETkXsO64MB8GA1UdIwQY MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4 LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6LmrJs3 7EiBkXdcUH5iP05eqqOqsfJhFbx3KiaqGhI71Jl0Yazwv7cB0/v96PLztpENtWAs 4/cieWx24oZYFIMz8xilIwN7HmRyt1Awbu/tXewNug2Nlj2ezLR5yDoj+uFc7ReY PdXwDkJCM6q0qmJnCUzdr+jaXJN0fzPevZs1t0rNZd7txfmQC3+Cn0GocWgicbQN vokjMuAm8KXpFYBreIbusGBqev7Vx2dvcTe9AJ4RE8MqOfOIpVlbRtQKm11hgnje LK37kuw34tRSGWQIRawRs5t2XRO5cegXas83NKzrZrThhVzkkG9OG+yebPpM8bAK LAFEUY+B5IvUkQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:44:55 2026 by rpki-client