This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json) Hash identifier: EBcStWS3oBoZdfPFgoNy/8KvNMGCEXeA9ioHRz7kMoo= Subject key identifier: 34:61:60:12:3C:3D:6A:15:75:D7:AE:3C:EA:BA:22:BE:41:42:A6:76 Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Certificate serial: 019B96302D28FCB4C9872A2A9E7FE6B4B3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft Manifest number: 0DDD Signing time: Wed 07 Jan 2026 02:01:38 +0000 Manifest this update: Wed 07 Jan 2026 02:01:38 +0000 Manifest next update: Thu 08 Jan 2026 02:01:38 +0000 Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: DEjyPUp0Tp25Oiu9lui/4E43k2WbLKzrlCCDBRM44Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:30:2d:28:fc:b4:c9:87:2a:2a:9e:7f:e6:b4:b3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Validity Not Before: Jan 7 02:01:38 2026 GMT Not After : Jan 8 02:01:38 2026 GMT Subject: CN=346160123c3d6a1575d7ae3ceaba22be4142a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:85:b1:42:dd:3e:fc:00:8f:93:20:4c:7a: 27:b4:98:84:a7:c1:f7:44:0d:4b:ce:e8:b0:ec:da: cd:16:f1:d9:6c:7d:45:e1:09:52:44:a2:41:73:23: 40:11:20:8e:aa:b3:32:88:c9:2c:8b:5d:72:46:71: d1:fb:e3:5f:3d:b6:0a:e6:88:e8:8b:1f:cb:03:ce: 32:81:a9:63:33:e2:17:ef:80:0f:9c:2c:74:02:25: 3f:69:5c:9b:e6:d0:62:e4:87:d4:a0:77:ba:8c:4a: 1f:f5:66:41:f1:d1:df:23:ee:27:52:e2:c5:87:d9: 2b:5a:7a:ab:af:88:89:4f:2c:33:5f:ca:e1:51:aa: 30:93:d6:b2:9e:c1:5d:40:84:52:8b:a9:7d:c2:81: 89:7e:02:11:4b:7c:f4:1b:2d:0a:7e:bf:4c:29:c8: d8:c3:3b:a2:49:32:3b:80:d7:c1:2c:0b:aa:a8:83: a4:ff:43:51:cc:12:94:6f:8a:da:3a:99:26:db:19: d8:7d:ba:da:a0:e0:2e:0d:43:31:a1:de:30:02:86: e2:32:45:01:f2:f4:cb:cb:16:3e:43:aa:b5:16:d1: 70:57:08:ec:2b:bf:a5:f7:79:b7:1e:b2:8d:94:60: 1e:44:c0:12:14:a7:d6:06:f3:88:ab:58:7c:67:b7: fa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:60:12:3C:3D:6A:15:75:D7:AE:3C:EA:BA:22:BE:41:42:A6:76 X509v3 Authority Key Identifier: keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0c:f1:8a:48:3a:01:d8:ff:f4:f8:b0:3c:00:da:34:b1:ac: a6:bb:cb:7a:74:0e:c6:24:3d:f1:40:0a:97:d4:91:2a:07:f9: 27:0c:85:df:c9:e9:cb:b8:0a:79:02:0f:d4:b8:c1:25:3e:bc: 9e:18:8f:80:9f:54:f4:b4:d5:ed:c3:6f:a7:a3:46:06:6d:2c: 20:03:8e:6a:9d:62:7c:8f:28:a6:cd:6b:8c:64:a3:d0:d6:6d: 80:66:41:9d:86:2e:92:2d:82:35:03:d5:e7:fa:06:fb:54:2e: fb:aa:b0:7f:d5:8f:8b:dc:d1:43:cc:8a:57:55:b9:ff:58:ad: 54:ae:82:10:f0:ea:af:7f:09:9e:3f:ab:5b:65:bb:e1:21:e6: a1:d9:81:68:19:2d:6c:74:54:41:b7:33:b8:33:2a:2c:d3:e1: 46:4b:c1:91:96:3a:c1:ee:43:de:96:60:fb:f2:76:cd:5e:37: 29:77:b5:6d:ff:1e:ea:00:d9:c4:09:bc:b3:7e:91:f8:08:49: ae:64:fc:f3:c3:3c:6f:d9:54:6c:94:28:1b:a9:57:a1:bb:9d: 00:31:b7:e9:6d:c3:17:eb:63:7e:51:42:a1:d2:e1:5e:fa:42: be:b1:fb:8a:3d:b1:ab:72:81:35:18:9a:39:04:e0:f8:cc:8c: 76:e2:af:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWMC0o/LTJhyoqnn/mtLPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx OGIyMWMwHhcNMjYwMTA3MDIwMTM4WhcNMjYwMTA4MDIwMTM4WjAzMTEwLwYDVQQD EygzNDYxNjAxMjNjM2Q2YTE1NzVkN2FlM2NlYWJhMjJiZTQxNDJhNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A+FsULdPvwAj5MgTHontJiEp8H3 RA1Lzuiw7NrNFvHZbH1F4QlSRKJBcyNAESCOqrMyiMksi11yRnHR++NfPbYK5ojo ix/LA84ygaljM+IX74APnCx0AiU/aVyb5tBi5IfUoHe6jEof9WZB8dHfI+4nUuLF h9krWnqrr4iJTywzX8rhUaowk9aynsFdQIRSi6l9woGJfgIRS3z0Gy0Kfr9MKcjY wzuiSTI7gNfBLAuqqIOk/0NRzBKUb4raOpkm2xnYfbraoOAuDUMxod4wAobiMkUB 8vTLyxY+Q6q1FtFwVwjsK7+l93m3HrKNlGAeRMASFKfWBvOIq1h8Z7f6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRhYBI8PWoVddeuPOq6Ir5BQqZ2MB8GA1UdIwQY MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgzxikg6 Adj/9PiwPADaNLGsprvLenQOxiQ98UAKl9SRKgf5JwyF38npy7gKeQIP1LjBJT68 nhiPgJ9U9LTV7cNvp6NGBm0sIAOOap1ifI8ops1rjGSj0NZtgGZBnYYuki2CNQPV 5/oG+1Qu+6qwf9WPi9zRQ8yKV1W5/1itVK6CEPDqr38Jnj+rW2W74SHmodmBaBkt bHRUQbczuDMqLNPhRkvBkZY6we5D3pZg+/J2zV43KXe1bf8e6gDZxAm8s36R+AhJ rmT888M8b9lUbJQoG6lXobudADG36W3DF+tjflFCodLhXvpCvrH7ij2xq3KBNRia OQTg+MyMduKvpA== -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:17 2026 by rpki-client