This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json) Hash identifier: pUX4djYmvbtwobicP91f/jlyZHHhbInAzsgiKL3263c= Subject key identifier: A6:E8:FA:5A:10:9E:A5:2D:A0:4F:D7:F9:D6:20:41:88:B8:64:01:52 Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Certificate serial: 019BAF4ABED9933BE9AFBCF1343ACE2BC40A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft Manifest number: 0DEA Signing time: Sun 11 Jan 2026 23:01:09 +0000 Manifest this update: Sun 11 Jan 2026 23:01:09 +0000 Manifest next update: Mon 12 Jan 2026 23:01:09 +0000 Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: Pn5oWxkPys438ATggIhk9/dwRwZSib9Nt2GKiUUeGSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4a:be:d9:93:3b:e9:af:bc:f1:34:3a:ce:2b:c4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Validity Not Before: Jan 11 23:01:09 2026 GMT Not After : Jan 12 23:01:09 2026 GMT Subject: CN=a6e8fa5a109ea52da04fd7f9d6204188b8640152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:1c:fd:08:9f:9a:02:e7:72:6f:a2:5b:6e: 3f:c7:f7:64:a4:51:9d:2f:9b:70:0f:40:b5:ef:dc: 44:48:b7:ab:08:f6:c2:51:45:d0:33:63:51:00:c7: 65:ce:bf:53:8a:53:04:bf:9d:05:e9:b1:07:67:61: c9:c8:ef:30:61:ae:1b:0c:c2:f9:9e:7e:70:d7:2b: 08:60:e9:a4:8f:aa:b5:db:af:ea:36:2f:d7:ef:99: 77:3a:e2:10:49:6d:5e:39:85:3f:63:7b:27:e9:03: 17:b8:0a:81:b2:49:6d:c9:a9:a0:90:19:c9:bf:af: b8:71:24:cf:c4:e2:4b:4a:81:bb:12:8b:19:04:aa: 88:b0:97:8f:88:28:1f:15:f1:4f:de:13:c8:77:bf: fc:ac:5d:f0:b9:05:1f:ab:a7:94:c3:90:4a:9f:c7: 1e:fb:9c:73:87:53:56:53:75:b1:fd:cd:57:b4:3f: 56:17:34:6e:8d:54:32:8b:8b:ee:a9:11:e7:7a:ad: 41:eb:3e:fe:93:a2:0f:0a:82:90:c6:83:3c:ec:8a: cd:22:a5:d0:36:78:9a:90:a8:df:86:fd:2f:9b:93: b1:1d:ca:b7:ec:8b:55:fc:b6:8f:a2:72:6c:40:af: d5:41:fe:b7:1c:51:c5:0f:a5:74:37:32:54:a1:c4: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E8:FA:5A:10:9E:A5:2D:A0:4F:D7:F9:D6:20:41:88:B8:64:01:52 X509v3 Authority Key Identifier: keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ff:cd:5b:df:55:6a:7f:e9:fe:fe:0a:11:52:1c:6f:a0:5e: 05:05:70:ea:59:ba:2b:1d:df:7b:cb:33:79:f5:d9:33:9c:6e: 0e:4b:f5:a8:1f:5f:47:85:8b:0c:95:ff:d8:a9:96:77:97:45: 96:73:e7:ef:5f:3e:be:ff:22:2b:22:23:1b:6f:73:3e:ae:eb: af:21:3c:2d:cd:67:87:7f:e4:dc:8d:ca:00:04:2f:e2:39:d8: 56:02:a2:8d:83:b6:9f:1b:44:d9:62:ef:87:dd:6f:6c:65:e4: 3b:42:16:21:3e:7a:f5:29:1d:53:6a:83:e6:8a:32:53:7e:40: 22:9c:41:91:09:be:5c:62:f0:03:32:bf:37:87:1b:46:d2:09: 14:01:34:0e:ff:80:03:b4:bc:7e:a4:58:58:78:78:8f:6a:e9: 9d:f1:1c:1d:b8:2a:9e:09:73:64:75:2d:76:43:a6:08:66:6c: 06:5a:d1:69:77:fd:b2:be:cf:5c:6a:57:9d:f0:91:f1:b5:a5: 95:55:86:f5:0e:c7:5e:73:15:be:62:3a:51:c6:c1:d9:97:98: 82:54:86:a2:48:f6:6f:63:26:78:4e:05:d7:61:2e:a6:ef:15: 25:10:2c:9c:4b:fe:88:8b:61:7f:ad:18:06:cc:06:08:58:63: 6a:af:5c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSr7Zkzvpr7zxNDrOK8QKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx OGIyMWMwHhcNMjYwMTExMjMwMTA5WhcNMjYwMTEyMjMwMTA5WjAzMTEwLwYDVQQD EyhhNmU4ZmE1YTEwOWVhNTJkYTA0ZmQ3ZjlkNjIwNDE4OGI4NjQwMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneYc/QifmgLncm+iW24/x/dkpFGd L5twD0C179xESLerCPbCUUXQM2NRAMdlzr9TilMEv50F6bEHZ2HJyO8wYa4bDML5 nn5w1ysIYOmkj6q126/qNi/X75l3OuIQSW1eOYU/Y3sn6QMXuAqBskltyamgkBnJ v6+4cSTPxOJLSoG7EosZBKqIsJePiCgfFfFP3hPId7/8rF3wuQUfq6eUw5BKn8ce +5xzh1NWU3Wx/c1XtD9WFzRujVQyi4vuqRHneq1B6z7+k6IPCoKQxoM87IrNIqXQ NniakKjfhv0vm5OxHcq37ItV/LaPonJsQK/VQf63HFHFD6V0NzJUocR/0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbo+loQnqUtoE/X+dYgQYi4ZAFSMB8GA1UdIwQY MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP/NW99V an/p/v4KEVIcb6BeBQVw6lm6Kx3fe8szefXZM5xuDkv1qB9fR4WLDJX/2KmWd5dF lnPn718+vv8iKyIjG29zPq7rryE8Lc1nh3/k3I3KAAQv4jnYVgKijYO2nxtE2WLv h91vbGXkO0IWIT569SkdU2qD5ooyU35AIpxBkQm+XGLwAzK/N4cbRtIJFAE0Dv+A A7S8fqRYWHh4j2rpnfEcHbgqnglzZHUtdkOmCGZsBlrRaXf9sr7PXGpXnfCR8bWl lVWG9Q7HXnMVvmI6UcbB2ZeYglSGokj2b2MmeE4F12Eupu8VJRAsnEv+iIthf60Y BswGCFhjaq9cbg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:38:01 2026 by rpki-client