This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json) Hash identifier: 79StdD5jcIidsQ6Y6it6F2BrV7XZHhAQRYpQJDZCmUU= Subject key identifier: AE:70:44:6D:D5:24:7F:5C:F5:99:1A:C4:84:43:B7:FE:53:44:19:94 Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824 Certificate serial: 019B7F70686F8A3789C59433555DFA72257F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft Manifest number: 0C82 Signing time: Fri 02 Jan 2026 16:00:31 +0000 Manifest this update: Fri 02 Jan 2026 16:00:31 +0000 Manifest next update: Sat 03 Jan 2026 16:00:31 +0000 Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: iJWEznDrKzAOnOEm15X2YGw1eT74VwUAgCL2yzxTFuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:68:6f:8a:37:89:c5:94:33:55:5d:fa:72:25:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824 Validity Not Before: Jan 2 16:00:31 2026 GMT Not After : Jan 3 16:00:31 2026 GMT Subject: CN=ae70446dd5247f5cf5991ac48443b7fe53441994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:ff:3e:8a:b3:c2:4f:15:73:01:bb:92:00: dd:15:87:08:08:01:97:ef:20:f9:fb:c3:51:d3:af: 27:02:0d:14:f7:fe:80:89:bf:ae:d2:d0:e2:99:6e: 5e:00:97:f0:bf:61:a9:0c:2a:8a:6c:b5:39:a8:ed: ca:dc:f2:0d:7e:c3:a9:40:2e:74:fa:42:68:fd:1c: 65:ff:52:1a:90:cc:a2:ee:e2:49:0a:98:a2:f4:9c: cb:e2:94:d2:41:f8:85:6b:0b:fc:79:33:30:73:a2: c9:41:88:d5:a8:70:da:40:0d:be:81:18:3a:29:99: a0:d4:ea:c1:8a:cb:00:8e:e6:32:00:e5:f7:11:6a: b2:9a:e0:5a:b2:5f:8b:3a:8e:99:57:e7:63:c8:85: 0f:8c:5e:dc:2f:70:bb:ff:e1:ce:ba:05:5c:50:88: 64:bc:62:51:c9:dc:4f:e5:a4:83:51:6c:ae:fb:23: f0:f9:ac:30:da:a3:29:e9:b6:7a:4b:92:a1:4f:d9: b2:01:05:4b:6f:5d:08:04:c5:5d:8d:1b:53:ed:91: 74:eb:50:75:34:7d:0f:73:96:ec:f5:72:1e:10:04: a9:1c:31:55:a5:23:79:4b:68:4e:eb:70:60:35:2c: 36:21:d2:af:24:1c:08:fe:ab:eb:33:72:95:3b:65: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:70:44:6D:D5:24:7F:5C:F5:99:1A:C4:84:43:B7:FE:53:44:19:94 X509v3 Authority Key Identifier: keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:61:44:02:0f:f0:04:df:1f:06:8a:e4:44:41:b0:66:ac:78: 09:58:1b:7e:0c:d6:96:ec:24:8e:1b:44:00:ee:1f:c0:34:99: fb:e9:c8:32:f1:64:d9:81:09:c9:57:87:73:f2:e3:b4:3d:cc: ab:da:72:ec:9e:44:66:02:ed:01:fc:d9:c4:d0:8b:19:9e:91: 45:fa:65:d6:af:93:3d:72:4c:92:b1:dc:87:f7:07:ef:53:6d: 3d:c1:10:b4:ff:63:be:95:35:f5:ef:74:e7:6c:19:0d:e5:22: a4:af:96:a8:96:38:1a:6b:de:3a:38:16:ad:c8:96:84:c7:ec: 97:e4:44:d8:6d:f2:22:22:c8:89:7b:98:8b:55:ca:cb:c6:fd: ff:18:bc:06:4f:00:03:75:b9:95:f2:c8:d2:16:e0:e4:b8:30: 21:8a:fc:23:d3:50:e0:82:48:9f:ed:ff:89:de:a3:4c:83:52: de:22:32:4e:e5:8c:75:dc:b0:bc:81:7b:81:e8:bb:78:9d:84: 2d:87:8b:92:71:b6:b5:2d:1b:55:fa:fb:7d:69:d3:3c:d8:a9: 8a:19:32:58:8b:ed:ef:e1:10:0c:69:62:22:8f:19:ee:cf:cf: 22:35:76:b0:f9:7e:1d:76:5d:24:fd:41:e9:25:57:68:e2:35: 23:3f:9d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cGhvijeJxZQzVV36ciV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZDg5MzFmNjM1Nzk0MjhiZjA4Y2NiMTk5YTNhOThkY2Jh NmI4MjQwHhcNMjYwMTAyMTYwMDMxWhcNMjYwMTAzMTYwMDMxWjAzMTEwLwYDVQQD EyhhZTcwNDQ2ZGQ1MjQ3ZjVjZjU5OTFhYzQ4NDQzYjdmZTUzNDQxOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYH/Poqzwk8VcwG7kgDdFYcICAGX 7yD5+8NR068nAg0U9/6Aib+u0tDimW5eAJfwv2GpDCqKbLU5qO3K3PINfsOpQC50 +kJo/Rxl/1IakMyi7uJJCpii9JzL4pTSQfiFawv8eTMwc6LJQYjVqHDaQA2+gRg6 KZmg1OrBissAjuYyAOX3EWqymuBasl+LOo6ZV+djyIUPjF7cL3C7/+HOugVcUIhk vGJRydxP5aSDUWyu+yPw+aww2qMp6bZ6S5KhT9myAQVLb10IBMVdjRtT7ZF061B1 NH0Pc5bs9XIeEASpHDFVpSN5S2hO63BgNSw2IdKvJBwI/qvrM3KVO2UeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5wRG3VJH9c9ZkaxIRDt/5TRBmUMB8GA1UdIwQY MBaAFIvYkx9jV5QovwjMsZmjqY3LprgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEt NGVlMTZkNmM4MGE2LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEtNGVlMTZkNmM4MGE2 LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmFEAg/w BN8fBorkREGwZqx4CVgbfgzWluwkjhtEAO4fwDSZ++nIMvFk2YEJyVeHc/LjtD3M q9py7J5EZgLtAfzZxNCLGZ6RRfpl1q+TPXJMkrHch/cH71NtPcEQtP9jvpU19e90 52wZDeUipK+WqJY4GmveOjgWrciWhMfsl+RE2G3yIiLIiXuYi1XKy8b9/xi8Bk8A A3W5lfLI0hbg5LgwIYr8I9NQ4IJIn+3/id6jTINS3iIyTuWMddywvIF7gei7eJ2E LYeLknG2tS0bVfr7fWnTPNipihkyWIvt7+EQDGliIo8Z7s/PIjV2sPl+HXZdJP1B 6SVXaOI1Iz+dRQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:29:02 2026 by rpki-client