This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json) Hash identifier: ytQQCVxspBv3k5U6FwFNpSFLCFFNE9E1XqSrWXLnA/E= Subject key identifier: EE:83:91:40:00:93:72:0F:EB:AC:AB:6C:23:3E:9E:58:51:56:8D:38 Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Certificate serial: 019B80B9C9E29278F37FAF93D4E2D649AC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft Manifest number: 0B1B Signing time: Fri 02 Jan 2026 22:00:17 +0000 Manifest this update: Fri 02 Jan 2026 22:00:17 +0000 Manifest next update: Sat 03 Jan 2026 22:00:17 +0000 Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: rQyFQmynFnO158NhTo5W576/NHmxw3noFgFUOOpfQl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:b9:c9:e2:92:78:f3:7f:af:93:d4:e2:d6:49:ac:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Validity Not Before: Jan 2 22:00:17 2026 GMT Not After : Jan 3 22:00:17 2026 GMT Subject: CN=ee8391400093720febacab6c233e9e5851568d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:35:d8:e1:e4:5d:64:39:a7:8f:51:13:d4: 59:72:f7:14:d3:ef:be:b4:54:d6:8d:06:95:8d:c0: 5a:df:9e:ca:50:ac:9f:fd:a7:3a:c3:60:01:cd:18: 09:76:66:db:1d:53:0c:e8:b8:9a:e6:05:99:c5:0f: 80:87:7f:59:46:cd:f2:38:1a:29:73:84:39:1e:df: 4a:ab:0c:a5:b5:65:f2:1e:5d:45:ef:98:08:84:78: 56:f4:28:eb:66:27:58:4e:56:a3:07:9e:7e:7a:4c: d6:4b:fb:a0:a5:4d:88:fd:9e:43:33:43:47:ba:b6: a6:d1:5e:06:8b:29:f9:61:cc:93:a3:22:fd:cf:64: 8b:8d:61:c8:66:3d:c4:b4:e9:54:6c:ac:0e:5a:33: 78:f6:34:8a:4d:32:a1:60:95:b4:a2:81:61:b3:2a: 45:a6:f1:b4:16:e5:d5:c9:0f:85:99:fe:07:81:f4: 65:e7:fa:ea:de:b6:a7:c8:10:c5:80:91:26:01:26: 0a:7f:84:39:4b:11:13:0d:98:2d:82:a5:62:35:85: 3d:3a:f8:7e:b9:41:43:df:74:21:33:fb:40:1a:72: 49:79:28:2b:a8:f1:6d:db:ed:76:44:95:73:7a:45: 66:cd:48:5d:2a:c3:ed:9b:ec:1a:b6:8d:39:15:b9: 68:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:91:40:00:93:72:0F:EB:AC:AB:6C:23:3E:9E:58:51:56:8D:38 X509v3 Authority Key Identifier: keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:dd:72:36:27:4b:67:0f:c4:0e:bc:86:35:42:78:97:02:b8: 96:a0:85:8b:2f:06:45:09:c3:f6:63:89:a6:bb:93:f1:dd:a3: f0:70:57:2e:c4:b2:fe:26:0c:01:3c:75:20:78:22:7a:70:fe: 2f:8a:42:49:15:df:9d:3e:2e:50:07:6d:11:f8:6e:1f:39:7e: 77:f6:b6:3e:c4:e3:7c:70:d8:7f:06:70:0d:f1:ca:5c:ed:67: 57:22:43:d0:4a:30:1e:fc:93:95:11:66:35:80:44:ee:8f:61: 2b:1a:e8:73:77:aa:f4:33:30:10:d6:da:c6:e8:3c:59:18:d6: d4:3e:7b:0e:b5:94:40:4b:fb:14:3b:e1:d3:71:8c:fa:a3:06: 32:42:b5:66:9d:8e:78:c2:8d:ef:b0:17:3d:93:3b:66:db:e3: 43:08:32:e7:ad:f2:c4:ed:e0:18:5b:3a:c3:b7:cb:52:ff:d7: 09:15:49:59:e2:57:4d:2f:1d:db:cd:03:32:72:50:23:e3:33: ff:9c:30:74:4f:1e:a1:30:43:f3:6d:b6:04:c7:dd:5c:de:93: 0e:05:43:be:10:78:3c:e2:62:1a:38:b9:78:8e:69:2b:f4:a0: 73:7f:a7:7a:12:e7:8d:f5:e9:a7:59:bd:d3:be:17:af:ea:40: 88:a5:41:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAucniknjzf6+T1OLWSawwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0 MzllYjgwHhcNMjYwMTAyMjIwMDE3WhcNMjYwMTAzMjIwMDE3WjAzMTEwLwYDVQQD EyhlZTgzOTE0MDAwOTM3MjBmZWJhY2FiNmMyMzNlOWU1ODUxNTY4ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22s12OHkXWQ5p49RE9RZcvcU0+++ tFTWjQaVjcBa357KUKyf/ac6w2ABzRgJdmbbHVMM6Lia5gWZxQ+Ah39ZRs3yOBop c4Q5Ht9KqwyltWXyHl1F75gIhHhW9CjrZidYTlajB55+ekzWS/ugpU2I/Z5DM0NH uram0V4Giyn5YcyToyL9z2SLjWHIZj3EtOlUbKwOWjN49jSKTTKhYJW0ooFhsypF pvG0FuXVyQ+Fmf4HgfRl5/rq3ranyBDFgJEmASYKf4Q5SxETDZgtgqViNYU9Ovh+ uUFD33QhM/tAGnJJeSgrqPFt2+12RJVzekVmzUhdKsPtm+wato05FbloZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6DkUAAk3IP66yrbCM+nlhRVo04MB8GA1UdIwQY MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3 LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd1yNidL Zw/EDryGNUJ4lwK4lqCFiy8GRQnD9mOJpruT8d2j8HBXLsSy/iYMATx1IHgienD+ L4pCSRXfnT4uUAdtEfhuHzl+d/a2PsTjfHDYfwZwDfHKXO1nVyJD0EowHvyTlRFm NYBE7o9hKxroc3eq9DMwENbaxug8WRjW1D57DrWUQEv7FDvh03GM+qMGMkK1Zp2O eMKN77AXPZM7ZtvjQwgy563yxO3gGFs6w7fLUv/XCRVJWeJXTS8d280DMnJQI+Mz /5wwdE8eoTBD8222BMfdXN6TDgVDvhB4POJiGji5eI5pK/Sgc3+nehLnjfXpp1m9 074Xr+pAiKVBzw== -----END CERTIFICATE-----Generated at Sat Jan 3 06:56:18 2026 by rpki-client