This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json) Hash identifier: M73zfVmj6wQtmfiH3fMcJwlsRI0azCyYjUl7jT0VV9k= Subject key identifier: E4:06:21:4B:B1:A2:0B:17:B2:47:2D:2F:D4:7A:5B:AE:35:95:1C:3A Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Certificate serial: 019B8A61CA153DFEBC63DE7F0C1BCBBB1AE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft Manifest number: 0B20 Signing time: Sun 04 Jan 2026 19:00:23 +0000 Manifest this update: Sun 04 Jan 2026 19:00:23 +0000 Manifest next update: Mon 05 Jan 2026 19:00:23 +0000 Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: Btebs8/8CEbckKV+VJhFkDiPYUazY/v8Sf5WlubJMpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:61:ca:15:3d:fe:bc:63:de:7f:0c:1b:cb:bb:1a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Validity Not Before: Jan 4 19:00:23 2026 GMT Not After : Jan 5 19:00:23 2026 GMT Subject: CN=e406214bb1a20b17b2472d2fd47a5bae35951c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:49:89:2d:45:a3:05:39:06:31:3b:bd:13: 91:eb:10:16:78:e3:ef:f0:c0:9d:bc:4d:fb:58:63: 5c:31:e9:f1:5e:47:53:2e:a8:ef:3f:5b:7c:c9:30: 3d:f3:95:ca:24:14:2c:82:c5:1d:a5:70:e4:09:2e: 21:f0:19:05:51:4b:11:a8:34:27:5e:72:ce:3a:12: 5f:7b:34:8b:71:7e:6d:74:c2:1d:3d:4d:30:47:2b: 74:61:84:78:99:09:eb:d4:e5:c2:c5:34:d5:b8:e9: dd:e8:5c:00:19:b3:d3:e4:94:99:04:c9:7d:38:ef: 04:62:88:5e:8c:95:5e:15:cc:d1:89:d8:2f:e0:15: 0d:3e:f6:1f:78:12:08:61:8b:70:6e:35:d5:7a:ea: 83:9a:76:98:87:6c:d9:1a:06:12:f2:02:cd:80:8b: aa:5d:5d:b5:90:21:cc:32:ec:ff:bb:d9:47:1f:24: b8:19:f4:52:b6:b9:66:cb:d6:99:88:c0:2f:c2:68: 56:de:41:b9:ad:ab:a1:05:48:e7:42:35:33:fb:e1: 79:c3:32:48:45:b7:24:cc:37:19:08:f2:72:6c:1b: 37:f6:bb:88:4a:5b:d3:7d:bb:5f:3c:80:35:8c:c4: 2a:8a:6b:a4:e1:28:59:31:90:ff:33:4b:ff:23:c8: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:06:21:4B:B1:A2:0B:17:B2:47:2D:2F:D4:7A:5B:AE:35:95:1C:3A X509v3 Authority Key Identifier: keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:19:6f:24:d4:df:dc:a7:2c:b0:22:31:08:f7:90:f7:08:67: bb:2d:49:51:3b:12:d6:ea:f4:7c:2c:fc:fd:9c:0f:9a:04:94: e1:89:01:6b:00:13:b0:ff:e9:ea:ef:84:d2:a8:3f:ff:25:9e: fc:63:d4:09:6c:ef:7a:9a:8d:cb:d4:ad:1b:92:64:31:bd:c6: b0:fa:7b:0e:be:95:a8:c8:00:5c:59:a9:3e:fc:2e:34:a2:da: e6:9d:7e:47:a3:1a:ed:92:cc:73:54:dd:12:c3:d3:91:eb:d8: d1:3f:1a:cd:af:21:84:5b:9d:5b:71:df:d4:cb:88:ea:1d:b9: 98:da:8c:38:65:43:4a:50:2f:f2:33:c9:3d:8a:f6:17:ce:c6: 0d:66:ea:ee:e6:13:45:26:6a:45:69:02:cd:47:e5:42:80:c3: 02:38:41:57:be:29:67:3a:b8:d2:2f:52:33:c1:45:8e:5e:3f: 09:a9:29:8d:95:03:be:09:34:43:ee:86:c6:92:59:07:1d:f1: c3:9d:2f:a9:21:ea:fe:46:3f:66:38:48:3c:21:63:10:c2:5a: ad:c5:25:d7:0d:20:b0:cb:f6:2b:80:38:23:9b:a8:2d:3d:b8: c6:bb:13:a7:8f:04:7a:78:07:6b:40:85:01:dc:f7:d2:d2:3c: 4b:a9:a3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKYcoVPf68Y95/DBvLuxrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0 MzllYjgwHhcNMjYwMTA0MTkwMDIzWhcNMjYwMTA1MTkwMDIzWjAzMTEwLwYDVQQD EyhlNDA2MjE0YmIxYTIwYjE3YjI0NzJkMmZkNDdhNWJhZTM1OTUxYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y1JiS1FowU5BjE7vROR6xAWeOPv 8MCdvE37WGNcMenxXkdTLqjvP1t8yTA985XKJBQsgsUdpXDkCS4h8BkFUUsRqDQn XnLOOhJfezSLcX5tdMIdPU0wRyt0YYR4mQnr1OXCxTTVuOnd6FwAGbPT5JSZBMl9 OO8EYohejJVeFczRidgv4BUNPvYfeBIIYYtwbjXVeuqDmnaYh2zZGgYS8gLNgIuq XV21kCHMMuz/u9lHHyS4GfRStrlmy9aZiMAvwmhW3kG5rauhBUjnQjUz++F5wzJI RbckzDcZCPJybBs39ruISlvTfbtfPIA1jMQqimuk4ShZMZD/M0v/I8j79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQGIUuxogsXskctL9R6W641lRw6MB8GA1UdIwQY MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3 LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihlvJNTf 3KcssCIxCPeQ9whnuy1JUTsS1ur0fCz8/ZwPmgSU4YkBawATsP/p6u+E0qg//yWe /GPUCWzvepqNy9StG5JkMb3GsPp7Dr6VqMgAXFmpPvwuNKLa5p1+R6Ma7ZLMc1Td EsPTkevY0T8aza8hhFudW3Hf1MuI6h25mNqMOGVDSlAv8jPJPYr2F87GDWbq7uYT RSZqRWkCzUflQoDDAjhBV74pZzq40i9SM8FFjl4/CakpjZUDvgk0Q+6GxpJZBx3x w50vqSHq/kY/ZjhIPCFjEMJarcUl1w0gsMv2K4A4I5uoLT24xrsTp48EengHa0CF Adz30tI8S6mjeA== -----END CERTIFICATE-----Generated at Mon Jan 5 05:35:33 2026 by rpki-client