This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json) Hash identifier: dOA85613HIfyNQVtUdprXEYCugSexcFELOPvIB6SwQo= Subject key identifier: 57:55:5E:3C:03:A6:9F:14:16:11:0F:3A:DD:63:E6:ED:9E:14:2B:76 Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe Certificate serial: 019B977989A1EF664CFAAF2ACC147CB5A5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft Manifest number: 17B2 Signing time: Wed 07 Jan 2026 08:01:23 +0000 Manifest this update: Wed 07 Jan 2026 08:01:23 +0000 Manifest next update: Thu 08 Jan 2026 08:01:23 +0000 Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: yTqaBNyUegrQ423qn0gt1pOfHK4wM8n7bjP9R4rPfXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:79:89:a1:ef:66:4c:fa:af:2a:cc:14:7c:b5:a5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe Validity Not Before: Jan 7 08:01:23 2026 GMT Not After : Jan 8 08:01:23 2026 GMT Subject: CN=57555e3c03a69f1416110f3add63e6ed9e142b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:7a:27:8d:7b:d8:30:05:f9:d3:62:a6:f4: eb:88:4b:e1:e8:e9:49:13:bb:13:24:0b:35:70:cf: 16:74:8b:c5:3b:e6:40:ae:1b:05:e4:66:82:af:ad: 04:e0:51:c4:7c:c0:dc:84:c2:29:24:91:90:77:99: e6:7a:cd:57:d9:16:8c:68:5e:7c:3d:32:96:43:d6: 66:53:e1:0e:19:24:c6:bb:2d:83:02:58:e5:ee:71: c4:09:e5:32:d2:35:13:bc:71:98:e3:c1:df:eb:76: 68:6c:30:8d:c1:af:0d:f0:ab:78:3d:c1:7d:51:7f: bf:ac:65:10:01:14:3b:58:ba:a3:f6:3b:33:ee:00: 41:a0:31:ad:45:72:a2:ed:d8:75:da:7c:7c:6e:5d: de:7f:c9:1d:50:69:fe:80:55:37:22:44:c1:ad:2f: 4c:68:35:40:c9:76:67:06:f3:04:ef:2f:34:7d:59: 2d:6a:96:89:b7:7b:b1:95:36:a2:00:80:c6:a6:03: eb:25:51:3c:20:0b:39:75:d8:f7:df:15:c7:29:86: b0:f9:23:6c:3a:6c:19:94:33:a1:b2:39:6a:7b:a7: 9c:c3:1f:61:c7:70:a3:7e:bf:a4:a1:b9:47:13:d4: d7:f2:da:3b:50:11:e2:3f:e7:4d:28:31:7b:73:7d: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:5E:3C:03:A6:9F:14:16:11:0F:3A:DD:63:E6:ED:9E:14:2B:76 X509v3 Authority Key Identifier: keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:79:b0:b8:b5:ef:1a:68:77:2a:ed:fe:78:e8:14:d6:f6:3d: 6c:91:3c:b9:44:0b:8e:b7:04:f4:12:9d:85:43:98:b1:f3:0f: cc:f7:95:dc:23:c7:38:10:5d:ae:a4:02:ad:2e:90:d1:17:5a: 0e:a8:29:7a:3b:ca:90:d6:74:73:c2:9e:5d:4d:17:d5:fd:e6: 8b:9e:67:5a:dd:97:8c:53:85:3f:72:06:a7:32:8b:f1:ad:2e: d8:0a:40:14:d3:f3:44:fa:e6:40:7b:a2:57:a5:37:f4:7b:a5: 69:c2:9f:c8:41:d3:d6:42:b0:fa:38:ca:08:e7:92:73:84:0f: cd:da:55:d4:05:0f:80:e4:1b:77:31:54:66:94:4d:3f:c3:b9: c7:c2:35:95:af:9e:60:ff:02:05:be:f6:b5:dc:13:2c:35:33: 2c:7f:ab:79:02:7d:0c:ee:54:8f:32:2a:47:09:a7:8e:5b:4e: 22:6c:f3:f3:af:fe:6c:6b:f7:45:e2:9a:9d:b2:71:96:d2:84: 74:ad:c3:f0:f2:a4:3f:ee:d2:f2:ca:2f:f6:d1:ed:b5:98:d4: f7:6d:40:c6:34:53:25:d5:26:b9:1a:c7:b1:d0:ec:9a:84:9e: 5e:4e:2c:1c:0d:2c:42:64:7c:21:e9:78:e7:40:6d:84:4a:98: a9:42:6e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXeYmh72ZM+q8qzBR8taXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi OGQzZmUwHhcNMjYwMTA3MDgwMTIzWhcNMjYwMTA4MDgwMTIzWjAzMTEwLwYDVQQD Eyg1NzU1NWUzYzAzYTY5ZjE0MTYxMTBmM2FkZDYzZTZlZDllMTQyYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK16J4172DAF+dNipvTriEvh6OlJ E7sTJAs1cM8WdIvFO+ZArhsF5GaCr60E4FHEfMDchMIpJJGQd5nmes1X2RaMaF58 PTKWQ9ZmU+EOGSTGuy2DAljl7nHECeUy0jUTvHGY48Hf63ZobDCNwa8N8Kt4PcF9 UX+/rGUQARQ7WLqj9jsz7gBBoDGtRXKi7dh12nx8bl3ef8kdUGn+gFU3IkTBrS9M aDVAyXZnBvME7y80fVktapaJt3uxlTaiAIDGpgPrJVE8IAs5ddj33xXHKYaw+SNs OmwZlDOhsjlqe6ecwx9hx3Cjfr+koblHE9TX8to7UBHiP+dNKDF7c32pAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdVXjwDpp8UFhEPOt1j5u2eFCt2MB8GA1UdIwQY MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3mwuLXv Gmh3Ku3+eOgU1vY9bJE8uUQLjrcE9BKdhUOYsfMPzPeV3CPHOBBdrqQCrS6Q0Rda DqgpejvKkNZ0c8KeXU0X1f3mi55nWt2XjFOFP3IGpzKL8a0u2ApAFNPzRPrmQHui V6U39HulacKfyEHT1kKw+jjKCOeSc4QPzdpV1AUPgOQbdzFUZpRNP8O5x8I1la+e YP8CBb72tdwTLDUzLH+reQJ9DO5UjzIqRwmnjltOImzz86/+bGv3ReKanbJxltKE dK3D8PKkP+7S8sov9tHttZjU921AxjRTJdUmuRrHsdDsmoSeXk4sHA0sQmR8Iel4 50BthEqYqUJukg== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:44 2026 by rpki-client