This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json) Hash identifier: pPHrhWVYmSfizL2ZZtu22GVlrSCTxJXrgcJuOK+4yeU= Subject key identifier: C3:D0:73:9A:3A:A4:70:FE:BB:34:2B:5F:AC:29:D8:8E:CC:AE:F4:A0 Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Certificate serial: 019BB2B9E5CA7C9DF4CFC4C60F0C1158F343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft Manifest number: 07A3 Signing time: Mon 12 Jan 2026 15:01:25 +0000 Manifest this update: Mon 12 Jan 2026 15:01:25 +0000 Manifest next update: Tue 13 Jan 2026 15:01:25 +0000 Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: +3dKQaSfEO2EgXNf3lsi88gDBqwv0k6UqpPg7FeJVow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:b9:e5:ca:7c:9d:f4:cf:c4:c6:0f:0c:11:58:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Validity Not Before: Jan 12 15:01:25 2026 GMT Not After : Jan 13 15:01:25 2026 GMT Subject: CN=c3d0739a3aa470febb342b5fac29d88eccaef4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:a2:53:64:0a:86:0e:fe:a9:30:12:24:8f: 07:63:3e:59:da:a2:f0:37:7b:cf:e1:14:b3:d9:84: e3:3e:4b:d5:47:70:cd:6c:b9:6d:6e:1d:9c:fa:ab: aa:f4:ca:38:36:1d:e0:fe:e4:e7:b2:b3:f9:09:90: ba:14:98:bf:07:ff:d4:ae:79:6f:eb:62:e9:23:21: 0c:de:07:08:2d:fa:7c:b1:e4:00:b8:a0:19:85:21: 7e:33:cd:7c:80:39:be:e8:ed:21:a2:af:f4:94:73: ec:ea:f2:42:dd:f5:97:b8:5b:98:74:90:56:55:0c: be:0f:e7:6d:60:59:36:24:63:fe:6a:71:ae:68:2b: de:23:36:36:ca:65:04:e4:8c:7b:85:55:99:03:61: c1:d4:b6:0b:7f:af:9f:6b:32:3f:ac:f5:43:5e:1e: 3a:47:d6:ed:ac:6e:62:0a:e9:3d:27:94:81:c3:02: bb:8c:aa:c6:f9:7d:60:a1:9e:77:c4:d0:47:f6:34: c9:cb:ad:e6:a6:60:a8:54:4a:59:0c:35:0e:d6:36: 27:1c:e3:b5:e5:ea:78:65:1f:9a:9e:d0:22:64:53: 50:fd:93:b3:2b:0e:b5:e5:ff:ef:0c:33:d3:09:94: fd:a8:fd:47:6a:b8:8b:4d:50:3a:83:18:80:fc:5f: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:73:9A:3A:A4:70:FE:BB:34:2B:5F:AC:29:D8:8E:CC:AE:F4:A0 X509v3 Authority Key Identifier: keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8a:f3:f0:48:65:d3:af:16:0d:3b:cf:b8:10:6f:58:7b:16: a5:7a:33:50:0e:de:f7:70:94:9e:1a:f2:09:31:df:bc:05:e2: 60:a3:c9:80:19:55:e6:cc:96:b1:af:c1:32:53:85:f0:5c:72: a4:45:2b:14:35:8b:3f:66:26:14:38:86:76:6a:bc:18:d5:ff: 46:75:a0:d6:70:9a:65:3a:3b:84:c6:35:17:de:5f:eb:09:dd: 49:06:aa:04:54:3e:4d:83:59:4c:ee:dd:d2:53:99:09:d9:aa: b2:ab:9d:da:f9:09:0d:06:d2:eb:d0:92:00:30:4e:77:b1:3f: 7c:25:3b:9a:58:65:75:f4:59:47:0e:e6:8d:d6:97:3f:ee:77: d1:83:63:cd:dc:c9:01:7f:9a:95:6d:d9:3b:1e:2b:d9:fe:5e: 03:f0:2f:fd:5c:15:60:65:7e:13:b1:59:85:52:ee:c2:69:0d: 63:3b:c7:99:7f:57:2b:d5:27:e1:94:40:da:cd:8e:ab:51:c6: 95:e6:f5:03:d7:d9:14:48:07:bd:83:3b:1c:24:72:2b:32:3d: f9:74:32:23:32:0b:c1:c5:f7:3b:37:98:99:e4:b6:94:cc:ff: f1:a5:65:82:c0:46:14:b1:27:7a:54:4a:df:5f:b5:84:a8:d7: 27:44:d8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyueXKfJ30z8TGDwwRWPNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4 NGE5ZTUwHhcNMjYwMTEyMTUwMTI1WhcNMjYwMTEzMTUwMTI1WjAzMTEwLwYDVQQD EyhjM2QwNzM5YTNhYTQ3MGZlYmIzNDJiNWZhYzI5ZDg4ZWNjYWVmNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTaiU2QKhg7+qTASJI8HYz5Z2qLw N3vP4RSz2YTjPkvVR3DNbLltbh2c+quq9Mo4Nh3g/uTnsrP5CZC6FJi/B//Urnlv 62LpIyEM3gcILfp8seQAuKAZhSF+M818gDm+6O0hoq/0lHPs6vJC3fWXuFuYdJBW VQy+D+dtYFk2JGP+anGuaCveIzY2ymUE5Ix7hVWZA2HB1LYLf6+fazI/rPVDXh46 R9btrG5iCuk9J5SBwwK7jKrG+X1goZ53xNBH9jTJy63mpmCoVEpZDDUO1jYnHOO1 5ep4ZR+antAiZFNQ/ZOzKw615f/vDDPTCZT9qP1HariLTVA6gxiA/F/+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPQc5o6pHD+uzQrX6wp2I7MrvSgMB8GA1UdIwQY MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIrz8Ehl 068WDTvPuBBvWHsWpXozUA7e93CUnhryCTHfvAXiYKPJgBlV5syWsa/BMlOF8Fxy pEUrFDWLP2YmFDiGdmq8GNX/RnWg1nCaZTo7hMY1F95f6wndSQaqBFQ+TYNZTO7d 0lOZCdmqsqud2vkJDQbS69CSADBOd7E/fCU7mlhldfRZRw7mjdaXP+530YNjzdzJ AX+alW3ZOx4r2f5eA/Av/VwVYGV+E7FZhVLuwmkNYzvHmX9XK9Un4ZRA2s2Oq1HG leb1A9fZFEgHvYM7HCRyKzI9+XQyIzILwcX3OzeYmeS2lMz/8aVlgsBGFLEnelRK 31+1hKjXJ0TYmQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:45:11 2026 by rpki-client