This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json) Hash identifier: DO9rweHZr5odfcElaZGEqDVx3NoqpHzmcb+H4alrTBw= Subject key identifier: C9:49:E3:A6:CE:C6:F4:CC:CD:41:3D:27:88:BF:6F:91:BA:8E:C3:EC Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1 Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1 Certificate serial: 019B89BDC50B72E46A80890A260BC56FA112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft Manifest number: 17AC Signing time: Sun 04 Jan 2026 16:01:13 +0000 Manifest this update: Sun 04 Jan 2026 16:01:13 +0000 Manifest next update: Mon 05 Jan 2026 16:01:13 +0000 Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: sTSD8MAfQ7sYr8bn9QMizxgt57l3VZejahgeanJLzYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:bd:c5:0b:72:e4:6a:80:89:0a:26:0b:c5:6f:a1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1 Validity Not Before: Jan 4 16:01:13 2026 GMT Not After : Jan 5 16:01:13 2026 GMT Subject: CN=c949e3a6cec6f4cccd413d2788bf6f91ba8ec3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:8f:ed:ca:16:cd:6a:13:e8:6b:b0:3b:89: 53:55:48:44:63:c2:57:f8:d7:b9:66:e9:44:d2:d7: 0a:af:17:2b:c7:25:12:a2:01:47:5e:de:fb:83:6b: 4d:d0:72:57:86:66:b0:9d:92:1a:11:54:bc:23:b4: 97:70:60:09:55:d7:6d:d6:88:76:79:ee:17:0f:34: 6b:35:a7:1c:0b:ea:b1:f1:61:41:70:75:67:17:59: 9a:7e:09:81:74:57:f2:05:e7:0e:ae:4f:64:ae:54: 8f:71:9e:e5:a6:3b:63:f6:67:d0:15:96:f8:fa:c8: 47:25:b0:2e:58:96:71:1d:28:33:41:0c:7c:f9:47: 3c:0d:c7:f1:ef:ab:5a:26:86:28:d8:d0:cc:6a:ef: e9:34:05:e2:4a:3a:59:ca:e8:8c:99:23:b1:48:a9: 48:a0:8b:fa:82:3a:b0:55:6f:6e:aa:24:a5:c2:d9: e1:88:9e:50:89:66:35:62:d8:52:09:6e:13:d2:4d: 99:5f:ed:80:86:a2:4f:17:0c:b1:57:26:66:87:bd: 12:ca:15:20:3b:b9:c5:57:88:7b:1f:05:dd:27:ba: 91:95:ca:d5:3f:0c:de:69:2f:66:c2:9d:18:3a:56: e7:03:07:48:ac:f0:63:3b:13:79:63:d9:86:16:65: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:E3:A6:CE:C6:F4:CC:CD:41:3D:27:88:BF:6F:91:BA:8E:C3:EC X509v3 Authority Key Identifier: keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:38:2d:85:e4:39:03:10:c3:b7:39:0a:fe:26:26:ae:c9:34: 75:4e:3e:95:eb:b6:93:e9:b4:65:d6:9f:dc:9a:dd:43:80:6d: f1:43:36:1f:4c:68:b3:9b:5d:cf:08:3e:87:48:89:93:0a:fe: 46:ee:02:5e:1c:7e:1a:66:1b:3b:5f:2b:40:36:20:14:c0:4e: 57:5d:f8:95:7a:52:e0:89:97:1b:df:ec:02:5b:e6:69:92:7b: d8:5f:a2:4b:18:ef:47:cb:14:3f:c4:06:66:5e:e3:ab:23:61: 26:74:da:2e:d8:14:52:37:95:7e:4a:b5:f3:8e:72:72:f6:f3: 1a:74:cc:e4:3e:cb:1b:b1:b4:50:08:7d:ab:d2:82:1a:bc:1d: fe:b1:82:f1:1f:95:dc:ab:7c:cb:07:a0:ea:6c:b3:23:1c:d3: f5:2c:74:58:b7:c8:c1:1a:10:4e:95:09:80:15:a4:12:9b:be: fa:23:fc:b2:f8:a9:a1:02:81:81:b4:f5:eb:3a:d8:51:77:7b: 33:f3:33:92:d0:48:2a:fb:92:3d:0b:bc:6e:50:30:e0:34:11: 65:39:97:21:7b:df:b1:a3:7f:87:af:96:81:3f:3e:bf:02:29: d0:fa:9f:1b:dc:a6:77:c3:bd:a2:28:4f:dd:c6:4b:a9:6f:dd: 01:72:36:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuJvcULcuRqgIkKJgvFb6ESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZWFjNTNmOGVlM2VlNGQxNDNjNzBkZmY2NzM1NTIwMzg1 ZTRjZDEwHhcNMjYwMTA0MTYwMTEzWhcNMjYwMTA1MTYwMTEzWjAzMTEwLwYDVQQD EyhjOTQ5ZTNhNmNlYzZmNGNjY2Q0MTNkMjc4OGJmNmY5MWJhOGVjM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoomP7coWzWoT6GuwO4lTVUhEY8JX +Ne5ZulE0tcKrxcrxyUSogFHXt77g2tN0HJXhmawnZIaEVS8I7SXcGAJVddt1oh2 ee4XDzRrNaccC+qx8WFBcHVnF1mafgmBdFfyBecOrk9krlSPcZ7lpjtj9mfQFZb4 +shHJbAuWJZxHSgzQQx8+Uc8Dcfx76taJoYo2NDMau/pNAXiSjpZyuiMmSOxSKlI oIv6gjqwVW9uqiSlwtnhiJ5QiWY1YthSCW4T0k2ZX+2AhqJPFwyxVyZmh70SyhUg O7nFV4h7HwXdJ7qRlcrVPwzeaS9mwp0YOlbnAwdIrPBjOxN5Y9mGFmVDmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlJ46bOxvTMzUE9J4i/b5G6jsPsMB8GA1UdIwQY MBaAFP/qxT+O4+5NFDxw3/ZzVSA4XkzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hY2U4YmMtYWQ5My00ZDU5LTkyMDkt MDU5NzQyYjM1MmE4LzEvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hY2U4YmMtYWQ5My00ZDU5LTkyMDktMDU5NzQyYjM1MmE4 LzEvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDgtheQ5 AxDDtzkK/iYmrsk0dU4+leu2k+m0Zdaf3JrdQ4Bt8UM2H0xos5tdzwg+h0iJkwr+ Ru4CXhx+GmYbO18rQDYgFMBOV134lXpS4ImXG9/sAlvmaZJ72F+iSxjvR8sUP8QG Zl7jqyNhJnTaLtgUUjeVfkq1845ycvbzGnTM5D7LG7G0UAh9q9KCGrwd/rGC8R+V 3Kt8yweg6myzIxzT9Sx0WLfIwRoQTpUJgBWkEpu++iP8svipoQKBgbT16zrYUXd7 M/MzktBIKvuSPQu8blAw4DQRZTmXIXvfsaN/h6+WgT8+vwIp0PqfG9ymd8O9oihP 3cZLqW/dAXI22A== -----END CERTIFICATE-----Generated at Mon Jan 5 01:47:50 2026 by rpki-client