This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json) Hash identifier: Qu/Olay7trtJ8xtIHAYMsLzYQgJVGTr+RWcJ12sl7U4= Subject key identifier: B0:4E:CE:BB:7C:A4:1C:07:61:58:E6:8B:96:CA:D6:7C:A2:A0:62:32 Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b Certificate serial: 019BAC80CA5434BE559B07074A480F60E6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft Manifest number: 11AB Signing time: Sun 11 Jan 2026 10:01:20 +0000 Manifest this update: Sun 11 Jan 2026 10:01:20 +0000 Manifest next update: Mon 12 Jan 2026 10:01:20 +0000 Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: INTHTrKEPXgesBjuK6zkFnL+MMj82B8DjjW2vTvK7g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:80:ca:54:34:be:55:9b:07:07:4a:48:0f:60:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b Validity Not Before: Jan 11 10:01:20 2026 GMT Not After : Jan 12 10:01:20 2026 GMT Subject: CN=b04ecebb7ca41c076158e68b96cad67ca2a06232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:c4:e2:c5:b4:0e:94:64:40:1a:dd:38:f3: 04:be:68:d3:9c:49:75:82:3a:76:27:e2:a1:b8:3b: 92:c0:55:b7:23:7b:06:50:ab:ce:04:8d:a0:aa:af: 40:9d:85:cb:89:64:7b:f2:9f:e4:e0:77:54:b4:60: 23:34:b8:45:84:9f:e1:e7:c6:ac:f3:da:17:e1:ca: 03:c0:1b:44:d2:16:1c:2a:f8:c3:0b:15:28:56:93: f2:66:42:50:6a:d4:a3:55:35:60:65:de:fd:06:29: 37:66:f1:fb:c1:a6:07:ba:95:b2:34:fc:0c:35:91: 46:80:9d:29:24:fe:d3:c0:4f:bc:38:3e:81:52:6c: b6:3e:86:e1:16:fd:1c:6f:2b:7a:73:a6:a5:b5:79: 92:30:7f:12:1e:7f:86:4e:16:0d:0d:4e:64:93:bc: e8:66:e5:35:e7:3e:53:dc:ec:4d:30:7a:c7:97:77: 91:e6:52:c3:b4:87:05:c1:27:16:c4:38:33:53:3a: 75:de:32:69:d4:a8:99:81:e5:47:b3:dd:7b:f1:de: d2:25:91:a2:56:f0:3f:44:01:13:0c:41:20:6a:a4: 47:aa:02:2a:09:35:59:87:0d:5a:bf:6e:d9:de:f1: c8:69:1b:f9:91:d8:c8:a0:27:23:73:39:b0:24:70: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:CE:BB:7C:A4:1C:07:61:58:E6:8B:96:CA:D6:7C:A2:A0:62:32 X509v3 Authority Key Identifier: keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ed:af:65:33:c2:9f:84:fc:ce:cb:de:6c:44:57:b2:ff:dc: f5:33:cf:ef:62:f2:bc:89:98:ef:7c:50:ba:84:da:42:68:17: 4d:6e:93:a6:f3:b4:eb:d8:71:44:65:19:d9:07:d6:5c:7f:38: c5:4b:98:2b:bc:29:2b:28:a4:94:ce:16:f1:a0:fd:ed:bb:a0: bd:d6:8a:0b:41:a7:7a:22:14:33:2b:df:ae:56:fb:9c:a7:02: 3a:ad:ec:2c:d4:d3:f5:d2:3e:d2:34:1e:91:d9:3e:d5:5d:8d: 26:c4:14:44:2b:12:cd:45:07:84:c2:e8:40:42:ed:37:2e:f2: fc:2d:de:a9:19:a0:03:71:42:e5:6d:bb:5a:91:7f:3d:38:07: c2:33:5e:97:57:39:9b:ca:d6:f6:3d:d1:4c:03:50:0d:38:ac: 0e:0a:20:35:42:88:3c:77:92:c2:fa:90:78:98:38:40:64:1b: 2c:18:3b:f7:f5:1e:63:ca:bc:c4:47:fd:cb:85:2d:03:bb:f5: dc:b2:66:51:b8:a7:be:4e:16:7c:62:17:06:f7:4c:27:df:30: 26:ff:bf:7c:3f:5b:fc:27:17:38:f9:b7:82:32:3d:d9:a3:46: ed:28:10:e6:bd:55:a7:de:25:df:28:56:49:0c:42:f3:b0:b7: a8:28:d3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgMpUNL5VmwcHSkgPYOb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTg4NTlkNDEyZjliNTg3MmE1ODk3NzMyMGQyZDA4M2Jk N2EwNGIwHhcNMjYwMTExMTAwMTIwWhcNMjYwMTEyMTAwMTIwWjAzMTEwLwYDVQQD EyhiMDRlY2ViYjdjYTQxYzA3NjE1OGU2OGI5NmNhZDY3Y2EyYTA2MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JrE4sW0DpRkQBrdOPMEvmjTnEl1 gjp2J+KhuDuSwFW3I3sGUKvOBI2gqq9AnYXLiWR78p/k4HdUtGAjNLhFhJ/h58as 89oX4coDwBtE0hYcKvjDCxUoVpPyZkJQatSjVTVgZd79Bik3ZvH7waYHupWyNPwM NZFGgJ0pJP7TwE+8OD6BUmy2PobhFv0cbyt6c6altXmSMH8SHn+GThYNDU5kk7zo ZuU15z5T3OxNMHrHl3eR5lLDtIcFwScWxDgzUzp13jJp1KiZgeVHs9178d7SJZGi VvA/RAETDEEgaqRHqgIqCTVZhw1av27Z3vHIaRv5kdjIoCcjczmwJHBYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBOzrt8pBwHYVjmi5bK1nyioGIyMB8GA1UdIwQY MBaAFLcYhZ1BL5tYcqWJdzINLQg716BLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEt ZDdiY2VkYzYwNTc5LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEtZDdiY2VkYzYwNTc5 LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde2vZTPC n4T8zsvebERXsv/c9TPP72LyvImY73xQuoTaQmgXTW6TpvO069hxRGUZ2QfWXH84 xUuYK7wpKyiklM4W8aD97bugvdaKC0GneiIUMyvfrlb7nKcCOq3sLNTT9dI+0jQe kdk+1V2NJsQURCsSzUUHhMLoQELtNy7y/C3eqRmgA3FC5W27WpF/PTgHwjNel1c5 m8rW9j3RTANQDTisDgogNUKIPHeSwvqQeJg4QGQbLBg79/UeY8q8xEf9y4UtA7v1 3LJmUbinvk4WfGIXBvdMJ98wJv+/fD9b/CcXOPm3gjI92aNG7SgQ5r1Vp94l3yhW SQxC87C3qCjTDA== -----END CERTIFICATE-----Generated at Sun Jan 11 19:21:03 2026 by rpki-client