This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json) Hash identifier: 119RB4z30+ZOU9OlxsnqU6nAcqSzmNPeQc4o0/cz+sE= Subject key identifier: 6F:04:C3:5F:03:E9:76:AE:CD:2F:2D:2B:68:51:B3:8C:39:22:60:3A Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c Certificate serial: 019B8015AFA7F9676A83AD0BB8785BB01129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft Manifest number: 14E3 Signing time: Fri 02 Jan 2026 19:01:03 +0000 Manifest this update: Fri 02 Jan 2026 19:01:03 +0000 Manifest next update: Sat 03 Jan 2026 19:01:03 +0000 Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: 51HGAaKuEiRYc9t//REPsYhwz1+6NFQJghjSGlu2zGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:15:af:a7:f9:67:6a:83:ad:0b:b8:78:5b:b0:11:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c Validity Not Before: Jan 2 19:01:03 2026 GMT Not After : Jan 3 19:01:03 2026 GMT Subject: CN=6f04c35f03e976aecd2f2d2b6851b38c3922603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:0e:37:cc:b2:a0:dc:e4:36:75:89:25:b7: a7:b9:24:82:ea:47:dd:63:3b:44:7e:f1:0c:98:7f: 1e:7e:d8:e9:36:b8:b8:b2:d1:ee:9e:a3:07:3e:d2: 60:e3:27:49:f4:ac:27:91:0e:70:b1:df:11:68:00: 53:62:03:75:d3:77:9b:c1:14:15:e4:fc:95:0d:19: 8f:67:8d:06:9c:b4:55:08:c0:01:86:13:6e:0b:b4: 70:5a:62:cb:b4:1b:00:aa:9c:01:ee:49:c5:ea:a2: fa:71:05:cc:da:57:e3:ba:2e:88:10:e1:90:38:d1: 16:89:8a:d8:72:66:66:83:e7:0e:b5:a2:01:3f:52: 96:10:31:4b:24:d2:68:3e:d1:70:8c:40:14:11:54: ac:33:b8:ac:eb:90:be:56:2e:43:7a:f3:49:35:55: ed:77:eb:6b:5e:ed:b9:06:5a:77:b6:49:7e:25:e1: 57:03:c1:5c:c0:0b:b0:2a:fe:9c:f1:81:fa:85:d2: d8:98:35:e6:d0:92:ea:09:b6:3d:b0:a3:24:fa:71: 51:18:a8:6c:c9:85:53:e6:77:e2:ef:e2:a8:c4:01: 3c:23:e6:fc:64:56:02:e3:e8:e6:5e:47:82:c8:bf: 06:0e:84:c1:78:1c:19:7d:ce:e7:78:05:44:8a:c5: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:04:C3:5F:03:E9:76:AE:CD:2F:2D:2B:68:51:B3:8C:39:22:60:3A X509v3 Authority Key Identifier: keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2b:84:c4:1f:da:43:a7:1a:76:c4:7f:34:2a:77:f8:8e:3b: 24:d4:4f:f6:f0:ea:1e:7e:37:d9:92:6f:ed:68:76:64:eb:32: 72:03:b7:ae:6e:67:56:38:13:ae:10:f4:26:00:41:29:5a:08: d2:58:47:20:c1:83:96:78:4b:4d:69:af:1d:82:ac:88:c9:0d: 61:7b:43:66:d2:bd:29:3a:f4:ef:8e:b6:a2:5b:29:38:8f:ce: 99:f6:a4:98:a3:5f:8a:9f:a3:af:6e:52:0d:ec:5c:4e:7b:c9: 8c:60:7b:d7:9f:1c:bf:62:a3:5a:35:a0:10:80:83:90:45:01: 0d:25:bd:65:14:68:75:75:d7:07:14:9c:e3:28:ba:66:f8:01: 45:b4:44:79:ba:34:a0:17:c0:97:96:47:0d:08:9d:b0:6e:50: f9:68:25:3f:ce:86:0f:eb:b3:db:1b:b5:1c:89:35:eb:35:fe: fe:45:da:99:57:76:48:82:dd:71:fb:e7:cd:a9:cf:d1:ff:ae: 96:9e:17:57:df:f3:d9:ef:85:8f:53:78:71:8d:16:64:03:05: 1a:b5:5b:56:2b:37:50:49:43:c8:75:5d:e3:e5:b1:59:cd:40: aa:82:d4:bd:34:ff:c5:02:57:19:3d:e1:2e:18:17:b6:35:a9: 60:b4:42:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAFa+n+Wdqg60LuHhbsBEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNWMwNTcwYjNiNzc3M2QxZTExODgyZTdkZDJjNjI1NTM3 ZWIwOWMwHhcNMjYwMTAyMTkwMTAzWhcNMjYwMTAzMTkwMTAzWjAzMTEwLwYDVQQD Eyg2ZjA0YzM1ZjAzZTk3NmFlY2QyZjJkMmI2ODUxYjM4YzM5MjI2MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGgON8yyoNzkNnWJJbenuSSC6kfd YztEfvEMmH8eftjpNri4stHunqMHPtJg4ydJ9KwnkQ5wsd8RaABTYgN103ebwRQV 5PyVDRmPZ40GnLRVCMABhhNuC7RwWmLLtBsAqpwB7knF6qL6cQXM2lfjui6IEOGQ ONEWiYrYcmZmg+cOtaIBP1KWEDFLJNJoPtFwjEAUEVSsM7is65C+Vi5DevNJNVXt d+trXu25Blp3tkl+JeFXA8FcwAuwKv6c8YH6hdLYmDXm0JLqCbY9sKMk+nFRGKhs yYVT5nfi7+KoxAE8I+b8ZFYC4+jmXkeCyL8GDoTBeBwZfc7neAVEisX1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8Ew18D6XauzS8tK2hRs4w5ImA6MB8GA1UdIwQY MBaAFONcBXCzt3c9HhGILn3SxiVTfrCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDct ZjY5MTI4YTkxOTgzLzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDctZjY5MTI4YTkxOTgz LzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISuExB/a Q6cadsR/NCp3+I47JNRP9vDqHn432ZJv7Wh2ZOsycgO3rm5nVjgTrhD0JgBBKVoI 0lhHIMGDlnhLTWmvHYKsiMkNYXtDZtK9KTr07462olspOI/OmfakmKNfip+jr25S DexcTnvJjGB7158cv2KjWjWgEICDkEUBDSW9ZRRodXXXBxSc4yi6ZvgBRbREebo0 oBfAl5ZHDQidsG5Q+WglP86GD+uz2xu1HIk16zX+/kXamVd2SILdcfvnzanP0f+u lp4XV9/z2e+Fj1N4cY0WZAMFGrVbVis3UElDyHVd4+WxWc1AqoLUvTT/xQJXGT3h LhgXtjWpYLRCfA== -----END CERTIFICATE-----Generated at Sat Jan 3 02:20:59 2026 by rpki-client