This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json) Hash identifier: wUXf52g2cWGPUvrGINugSav1Ol7fBmvEgOuM1v4AAbQ= Subject key identifier: BC:80:11:64:73:DA:8D:E3:55:54:60:95:43:F2:9D:00:8E:A0:4D:6C Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Certificate serial: 019B80F12AA3CC607B1DFEDD9296E99A78DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft Manifest number: 0601 Signing time: Fri 02 Jan 2026 23:00:47 +0000 Manifest this update: Fri 02 Jan 2026 23:00:47 +0000 Manifest next update: Sat 03 Jan 2026 23:00:47 +0000 Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: 91kgEAJqyX0NJEb8/Uwc/VF5pcsgBedZJEAY1jHsPZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:2a:a3:cc:60:7b:1d:fe:dd:92:96:e9:9a:78:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Validity Not Before: Jan 2 23:00:47 2026 GMT Not After : Jan 3 23:00:47 2026 GMT Subject: CN=bc80116473da8de35554609543f29d008ea04d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:18:06:a6:c6:af:ce:e9:83:7f:75:bc:00: 81:b5:e7:97:1d:85:5e:57:5b:f9:7a:87:51:35:47: bc:55:ec:64:40:84:f5:38:db:bc:84:9c:d6:33:60: 8d:24:c0:93:47:32:c7:d9:fe:5f:7f:ec:fa:c6:ba: 3a:03:3a:69:31:92:3c:b3:6b:46:1c:66:97:1f:23: 4c:de:8e:d9:0a:57:fb:fa:d1:61:82:c4:0b:c5:a9: fd:b8:b3:cf:8b:d2:ef:d9:9b:a1:cf:18:cb:c0:48: b4:0d:61:9e:5e:c2:22:32:5d:ff:51:27:be:33:66: d2:e5:aa:c6:bd:cd:e8:25:04:db:fb:54:61:d6:3e: fa:28:c7:76:fb:07:d1:f9:94:f9:23:d2:68:d8:e0: 07:55:c5:97:66:09:9e:72:ec:0a:a3:11:e9:50:b4: e4:90:46:27:fa:5e:f7:92:ca:3e:51:b8:3b:7f:e5: 09:8a:c5:32:ce:77:13:e9:38:cc:34:6c:ce:d4:4c: 23:46:74:cd:48:1f:54:37:67:3d:7f:bd:f8:3e:a2: 48:12:b5:78:48:f2:07:bd:f5:57:34:07:91:c0:3a: 1d:7e:bf:6e:a0:c0:fa:f6:4f:aa:de:34:2d:a9:d3: db:59:17:6e:ba:28:ad:1b:ec:39:01:38:05:1b:32: 74:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:11:64:73:DA:8D:E3:55:54:60:95:43:F2:9D:00:8E:A0:4D:6C X509v3 Authority Key Identifier: keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4c:a2:2d:bf:d2:ed:58:e7:f1:2c:a1:63:a8:bd:a4:cd:d6: 0b:4f:23:56:5f:76:65:c6:ed:f0:5d:82:b4:b0:91:db:6b:b0: 86:23:34:23:b1:24:15:18:14:08:ef:46:81:b2:b8:65:d9:40: 75:34:d0:d8:e0:c9:b7:5d:df:87:3c:b6:81:69:d0:39:18:20: 1a:df:87:f5:f0:ef:05:35:ef:aa:0f:ab:cc:c2:e0:f5:9f:14: 69:f4:02:3a:5c:14:b9:0d:bb:0c:7e:45:26:09:3c:5b:f2:8b: b3:4e:b7:50:03:96:c4:89:6c:38:d4:ec:dc:c2:c7:b1:d3:cc: 09:08:e7:54:15:dd:d3:46:d2:af:71:a4:e5:69:90:c9:89:92: 3c:42:18:fe:4a:02:df:3c:3f:01:62:eb:ac:d2:b8:e2:ec:fc: e0:16:03:d4:52:42:72:26:05:b4:7b:9b:fd:56:d0:68:8a:81: 01:42:6f:37:40:95:60:6a:5b:fd:51:69:1d:8a:20:2c:89:2d: 51:39:d2:72:a5:29:cf:88:f4:a2:07:03:da:d8:da:d7:f2:d4: b9:41:96:f8:41:7c:03:eb:92:1a:78:08:65:ae:26:9a:e0:a4: 20:d5:cc:a4:ac:83:ba:f5:d1:21:0e:37:83:73:c2:4d:90:77: 0b:fe:60:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8SqjzGB7Hf7dkpbpmnjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj MjM1ZmYwHhcNMjYwMTAyMjMwMDQ3WhcNMjYwMTAzMjMwMDQ3WjAzMTEwLwYDVQQD EyhiYzgwMTE2NDczZGE4ZGUzNTU1NDYwOTU0M2YyOWQwMDhlYTA0ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwecYBqbGr87pg391vACBteeXHYVe V1v5eodRNUe8VexkQIT1ONu8hJzWM2CNJMCTRzLH2f5ff+z6xro6AzppMZI8s2tG HGaXHyNM3o7ZClf7+tFhgsQLxan9uLPPi9Lv2ZuhzxjLwEi0DWGeXsIiMl3/USe+ M2bS5arGvc3oJQTb+1Rh1j76KMd2+wfR+ZT5I9Jo2OAHVcWXZgmecuwKoxHpULTk kEYn+l73kso+Ubg7f+UJisUyzncT6TjMNGzO1EwjRnTNSB9UN2c9f734PqJIErV4 SPIHvfVXNAeRwDodfr9uoMD69k+q3jQtqdPbWRduuiitG+w5ATgFGzJ0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyAEWRz2o3jVVRglUPynQCOoE1sMB8GA1UdIwQY MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0yiLb/S 7Vjn8SyhY6i9pM3WC08jVl92Zcbt8F2CtLCR22uwhiM0I7EkFRgUCO9GgbK4ZdlA dTTQ2ODJt13fhzy2gWnQORggGt+H9fDvBTXvqg+rzMLg9Z8UafQCOlwUuQ27DH5F Jgk8W/KLs063UAOWxIlsONTs3MLHsdPMCQjnVBXd00bSr3Gk5WmQyYmSPEIY/koC 3zw/AWLrrNK44uz84BYD1FJCciYFtHub/VbQaIqBAUJvN0CVYGpb/VFpHYogLIkt UTnScqUpz4j0ogcD2tja1/LUuUGW+EF8A+uSGngIZa4mmuCkINXMpKyDuvXRIQ43 g3PCTZB3C/5gIg== -----END CERTIFICATE-----Generated at Sat Jan 3 03:57:25 2026 by rpki-client