This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json) Hash identifier: VUkdoLhS1CsYvP2PalmgphOS1F7GTl9UdTFSTJpQhuo= Subject key identifier: B4:85:51:F8:2A:18:E7:30:8E:25:0F:CA:7A:8B:8F:C8:55:CE:25:CC Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0 Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0 Certificate serial: 019BA42353DE80A7F2E6AF47DB4B93B059CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft Manifest number: 03BF Signing time: Fri 09 Jan 2026 19:02:17 +0000 Manifest this update: Fri 09 Jan 2026 19:02:17 +0000 Manifest next update: Sat 10 Jan 2026 19:02:17 +0000 Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: vtvbKUvVonRzDuDJqlcQ3ytSnYPudnNPEqlYOlt7B08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:23:53:de:80:a7:f2:e6:af:47:db:4b:93:b0:59:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0 Validity Not Before: Jan 9 19:02:17 2026 GMT Not After : Jan 10 19:02:17 2026 GMT Subject: CN=b48551f82a18e7308e250fca7a8b8fc855ce25cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:d5:19:32:7a:f0:65:29:b9:da:c1:03:9b: 4f:0a:a3:49:5d:b2:11:f5:c9:b2:48:3d:a5:bd:b8: ce:bd:20:94:9b:dc:ce:a4:30:7a:b0:51:27:2c:91: 02:15:7a:46:22:1e:e0:4b:0d:c7:4f:6a:03:2b:a2: 85:56:f1:19:b2:25:94:f1:46:a5:f7:76:08:49:a9: 22:29:08:6e:74:a4:c6:bc:11:b5:df:99:61:72:8e: 2b:3d:06:10:96:ff:8f:d4:2b:ed:ae:0e:20:7f:1a: c0:b7:94:5a:53:77:c1:35:01:58:0c:ca:35:34:5c: 94:70:58:0f:d4:53:68:90:bc:e9:79:32:2a:3e:a8: 4d:b4:cd:3c:4d:67:9d:dd:8d:b4:5b:05:c8:47:6a: 33:57:16:5a:42:33:87:88:8f:29:5a:8f:51:2a:7b: 3a:54:38:45:12:49:7a:a4:4c:4d:c1:ad:18:c6:e0: 65:79:1c:5f:30:3a:79:35:e6:a9:99:b2:dd:2d:18: b8:0d:a1:3f:af:cb:1d:34:a4:b5:87:fe:17:c2:75: 82:11:cf:6a:a9:c9:24:38:5a:23:7b:3c:ad:7b:de: 25:17:12:88:ad:96:5b:e3:58:c2:ad:80:5f:37:23: f7:80:6d:e1:cd:90:dd:f2:7a:6f:9f:33:65:52:56: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:51:F8:2A:18:E7:30:8E:25:0F:CA:7A:8B:8F:C8:55:CE:25:CC X509v3 Authority Key Identifier: keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d4:a3:95:26:b7:c0:e3:86:8e:77:8f:a3:a6:47:dc:c7:96: 88:8f:c4:fd:71:c0:fc:50:37:5a:92:84:34:b9:85:f6:b9:53: 3e:22:d7:d7:fa:a8:d8:10:e8:cc:6e:5a:2a:3d:51:d6:31:28: 6e:55:ba:60:cf:3b:38:38:b9:71:37:ed:4e:4f:c6:08:35:09: fc:13:94:7f:03:2b:28:75:79:c4:c8:a2:56:a9:c9:24:9f:13: a2:33:a1:a6:ff:2f:14:9f:1c:34:6b:ed:91:2f:3d:a2:b0:12: 9d:5d:ee:bf:05:89:af:64:dd:66:4f:bb:f4:6d:45:f8:55:c4: a4:e6:2a:86:e6:2f:6f:89:44:d0:06:e9:83:2f:63:d3:80:b1: 3f:b4:05:a9:a3:91:2a:af:8c:47:d3:8c:2b:84:90:10:bb:34: 57:30:55:22:df:e4:e5:9c:60:6a:dd:8a:2a:e4:e7:64:05:16: 18:1f:cf:a4:13:2e:f7:f2:5e:4f:ae:7a:a0:55:7f:9f:c5:c6: 26:fe:58:18:20:4b:df:5e:fc:0e:04:f2:d0:a0:b6:a6:5b:3d: ec:a8:be:e5:57:59:ec:ec:13:b3:ff:70:98:27:cf:e5:c3:b1: 23:02:16:9c:50:11:45:2a:81:b7:4e:df:12:d0:23:b4:cf:55: a4:30:03:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukI1PegKfy5q9H20uTsFnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODRmMmY1NTFhNDM1MmEyYzE0ZDdmOGU2OTMyOWE5ZGM0 M2ZkZTAwHhcNMjYwMTA5MTkwMjE3WhcNMjYwMTEwMTkwMjE3WjAzMTEwLwYDVQQD EyhiNDg1NTFmODJhMThlNzMwOGUyNTBmY2E3YThiOGZjODU1Y2UyNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30rVGTJ68GUpudrBA5tPCqNJXbIR 9cmySD2lvbjOvSCUm9zOpDB6sFEnLJECFXpGIh7gSw3HT2oDK6KFVvEZsiWU8Ual 93YISakiKQhudKTGvBG135lhco4rPQYQlv+P1Cvtrg4gfxrAt5RaU3fBNQFYDMo1 NFyUcFgP1FNokLzpeTIqPqhNtM08TWed3Y20WwXIR2ozVxZaQjOHiI8pWo9RKns6 VDhFEkl6pExNwa0YxuBleRxfMDp5NeapmbLdLRi4DaE/r8sdNKS1h/4XwnWCEc9q qckkOFojezyte94lFxKIrZZb41jCrYBfNyP3gG3hzZDd8npvnzNlUlZ7rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSFUfgqGOcwjiUPynqLj8hVziXMMB8GA1UdIwQY MBaAFDaE8vVRpDUqLBTX+OaTKancQ/3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQt MjlhYmVlM2VmYmI3LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQtMjlhYmVlM2VmYmI3 LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNSjlSa3 wOOGjnePo6ZH3MeWiI/E/XHA/FA3WpKENLmF9rlTPiLX1/qo2BDozG5aKj1R1jEo blW6YM87ODi5cTftTk/GCDUJ/BOUfwMrKHV5xMiiVqnJJJ8TojOhpv8vFJ8cNGvt kS89orASnV3uvwWJr2TdZk+79G1F+FXEpOYqhuYvb4lE0Abpgy9j04CxP7QFqaOR Kq+MR9OMK4SQELs0VzBVIt/k5Zxgat2KKuTnZAUWGB/PpBMu9/JeT656oFV/n8XG Jv5YGCBL3178DgTy0KC2pls97Ki+5VdZ7OwTs/9wmCfP5cOxIwIWnFARRSqBt07f EtAjtM9VpDADTg== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:04 2026 by rpki-client