This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json) Hash identifier: T9DyraiiOOp53+dG5FJsyyJUDEVCMMaVJMrUvK5Q8O4= Subject key identifier: 89:DA:DA:E9:D1:7D:5E:67:4C:CE:3D:99:F9:51:8D:0B:E6:2B:A0:A6 Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0 Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0 Certificate serial: 019BADCB71F3C5B2EA5DCFAAE94F5DACDA15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft Manifest number: 03C4 Signing time: Sun 11 Jan 2026 16:02:29 +0000 Manifest this update: Sun 11 Jan 2026 16:02:29 +0000 Manifest next update: Mon 12 Jan 2026 16:02:29 +0000 Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: RRi65Wkroh4bMhFXdGeTGK5VDn+j1D3WQ1+eEfZ0JjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:71:f3:c5:b2:ea:5d:cf:aa:e9:4f:5d:ac:da:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0 Validity Not Before: Jan 11 16:02:29 2026 GMT Not After : Jan 12 16:02:29 2026 GMT Subject: CN=89dadae9d17d5e674cce3d99f9518d0be62ba0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:1a:99:83:43:d0:05:66:60:47:81:ee:85: 77:cd:89:98:d8:86:be:02:38:db:e9:f4:0a:fe:c1: a7:85:83:b3:01:11:66:69:e1:69:53:70:2c:45:dc: 4a:5b:99:d9:be:1b:e0:12:23:f7:ac:fd:c0:58:9b: 80:60:d9:63:f4:69:67:7c:3b:84:b7:16:0e:a2:b5: d9:7d:f4:41:fe:cc:85:5c:a2:aa:99:8d:87:b0:be: 22:8e:2a:dd:e3:ad:7d:11:f0:58:de:48:32:88:36: 61:bd:80:11:42:99:c7:4a:e3:7e:3c:66:d1:de:7d: 0d:18:39:d8:7a:eb:bc:8f:94:46:0c:e0:fa:9d:25: 64:56:42:e1:85:cb:d0:aa:c3:b0:87:78:79:5e:8f: 77:88:b2:dd:ea:f8:94:72:ce:e6:a1:f4:29:83:40: bd:40:b6:a8:f7:a1:61:ca:0a:b0:ab:cd:e6:e6:a4: 01:30:f5:0f:77:4f:56:11:2d:a5:7f:6e:21:e6:64: 46:f7:37:6e:e6:05:5c:65:cb:6c:71:c7:e7:cf:cf: b5:15:c2:d6:fe:ad:a1:d8:6f:f1:4c:02:de:cf:99: 2b:90:f0:99:ef:e4:7e:f7:3a:85:3a:26:55:a3:d2: b6:4c:ea:bf:c3:b3:c6:14:9e:5f:0b:48:3e:a0:88: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:DA:E9:D1:7D:5E:67:4C:CE:3D:99:F9:51:8D:0B:E6:2B:A0:A6 X509v3 Authority Key Identifier: keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dc:84:c0:8b:40:b5:4b:4f:5c:e8:60:0a:cf:61:2f:de:53: fe:05:14:d8:b9:75:47:7a:69:68:ed:ac:71:b9:b0:c9:5d:d8: 35:e0:48:3c:c4:e7:b6:c7:db:91:da:6d:3e:ba:6b:38:cc:3f: bf:fc:97:7d:be:6d:61:52:6c:e2:4e:ee:22:7d:67:5b:77:8d: e0:88:b9:eb:69:f1:94:af:ef:ce:d7:93:a1:2c:ab:17:38:02: 0e:72:82:4a:af:77:21:f4:45:fc:26:ed:c5:11:2d:77:d7:66: a0:9b:bf:15:c2:47:41:94:9a:50:48:2a:cf:d0:03:31:b7:2d: 2c:e9:2c:79:e8:c2:53:95:3e:01:22:c6:6e:bc:2b:19:04:52: ef:46:5e:01:06:fd:88:b6:e2:14:c9:8d:32:d6:ce:2e:e5:94: fa:a8:8c:97:57:e6:1d:12:8d:81:48:9a:12:55:41:06:85:ff: 31:07:0f:db:00:7f:4f:89:bc:e4:6b:95:6a:e0:0a:bd:b9:78: ee:c7:3c:27:71:02:fc:37:c4:56:16:37:90:4c:32:a3:b0:26: 36:24:60:ad:19:30:19:cc:c0:13:90:47:4a:e3:ce:2a:ad:ac: d3:e3:75:bb:3a:e2:9f:58:de:44:bc:d1:fe:8f:54:e6:6d:3b: af:f2:f2:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuty3HzxbLqXc+q6U9drNoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODRmMmY1NTFhNDM1MmEyYzE0ZDdmOGU2OTMyOWE5ZGM0 M2ZkZTAwHhcNMjYwMTExMTYwMjI5WhcNMjYwMTEyMTYwMjI5WjAzMTEwLwYDVQQD Eyg4OWRhZGFlOWQxN2Q1ZTY3NGNjZTNkOTlmOTUxOGQwYmU2MmJhMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoUamYND0AVmYEeB7oV3zYmY2Ia+ Ajjb6fQK/sGnhYOzARFmaeFpU3AsRdxKW5nZvhvgEiP3rP3AWJuAYNlj9GlnfDuE txYOorXZffRB/syFXKKqmY2HsL4ijird4619EfBY3kgyiDZhvYARQpnHSuN+PGbR 3n0NGDnYeuu8j5RGDOD6nSVkVkLhhcvQqsOwh3h5Xo93iLLd6viUcs7mofQpg0C9 QLao96Fhygqwq83m5qQBMPUPd09WES2lf24h5mRG9zdu5gVcZctsccfnz8+1FcLW /q2h2G/xTALez5krkPCZ7+R+9zqFOiZVo9K2TOq/w7PGFJ5fC0g+oIjvgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIna2unRfV5nTM49mflRjQvmK6CmMB8GA1UdIwQY MBaAFDaE8vVRpDUqLBTX+OaTKancQ/3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQt MjlhYmVlM2VmYmI3LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQtMjlhYmVlM2VmYmI3 LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9yEwItA tUtPXOhgCs9hL95T/gUU2Ll1R3ppaO2scbmwyV3YNeBIPMTntsfbkdptPrprOMw/ v/yXfb5tYVJs4k7uIn1nW3eN4Ii562nxlK/vzteToSyrFzgCDnKCSq93IfRF/Cbt xREtd9dmoJu/FcJHQZSaUEgqz9ADMbctLOkseejCU5U+ASLGbrwrGQRS70ZeAQb9 iLbiFMmNMtbOLuWU+qiMl1fmHRKNgUiaElVBBoX/MQcP2wB/T4m85GuVauAKvbl4 7sc8J3EC/DfEVhY3kEwyo7AmNiRgrRkwGczAE5BHSuPOKq2s0+N1uzrin1jeRLzR /o9U5m07r/Ly5w== -----END CERTIFICATE-----Generated at Sun Jan 11 23:58:02 2026 by rpki-client