This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json) Hash identifier: U1vtRiRf1Tq6AIz88OcchNq/tO1tbHkIA8/AUMEzW8M= Subject key identifier: AD:44:E2:72:40:BB:8D:B9:42:68:F5:C9:1A:94:82:A9:EE:9C:8D:DB Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a Certificate serial: 019BB1A701F2C23AF75A1AE722954BAD13D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft Manifest number: 17C3 Signing time: Mon 12 Jan 2026 10:01:10 +0000 Manifest this update: Mon 12 Jan 2026 10:01:10 +0000 Manifest next update: Tue 13 Jan 2026 10:01:10 +0000 Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: aXaO6cokFCs1IHZBKUv78btETKv/QQWKOJLMuT4vFI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:a7:01:f2:c2:3a:f7:5a:1a:e7:22:95:4b:ad:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a Validity Not Before: Jan 12 10:01:10 2026 GMT Not After : Jan 13 10:01:10 2026 GMT Subject: CN=ad44e27240bb8db94268f5c91a9482a9ee9c8ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:32:84:53:92:fc:1a:c6:34:fd:69:11:48: cb:c2:4e:a4:6c:2c:b2:b1:43:0b:f4:28:b1:01:5b: f6:42:4c:a6:49:30:e5:fa:80:dd:f1:66:fe:5a:e8: cd:6a:40:bd:82:89:66:63:c5:9c:66:1b:ec:71:5e: 80:56:97:69:ab:87:a5:38:62:82:95:68:2c:f6:07: dd:4c:1a:d1:85:4c:ee:05:ef:f7:0c:cb:8b:49:92: f4:0b:c3:a8:7b:d7:d7:3a:8c:8e:ec:2c:52:88:60: 19:b5:ef:37:2e:08:ed:74:fc:04:14:c3:e5:44:44: f0:7d:e9:16:7d:31:9e:ae:9c:b6:15:8d:b5:91:21: 5f:95:3d:3f:f8:26:87:8f:42:13:1e:e6:d0:b7:ab: 15:fa:7d:b2:c5:93:4b:a0:10:35:39:c2:aa:b1:4f: 1b:44:b5:db:9b:c3:5f:f2:eb:b8:77:6d:0e:fc:fa: 92:64:fc:d9:c2:39:7a:ea:67:01:15:4b:ff:83:e6: 07:92:9e:15:2d:02:e0:95:9b:cd:32:19:8f:b6:e1: d0:dc:9c:b1:73:0e:99:48:c9:ba:53:a1:4e:e1:fc: d2:b4:bd:a3:0e:87:20:ed:cc:3d:63:1c:18:cf:cd: 44:3a:40:86:91:24:0f:32:89:f2:1c:90:01:d2:69: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:44:E2:72:40:BB:8D:B9:42:68:F5:C9:1A:94:82:A9:EE:9C:8D:DB X509v3 Authority Key Identifier: keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:33:cd:c3:fb:08:c2:d7:af:f1:64:84:24:2b:95:81:0a:3c: dd:7b:e3:97:3a:fc:28:52:36:28:66:ad:1b:8a:ea:6f:71:ce: e2:f2:42:f6:e8:12:a3:48:d1:50:72:4c:80:1c:e2:e9:4b:e9: 9d:38:4f:f1:83:47:05:63:fc:cb:8b:7a:76:58:8c:3b:af:ab: 7d:f9:bc:26:39:d7:6c:28:1e:6a:50:8d:fa:b9:01:1f:ae:a5: c7:6f:b5:10:81:5e:e1:2d:8c:db:9b:dc:25:cf:f0:72:16:9b: 40:6f:1f:63:39:4f:5c:ab:b5:90:53:93:f6:dc:4c:c5:ec:17: 1a:0e:99:98:e6:1b:b3:4d:c5:2e:6e:de:6c:04:ea:c1:70:da: e1:32:69:85:60:37:dc:ed:9b:19:97:8e:3f:52:d4:3c:76:8c: 0b:b1:80:e1:b4:8c:fd:79:94:1a:ff:a8:3f:53:87:41:99:04: 77:96:68:67:8b:73:70:ef:ef:dd:ed:12:10:17:f0:7b:09:43: 48:06:95:6f:f6:f1:07:16:7a:dc:78:f4:41:62:a9:a9:45:58: 1c:a4:7d:3f:4e:29:68:1d:1e:86:f8:87:d5:f7:a7:df:3a:93: 4b:04:41:79:1d:fb:10:6d:ee:44:b4:df:40:42:21:6f:e1:cf: bf:47:1c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxpwHywjr3WhrnIpVLrRPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYTY2OWI2ZDVlMjI0MDUwMTdhZDM1OTg3Y2M1N2FjOTYy MzljOWEwHhcNMjYwMTEyMTAwMTEwWhcNMjYwMTEzMTAwMTEwWjAzMTEwLwYDVQQD EyhhZDQ0ZTI3MjQwYmI4ZGI5NDI2OGY1YzkxYTk0ODJhOWVlOWM4ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp4yhFOS/BrGNP1pEUjLwk6kbCyy sUML9CixAVv2QkymSTDl+oDd8Wb+WujNakC9golmY8WcZhvscV6AVpdpq4elOGKC lWgs9gfdTBrRhUzuBe/3DMuLSZL0C8Ooe9fXOoyO7CxSiGAZte83LgjtdPwEFMPl RETwfekWfTGerpy2FY21kSFflT0/+CaHj0ITHubQt6sV+n2yxZNLoBA1OcKqsU8b RLXbm8Nf8uu4d20O/PqSZPzZwjl66mcBFUv/g+YHkp4VLQLglZvNMhmPtuHQ3Jyx cw6ZSMm6U6FO4fzStL2jDocg7cw9YxwYz81EOkCGkSQPMonyHJAB0mkeawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1E4nJAu425Qmj1yRqUgqnunI3bMB8GA1UdIwQY MBaAFP2mabbV4iQFAXrTWYfMV6yWI5yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYt ODlkM2NmNmM3MDI3LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYtODlkM2NmNmM3MDI3 LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjPNw/sI wtev8WSEJCuVgQo83Xvjlzr8KFI2KGatG4rqb3HO4vJC9ugSo0jRUHJMgBzi6Uvp nThP8YNHBWP8y4t6dliMO6+rffm8JjnXbCgealCN+rkBH66lx2+1EIFe4S2M25vc Jc/wchabQG8fYzlPXKu1kFOT9txMxewXGg6ZmOYbs03FLm7ebATqwXDa4TJphWA3 3O2bGZeOP1LUPHaMC7GA4bSM/XmUGv+oP1OHQZkEd5ZoZ4tzcO/v3e0SEBfwewlD SAaVb/bxBxZ63Hj0QWKpqUVYHKR9P04paB0ehviH1fen3zqTSwRBeR37EG3uRLTf QEIhb+HPv0ccZw== -----END CERTIFICATE-----Generated at Mon Jan 12 15:16:36 2026 by rpki-client