This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json) Hash identifier: G98m1/OGd5jNUQDGc2Y7PGiwV4PNwWoAL2DAgKfz0GI= Subject key identifier: 5A:46:8C:9C:E5:F4:2C:6B:A0:08:A6:69:79:BC:5C:44:F3:EC:E1:BF Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865 Certificate serial: 019B7E94C2A6F95EAD35ECFF3D28487843AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft Manifest number: 1461 Signing time: Fri 02 Jan 2026 12:00:36 +0000 Manifest this update: Fri 02 Jan 2026 12:00:36 +0000 Manifest next update: Sat 03 Jan 2026 12:00:36 +0000 Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: SpD63WF1j8ZKJnc2CO/vVLTeiSuAKFCBBlxATRWSOzY=) 2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:94:c2:a6:f9:5e:ad:35:ec:ff:3d:28:48:78:43:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d031655023bd141731d56fb8453ff0514f728865 Validity Not Before: Jan 2 12:00:36 2026 GMT Not After : Jan 3 12:00:36 2026 GMT Subject: CN=5a468c9ce5f42c6ba008a66979bc5c44f3ece1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:04:c2:70:a1:5f:fa:81:0f:f6:37:ef:26: 70:fe:ff:6f:72:20:91:5b:57:ed:10:86:35:ac:04: 33:38:25:18:21:e9:ab:63:ea:5f:06:cf:a6:f4:9e: 0d:e0:da:da:1e:52:97:c6:68:ec:97:e2:57:42:0d: a9:1e:7a:59:f2:40:d0:2a:af:2e:09:bb:5a:28:68: 03:8a:97:17:b5:6c:f5:63:36:29:5a:b3:59:d5:a4: 4a:a5:5d:67:4b:2e:db:d3:bb:9f:4b:00:1b:26:6c: a1:0c:00:ad:5c:72:08:37:1b:e9:d3:e9:e8:7b:b9: af:2b:9e:71:01:22:9c:96:35:5a:fb:db:34:66:4c: c7:b1:aa:4b:6b:fd:a5:02:cc:ac:01:04:62:77:2a: 63:86:93:13:e9:6f:91:97:71:0d:a4:42:bc:58:f7: 2e:45:2b:9a:ef:df:8d:d7:b4:18:ed:b9:f5:5f:dc: 71:16:77:74:ce:76:8a:a3:22:29:8a:0b:30:87:9d: c1:c4:5e:8d:0c:6c:6b:93:dd:05:d5:32:16:8c:15: 81:e4:07:94:e9:f6:52:b2:b3:82:2f:af:70:c3:d8: 60:e7:87:c8:6a:62:03:d1:26:d9:6e:0f:24:14:a4: 6b:f0:ab:53:b3:02:62:80:61:f4:42:91:20:c2:7d: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:8C:9C:E5:F4:2C:6B:A0:08:A6:69:79:BC:5C:44:F3:EC:E1:BF X509v3 Authority Key Identifier: keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e1:f0:c5:02:9c:8f:33:7b:9a:43:b4:df:41:58:cb:61:81: 1b:ff:c3:f2:c4:2b:c1:d3:46:d9:54:3b:36:94:d6:13:a8:e7: 29:cc:6b:51:88:f7:43:2c:93:2b:46:d1:bd:ae:49:ad:cc:37: 51:47:f3:90:8a:9c:64:a5:81:20:66:9d:a1:05:18:33:35:a1: 9f:ba:cd:89:27:90:de:86:1c:61:89:cd:08:d3:91:3b:84:92: 28:b5:92:51:06:bc:49:f1:63:8d:23:a5:fd:d5:50:03:0b:ab: 98:4c:b2:26:eb:4b:33:2c:02:4b:d0:de:d0:8d:bc:ca:99:91: ba:3a:15:c2:a6:0b:c3:0f:f9:85:61:cd:4d:07:c4:28:53:f1: 14:d9:e4:20:33:a4:3d:ab:bf:59:9e:80:36:dc:ed:f8:9e:02: 26:6c:d9:46:21:b9:d1:ee:6b:79:22:a6:a6:66:a4:6c:36:58: cd:af:6e:82:25:d9:22:4e:be:9d:98:eb:68:af:eb:7b:61:7f: 56:73:7d:49:24:6c:2c:6b:27:b7:7b:ce:f4:5c:4b:88:cc:d3: 38:40:22:05:c3:a2:0f:6f:13:9e:11:08:78:b0:1f:6c:e3:ed: 93:8e:89:e0:93:99:b4:68:87:6b:e7:f0:9e:02:d7:20:b1:fc: cd:4a:35:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+lMKm+V6tNez/PShIeEOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3 Mjg4NjUwHhcNMjYwMTAyMTIwMDM2WhcNMjYwMTAzMTIwMDM2WjAzMTEwLwYDVQQD Eyg1YTQ2OGM5Y2U1ZjQyYzZiYTAwOGE2Njk3OWJjNWM0NGYzZWNlMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmloEwnChX/qBD/Y37yZw/v9vciCR W1ftEIY1rAQzOCUYIemrY+pfBs+m9J4N4NraHlKXxmjsl+JXQg2pHnpZ8kDQKq8u CbtaKGgDipcXtWz1YzYpWrNZ1aRKpV1nSy7b07ufSwAbJmyhDACtXHIINxvp0+no e7mvK55xASKcljVa+9s0ZkzHsapLa/2lAsysAQRidypjhpMT6W+Rl3ENpEK8WPcu RSua79+N17QY7bn1X9xxFnd0znaKoyIpigswh53BxF6NDGxrk90F1TIWjBWB5AeU 6fZSsrOCL69ww9hg54fIamID0SbZbg8kFKRr8KtTswJigGH0QpEgwn1bHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpGjJzl9CxroAimaXm8XETz7OG/MB8GA1UdIwQY MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOHwxQKc jzN7mkO030FYy2GBG//D8sQrwdNG2VQ7NpTWE6jnKcxrUYj3QyyTK0bRva5Jrcw3 UUfzkIqcZKWBIGadoQUYMzWhn7rNiSeQ3oYcYYnNCNORO4SSKLWSUQa8SfFjjSOl /dVQAwurmEyyJutLMywCS9De0I28ypmRujoVwqYLww/5hWHNTQfEKFPxFNnkIDOk Pau/WZ6ANtzt+J4CJmzZRiG50e5reSKmpmakbDZYza9ugiXZIk6+nZjraK/re2F/ VnN9SSRsLGsnt3vO9FxLiMzTOEAiBcOiD28TnhEIeLAfbOPtk46J4JOZtGiHa+fw ngLXILH8zUo1ZQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:23:34 2026 by rpki-client