This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json) Hash identifier: 7iQEDGptNHFzfd3i/sX41SK2NThnRH1xyU2YOY7yrU4= Subject key identifier: 4C:3E:58:F4:E4:AC:98:45:3D:31:7D:1D:00:92:6B:A9:2F:81:08:11 Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b Certificate serial: 019B9D7C3A677ABB9ED52D8D397CEDF8FAE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft Manifest number: 17B7 Signing time: Thu 08 Jan 2026 12:02:02 +0000 Manifest this update: Thu 08 Jan 2026 12:02:02 +0000 Manifest next update: Fri 09 Jan 2026 12:02:02 +0000 Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: 763NLBAkJkWcxXrnYWHpBCVdiThHaLo33dRukf7llks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:7c:3a:67:7a:bb:9e:d5:2d:8d:39:7c:ed:f8:fa:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b Validity Not Before: Jan 8 12:02:02 2026 GMT Not After : Jan 9 12:02:02 2026 GMT Subject: CN=4c3e58f4e4ac98453d317d1d00926ba92f810811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:40:41:a3:85:a3:0a:99:f3:8d:ff:52:56: ac:b7:a6:47:4a:72:f6:66:1d:dd:bb:89:32:03:bf: e7:60:5b:53:b1:9b:37:2f:a2:7c:32:34:c3:8b:48: fa:bb:40:95:6d:79:dd:09:50:c9:a9:21:67:e2:8e: fc:fa:5d:40:94:e0:94:40:72:f8:9b:68:ce:3e:0f: 66:25:c5:c6:5d:d9:2c:87:83:7b:2a:ca:0c:15:ff: 12:c5:9d:c8:0a:d4:63:c9:93:b1:f5:d8:a4:25:f3: 1d:b6:a2:d8:8f:66:da:3f:13:dc:e5:a4:01:67:37: 87:8b:5d:2b:33:cc:42:20:9f:b7:16:db:bc:c4:93: cb:fe:00:a7:39:bf:96:b9:fc:c7:7e:25:fe:4f:4c: 8a:dd:11:a7:6c:37:08:6c:b1:b5:40:29:2e:86:f8: 94:5f:6a:36:7d:22:a5:ef:20:19:c7:19:a3:2c:18: cd:4a:cf:2f:24:84:61:97:06:d2:87:21:f9:cf:b5: fc:9f:45:2e:0e:32:28:18:fe:b1:ed:72:aa:7b:e0: f2:31:fc:e9:de:a0:8f:bb:d3:53:68:84:7c:cd:54: b7:f5:8c:38:ca:a3:9e:33:69:3e:df:55:08:9f:79: 68:b1:90:1e:df:63:40:67:c5:9b:69:06:2b:c5:c5: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3E:58:F4:E4:AC:98:45:3D:31:7D:1D:00:92:6B:A9:2F:81:08:11 X509v3 Authority Key Identifier: keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:14:b9:f2:9c:6d:7e:bf:81:52:60:95:29:a5:98:6b:68: be:9b:c6:80:e4:e6:27:d5:e3:c6:52:2c:45:a6:9f:f3:58:9a: 18:70:e3:5c:f0:43:58:7a:e5:5f:89:e0:f4:b1:00:a7:bb:f9: 3a:91:06:2a:91:4a:d5:4b:26:1e:f8:46:05:66:0f:ed:98:c8: 0b:7f:13:07:52:df:50:5a:eb:7f:e0:0b:da:b3:67:f4:c6:8a: 22:0d:21:19:ae:0e:36:0e:93:dd:8d:0f:8c:06:bb:2e:5d:03: e0:fc:fd:49:67:2e:55:e8:19:d9:b9:78:f5:70:d2:55:e6:c5: 14:26:40:09:ba:00:77:65:93:bf:f4:de:c3:47:be:9c:4a:9b: 98:87:69:1c:88:5f:25:4d:ee:3c:dd:f2:f0:67:c7:9a:b1:ba: f1:e6:bc:06:9b:6a:9a:91:9b:60:97:59:1e:8a:26:bd:e4:aa: 6f:5d:3b:7a:a7:64:65:cf:93:a8:ca:a1:bc:b1:95:0f:b0:bb: 17:53:99:94:90:bd:d1:3e:9c:d0:9b:40:1c:cb:0a:46:fe:70: fa:ce:f4:c7:48:c8:26:b1:88:f7:44:bd:5d:6c:5f:59:70:e5: 1a:94:db:4e:7d:19:40:98:44:8a:19:13:84:9f:aa:c2:f3:34: 09:98:fb:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZudfDpnerue1S2NOXzt+PrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1 NjQ1M2IwHhcNMjYwMTA4MTIwMjAyWhcNMjYwMTA5MTIwMjAyWjAzMTEwLwYDVQQD Eyg0YzNlNThmNGU0YWM5ODQ1M2QzMTdkMWQwMDkyNmJhOTJmODEwODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiRAQaOFowqZ843/Ulast6ZHSnL2 Zh3du4kyA7/nYFtTsZs3L6J8MjTDi0j6u0CVbXndCVDJqSFn4o78+l1AlOCUQHL4 m2jOPg9mJcXGXdksh4N7KsoMFf8SxZ3ICtRjyZOx9dikJfMdtqLYj2baPxPc5aQB ZzeHi10rM8xCIJ+3Ftu8xJPL/gCnOb+WufzHfiX+T0yK3RGnbDcIbLG1QCkuhviU X2o2fSKl7yAZxxmjLBjNSs8vJIRhlwbShyH5z7X8n0UuDjIoGP6x7XKqe+DyMfzp 3qCPu9NTaIR8zVS39Yw4yqOeM2k+31UIn3losZAe32NAZ8WbaQYrxcUVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw+WPTkrJhFPTF9HQCSa6kvgQgRMB8GA1UdIwQY MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1 LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY10UufKc bX6/gVJglSmlmGtovpvGgOTmJ9XjxlIsRaaf81iaGHDjXPBDWHrlX4ng9LEAp7v5 OpEGKpFK1UsmHvhGBWYP7ZjIC38TB1LfUFrrf+AL2rNn9MaKIg0hGa4ONg6T3Y0P jAa7Ll0D4Pz9SWcuVegZ2bl49XDSVebFFCZACboAd2WTv/Tew0e+nEqbmIdpHIhf JU3uPN3y8GfHmrG68ea8BptqmpGbYJdZHoomveSqb107eqdkZc+TqMqhvLGVD7C7 F1OZlJC90T6c0JtAHMsKRv5w+s70x0jIJrGI90S9XWxfWXDlGpTbTn0ZQJhEihkT hJ+qwvM0CZj7Mg== -----END CERTIFICATE-----Generated at Thu Jan 8 13:36:22 2026 by rpki-client