This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json) Hash identifier: fzVicm5kb9ErOy2ONInAwqVHTE56UO/Izl693XASNDM= Subject key identifier: D1:9F:37:EA:E7:39:3B:8A:4D:12:32:D0:04:0A:B4:B4:71:1F:4E:09 Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Certificate serial: 019B7E276AE4880ECCFA4B079D09D970F417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft Manifest number: 17A7 Signing time: Fri 02 Jan 2026 10:01:11 +0000 Manifest this update: Fri 02 Jan 2026 10:01:11 +0000 Manifest next update: Sat 03 Jan 2026 10:01:11 +0000 Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: /p/ZKnixQfFiH5+z2z04fszrVSjZdqiDSU+8uiv3FMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:27:6a:e4:88:0e:cc:fa:4b:07:9d:09:d9:70:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Validity Not Before: Jan 2 10:01:11 2026 GMT Not After : Jan 3 10:01:11 2026 GMT Subject: CN=d19f37eae7393b8a4d1232d0040ab4b4711f4e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:4a:dc:2f:97:18:2e:4f:ca:d7:22:3b:54: d2:2c:7d:aa:f2:b2:6d:e8:c1:82:7b:32:94:09:14: c9:9e:d8:80:22:7d:41:35:d6:be:d9:8d:27:45:3e: 97:95:87:e9:c9:97:89:5f:c6:1e:4d:69:87:d1:9b: 4b:99:16:a5:24:ec:b8:86:14:78:3a:02:59:29:e2: 30:73:81:d2:ea:86:62:25:79:ab:66:80:d6:19:d0: b0:4c:15:3e:b0:11:75:44:4f:38:c5:e3:8b:e5:9a: 61:d6:c0:19:f7:fc:dc:4f:15:d0:af:4f:9a:39:ee: 68:f9:7c:2a:6a:af:74:cf:2f:2a:9f:3a:8a:df:1e: f4:a4:33:9a:80:d9:f2:14:d4:78:da:a3:16:63:93: ce:63:f7:5f:9c:be:ee:b5:bd:f0:57:c7:f2:eb:98: ae:8c:80:cf:c8:ad:ec:c7:95:25:81:19:8e:ed:86: 50:db:46:c9:04:66:68:fd:47:79:88:9d:df:70:96: aa:f4:65:db:15:2e:19:19:7f:9d:ad:1b:2f:02:b9: aa:77:d5:ec:e7:6d:6c:18:23:f9:26:27:07:b0:52: a3:e0:d6:b1:f7:46:87:7b:3b:1b:da:78:cb:1d:08: ce:08:56:3f:1a:39:54:d0:bf:39:d2:61:8e:36:ee: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9F:37:EA:E7:39:3B:8A:4D:12:32:D0:04:0A:B4:B4:71:1F:4E:09 X509v3 Authority Key Identifier: keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:84:ad:12:ec:6c:38:68:bc:c9:e8:89:5e:e8:db:05:f1:d9: d9:2c:4d:d4:51:99:93:c0:89:c6:b7:e3:b9:b3:5a:c1:27:b0: 29:d6:1c:7f:cc:18:90:4c:60:a8:f4:98:41:1b:72:c0:6b:3a: f3:97:72:cd:f3:b4:78:fb:eb:02:fe:e2:5a:a9:9f:f3:aa:f2: a4:f3:a5:04:1a:7e:56:09:d1:1b:00:ac:7f:cb:a8:37:ab:3e: ac:3c:8c:8c:95:36:47:f1:5a:3a:00:fd:f3:cf:33:e2:a0:0d: fb:b2:49:e9:0f:63:66:e4:83:34:e2:0d:50:19:38:07:a3:63: fe:02:6a:65:34:16:c2:c6:ef:20:e7:d6:ce:80:5b:9d:61:43: 54:ea:3c:0e:65:5b:c7:b0:6d:95:44:ec:d3:39:36:05:0a:78: dd:ac:d1:6c:ee:b7:d1:3c:51:3d:9d:4c:f9:70:1c:76:87:f4: 1d:b9:7d:52:22:b1:a0:44:a5:07:02:2b:89:5e:b8:82:1b:2b: 18:dc:bd:20:60:39:3d:96:d7:2d:b4:f2:80:6d:a0:8c:2d:b5: dc:dd:a4:04:21:5b:a8:ef:ea:2b:fa:4b:2f:d5:f0:34:93:a6: b6:77:dd:2e:62:05:b0:37:d6:f1:fe:53:77:e5:0e:07:65:b4: 90:a7:20:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+J2rkiA7M+ksHnQnZcPQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx ODAzZmYwHhcNMjYwMTAyMTAwMTExWhcNMjYwMTAzMTAwMTExWjAzMTEwLwYDVQQD EyhkMTlmMzdlYWU3MzkzYjhhNGQxMjMyZDAwNDBhYjRiNDcxMWY0ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzBK3C+XGC5PytciO1TSLH2q8rJt 6MGCezKUCRTJntiAIn1BNda+2Y0nRT6XlYfpyZeJX8YeTWmH0ZtLmRalJOy4hhR4 OgJZKeIwc4HS6oZiJXmrZoDWGdCwTBU+sBF1RE84xeOL5Zph1sAZ9/zcTxXQr0+a Oe5o+Xwqaq90zy8qnzqK3x70pDOagNnyFNR42qMWY5POY/dfnL7utb3wV8fy65iu jIDPyK3sx5UlgRmO7YZQ20bJBGZo/Ud5iJ3fcJaq9GXbFS4ZGX+drRsvArmqd9Xs 521sGCP5JicHsFKj4Nax90aHezsb2njLHQjOCFY/GjlU0L850mGONu6eWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGfN+rnOTuKTRIy0AQKtLRxH04JMB8GA1UdIwQY MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoStEuxs OGi8yeiJXujbBfHZ2SxN1FGZk8CJxrfjubNawSewKdYcf8wYkExgqPSYQRtywGs6 85dyzfO0ePvrAv7iWqmf86rypPOlBBp+VgnRGwCsf8uoN6s+rDyMjJU2R/FaOgD9 888z4qAN+7JJ6Q9jZuSDNOINUBk4B6Nj/gJqZTQWwsbvIOfWzoBbnWFDVOo8DmVb x7BtlUTs0zk2BQp43azRbO630TxRPZ1M+XAcdof0Hbl9UiKxoESlBwIriV64ghsr GNy9IGA5PZbXLbTygG2gjC213N2kBCFbqO/qK/pLL9XwNJOmtnfdLmIFsDfW8f5T d+UOB2W0kKcgAg== -----END CERTIFICATE-----Generated at Fri Jan 2 18:25:52 2026 by rpki-client