This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json) Hash identifier: wuKQIzkjT93xxrpAtZHLRJg1MrJFPNN0XeobSOhvYmU= Subject key identifier: CF:4D:4F:C0:8D:DD:93:2F:61:66:61:73:DA:A5:E6:45:5D:A1:5D:3B Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58 Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58 Certificate serial: 019B78C9F35B22CB122A78C4530C688323B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft Manifest number: 0EB2 Signing time: Thu 01 Jan 2026 09:00:59 +0000 Manifest this update: Thu 01 Jan 2026 09:00:59 +0000 Manifest next update: Fri 02 Jan 2026 09:00:59 +0000 Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: goWkrw90UU5qrRgA2v3j7rQ2XKy2XhLrC1m9S59glrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:f3:5b:22:cb:12:2a:78:c4:53:0c:68:83:23:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58 Validity Not Before: Jan 1 09:00:59 2026 GMT Not After : Jan 2 09:00:59 2026 GMT Subject: CN=cf4d4fc08ddd932f61666173daa5e6455da15d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:30:94:fb:1f:6e:ba:74:d9:a0:be:2d:71: d8:d1:76:84:06:72:c4:aa:d5:12:f3:d0:40:b0:32: 04:68:ff:53:e5:45:24:9c:2f:03:f7:02:2c:3a:86: 19:ee:ff:b4:8d:85:25:ab:8a:ad:cd:44:6e:bc:79: d0:ad:fd:1a:58:d3:cc:52:82:b3:ae:51:76:1a:6a: b6:b2:0b:60:74:7d:60:14:17:fe:f7:43:3d:bd:98: 12:f4:80:a0:c2:b2:9d:ee:84:5a:15:3f:f7:5e:27: b6:46:22:4f:1e:78:55:e5:22:5d:02:6a:11:f3:07: 01:ec:25:b9:79:0d:fe:fe:0b:e0:93:b9:70:fb:5c: 21:8c:28:dc:fe:59:eb:18:fa:04:e4:0a:09:ef:67: 5c:c3:6c:f2:83:2e:47:e4:d5:05:29:ce:04:fd:e9: 44:48:08:41:10:23:bd:75:5b:c1:96:52:58:bc:7c: 25:0f:c8:63:6c:8d:ed:b1:86:46:d0:97:e3:1d:37: ca:50:d6:92:71:e6:90:0d:ac:0f:d0:74:39:85:e9: 4d:8e:cd:0b:de:29:f9:4c:3e:70:ba:f5:82:50:7f: 2e:aa:6c:e2:01:b6:31:a2:f4:77:c8:09:47:95:16: a3:3c:60:7c:ec:2a:68:61:e6:84:75:dc:32:8f:2e: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4D:4F:C0:8D:DD:93:2F:61:66:61:73:DA:A5:E6:45:5D:A1:5D:3B X509v3 Authority Key Identifier: keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:83:9e:ce:91:20:71:18:34:8f:87:6c:f5:9a:e4:d0:88:d0: df:9f:94:e6:ce:19:24:49:4b:69:92:5d:f0:36:80:e0:dd:1e: a8:84:ca:b2:8e:4a:62:b2:b9:e1:45:61:2d:cd:33:6c:f9:51: b3:a1:17:80:5d:ff:1c:f4:40:3a:b9:94:f0:f0:77:7f:c8:b2: a0:b1:e8:d7:52:82:72:9e:7e:1d:94:94:cd:fb:bb:69:61:46: 18:f9:6b:0b:85:00:67:49:8a:5d:fb:0f:aa:f4:26:7d:9f:84: 56:9a:13:90:22:91:64:c5:75:9f:10:66:99:70:89:e2:b3:25: 0f:97:5c:82:f2:3e:19:a9:7d:22:fe:86:fa:59:fa:cd:59:fa: 08:b4:c5:a2:75:fd:a3:ca:d3:5c:89:7e:70:c2:3e:c1:c8:55: 1c:73:41:d1:90:0c:9c:b9:f4:db:fc:1b:82:43:d9:54:b4:b2: 93:df:c0:da:71:31:10:57:3b:f7:f4:75:14:36:b3:6c:08:b3: 1b:13:92:7a:9a:77:1b:1e:70:78:8a:03:76:63:b2:4a:a8:8a: 54:be:a0:08:85:ea:36:92:2b:8b:8f:71:9c:14:09:92:5d:90: 07:30:d5:dd:1e:3d:c9:ea:71:48:c3:f4:d6:e3:55:5f:c7:81: f5:82:e4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yfNbIssSKnjEUwxogyO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTYzOTcwNDJhN2E5NjQ1ZmMxMmY3NTlkMDI2MTk1ZDdj YmZkNTgwHhcNMjYwMTAxMDkwMDU5WhcNMjYwMTAyMDkwMDU5WjAzMTEwLwYDVQQD EyhjZjRkNGZjMDhkZGQ5MzJmNjE2NjYxNzNkYWE1ZTY0NTVkYTE1ZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaMwlPsfbrp02aC+LXHY0XaEBnLE qtUS89BAsDIEaP9T5UUknC8D9wIsOoYZ7v+0jYUlq4qtzURuvHnQrf0aWNPMUoKz rlF2Gmq2sgtgdH1gFBf+90M9vZgS9ICgwrKd7oRaFT/3Xie2RiJPHnhV5SJdAmoR 8wcB7CW5eQ3+/gvgk7lw+1whjCjc/lnrGPoE5AoJ72dcw2zygy5H5NUFKc4E/elE SAhBECO9dVvBllJYvHwlD8hjbI3tsYZG0JfjHTfKUNaSceaQDawP0HQ5helNjs0L 3in5TD5wuvWCUH8uqmziAbYxovR3yAlHlRajPGB87CpoYeaEddwyjy6WRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9NT8CN3ZMvYWZhc9ql5kVdoV07MB8GA1UdIwQY MBaAFIHmOXBCp6lkX8EvdZ0CYZXXy/1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjhmMWItZjNmMS00ZjFiLTlhYzQt NWNhNmE3YWQwNWZhLzEvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjhmMWItZjNmMS00ZjFiLTlhYzQtNWNhNmE3YWQwNWZh LzEvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIOezpEg cRg0j4ds9Zrk0IjQ35+U5s4ZJElLaZJd8DaA4N0eqITKso5KYrK54UVhLc0zbPlR s6EXgF3/HPRAOrmU8PB3f8iyoLHo11KCcp5+HZSUzfu7aWFGGPlrC4UAZ0mKXfsP qvQmfZ+EVpoTkCKRZMV1nxBmmXCJ4rMlD5dcgvI+Gal9Iv6G+ln6zVn6CLTFonX9 o8rTXIl+cMI+wchVHHNB0ZAMnLn02/wbgkPZVLSyk9/A2nExEFc79/R1FDazbAiz GxOSepp3Gx5weIoDdmOySqiKVL6gCIXqNpIri49xnBQJkl2QBzDV3R49yepxSMP0 1uNVX8eB9YLk+g== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:42 2026 by rpki-client