This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json) Hash identifier: MlWAiXFq0EODXNLMAGSBJkI2TaVU0N2GJ70DURkLrfY= Subject key identifier: F5:2E:36:66:A7:24:12:59:36:45:B0:76:1D:E6:76:5B:B8:A4:1C:E1 Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74 Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74 Certificate serial: 019BB10255C3197600A76C65DD766435DA10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft Manifest number: 038E Signing time: Mon 12 Jan 2026 07:01:18 +0000 Manifest this update: Mon 12 Jan 2026 07:01:18 +0000 Manifest next update: Tue 13 Jan 2026 07:01:18 +0000 Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: wP9cRri0sAuIF1qTrMrObBCz2BpcUhiYzTDRwXWMoJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:55:c3:19:76:00:a7:6c:65:dd:76:64:35:da:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74 Validity Not Before: Jan 12 07:01:18 2026 GMT Not After : Jan 13 07:01:18 2026 GMT Subject: CN=f52e3666a72412593645b0761de6765bb8a41ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:a9:4e:e0:51:a6:9d:52:56:e0:20:01:8a: 87:55:8a:05:51:ab:24:f1:c3:56:25:26:27:b4:4e: f4:1b:17:41:3d:20:b9:1e:5a:74:a6:47:ba:30:de: 6c:32:00:d1:70:d0:9d:60:ef:11:06:d6:f4:20:17: 2c:89:c5:84:a1:2b:15:02:25:40:ea:bd:bb:de:b3: 4f:97:12:b4:13:5d:1c:65:dd:a3:a2:5f:1f:7c:e1: 29:80:85:8f:43:5a:17:35:44:ae:84:6a:35:eb:5d: b2:98:a6:cf:bb:b8:73:e1:f8:46:84:93:5e:dd:fd: 00:9a:9c:41:55:46:0c:6d:25:32:98:7c:c3:da:71: 2d:cc:01:fd:c2:0f:c9:7c:10:08:7f:b1:2a:88:05: 73:96:6c:c8:3f:a4:6b:4e:23:c4:23:32:45:b6:65: fa:c9:4f:e2:ab:67:72:1b:f0:a2:e1:c4:45:1d:be: 06:4f:07:65:33:a3:17:e1:fd:9e:6f:5b:f9:45:37: da:e6:08:d8:c4:7b:90:d4:77:f6:ee:ae:a2:9e:c6: d7:6f:05:41:93:89:1a:6c:a3:a7:56:0f:c8:51:52: 10:3c:60:7f:ac:c0:b3:bb:7a:49:83:13:57:cc:f2: 8b:2e:3a:af:35:ce:02:12:14:c5:4e:db:56:ff:9b: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2E:36:66:A7:24:12:59:36:45:B0:76:1D:E6:76:5B:B8:A4:1C:E1 X509v3 Authority Key Identifier: keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dd:b9:27:9d:9e:e9:1c:da:b7:35:c5:3d:fb:04:ec:7c:16: 84:b8:6a:6b:91:26:d6:80:33:4a:9a:1f:b4:4a:9a:28:e1:c6: 82:c3:31:3f:95:17:de:4c:00:31:cf:ff:36:e7:0c:d3:bb:88: 92:f0:a0:e2:b0:69:e9:52:a3:38:18:b6:8c:b0:9f:34:9c:4e: 36:14:d2:6a:64:2a:fd:78:81:45:f9:11:f0:ea:5b:c2:c5:fe: 8d:40:b0:67:fe:1f:83:fc:40:fd:3b:37:39:de:3b:3e:d1:ac: bb:f8:29:b0:5c:a8:c5:e2:d1:60:bf:d0:96:55:20:3f:7e:ec: de:2a:d5:4f:21:f6:6a:6a:3b:48:0e:85:70:d6:82:a9:7c:11: 8a:a5:f3:68:4b:cf:2a:8b:d5:12:01:c1:51:5a:b9:6a:2d:c2: 9c:3f:99:bb:9a:49:80:63:22:e2:5c:b6:5a:a5:39:87:b8:22: 7e:44:0d:da:32:da:0d:bf:9e:0c:4d:e4:de:34:66:b0:2a:6d: 60:d0:cc:83:d0:eb:7a:97:f9:3e:f5:e7:e1:4b:8e:47:97:ac: e2:dd:86:21:11:11:1c:03:c4:ba:17:03:ff:56:27:17:1a:00: 9a:42:96:7a:d3:13:22:d6:f0:0b:0d:85:12:f9:56:3a:08:a8: f8:dd:14:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAlXDGXYAp2xl3XZkNdoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMmIyYjdjNzhhMjlhMjIzZWE1OWM2N2M5ZGFhM2RjN2Vk YjFlNzQwHhcNMjYwMTEyMDcwMTE4WhcNMjYwMTEzMDcwMTE4WjAzMTEwLwYDVQQD EyhmNTJlMzY2NmE3MjQxMjU5MzY0NWIwNzYxZGU2NzY1YmI4YTQxY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtepTuBRpp1SVuAgAYqHVYoFUask 8cNWJSYntE70GxdBPSC5Hlp0pke6MN5sMgDRcNCdYO8RBtb0IBcsicWEoSsVAiVA 6r273rNPlxK0E10cZd2jol8ffOEpgIWPQ1oXNUSuhGo1612ymKbPu7hz4fhGhJNe 3f0AmpxBVUYMbSUymHzD2nEtzAH9wg/JfBAIf7EqiAVzlmzIP6RrTiPEIzJFtmX6 yU/iq2dyG/Ci4cRFHb4GTwdlM6MX4f2eb1v5RTfa5gjYxHuQ1Hf27q6insbXbwVB k4kabKOnVg/IUVIQPGB/rMCzu3pJgxNXzPKLLjqvNc4CEhTFTttW/5uyXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUuNmanJBJZNkWwdh3mdlu4pBzhMB8GA1UdIwQY MBaAFG0rK3x4opoiPqWcZ8nao9x+2x50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUt MGM1MjU1NmU5ODY1LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUtMGM1MjU1NmU5ODY1 LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd25J52e 6RzatzXFPfsE7HwWhLhqa5Em1oAzSpoftEqaKOHGgsMxP5UX3kwAMc//NucM07uI kvCg4rBp6VKjOBi2jLCfNJxONhTSamQq/XiBRfkR8OpbwsX+jUCwZ/4fg/xA/Ts3 Od47PtGsu/gpsFyoxeLRYL/QllUgP37s3irVTyH2amo7SA6FcNaCqXwRiqXzaEvP KovVEgHBUVq5ai3CnD+Zu5pJgGMi4ly2WqU5h7gifkQN2jLaDb+eDE3k3jRmsCpt YNDMg9Drepf5PvXn4UuOR5es4t2GIRERHAPEuhcD/1YnFxoAmkKWetMTItbwCw2F EvlWOgio+N0UAA== -----END CERTIFICATE-----Generated at Mon Jan 12 09:22:18 2026 by rpki-client