This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json) Hash identifier: 33YaRUuAUDaWf7A0fy/PVP/hwvm+lgNWucb4oquux1k= Subject key identifier: 34:CD:64:EE:B4:93:DA:0E:FE:B8:0B:D1:B0:18:0D:B7:37:A5:8D:68 Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Certificate serial: 019BAD9325CEB15143A5D5BC469134C6BBBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft Manifest number: 07DC Signing time: Sun 11 Jan 2026 15:01:00 +0000 Manifest this update: Sun 11 Jan 2026 15:01:00 +0000 Manifest next update: Mon 12 Jan 2026 15:01:00 +0000 Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: vtmGuQrJQu+ReHU1n5Of3z1xT6T4ZM97GVLjRMFyA2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:25:ce:b1:51:43:a5:d5:bc:46:91:34:c6:bb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Validity Not Before: Jan 11 15:01:00 2026 GMT Not After : Jan 12 15:01:00 2026 GMT Subject: CN=34cd64eeb493da0efeb80bd1b0180db737a58d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:ff:9a:25:b5:ae:d2:13:6c:10:9e:1b:56: 0e:4b:ac:27:67:b4:b0:22:85:31:4b:86:54:76:fc: 75:43:a1:69:88:f2:ea:af:c7:49:5e:67:1e:0a:f1: 1b:75:b6:51:48:71:c7:fa:b3:eb:c1:0f:e9:35:45: 62:59:de:27:9d:fb:ca:f5:a6:47:86:59:e3:c8:ec: df:59:f0:1a:ba:4a:5f:e7:dc:5e:4d:8b:b7:cd:d1: db:34:75:50:09:18:f3:93:3a:a5:fe:01:d8:ba:e9: eb:8c:77:07:3b:0d:f8:5d:45:a1:c9:72:f7:14:78: 5d:ae:78:af:3d:01:61:33:3d:31:8a:ae:22:69:d7: fe:be:cf:ac:cd:7a:04:7c:37:e7:a2:eb:a3:5d:78: df:e5:e5:3d:ff:6d:e1:6e:50:57:70:a2:8f:fa:85: c5:5b:f3:1b:cd:98:85:f3:f2:52:0f:79:6b:9d:1c: 4d:08:66:5d:e5:86:40:32:06:92:e9:17:b4:f2:87: 39:5f:13:d1:e3:ce:d5:85:b4:4f:09:2b:0f:10:cf: 06:6f:32:cf:14:72:de:d1:cb:89:8a:98:d8:57:ae: 04:44:1b:df:6f:59:d5:32:9a:4a:1a:c6:3c:5f:2a: 45:18:b9:2b:25:79:21:ca:6b:82:be:bc:1c:31:6b: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:64:EE:B4:93:DA:0E:FE:B8:0B:D1:B0:18:0D:B7:37:A5:8D:68 X509v3 Authority Key Identifier: keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7e:01:04:9a:9d:fe:29:91:34:4b:57:47:22:aa:01:22:55: 74:75:3f:f6:73:c9:9c:56:fd:f1:95:de:78:c0:29:26:a9:7b: 55:fc:72:4e:28:db:30:3a:fc:fe:0f:49:b4:fe:05:99:e3:10: 04:95:d1:93:b0:ec:28:51:3a:67:d9:d7:f9:93:5d:8e:0d:3c: 6c:88:4c:8c:b3:b6:14:dc:4e:b7:d7:23:56:b7:97:78:c0:ff: 23:77:6c:a4:a1:7d:3f:8b:36:bf:3b:45:99:08:71:be:3f:c6: 3b:91:c4:a8:06:0f:06:05:94:76:db:82:dd:2c:d4:c4:26:09: 6d:0b:98:fa:50:3f:c4:10:48:36:6d:25:9c:17:4f:f2:17:df: 89:54:aa:21:fd:02:7f:80:16:0b:55:a0:94:da:5e:f2:ad:4b: fd:d8:90:89:a2:ef:6b:09:dc:a8:77:5e:8b:e1:79:8c:97:96: 44:a6:c1:da:03:cd:fe:ea:be:cc:81:65:87:9a:1d:c6:d8:81: 0e:59:bd:e2:75:5c:4b:27:10:da:a3:36:97:1f:5a:24:5d:3b: 09:10:fd:b6:2f:f6:56:39:48:96:80:9a:83:a3:7e:2a:fe:96: 8c:77:95:71:ca:3d:c6:1d:e6:20:31:a7:b2:4f:90:d6:67:e4: c9:d8:1e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutkyXOsVFDpdW8RpE0xru+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzhmOGM5YzcwNzJiNzMwNDg4ZjllMzIxMjhkZDg5NWJk ZTMyZDMwHhcNMjYwMTExMTUwMTAwWhcNMjYwMTEyMTUwMTAwWjAzMTEwLwYDVQQD EygzNGNkNjRlZWI0OTNkYTBlZmViODBiZDFiMDE4MGRiNzM3YTU4ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFj/miW1rtITbBCeG1YOS6wnZ7Sw IoUxS4ZUdvx1Q6FpiPLqr8dJXmceCvEbdbZRSHHH+rPrwQ/pNUViWd4nnfvK9aZH hlnjyOzfWfAaukpf59xeTYu3zdHbNHVQCRjzkzql/gHYuunrjHcHOw34XUWhyXL3 FHhdrnivPQFhMz0xiq4iadf+vs+szXoEfDfnouujXXjf5eU9/23hblBXcKKP+oXF W/MbzZiF8/JSD3lrnRxNCGZd5YZAMgaS6Re08oc5XxPR487VhbRPCSsPEM8GbzLP FHLe0cuJipjYV64ERBvfb1nVMppKGsY8XypFGLkrJXkhymuCvrwcMWv6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTNZO60k9oO/rgL0bAYDbc3pY1oMB8GA1UdIwQY MBaAFNd4+MnHBytzBIj54yEo3Ylb3jLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAt NThiZTkyN2Y0MmU5LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAtNThiZTkyN2Y0MmU5 LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh34BBJqd /imRNEtXRyKqASJVdHU/9nPJnFb98ZXeeMApJql7VfxyTijbMDr8/g9JtP4FmeMQ BJXRk7DsKFE6Z9nX+ZNdjg08bIhMjLO2FNxOt9cjVreXeMD/I3dspKF9P4s2vztF mQhxvj/GO5HEqAYPBgWUdtuC3SzUxCYJbQuY+lA/xBBINm0lnBdP8hffiVSqIf0C f4AWC1WglNpe8q1L/diQiaLvawncqHdei+F5jJeWRKbB2gPN/uq+zIFlh5odxtiB Dlm94nVcSycQ2qM2lx9aJF07CRD9ti/2VjlIloCag6N+Kv6WjHeVcco9xh3mIDGn sk+Q1mfkydgeXQ== -----END CERTIFICATE-----Generated at Sun Jan 11 22:32:12 2026 by rpki-client