This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json) Hash identifier: 4nHFuGugAlC3rz8E4ro3KlEeX4z/gBy2fmMAgfU4mKw= Subject key identifier: 87:AB:3D:44:C7:94:BA:B0:99:A5:B1:C5:2A:ED:51:46:60:AB:41:3B Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Certificate serial: 019B8EE44953C950B99178118C9D4D462EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft Manifest number: 17AF Signing time: Mon 05 Jan 2026 16:01:24 +0000 Manifest this update: Mon 05 Jan 2026 16:01:24 +0000 Manifest next update: Tue 06 Jan 2026 16:01:24 +0000 Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: xCYKD6btQCwyr1lpNSmHXzw7P+vUcelLSULNcceI60M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:e4:49:53:c9:50:b9:91:78:11:8c:9d:4d:46:2e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Validity Not Before: Jan 5 16:01:24 2026 GMT Not After : Jan 6 16:01:24 2026 GMT Subject: CN=87ab3d44c794bab099a5b1c52aed514660ab413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:2a:fa:92:3a:6e:85:8a:aa:ab:41:10:34: 5d:21:db:2f:bb:1c:7c:6e:c0:eb:61:64:80:27:1a: 32:57:15:f7:e1:b9:45:ff:ff:42:67:73:84:27:e1: e3:2d:f3:d9:b5:3a:64:4e:b8:ba:25:5e:27:aa:3a: bb:ac:9c:57:5d:fc:ec:98:56:d7:29:b0:a0:a8:12: d3:25:26:66:f1:45:ad:95:65:ec:da:5e:4f:00:5b: 2d:ab:81:3b:59:62:13:2b:4d:01:07:09:51:53:40: 31:68:9c:70:64:63:36:69:55:c5:51:e4:bb:90:4f: e1:e1:fa:35:a0:d6:28:0c:4f:b0:a3:56:4c:09:36: 44:3d:81:68:31:be:e4:ad:f7:ab:1e:dc:ff:dc:66: a1:bc:09:5f:ba:96:97:95:14:fa:86:1f:6d:e5:ab: 35:99:c0:a4:73:9a:b5:0b:c7:1c:78:b0:ce:7b:a7: 59:f2:bf:f9:43:da:35:7d:62:7a:46:5a:11:a5:9b: 8e:30:ec:e4:40:09:77:3a:8f:0b:cd:8b:1f:3c:d4: 76:0e:9c:bf:49:0f:70:04:53:cb:a9:90:b1:71:b3: c2:8d:4c:ad:2d:b2:d0:8a:bc:72:17:df:e9:16:64: 6d:b4:20:2d:4d:4a:13:82:34:6a:1f:c1:a7:ec:da: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AB:3D:44:C7:94:BA:B0:99:A5:B1:C5:2A:ED:51:46:60:AB:41:3B X509v3 Authority Key Identifier: keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:aa:94:55:40:f8:18:76:2b:2f:6d:fa:ec:0a:1e:70:07:3e: 24:dc:1a:ee:3e:a5:e4:61:0f:f3:79:ba:c1:0b:c7:f1:3c:11: ce:0d:01:a6:93:1e:ac:af:65:a5:cf:6b:52:19:c1:7b:6e:3a: 81:b2:89:94:c0:b2:6a:3d:e6:0a:05:74:96:45:bd:a1:e3:ef: 22:4f:20:d9:26:41:86:d2:10:73:95:52:39:42:51:52:27:77: 4e:5e:4c:94:6e:16:3c:d9:dc:51:33:cb:8a:17:c4:85:ad:29: 34:44:0d:ba:aa:3b:ed:ee:db:27:5d:2e:27:9a:dd:14:f8:80: e7:27:a7:4e:52:18:6d:91:1d:10:1b:4b:47:52:97:39:30:01: 2f:12:5e:97:05:dd:eb:59:18:b7:ca:6f:db:dd:71:2c:55:02: 3f:44:53:a5:80:80:6c:41:cf:fa:e6:76:d3:65:8f:89:da:70: c6:8c:08:ca:b6:d5:2e:9f:c1:06:1a:0d:2c:96:1e:e9:41:c9: 8e:6d:53:d0:7d:90:36:6d:df:81:43:3c:3a:7f:a2:d2:ad:6e: ac:ad:28:e5:53:d0:c4:44:d4:87:6d:49:51:59:3a:c6:13:e9: f3:ae:82:58:5f:4d:a0:b4:0f:33:f7:06:a0:61:ea:38:24:09: 17:62:0d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuO5ElTyVC5kXgRjJ1NRi6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj OGJmZDQwHhcNMjYwMTA1MTYwMTI0WhcNMjYwMTA2MTYwMTI0WjAzMTEwLwYDVQQD Eyg4N2FiM2Q0NGM3OTRiYWIwOTlhNWIxYzUyYWVkNTE0NjYwYWI0MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I0q+pI6boWKqqtBEDRdIdsvuxx8 bsDrYWSAJxoyVxX34blF//9CZ3OEJ+HjLfPZtTpkTri6JV4nqjq7rJxXXfzsmFbX KbCgqBLTJSZm8UWtlWXs2l5PAFstq4E7WWITK00BBwlRU0AxaJxwZGM2aVXFUeS7 kE/h4fo1oNYoDE+wo1ZMCTZEPYFoMb7krferHtz/3GahvAlfupaXlRT6hh9t5as1 mcCkc5q1C8cceLDOe6dZ8r/5Q9o1fWJ6RloRpZuOMOzkQAl3Oo8LzYsfPNR2Dpy/ SQ9wBFPLqZCxcbPCjUytLbLQirxyF9/pFmRttCAtTUoTgjRqH8Gn7NrcywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIerPUTHlLqwmaWxxSrtUUZgq0E7MB8GA1UdIwQY MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6qUVUD4 GHYrL2367AoecAc+JNwa7j6l5GEP83m6wQvH8TwRzg0BppMerK9lpc9rUhnBe246 gbKJlMCyaj3mCgV0lkW9oePvIk8g2SZBhtIQc5VSOUJRUid3Tl5MlG4WPNncUTPL ihfEha0pNEQNuqo77e7bJ10uJ5rdFPiA5yenTlIYbZEdEBtLR1KXOTABLxJelwXd 61kYt8pv291xLFUCP0RTpYCAbEHP+uZ202WPidpwxowIyrbVLp/BBhoNLJYe6UHJ jm1T0H2QNm3fgUM8On+i0q1urK0o5VPQxETUh21JUVk6xhPp866CWF9NoLQPM/cG oGHqOCQJF2IN7Q== -----END CERTIFICATE-----Generated at Mon Jan 5 19:08:57 2026 by rpki-client