This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json) Hash identifier: s1JFJ4fvPJexPPpvCDLSpXfU+uQLMNgGWosIAhLmNAc= Subject key identifier: 09:B3:A1:78:3A:F1:0E:35:ED:8A:71:4E:D2:91:16:3D:79:5B:0F:BD Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Certificate serial: 019B94AF1BCDD30641B2354F29960FA551B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft Manifest number: 17B2 Signing time: Tue 06 Jan 2026 19:01:02 +0000 Manifest this update: Tue 06 Jan 2026 19:01:02 +0000 Manifest next update: Wed 07 Jan 2026 19:01:02 +0000 Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: XwPQdyRprNo4EodHKpUvLCIiLK2JVFU+8NNPWyDPYro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:af:1b:cd:d3:06:41:b2:35:4f:29:96:0f:a5:51:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Validity Not Before: Jan 6 19:01:02 2026 GMT Not After : Jan 7 19:01:02 2026 GMT Subject: CN=09b3a1783af10e35ed8a714ed291163d795b0fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:aa:ab:13:43:67:07:70:08:03:82:ad:38: 96:ad:ed:3c:49:95:14:66:c2:f4:71:f9:7a:ff:0d: a6:c4:6f:f6:5b:dd:63:b9:9a:ef:34:4c:d0:05:5a: b6:de:86:ee:1a:c4:98:c6:1b:62:39:c7:ae:75:35: 7e:27:f4:6d:2b:6a:0f:bb:76:3e:a5:1d:ef:08:a6: 71:f2:2e:2d:76:5a:fb:49:e3:bb:1d:38:13:eb:65: af:67:4c:f7:ba:5f:6e:c8:c6:9d:a5:0f:43:49:92: 40:f9:92:cf:e0:b1:8f:bf:97:cf:4f:05:9b:2c:1c: 23:ac:17:bf:6f:a8:46:f6:69:dc:82:33:14:17:d0: 03:8a:c5:92:0e:28:3a:cc:78:c9:2d:ac:3e:54:0f: c5:aa:26:3c:08:15:0a:65:db:aa:7c:8c:9c:b1:fc: 85:a5:c7:1f:87:a4:66:70:74:98:9d:84:3f:2f:c3: 8b:73:e8:69:5f:27:ae:c3:00:9d:cc:e9:50:2c:3c: 82:e7:3d:45:c8:b8:a3:9d:88:c3:c3:99:09:a6:fa: 37:b1:d3:11:d3:0e:ab:4a:c6:29:a1:26:3a:84:87: 73:2a:00:40:90:f4:5e:f8:ca:a5:5c:12:e2:ad:5a: f8:c5:2a:bc:90:ec:81:8d:2f:3c:c0:8e:e4:04:49: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:A1:78:3A:F1:0E:35:ED:8A:71:4E:D2:91:16:3D:79:5B:0F:BD X509v3 Authority Key Identifier: keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:88:c6:58:9f:36:72:b6:de:06:ec:5d:6b:c3:bd:cc:37:b3: 7f:39:e6:78:f8:4e:0b:89:d4:a4:5f:0d:d5:8d:d9:c3:83:1d: 8c:c0:37:43:ba:01:63:ea:84:48:88:62:70:ed:0f:57:47:f4: 2b:8b:9a:e8:46:25:66:48:df:90:44:46:da:5e:ef:95:6e:fc: 1b:c9:fb:a7:c9:e2:6e:ce:d1:67:f2:6d:ef:39:12:04:9b:b9: 8b:01:f6:93:d6:65:9f:1d:64:dd:4b:61:5a:47:e0:83:df:5d: 45:fe:d6:4f:fa:bd:5c:0b:ed:84:bd:7b:13:99:1e:62:38:0f: 3e:46:d2:57:ac:84:ea:d0:d5:9d:67:c6:7e:d9:eb:ff:e3:da: 04:1e:de:c5:45:80:91:dc:7b:42:0c:37:1f:5c:b0:0d:80:53: b7:f0:f5:fd:23:30:36:d3:d1:a9:6c:1d:d2:61:af:8e:06:f8: 17:32:58:65:8c:6d:cc:bb:2c:dc:05:91:9e:67:52:95:48:03: 60:d4:53:57:e9:67:60:db:23:f1:d8:ae:97:5c:cc:16:54:32: c3:a5:72:27:85:e6:5b:97:68:c5:12:3a:76:64:2c:2d:3c:47: 1c:7d:30:04:4b:fc:5e:02:61:e9:c4:17:53:27:d1:15:89:29: d9:56:a9:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuUrxvN0wZBsjVPKZYPpVG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj OGJmZDQwHhcNMjYwMTA2MTkwMTAyWhcNMjYwMTA3MTkwMTAyWjAzMTEwLwYDVQQD EygwOWIzYTE3ODNhZjEwZTM1ZWQ4YTcxNGVkMjkxMTYzZDc5NWIwZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOKqqxNDZwdwCAOCrTiWre08SZUU ZsL0cfl6/w2mxG/2W91juZrvNEzQBVq23obuGsSYxhtiOceudTV+J/RtK2oPu3Y+ pR3vCKZx8i4tdlr7SeO7HTgT62WvZ0z3ul9uyMadpQ9DSZJA+ZLP4LGPv5fPTwWb LBwjrBe/b6hG9mncgjMUF9ADisWSDig6zHjJLaw+VA/FqiY8CBUKZduqfIycsfyF pccfh6RmcHSYnYQ/L8OLc+hpXyeuwwCdzOlQLDyC5z1FyLijnYjDw5kJpvo3sdMR 0w6rSsYpoSY6hIdzKgBAkPRe+MqlXBLirVr4xSq8kOyBjS88wI7kBEk4jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmzoXg68Q417YpxTtKRFj15Ww+9MB8GA1UdIwQY MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACojGWJ82 crbeBuxda8O9zDezfznmePhOC4nUpF8N1Y3Zw4MdjMA3Q7oBY+qESIhicO0PV0f0 K4ua6EYlZkjfkERG2l7vlW78G8n7p8nibs7RZ/Jt7zkSBJu5iwH2k9Zlnx1k3Uth Wkfgg99dRf7WT/q9XAvthL17E5keYjgPPkbSV6yE6tDVnWfGftnr/+PaBB7exUWA kdx7Qgw3H1ywDYBTt/D1/SMwNtPRqWwd0mGvjgb4FzJYZYxtzLss3AWRnmdSlUgD YNRTV+lnYNsj8diul1zMFlQyw6VyJ4XmW5doxRI6dmQsLTxHHH0wBEv8XgJh6cQX UyfRFYkp2Vapuw== -----END CERTIFICATE-----Generated at Wed Jan 7 02:37:23 2026 by rpki-client