This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json) Hash identifier: BXBmSYAJc5SCofHCdKg8f9b1kMTlSzviM7u+cNg6+tk= Subject key identifier: 8D:93:20:01:27:69:13:79:F0:B5:3E:E0:8E:50:BC:E7:EF:99:FD:28 Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Certificate serial: 019BA1C5EACB2EDFED8A610DB1BE92BC5AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft Manifest number: 1246 Signing time: Fri 09 Jan 2026 08:01:00 +0000 Manifest this update: Fri 09 Jan 2026 08:01:00 +0000 Manifest next update: Sat 10 Jan 2026 08:01:00 +0000 Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: BMthqdJee4ochMopI2HE0D3HFo/DPQ9CjaTm/MnTWNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c5:ea:cb:2e:df:ed:8a:61:0d:b1:be:92:bc:5a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Validity Not Before: Jan 9 08:01:00 2026 GMT Not After : Jan 10 08:01:00 2026 GMT Subject: CN=8d93200127691379f0b53ee08e50bce7ef99fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:97:f0:22:d0:f2:9c:2e:f9:85:bd:ad:6b: 30:e2:c0:51:d7:46:27:04:e8:5c:dd:77:f2:2a:d3: 23:0b:d9:19:13:25:00:28:1b:70:ec:d6:a4:fc:da: 2e:71:2e:4e:21:a7:41:21:f0:07:53:13:64:a4:e6: c2:fc:ec:90:2d:6e:c8:50:77:4a:f0:f1:ae:86:07: 2d:c5:ea:7e:56:4e:97:88:90:ed:81:f6:cf:0d:3c: b1:c2:f2:0f:34:58:b4:34:82:fd:20:f7:0b:c5:bb: 82:ef:a5:75:4c:6e:31:1e:aa:6c:d4:8b:a9:2f:e3: 2d:46:f5:b5:d6:e5:90:e8:58:b2:4b:b5:eb:d8:88: f6:9f:e7:b4:07:98:4b:80:a7:ef:38:f3:fb:34:82: 53:2d:f9:56:db:f3:3e:d4:dd:c0:f8:d5:c8:68:62: 71:05:f5:b5:66:6d:a5:6d:32:d5:bd:4a:b7:51:38: b0:a4:7e:50:00:f0:b2:29:3b:cb:39:63:dd:09:db: 34:a6:36:9b:47:11:c0:27:bc:f5:be:3a:f5:d4:cb: f8:6d:1a:db:4c:f9:8b:61:45:7a:1a:5e:07:d0:a8: a1:5d:d5:42:0e:51:78:3d:a1:a0:1b:70:86:b2:bc: 13:1a:22:01:f3:f2:f7:12:0a:88:5f:ac:a3:8b:e0: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:93:20:01:27:69:13:79:F0:B5:3E:E0:8E:50:BC:E7:EF:99:FD:28 X509v3 Authority Key Identifier: keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f8:26:70:98:28:60:cd:11:a6:9d:61:c4:96:6e:d8:33:08: 98:d3:8a:16:63:c6:bb:63:ec:4c:a9:97:34:c0:70:ca:cf:07: 17:55:15:b2:1e:bf:17:06:a0:36:c2:fa:4a:c5:36:60:47:57: 4e:02:cd:0c:bc:92:04:c7:d1:2f:c2:8e:85:5f:a9:d2:37:cc: 2d:3f:71:58:6a:27:66:2d:b1:c9:58:88:d0:da:0a:de:e6:b0: 34:b4:10:47:ad:b9:64:a7:fc:4d:14:52:ae:96:64:d3:04:d7: 21:da:50:f8:7b:ff:39:09:83:d8:83:3c:32:0b:7d:5e:82:2f: 91:13:87:70:d5:24:12:cd:f6:57:05:db:6a:5b:ff:f1:ce:a5: 8d:78:f3:e1:4c:43:e1:ad:be:c0:da:82:3f:f6:e3:9e:89:78: b4:6a:9a:0b:ba:15:dd:26:46:9c:15:a7:01:6f:65:2d:a1:b5: 74:10:69:52:2f:c1:f3:99:0d:0a:94:ed:e2:b0:d9:71:ff:9d: f2:96:7b:2a:c5:43:01:d6:89:02:89:3f:ad:e8:8b:8f:62:b8: 9b:8e:1b:f1:6d:01:3b:b7:46:2c:5b:31:02:e7:52:a1:76:ae: 15:46:d8:62:83:9b:56:ea:26:84:d9:33:bb:83:cb:a1:ca:ff: 62:e7:9b:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxerLLt/timENsb6SvFqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5 YmI4YzMwHhcNMjYwMTA5MDgwMTAwWhcNMjYwMTEwMDgwMTAwWjAzMTEwLwYDVQQD Eyg4ZDkzMjAwMTI3NjkxMzc5ZjBiNTNlZTA4ZTUwYmNlN2VmOTlmZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK+X8CLQ8pwu+YW9rWsw4sBR10Yn BOhc3XfyKtMjC9kZEyUAKBtw7Nak/NoucS5OIadBIfAHUxNkpObC/OyQLW7IUHdK 8PGuhgctxep+Vk6XiJDtgfbPDTyxwvIPNFi0NIL9IPcLxbuC76V1TG4xHqps1Iup L+MtRvW11uWQ6FiyS7Xr2Ij2n+e0B5hLgKfvOPP7NIJTLflW2/M+1N3A+NXIaGJx BfW1Zm2lbTLVvUq3UTiwpH5QAPCyKTvLOWPdCds0pjabRxHAJ7z1vjr11Mv4bRrb TPmLYUV6Gl4H0KihXdVCDlF4PaGgG3CGsrwTGiIB8/L3EgqIX6yji+B0VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2TIAEnaRN58LU+4I5QvOfvmf0oMB8GA1UdIwQY MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/gmcJgo YM0Rpp1hxJZu2DMImNOKFmPGu2PsTKmXNMBwys8HF1UVsh6/FwagNsL6SsU2YEdX TgLNDLySBMfRL8KOhV+p0jfMLT9xWGonZi2xyViI0NoK3uawNLQQR625ZKf8TRRS rpZk0wTXIdpQ+Hv/OQmD2IM8Mgt9XoIvkROHcNUkEs32VwXbalv/8c6ljXjz4UxD 4a2+wNqCP/bjnol4tGqaC7oV3SZGnBWnAW9lLaG1dBBpUi/B85kNCpTt4rDZcf+d 8pZ7KsVDAdaJAok/reiLj2K4m44b8W0BO7dGLFsxAudSoXauFUbYYoObVuomhNkz u4PLocr/YuebKw== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:00 2026 by rpki-client