This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json) Hash identifier: /XrZ4g+XJrDdGJCXGPevpxOeyZOdZGKJViKyw4P5l/8= Subject key identifier: F5:E2:4D:10:24:EA:63:9B:E3:F8:D6:FB:96:84:9B:37:CB:FE:CF:75 Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0 Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0 Certificate serial: 019B78CA50229A9A888E535B6D0FE6480653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft Manifest number: 0E51 Signing time: Thu 01 Jan 2026 09:01:23 +0000 Manifest this update: Thu 01 Jan 2026 09:01:23 +0000 Manifest next update: Fri 02 Jan 2026 09:01:23 +0000 Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: R4P0xqfc/l9hc9uA4REuLl/xuW+ZEhNerPJ0ADpXxrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:50:22:9a:9a:88:8e:53:5b:6d:0f:e6:48:06:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0 Validity Not Before: Jan 1 09:01:23 2026 GMT Not After : Jan 2 09:01:23 2026 GMT Subject: CN=f5e24d1024ea639be3f8d6fb96849b37cbfecf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:c7:5e:ac:64:f6:eb:32:ca:b2:4a:39:02: 7e:45:1f:05:30:5c:01:60:8b:4c:95:60:36:d7:53: d1:7f:ea:f8:75:2a:9d:a1:a9:fd:4b:d3:ed:4a:46: 6e:ad:fe:87:62:fe:c1:45:1a:34:20:ce:8f:58:b4: 20:4c:f7:30:e6:f5:c3:57:3f:4f:34:00:e3:81:c2: 7b:36:b2:16:e4:c6:d4:56:72:de:c1:1f:29:9d:cc: 04:71:72:62:86:9d:72:46:85:09:c4:77:59:47:24: f5:60:a1:c8:08:20:a4:60:11:64:e9:2f:29:05:d0: f7:13:69:59:95:92:01:07:81:d7:98:54:91:42:75: 07:a8:08:1e:66:6e:31:e1:57:60:ac:a4:8a:b7:a2: 7c:fd:c5:50:a4:4b:2e:fa:d8:37:b5:6d:8e:30:92: a5:33:0d:10:07:40:8f:fd:9d:b3:ff:5d:80:f1:0f: b7:03:c0:5c:4e:43:be:cb:72:69:d2:cc:54:2c:59: 58:7e:d2:8a:e0:85:93:35:14:bc:e2:68:22:28:5f: 35:4a:8d:9d:fa:f3:22:34:81:b3:2d:15:9d:d0:c1: 9a:48:38:a1:ad:09:2b:e7:70:50:81:c6:92:48:33: be:28:4f:3a:0d:d8:a3:e0:54:7a:89:c1:1b:25:da: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:4D:10:24:EA:63:9B:E3:F8:D6:FB:96:84:9B:37:CB:FE:CF:75 X509v3 Authority Key Identifier: keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:32:d2:c1:5c:e9:0d:97:2d:0f:3e:ff:f3:15:4b:fd:7d:fd: 30:ad:74:5b:ad:f2:46:6b:8e:cc:a8:69:23:f7:90:84:89:91: 9b:9d:e4:9d:5e:60:a0:bf:d3:0f:eb:63:a6:77:63:83:73:75: 6c:fc:54:b7:29:cb:c6:5e:84:01:6e:6a:76:ad:52:9c:f6:07: a0:8b:3a:e4:ba:5e:9a:12:99:8e:9e:b9:2d:a3:b8:47:7a:e0: e8:71:00:bc:e3:66:d9:55:b3:48:cf:00:fe:fa:58:78:99:16: 52:47:a9:f8:7b:f4:b4:fa:fc:b7:8c:6d:d7:1b:b9:86:0c:64: 7d:0a:47:3e:ca:65:a9:9a:4f:37:66:42:3c:27:df:c8:31:d7: 36:68:4a:c5:f2:16:ca:ac:12:55:b6:05:89:25:6e:0f:4c:aa: 79:d9:10:1e:e2:f9:e9:ee:5e:47:dc:3d:81:d9:fc:46:c4:ef: 34:6c:8c:74:5b:75:16:cb:b3:70:c2:2d:68:42:3d:40:c6:bd: 0f:9a:cf:a3:af:cc:85:5b:1c:f3:2d:03:74:d9:b1:93:17:b5: 0f:3d:b2:d7:f6:d9:06:82:b9:fd:4a:70:07:81:6d:3c:ba:d7: 7f:e8:6c:53:45:4a:1d:09:12:02:3a:7f:67:9c:33:7b:08:6a: 43:47:ca:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ylAimpqIjlNbbQ/mSAZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGI0YTdkMWU2YWJmZmJjZGE3OGJmYzMzMTI1MGRkMTZi ZTNkZTAwHhcNMjYwMTAxMDkwMTIzWhcNMjYwMTAyMDkwMTIzWjAzMTEwLwYDVQQD EyhmNWUyNGQxMDI0ZWE2MzliZTNmOGQ2ZmI5Njg0OWIzN2NiZmVjZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BjHXqxk9usyyrJKOQJ+RR8FMFwB YItMlWA211PRf+r4dSqdoan9S9PtSkZurf6HYv7BRRo0IM6PWLQgTPcw5vXDVz9P NADjgcJ7NrIW5MbUVnLewR8pncwEcXJihp1yRoUJxHdZRyT1YKHICCCkYBFk6S8p BdD3E2lZlZIBB4HXmFSRQnUHqAgeZm4x4VdgrKSKt6J8/cVQpEsu+tg3tW2OMJKl Mw0QB0CP/Z2z/12A8Q+3A8BcTkO+y3Jp0sxULFlYftKK4IWTNRS84mgiKF81So2d +vMiNIGzLRWd0MGaSDihrQkr53BQgcaSSDO+KE86Ddij4FR6icEbJdquYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXiTRAk6mOb4/jW+5aEmzfL/s91MB8GA1UdIwQY MBaAFNHbSn0ear/7zaeL/DMSUN0Wvj3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjIt Y2M3OGFmNGU4MDE2LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjItY2M3OGFmNGU4MDE2 LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjLSwVzp DZctDz7/8xVL/X39MK10W63yRmuOzKhpI/eQhImRm53knV5goL/TD+tjpndjg3N1 bPxUtynLxl6EAW5qdq1SnPYHoIs65LpemhKZjp65LaO4R3rg6HEAvONm2VWzSM8A /vpYeJkWUkep+Hv0tPr8t4xt1xu5hgxkfQpHPsplqZpPN2ZCPCffyDHXNmhKxfIW yqwSVbYFiSVuD0yqedkQHuL56e5eR9w9gdn8RsTvNGyMdFt1FsuzcMItaEI9QMa9 D5rPo6/MhVsc8y0DdNmxkxe1Dz2y1/bZBoK5/UpwB4FtPLrXf+hsU0VKHQkSAjp/ Z5wzewhqQ0fKpg== -----END CERTIFICATE-----Generated at Thu Jan 1 15:58:11 2026 by rpki-client