This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json) Hash identifier: 7cfVNRMoMy2h21oZECq2ziNOfUXnTJPv8OEK+b5yLow= Subject key identifier: 3A:DD:A8:6E:2F:DD:6D:84:7F:ED:50:FE:E7:D0:E6:D4:94:2D:75:33 Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Certificate serial: 019BAE6F46E612F695DB22CFDAD8609431BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft Manifest number: 15DC Signing time: Sun 11 Jan 2026 19:01:26 +0000 Manifest this update: Sun 11 Jan 2026 19:01:26 +0000 Manifest next update: Mon 12 Jan 2026 19:01:26 +0000 Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: U6sKltegCo5SB/1VP/4qgUdhPpePQV2mHTPaVMKLttc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:46:e6:12:f6:95:db:22:cf:da:d8:60:94:31:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Validity Not Before: Jan 11 19:01:26 2026 GMT Not After : Jan 12 19:01:26 2026 GMT Subject: CN=3adda86e2fdd6d847fed50fee7d0e6d4942d7533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:40:8b:56:f8:20:fb:63:ec:76:c2:f8:e4: 83:0e:94:c4:8e:11:08:f6:54:cb:a9:68:df:23:cd: 8b:ed:43:a6:6a:e3:cb:e0:2f:7a:d0:c1:ee:31:53: 88:cf:2a:3c:ae:25:b3:b7:0b:9a:c1:6f:2b:bb:30: 8c:4a:b0:0f:10:dc:47:e7:01:82:55:91:ca:bc:bf: dd:a2:2a:11:aa:9c:c4:30:89:33:6a:55:6c:ea:17: 02:52:a8:c2:70:ee:33:05:af:16:50:cf:e5:f6:b3: 96:ea:00:92:fc:05:39:74:27:2a:fc:8f:63:5f:4e: 57:98:bf:ae:f5:2f:0c:0c:fa:48:c9:aa:83:56:c9: 6d:32:37:05:83:6a:7b:74:35:3d:07:1b:f8:5d:7c: 88:be:16:2e:e3:1f:ec:12:0a:3c:b8:9c:b1:fb:87: a9:10:71:fa:56:54:16:cd:e5:2d:de:fc:b3:69:40: 56:30:7d:f0:58:a1:f5:dc:1c:5f:aa:95:7e:0c:39: b1:d1:7d:08:97:2a:e1:87:fd:d6:f3:76:f4:21:cd: a5:b8:13:07:f3:27:da:37:9f:c2:bf:8b:d2:80:2a: 04:31:a9:b7:6f:29:91:fa:d7:e3:da:a7:57:9d:c2: 6a:de:cf:bb:9b:70:88:7e:de:34:8b:81:9d:47:45: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DD:A8:6E:2F:DD:6D:84:7F:ED:50:FE:E7:D0:E6:D4:94:2D:75:33 X509v3 Authority Key Identifier: keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:06:42:87:c3:58:45:bb:f3:41:81:e7:c9:61:37:76:20:49: a8:8f:09:74:b4:cb:fa:ba:80:c5:e8:e5:b3:22:e6:f9:49:0b: 5e:ba:f1:27:eb:3a:3d:70:65:e0:aa:77:76:e6:4c:c6:6b:8a: b8:ce:bf:2e:40:49:05:1a:92:80:c2:bc:d8:b1:7e:2a:08:3b: b6:bb:2f:f6:6f:83:cf:b9:e0:d2:60:d0:a6:d3:8c:92:84:7e: cf:81:42:dd:e3:54:9a:87:a7:b4:e5:14:3a:f9:46:f8:40:d2: 36:84:cc:86:92:0d:3d:d7:76:3f:2e:f8:71:44:09:1b:55:d3: b2:04:66:9c:38:32:15:b1:64:22:1d:cf:95:1a:71:9c:c4:1f: e9:97:c3:84:1a:23:6b:83:4e:2c:17:f0:62:85:70:96:81:05: 43:28:e6:15:f7:c8:65:5b:98:65:68:0f:54:28:c3:03:04:2c: 53:bb:99:5a:d1:14:be:8b:42:99:04:05:c0:9d:58:ac:7f:89: 81:28:7a:0e:a7:49:5c:3c:2d:20:df:62:d4:ff:1b:fa:3c:06: 8c:11:f8:f0:27:46:52:37:b8:a4:07:08:8a:56:fe:3d:8e:d0: b6:fa:42:98:c8:72:20:a8:81:68:d3:af:03:0a:01:b9:53:b5: 3c:eb:05:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub0bmEvaV2yLP2thglDG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZDU1N2E4ODY4ZTZkMjYxNmFkMzY3NTRkYzZkYzkxMmI3 Y2Q3ZDYwHhcNMjYwMTExMTkwMTI2WhcNMjYwMTEyMTkwMTI2WjAzMTEwLwYDVQQD EygzYWRkYTg2ZTJmZGQ2ZDg0N2ZlZDUwZmVlN2QwZTZkNDk0MmQ3NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40JAi1b4IPtj7HbC+OSDDpTEjhEI 9lTLqWjfI82L7UOmauPL4C960MHuMVOIzyo8riWztwuawW8ruzCMSrAPENxH5wGC VZHKvL/doioRqpzEMIkzalVs6hcCUqjCcO4zBa8WUM/l9rOW6gCS/AU5dCcq/I9j X05XmL+u9S8MDPpIyaqDVsltMjcFg2p7dDU9Bxv4XXyIvhYu4x/sEgo8uJyx+4ep EHH6VlQWzeUt3vyzaUBWMH3wWKH13BxfqpV+DDmx0X0Ilyrhh/3W83b0Ic2luBMH 8yfaN5/Cv4vSgCoEMam3bymR+tfj2qdXncJq3s+7m3CIft40i4GdR0XyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrdqG4v3W2Ef+1Q/ufQ5tSULXUzMB8GA1UdIwQY MBaAFIHVV6iGjm0mFq02dU3G3JErfNfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgt ZGZiYTE1ZTRiN2E1LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgtZGZiYTE1ZTRiN2E1 LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAZCh8NY RbvzQYHnyWE3diBJqI8JdLTL+rqAxejlsyLm+UkLXrrxJ+s6PXBl4Kp3duZMxmuK uM6/LkBJBRqSgMK82LF+Kgg7trsv9m+Dz7ng0mDQptOMkoR+z4FC3eNUmoentOUU OvlG+EDSNoTMhpINPdd2Py74cUQJG1XTsgRmnDgyFbFkIh3PlRpxnMQf6ZfDhBoj a4NOLBfwYoVwloEFQyjmFffIZVuYZWgPVCjDAwQsU7uZWtEUvotCmQQFwJ1YrH+J gSh6DqdJXDwtIN9i1P8b+jwGjBH48CdGUje4pAcIilb+PY7QtvpCmMhyIKiBaNOv AwoBuVO1POsFxQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:54:39 2026 by rpki-client