This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json) Hash identifier: sHbDOK63OlXYLMBXmeMhb3/boPJjsLF6GNLSzsbe5QU= Subject key identifier: BE:B2:ED:2E:FE:3F:2B:6C:95:2A:A2:9F:0B:06:E7:5E:61:DA:AD:13 Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff Certificate serial: 019B7FA7A5B87E373290881CD9BDAB9CD3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft Manifest number: 0E63 Signing time: Fri 02 Jan 2026 17:00:51 +0000 Manifest this update: Fri 02 Jan 2026 17:00:51 +0000 Manifest next update: Sat 03 Jan 2026 17:00:51 +0000 Files and hashes: 1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: iOI4E8B2IJ6L2dx2EJhgpzhqE7or844meYzjKWngGOc=) 2: vFPz2EZZAEU2N3SgGFxaDNU5jHs.roa (hash: EuLVLB/JUDTlNe7Sgb1DpN69/WpO8B+6KWA2ZGoI7bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:a5:b8:7e:37:32:90:88:1c:d9:bd:ab:9c:d3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff Validity Not Before: Jan 2 17:00:51 2026 GMT Not After : Jan 3 17:00:51 2026 GMT Subject: CN=beb2ed2efe3f2b6c952aa29f0b06e75e61daad13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:6e:32:52:91:25:ee:f6:70:55:2f:39:65: 23:e9:23:cc:93:02:d6:2f:fc:71:54:00:17:41:1f: 89:65:3b:df:2c:a8:cb:75:2d:72:75:c3:69:ac:6e: 8b:52:ad:f7:8a:ed:16:a4:22:88:87:fe:13:e2:4b: df:fa:fa:51:82:bf:c9:5e:c8:ed:bd:cc:49:0a:b5: 66:1a:5f:0d:23:0d:5b:24:55:5d:50:b0:1e:57:a2: be:c8:7c:41:7f:27:ad:6b:87:67:78:e0:37:a6:33: 3d:18:63:8f:37:60:ec:85:f3:27:6b:39:7c:6b:2b: 7c:68:2c:e7:79:33:22:98:09:d6:dc:fa:fb:df:09: 65:49:4f:00:58:75:6c:95:58:61:79:84:a3:4e:0e: 07:a8:d8:26:0b:27:d3:01:83:06:62:a4:ff:02:a5: 24:fa:ec:d3:8c:cb:b7:15:d3:f1:08:59:9c:e9:76: b0:0a:69:90:c3:40:c0:97:8c:9d:1f:fe:8c:78:78: b6:4c:9d:5c:8c:a9:26:f9:cd:17:7c:39:93:d9:b2: d2:b2:7f:b2:b4:33:b8:d5:07:17:dc:02:cb:50:ce: ef:9f:4e:dc:4c:82:74:d8:ec:d3:a1:15:fd:d2:da: fb:b2:f2:9e:aa:fe:67:d2:03:8d:cd:57:fd:55:b6: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:ED:2E:FE:3F:2B:6C:95:2A:A2:9F:0B:06:E7:5E:61:DA:AD:13 X509v3 Authority Key Identifier: keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:94:23:6b:05:c3:f4:a0:63:4e:81:e7:30:56:b6:34:f1:65: 37:73:49:e7:9a:fc:62:64:e7:a7:f7:a5:66:66:29:52:6c:bf: c2:95:91:de:ad:a3:36:8e:03:62:f9:1b:7e:68:34:9a:41:ed: aa:1b:9c:27:0e:e5:b4:79:ec:09:d5:4e:80:6c:a6:4c:0e:95: e9:2a:57:8a:92:8f:36:6c:16:53:ba:fa:dc:ef:a9:53:e2:18: 59:e3:dd:30:7b:9b:78:2e:20:ea:38:01:70:b4:84:32:45:4d: 0c:be:7f:4d:5e:15:bb:8b:76:b5:a0:22:e5:a2:78:71:96:91: 86:6a:8f:cb:82:9d:34:08:f3:07:d4:4a:3b:f3:bd:ec:c8:1a: f5:e1:ec:5f:d6:34:c7:fd:0f:bc:88:82:54:94:2a:68:7c:87: 6e:fd:ae:58:ee:c1:70:aa:8b:41:02:af:de:ce:9c:4a:d1:0d: 4b:7f:6d:9c:e3:5b:af:c2:d7:88:35:2f:3c:88:e9:8a:c4:bc: 75:c9:0a:64:9d:1c:b5:34:e0:ab:1d:07:77:29:06:22:93:55: fa:bc:7d:35:74:97:b9:70:f8:17:28:09:8f:61:c3:66:a4:2f: 9d:9d:60:11:1a:d9:7a:68:5c:a1:90:09:68:1d:02:78:06:36: 09:26:c0:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p6W4fjcykIgc2b2rnNPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl YzI0ZmYwHhcNMjYwMTAyMTcwMDUxWhcNMjYwMTAzMTcwMDUxWjAzMTEwLwYDVQQD EyhiZWIyZWQyZWZlM2YyYjZjOTUyYWEyOWYwYjA2ZTc1ZTYxZGFhZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJluMlKRJe72cFUvOWUj6SPMkwLW L/xxVAAXQR+JZTvfLKjLdS1ydcNprG6LUq33iu0WpCKIh/4T4kvf+vpRgr/JXsjt vcxJCrVmGl8NIw1bJFVdULAeV6K+yHxBfyeta4dneOA3pjM9GGOPN2DshfMnazl8 ayt8aCzneTMimAnW3Pr73wllSU8AWHVslVhheYSjTg4HqNgmCyfTAYMGYqT/AqUk +uzTjMu3FdPxCFmc6XawCmmQw0DAl4ydH/6MeHi2TJ1cjKkm+c0XfDmT2bLSsn+y tDO41QcX3ALLUM7vn07cTIJ02OzToRX90tr7svKeqv5n0gONzVf9VbbWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6y7S7+PytslSqinwsG515h2q0TMB8GA1UdIwQY MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpQjawXD 9KBjToHnMFa2NPFlN3NJ55r8YmTnp/elZmYpUmy/wpWR3q2jNo4DYvkbfmg0mkHt qhucJw7ltHnsCdVOgGymTA6V6SpXipKPNmwWU7r63O+pU+IYWePdMHubeC4g6jgB cLSEMkVNDL5/TV4Vu4t2taAi5aJ4cZaRhmqPy4KdNAjzB9RKO/O97Mga9eHsX9Y0 x/0PvIiCVJQqaHyHbv2uWO7BcKqLQQKv3s6cStENS39tnONbr8LXiDUvPIjpisS8 dckKZJ0ctTTgqx0HdykGIpNV+rx9NXSXuXD4FygJj2HDZqQvnZ1gERrZemhcoZAJ aB0CeAY2CSbA5w== -----END CERTIFICATE-----Generated at Sat Jan 3 00:57:15 2026 by rpki-client