This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json) Hash identifier: fCw0MLX25LzXTVbVBTGaj+5B+GwTpA2Dsg8MyvZ1lnE= Subject key identifier: E2:7B:A8:35:07:98:8E:9B:29:E2:94:AA:A3:20:BF:BC:EB:20:82:E1 Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3 Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3 Certificate serial: 019B785CDBD2FE22B2B11D45955E542B6C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft Manifest number: 1041 Signing time: Thu 01 Jan 2026 07:01:50 +0000 Manifest this update: Thu 01 Jan 2026 07:01:50 +0000 Manifest next update: Fri 02 Jan 2026 07:01:50 +0000 Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: tVL1X8mvL0CV9U0OzORFgf5KTfyDE2w8a4n/VS5PRYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:db:d2:fe:22:b2:b1:1d:45:95:5e:54:2b:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3 Validity Not Before: Jan 1 07:01:50 2026 GMT Not After : Jan 2 07:01:50 2026 GMT Subject: CN=e27ba83507988e9b29e294aaa320bfbceb2082e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:06:f5:8b:53:ab:b9:69:4a:d9:ac:20:84: 93:3c:1c:ae:f1:b7:b5:fa:4e:74:01:b1:62:23:91: 7d:a2:0c:98:31:53:4b:2b:c2:75:82:17:2b:b9:92: cf:8d:c8:12:b6:95:cf:51:56:e9:f6:a3:66:19:f6: 23:24:47:b0:d7:62:db:73:bc:27:9d:0f:0c:82:68: 84:8c:9b:3b:dc:ca:ae:4f:f5:bf:ca:8e:32:a4:53: d1:76:6c:12:cc:63:5d:f7:a2:64:4f:22:c7:2f:db: 60:41:c4:37:24:8a:84:c2:93:18:e8:c9:f2:31:c1: 2c:06:57:68:42:72:78:a4:ab:1c:0c:53:3b:7c:06: 16:96:e9:3e:db:03:49:3e:bb:fd:06:8b:84:7d:96: 8c:7d:60:c3:85:11:74:ab:4a:d2:08:bd:ec:b2:70: 51:83:d6:22:0d:01:ad:43:56:68:33:ef:15:19:ac: 23:ff:db:48:1a:37:26:6f:f9:03:fa:b9:21:ae:07: f0:c6:d5:28:23:c2:fa:93:91:db:e9:1f:04:b1:7f: 58:34:79:30:7f:8f:2c:b0:0f:78:ed:01:95:a2:60: 11:28:da:9f:7c:02:fc:fd:58:74:67:f4:17:0a:15: 7c:89:bf:6c:da:e2:ff:e5:2b:70:8f:2a:62:a7:88: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:A8:35:07:98:8E:9B:29:E2:94:AA:A3:20:BF:BC:EB:20:82:E1 X509v3 Authority Key Identifier: keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a9:71:41:ab:16:24:17:ea:98:8e:53:de:96:f2:a6:f5:97: 89:7b:cb:39:b6:7b:92:88:11:0a:4b:ab:31:bb:05:50:fc:19: fb:46:67:d8:ca:8e:16:ea:8a:7a:35:46:17:2d:bd:b0:88:4a: 19:58:28:37:25:2b:93:17:95:6d:4a:fb:e0:0c:b0:92:be:b9: 45:f4:7a:07:6d:32:63:bf:e0:6d:6d:80:d1:3a:2b:e2:24:15: cb:f3:b4:47:11:6f:fc:05:d4:14:6f:9b:d2:d1:cd:0f:10:e8: 85:b6:7d:25:69:46:52:e2:bc:6d:0a:c7:89:91:2e:48:02:a7: bf:8a:3a:49:1b:72:9f:86:df:f4:57:9b:88:6f:03:ac:32:e7: 40:a2:e6:b1:e8:d8:8d:c3:46:d8:77:09:b7:5f:73:b1:cf:e4: 89:05:fd:fc:f2:ec:45:eb:a1:e2:b7:47:f7:0c:30:ba:03:1e: bc:ca:41:ff:a2:e1:da:4a:f4:a6:38:67:f5:4b:34:b1:1e:57: e4:77:4e:86:d9:58:1d:2c:4d:52:3d:ab:68:72:02:fe:53:5f: bf:95:29:6d:fe:03:04:6a:62:df:bd:11:b4:c0:55:52:00:12: c9:85:40:bd:ca:69:32:35:4a:11:2f:0a:b2:de:66:9f:d4:22: a6:72:00:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XNvS/iKysR1FlV5UK2xgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi ZjhjZTMwHhcNMjYwMTAxMDcwMTUwWhcNMjYwMTAyMDcwMTUwWjAzMTEwLwYDVQQD EyhlMjdiYTgzNTA3OTg4ZTliMjllMjk0YWFhMzIwYmZiY2ViMjA4MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vkG9YtTq7lpStmsIISTPByu8be1 +k50AbFiI5F9ogyYMVNLK8J1ghcruZLPjcgStpXPUVbp9qNmGfYjJEew12Lbc7wn nQ8MgmiEjJs73MquT/W/yo4ypFPRdmwSzGNd96JkTyLHL9tgQcQ3JIqEwpMY6Mny McEsBldoQnJ4pKscDFM7fAYWluk+2wNJPrv9BouEfZaMfWDDhRF0q0rSCL3ssnBR g9YiDQGtQ1ZoM+8VGawj/9tIGjcmb/kD+rkhrgfwxtUoI8L6k5Hb6R8EsX9YNHkw f48ssA947QGVomARKNqffAL8/Vh0Z/QXChV8ib9s2uL/5Stwjypip4hiIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ7qDUHmI6bKeKUqqMgv7zrIILhMB8GA1UdIwQY MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqlxQasW JBfqmI5T3pbypvWXiXvLObZ7kogRCkurMbsFUPwZ+0Zn2MqOFuqKejVGFy29sIhK GVgoNyUrkxeVbUr74Aywkr65RfR6B20yY7/gbW2A0Tor4iQVy/O0RxFv/AXUFG+b 0tHNDxDohbZ9JWlGUuK8bQrHiZEuSAKnv4o6SRtyn4bf9FebiG8DrDLnQKLmsejY jcNG2HcJt19zsc/kiQX9/PLsReuh4rdH9wwwugMevMpB/6Lh2kr0pjhn9Us0sR5X 5HdOhtlYHSxNUj2raHIC/lNfv5Upbf4DBGpi370RtMBVUgASyYVAvcppMjVKES8K st5mn9QipnIAfA== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:46 2026 by rpki-client