This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json) Hash identifier: 8n9L3aPzBEe5/vf+WlG+fiaXAwDCrXQ4GCNx+fjVIrU= Subject key identifier: A6:5C:3E:DC:F0:70:FE:FB:B6:56:33:C1:B2:92:AD:CA:35:EF:B5:F4 Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Certificate serial: 019B8204632B542D6E4EA61F6D565B2222DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft Manifest number: 17AA Signing time: Sat 03 Jan 2026 04:01:24 +0000 Manifest this update: Sat 03 Jan 2026 04:01:24 +0000 Manifest next update: Sun 04 Jan 2026 04:01:24 +0000 Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: kp6cZYObkSXrrP+f+m1D8Yec46ZccEX/mLLG6IBd8Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:04:63:2b:54:2d:6e:4e:a6:1f:6d:56:5b:22:22:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Validity Not Before: Jan 3 04:01:24 2026 GMT Not After : Jan 4 04:01:24 2026 GMT Subject: CN=a65c3edcf070fefbb65633c1b292adca35efb5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:fc:db:a9:c2:23:f6:93:2f:45:fa:ed:62: e2:66:c2:48:51:84:0c:22:fb:3e:eb:92:67:e0:30: b6:ca:6e:55:08:ea:e7:25:38:3c:d6:eb:fa:86:e2: d2:53:36:de:74:70:e7:f4:54:4e:7f:55:0f:27:3f: 54:1c:01:bc:d8:80:3c:0f:22:5f:19:d6:c8:df:5e: 58:1d:01:44:32:27:43:7e:08:42:e9:f1:2e:9b:22: b5:e6:29:2a:ce:df:75:de:e0:13:b6:b4:1a:5e:d9: 86:79:9b:ff:6f:4f:b6:53:79:c3:4e:df:71:15:b5: c9:1d:1d:b3:e2:47:05:fe:40:65:50:3b:77:d7:21: fc:f9:8f:46:d0:41:0e:06:2e:07:ae:d5:e2:12:cf: f2:a2:c0:5c:87:f9:ef:e0:1f:50:01:72:22:e1:43: fe:11:5f:b7:7e:4d:2b:77:a5:29:02:d7:c3:26:62: 2b:fd:a5:78:e5:e9:6f:94:6f:a7:27:c7:bd:26:4e: fb:d2:23:f1:14:e7:ff:99:87:ec:ec:68:0d:00:ec: 3b:13:12:a1:7f:5d:1a:ef:cb:4c:e1:1f:39:16:3d: fd:a9:10:89:e0:08:b5:14:5d:81:10:3a:5f:8b:3f: c9:2b:07:44:2e:1f:06:ed:bf:02:33:fa:24:e6:e0: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5C:3E:DC:F0:70:FE:FB:B6:56:33:C1:B2:92:AD:CA:35:EF:B5:F4 X509v3 Authority Key Identifier: keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ca:d7:99:c4:4d:7d:f8:a5:8e:7c:cf:01:a8:93:4a:6f:34: 09:ff:46:0d:10:47:a8:49:42:57:b9:41:d4:fd:4d:cb:22:5d: a3:0a:10:9a:87:f9:ee:9f:ac:5b:e9:cd:57:54:52:da:89:e3: 78:a1:a0:0f:61:34:30:69:42:5f:83:fc:4d:e4:21:8e:fd:66: 52:e7:c5:9c:be:8e:68:ab:8d:25:79:3d:d2:14:54:80:3e:fb: 25:9f:61:6f:a8:24:e3:67:f6:47:84:25:91:f0:62:75:dd:75: f7:b5:eb:a8:b4:b0:7f:4a:d4:37:8e:d7:25:a4:5e:18:34:c9: 7b:ad:c1:f5:26:88:d0:96:55:c8:e4:88:23:e2:0b:05:3a:86: ab:21:a2:c4:b2:73:09:32:ce:4b:09:c7:78:df:c9:30:ba:67: b6:eb:2e:a1:7f:70:f6:3d:d2:16:10:e9:d1:f7:22:d1:70:e2: 7a:d1:76:13:cf:63:8c:79:c0:fd:24:1f:64:fe:28:77:35:54: 0b:d7:b7:a8:db:07:11:f7:66:e0:68:7e:15:4a:46:44:b7:6f: 49:f2:86:10:63:46:78:a6:8c:c5:d4:8e:f9:10:54:b0:0b:ac: 32:8d:9d:62:2e:52:f3:e8:1c:7d:fe:76:39:39:d9:a3:13:ca: 0d:c9:d6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCBGMrVC1uTqYfbVZbIiLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjMyNGI1YjRjMTNkNzYwNmMzOTJjMzc0ZTM1YmJlNjRh MjRlNTAwHhcNMjYwMTAzMDQwMTI0WhcNMjYwMTA0MDQwMTI0WjAzMTEwLwYDVQQD EyhhNjVjM2VkY2YwNzBmZWZiYjY1NjMzYzFiMjkyYWRjYTM1ZWZiNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptL826nCI/aTL0X67WLiZsJIUYQM Ivs+65Jn4DC2ym5VCOrnJTg81uv6huLSUzbedHDn9FROf1UPJz9UHAG82IA8DyJf GdbI315YHQFEMidDfghC6fEumyK15ikqzt913uATtrQaXtmGeZv/b0+2U3nDTt9x FbXJHR2z4kcF/kBlUDt31yH8+Y9G0EEOBi4HrtXiEs/yosBch/nv4B9QAXIi4UP+ EV+3fk0rd6UpAtfDJmIr/aV45elvlG+nJ8e9Jk770iPxFOf/mYfs7GgNAOw7ExKh f10a78tM4R85Fj39qRCJ4Ai1FF2BEDpfiz/JKwdELh8G7b8CM/ok5uC0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZcPtzwcP77tlYzwbKSrco177X0MB8GA1UdIwQY MBaAFHNjJLW0wT12BsOSw3TjW75kok5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYt ZWFlOGEzMDU3MTU5LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYtZWFlOGEzMDU3MTU5 LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8rXmcRN ffiljnzPAaiTSm80Cf9GDRBHqElCV7lB1P1NyyJdowoQmof57p+sW+nNV1RS2onj eKGgD2E0MGlCX4P8TeQhjv1mUufFnL6OaKuNJXk90hRUgD77JZ9hb6gk42f2R4Ql kfBidd1197XrqLSwf0rUN47XJaReGDTJe63B9SaI0JZVyOSII+ILBTqGqyGixLJz CTLOSwnHeN/JMLpntusuoX9w9j3SFhDp0fci0XDietF2E89jjHnA/SQfZP4odzVU C9e3qNsHEfdm4Gh+FUpGRLdvSfKGEGNGeKaMxdSO+RBUsAusMo2dYi5S8+gcff52 OTnZoxPKDcnWgQ== -----END CERTIFICATE-----Generated at Sat Jan 3 06:29:58 2026 by rpki-client