This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json) Hash identifier: /QRY2K8SG64+xbwUMXTuBqhWOT7yHvQc297viOUutNQ= Subject key identifier: 97:0D:63:4C:9A:97:4B:CD:7C:D0:1E:57:FF:11:19:0B:46:C8:C7:E5 Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf Certificate serial: 019BAC818FAA8D54800393BEE7D654F1DF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft Manifest number: 09EC Signing time: Sun 11 Jan 2026 10:02:10 +0000 Manifest this update: Sun 11 Jan 2026 10:02:10 +0000 Manifest next update: Mon 12 Jan 2026 10:02:10 +0000 Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=) 2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: f7cEwpvJONW5vFQU8lmOeFbBA3ou1J/IL1YsMuFpjCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:8f:aa:8d:54:80:03:93:be:e7:d6:54:f1:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf Validity Not Before: Jan 11 10:02:10 2026 GMT Not After : Jan 12 10:02:10 2026 GMT Subject: CN=970d634c9a974bcd7cd01e57ff11190b46c8c7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:52:ba:50:9e:25:12:5c:2d:70:aa:1e:b2: de:9c:07:84:32:86:40:fc:2e:2f:53:66:bd:76:bc: f7:1f:60:47:a0:5a:f0:90:0d:12:57:f1:d6:6f:17: 8a:37:42:e8:82:44:04:bc:8b:2c:04:02:b5:b6:c8: 5f:3f:af:3b:ec:b1:13:98:b1:13:f8:d9:e9:8c:34: 35:66:fa:81:fa:94:7f:28:6f:87:40:63:d1:ff:4f: 8b:0c:05:38:0c:d2:52:c6:ed:d5:49:ea:a0:7c:8d: 85:48:55:93:df:9f:13:1a:70:d2:a6:68:ba:02:ae: 16:b9:c2:55:80:4a:53:a2:18:c2:31:69:9f:52:96: 28:5f:be:48:90:4e:c5:c1:03:b1:e3:0e:e2:8c:a9: 9a:9c:a3:8e:29:4f:68:d7:04:36:0a:67:1b:bd:bb: a0:3f:60:7c:65:31:38:9d:13:b3:ca:78:49:85:d1: 4b:f6:f9:4f:4c:2c:fb:b8:2f:11:e7:22:0b:4e:04: 86:28:b2:31:cf:9c:1e:17:0b:9f:d5:87:20:94:b2: 5b:c1:d1:fe:c1:0d:86:c2:bf:96:7b:f3:4c:c9:c2: dd:0f:01:83:45:ff:5d:e9:49:60:71:d6:64:31:11: a4:e7:ce:5b:dd:be:85:7f:9c:27:2a:bd:79:81:a0: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0D:63:4C:9A:97:4B:CD:7C:D0:1E:57:FF:11:19:0B:46:C8:C7:E5 X509v3 Authority Key Identifier: keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8b:87:c7:3e:a9:b6:3b:74:b9:66:65:12:aa:d9:92:bb:f5: 4e:0f:84:9c:11:69:df:4c:44:ce:2b:60:6c:52:b8:4b:53:0a: 78:1c:9d:21:59:7b:f9:65:5b:51:2f:4e:97:67:f4:e8:7d:58: 3b:af:73:19:30:db:f9:9d:59:f9:d3:35:bf:c4:43:7b:0a:91: 86:86:87:dc:2b:69:d5:f2:65:6a:e9:b7:7a:12:d3:2d:d8:af: 08:f9:3a:7e:3d:64:ec:6a:02:33:15:99:9b:52:ac:31:e2:e9: 5c:3a:0c:92:e4:37:13:93:c2:ea:c5:1c:fe:9e:4d:23:1c:23: 26:5a:76:e1:65:61:a5:56:61:03:a5:da:64:19:3c:5c:e2:b6: 5a:e1:98:5c:12:92:11:37:c2:f9:c4:a7:e0:02:a9:b4:6e:86: c0:49:f1:86:2f:6f:9e:72:1c:3d:6a:41:7a:b6:7e:6d:c8:b7: 15:cb:f4:f4:0c:ff:67:c2:3f:2b:d0:ed:4e:2c:78:e9:59:b5: ba:93:21:25:42:75:45:5e:8f:09:16:35:a4:44:53:51:d4:d6: 4a:0e:62:8d:22:94:94:4f:4f:d9:de:ad:a1:1c:f9:5c:f9:81: d7:4b:fb:4c:02:a6:11:5f:f8:5f:c6:7f:e6:4c:df:6c:cc:ab: e9:16:41:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgY+qjVSAA5O+59ZU8d8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2 OGUxY2YwHhcNMjYwMTExMTAwMjEwWhcNMjYwMTEyMTAwMjEwWjAzMTEwLwYDVQQD Eyg5NzBkNjM0YzlhOTc0YmNkN2NkMDFlNTdmZjExMTkwYjQ2YzhjN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO9SulCeJRJcLXCqHrLenAeEMoZA /C4vU2a9drz3H2BHoFrwkA0SV/HWbxeKN0LogkQEvIssBAK1tshfP6877LETmLET +NnpjDQ1ZvqB+pR/KG+HQGPR/0+LDAU4DNJSxu3VSeqgfI2FSFWT358TGnDSpmi6 Aq4WucJVgEpTohjCMWmfUpYoX75IkE7FwQOx4w7ijKmanKOOKU9o1wQ2Cmcbvbug P2B8ZTE4nROzynhJhdFL9vlPTCz7uC8R5yILTgSGKLIxz5weFwuf1YcglLJbwdH+ wQ2Gwr+We/NMycLdDwGDRf9d6UlgcdZkMRGk585b3b6Ff5wnKr15gaDrlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcNY0yal0vNfNAeV/8RGQtGyMflMB8GA1UdIwQY MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4uHxz6p tjt0uWZlEqrZkrv1Tg+EnBFp30xEzitgbFK4S1MKeBydIVl7+WVbUS9Ol2f06H1Y O69zGTDb+Z1Z+dM1v8RDewqRhoaH3Ctp1fJlaum3ehLTLdivCPk6fj1k7GoCMxWZ m1KsMeLpXDoMkuQ3E5PC6sUc/p5NIxwjJlp24WVhpVZhA6XaZBk8XOK2WuGYXBKS ETfC+cSn4AKptG6GwEnxhi9vnnIcPWpBerZ+bci3Fcv09Az/Z8I/K9DtTix46Vm1 upMhJUJ1RV6PCRY1pERTUdTWSg5ijSKUlE9P2d6toRz5XPmB10v7TAKmEV/4X8Z/ 5kzfbMyr6RZB5w== -----END CERTIFICATE-----Generated at Sun Jan 11 20:06:40 2026 by rpki-client