This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json) Hash identifier: 7H/pmgR49MnKvOyMmxXf3tMtzCjjfvdVduguoEwJ9X8= Subject key identifier: 45:E9:6C:1F:65:B1:13:7C:53:AC:A3:37:6B:9E:99:D2:C8:DF:E8:81 Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce Certificate serial: 019B7E94B60601BBD6A810422F6A13EFF82F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft Manifest number: 1736 Signing time: Fri 02 Jan 2026 12:00:33 +0000 Manifest this update: Fri 02 Jan 2026 12:00:33 +0000 Manifest next update: Sat 03 Jan 2026 12:00:33 +0000 Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: jamBOqjZ7iaMniN4kKzIjdvdiVq3VuLTlZjSfxbuzy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:94:b6:06:01:bb:d6:a8:10:42:2f:6a:13:ef:f8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce Validity Not Before: Jan 2 12:00:33 2026 GMT Not After : Jan 3 12:00:33 2026 GMT Subject: CN=45e96c1f65b1137c53aca3376b9e99d2c8dfe881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ac:ae:8b:9b:f6:9f:03:0a:6c:ce:67:4a:d7: de:23:fc:4f:9f:82:cd:54:b1:d0:9c:c3:44:3f:95: 95:92:83:e4:af:2f:06:d9:26:a1:fe:23:c3:be:f0: 55:0a:8d:9d:40:44:f2:ac:67:b6:0a:81:03:e6:5d: 08:fe:cb:73:0f:13:84:cc:21:f4:e8:cc:92:4a:d5: f6:2d:90:25:e9:02:20:52:1d:f8:df:64:a9:72:5d: 71:46:74:86:0c:84:de:58:21:f0:01:08:15:62:47: 83:f4:fc:71:e8:54:eb:31:0d:ff:4c:75:29:50:4f: bb:ae:8f:f6:96:37:88:81:e6:82:24:fd:f5:84:97: 38:72:ca:c6:d4:b6:b6:92:d7:26:5d:00:a0:ff:68: 41:27:96:67:28:e6:3b:1b:ca:4b:28:7e:bd:9d:4f: 76:ed:f0:73:e6:c8:52:f3:0d:bd:8f:07:0a:96:c1: ad:42:cb:6e:95:1f:ff:e6:94:4f:01:c3:4a:a7:59: bd:68:b8:18:ca:3d:7f:45:8b:34:88:b3:34:28:97: d2:73:58:08:9e:91:a7:e2:da:48:e8:57:25:63:92: 2f:7b:92:9d:27:0b:0f:12:a7:84:d9:6a:66:e9:67: 42:1d:2b:f7:07:78:36:37:ac:f8:94:2e:ac:ba:37: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E9:6C:1F:65:B1:13:7C:53:AC:A3:37:6B:9E:99:D2:C8:DF:E8:81 X509v3 Authority Key Identifier: keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1c:e5:92:c3:42:fa:04:bd:20:0c:fc:b0:8f:7e:7c:4d:00: fd:cc:b5:f6:49:0f:fb:d9:63:7d:b4:8b:35:ae:79:69:3e:a4: f7:ff:01:87:74:c3:74:19:87:07:f2:a0:45:11:c0:9b:80:17: 9a:1e:96:a1:a9:64:b3:df:b0:41:c3:35:57:86:39:87:bd:e6: fb:89:e9:83:1e:38:6e:55:8e:16:5b:8c:ff:dd:d1:d5:f0:11: 92:7a:c4:f3:2c:da:ec:fa:c3:68:c1:6a:d9:a3:64:4a:94:eb: cc:b9:bc:18:97:40:f0:4d:b0:bd:c8:1c:ed:05:c4:fd:c5:69: ee:d4:69:d4:d9:32:60:4f:2b:cf:2f:74:26:f7:40:7d:2a:9e: e5:8f:ee:76:aa:7f:67:f9:ab:dd:81:d5:07:a5:90:d5:3e:dd: d8:74:58:0c:5a:07:38:c8:b6:eb:76:2d:d1:01:30:7c:04:30: 55:04:c6:b3:28:cd:19:42:6f:6a:78:77:5c:62:f9:c2:55:2d: 60:a4:c8:33:0c:99:0b:c3:64:76:73:73:6e:bd:3e:9f:73:d2: 10:d1:e6:86:85:bb:13:b8:b7:fc:e4:c3:d8:17:84:3a:95:fe: 13:ec:5d:8b:25:c0:f0:1d:5b:f8:69:4b:fb:3a:0b:4e:e1:12: 33:f6:0b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+lLYGAbvWqBBCL2oT7/gvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTZmYTE4YjExOWMzYTQ5Y2JiY2M1NmE2MDQ1NzQzOWE0 NDkyY2UwHhcNMjYwMTAyMTIwMDMzWhcNMjYwMTAzMTIwMDMzWjAzMTEwLwYDVQQD Eyg0NWU5NmMxZjY1YjExMzdjNTNhY2EzMzc2YjllOTlkMmM4ZGZlODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ayui5v2nwMKbM5nStfeI/xPn4LN VLHQnMNEP5WVkoPkry8G2Sah/iPDvvBVCo2dQETyrGe2CoED5l0I/stzDxOEzCH0 6MySStX2LZAl6QIgUh3432Spcl1xRnSGDITeWCHwAQgVYkeD9Pxx6FTrMQ3/THUp UE+7ro/2ljeIgeaCJP31hJc4csrG1La2ktcmXQCg/2hBJ5ZnKOY7G8pLKH69nU92 7fBz5shS8w29jwcKlsGtQstulR//5pRPAcNKp1m9aLgYyj1/RYs0iLM0KJfSc1gI npGn4tpI6FclY5Ive5KdJwsPEqeE2Wpm6WdCHSv3B3g2N6z4lC6suje4ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXpbB9lsRN8U6yjN2uemdLI3+iBMB8GA1UdIwQY MBaAFPZW+hixGcOknLvMVqYEV0OaRJLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mMmQzYTItYjE0YS00MTFhLTg2Mjkt YzkyMGYxNjQ2YzljLzEvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mMmQzYTItYjE0YS00MTFhLTg2MjktYzkyMGYxNjQ2Yzlj LzEvOWxiNkdMRVp3NlNjdTh4V3BnUlhRNXBFa3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERzlksNC +gS9IAz8sI9+fE0A/cy19kkP+9ljfbSLNa55aT6k9/8Bh3TDdBmHB/KgRRHAm4AX mh6Woalks9+wQcM1V4Y5h73m+4npgx44blWOFluM/93R1fARknrE8yza7PrDaMFq 2aNkSpTrzLm8GJdA8E2wvcgc7QXE/cVp7tRp1NkyYE8rzy90JvdAfSqe5Y/udqp/ Z/mr3YHVB6WQ1T7d2HRYDFoHOMi263Yt0QEwfAQwVQTGsyjNGUJvanh3XGL5wlUt YKTIMwyZC8NkdnNzbr0+n3PSENHmhoW7E7i3/OTD2BeEOpX+E+xdiyXA8B1b+GlL +zoLTuESM/YLeA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:25:52 2026 by rpki-client