This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft File: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json) Hash identifier: BaPsLoyAVEo9BBqDBIo24w2YJ6E+jOAbwK67X9VXZPU= Subject key identifier: 91:4A:F1:27:61:37:E2:73:1E:E8:2A:6B:AB:01:74:AA:EE:DD:F5:1F Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81 Certificate issuer: /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481 Certificate serial: 019BB39579E3B60B147E6C417E9A46A64A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft Manifest number: 17C2 Signing time: Mon 12 Jan 2026 19:01:16 +0000 Manifest this update: Mon 12 Jan 2026 19:01:16 +0000 Manifest next update: Tue 13 Jan 2026 19:01:16 +0000 Files and hashes: 1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: hAle68sKlbHXohFMdx7c3RIO4lmrw87ywhYk0n+FfyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:79:e3:b6:0b:14:7e:6c:41:7e:9a:46:a6:4a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481 Validity Not Before: Jan 12 19:01:16 2026 GMT Not After : Jan 13 19:01:16 2026 GMT Subject: CN=914af1276137e2731ee82a6bab0174aaeeddf51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:00:76:87:9a:79:0d:8b:69:1c:76:94:84: bd:be:d1:74:21:fb:7f:c2:54:d2:70:f5:c4:76:5a: e6:9c:7b:5f:53:67:2a:37:6a:eb:69:a2:35:4f:80: ef:f2:1f:bc:57:3d:83:29:cf:f1:d0:6b:53:ec:a0: 41:77:10:b6:78:0c:cd:ad:08:14:99:a9:73:a6:4b: ac:7e:02:26:8e:77:33:ef:57:76:98:c2:aa:f2:d1: 60:f7:5c:62:89:90:15:37:ca:ea:c8:02:02:89:77: 92:b5:84:6a:b5:2e:58:5f:b5:84:d4:93:58:21:fa: d1:0d:4c:07:4b:0b:fb:04:23:cf:d8:be:14:ed:8b: 38:e4:c7:17:05:54:b2:4d:20:b9:54:38:a3:c4:5a: c8:7a:9f:05:36:dc:6c:93:75:16:b1:2f:52:35:fb: d5:e6:31:dd:85:4e:ce:d7:3c:50:20:fd:cc:34:ee: c4:16:c6:5d:e1:ae:a9:cc:e2:44:70:66:31:91:5e: 1c:a7:90:35:9c:eb:2c:53:0f:5e:0c:f5:84:8f:08: f2:a5:96:af:65:64:32:95:91:72:7d:d1:f6:8e:24: 56:ee:7b:6b:52:c4:6c:74:6e:39:cb:f1:76:af:b6: fc:89:96:d1:a5:82:e2:4c:3e:cc:c5:6a:70:72:2b: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:F1:27:61:37:E2:73:1E:E8:2A:6B:AB:01:74:AA:EE:DD:F5:1F X509v3 Authority Key Identifier: keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1f:bc:ba:af:86:59:f8:16:44:cd:c3:df:a1:7a:48:b7:79: 2b:eb:f1:00:1c:04:78:85:2a:9c:af:4a:2d:40:1e:49:f3:42: fb:5f:d7:0c:e9:13:f0:e6:ed:03:c7:55:8d:9b:1a:34:09:58: 6e:6a:26:8f:a7:8a:23:ae:5c:9d:46:ea:8c:60:25:07:aa:37: 99:75:bf:2e:db:7d:05:fb:5d:38:0d:bb:8c:fd:e1:ee:1e:35: fc:78:92:22:ca:ad:f0:68:3a:d7:a6:c7:ed:40:fb:22:48:1d: 8f:f6:f1:51:93:56:13:33:2c:a4:c9:25:10:45:f8:cd:e9:dc: b4:3e:80:da:c7:f7:36:b2:72:0f:78:14:c9:56:4f:e9:3d:86: ed:6f:6c:c4:f0:be:84:20:81:f4:e5:cb:a0:d8:18:7d:e4:b7: c7:60:1d:e9:5f:99:94:c4:ea:7c:3b:06:59:2f:cd:a9:5d:b0: ae:bf:be:3c:ac:df:b4:94:27:4c:65:6c:e0:ae:b7:f5:ab:be: 9b:43:8e:71:20:38:1d:46:8a:d7:66:c3:fe:ca:6b:83:29:c7: 2d:e9:b0:55:b1:80:1a:a2:83:e9:17:52:45:da:86:7f:0d:db: 9e:c9:4d:a9:aa:6e:65:f3:94:47:7d:20:bb:b1:84:85:c3:f5: da:b5:78:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlXnjtgsUfmxBfppGpkpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGJhZjg3ZjdiYTY3MTJmM2Y2NWZmM2FiYTAyZmRlNjIw OTk0ODEwHhcNMjYwMTEyMTkwMTE2WhcNMjYwMTEzMTkwMTE2WjAzMTEwLwYDVQQD Eyg5MTRhZjEyNzYxMzdlMjczMWVlODJhNmJhYjAxNzRhYWVlZGRmNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32gAdoeaeQ2LaRx2lIS9vtF0Ift/ wlTScPXEdlrmnHtfU2cqN2rraaI1T4Dv8h+8Vz2DKc/x0GtT7KBBdxC2eAzNrQgU malzpkusfgImjncz71d2mMKq8tFg91xiiZAVN8rqyAICiXeStYRqtS5YX7WE1JNY IfrRDUwHSwv7BCPP2L4U7Ys45McXBVSyTSC5VDijxFrIep8FNtxsk3UWsS9SNfvV 5jHdhU7O1zxQIP3MNO7EFsZd4a6pzOJEcGYxkV4cp5A1nOssUw9eDPWEjwjypZav ZWQylZFyfdH2jiRW7ntrUsRsdG45y/F2r7b8iZbRpYLiTD7MxWpwcivSPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFK8SdhN+JzHugqa6sBdKru3fUfMB8GA1UdIwQY MBaAFA1Lr4f3umcS8/Zf86ugL95iCZSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV1dmhfZTZaeEx6OWxfenE2QXYzbUlKbElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83NjcwYTItODgxOS00YWUyLThiZjYt OWM3ZjM2OWY3ZjE4LzEvRFV1dmhfZTZaeEx6OWxfenE2QXYzbUlKbElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi83NjcwYTItODgxOS00YWUyLThiZjYtOWM3ZjM2OWY3ZjE4 LzEvRFV1dmhfZTZaeEx6OWxfenE2QXYzbUlKbElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB+8uq+G WfgWRM3D36F6SLd5K+vxABwEeIUqnK9KLUAeSfNC+1/XDOkT8ObtA8dVjZsaNAlY bmomj6eKI65cnUbqjGAlB6o3mXW/Ltt9BftdOA27jP3h7h41/HiSIsqt8Gg616bH 7UD7Ikgdj/bxUZNWEzMspMklEEX4zenctD6A2sf3NrJyD3gUyVZP6T2G7W9sxPC+ hCCB9OXLoNgYfeS3x2Ad6V+ZlMTqfDsGWS/NqV2wrr++PKzftJQnTGVs4K639au+ m0OOcSA4HUaK12bD/sprgynHLemwVbGAGqKD6RdSRdqGfw3bnslNqapuZfOUR30g u7GEhcP12rV4DA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:35:33 2026 by rpki-client