This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json) Hash identifier: 4RaKGPB36iOb2pbpbyqRBz5ehDmZj5Ei1q4ZH9vIqEA= Subject key identifier: 9B:F1:3A:80:FA:F0:EA:E4:EF:08:80:E7:F2:95:16:15:D6:30:72:71 Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Certificate serial: 019B7A4A55EFEBA3D6CAE7D0BCD9DB7489FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 16:00:50 +0000 Manifest this update: Thu 01 Jan 2026 16:00:50 +0000 Manifest next update: Fri 02 Jan 2026 16:00:50 +0000 Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: SgumnIwWGLcTTkVaIrgV2nhFEcQQ6knYf59aa5uBM2Y=) 2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:55:ef:eb:a3:d6:ca:e7:d0:bc:d9:db:74:89:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Validity Not Before: Jan 1 16:00:50 2026 GMT Not After : Jan 2 16:00:50 2026 GMT Subject: CN=9bf13a80faf0eae4ef0880e7f2951615d6307271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:53:64:92:1c:23:be:f5:b3:a6:32:7b:36: 56:a3:78:3a:7e:2f:5b:6f:a1:1e:69:85:36:a4:e0: 04:9b:ba:82:cc:5b:c6:08:05:5d:26:f0:56:4c:d4: dc:ed:67:0f:a2:8a:98:1f:12:84:0a:04:0c:48:78: 77:8e:7b:c8:56:54:99:96:26:c0:14:67:7a:3e:42: bb:fa:28:9b:06:4c:84:d3:14:f0:1c:2a:52:64:8c: 66:05:39:c9:02:03:de:f7:7a:15:72:ce:fe:4f:4c: 4f:45:b2:e7:3c:98:0d:04:08:25:d1:7c:fc:00:7d: fa:8e:68:3f:b8:ba:d6:c6:35:5c:58:9f:1f:39:a8: 86:ec:c0:3b:de:7c:97:54:15:eb:45:be:53:55:ef: 2f:89:bd:e0:35:4b:a2:15:ac:76:1d:3e:53:b0:6d: d1:63:02:34:10:5a:92:de:ef:8e:18:78:96:dd:9d: 86:5b:42:9f:6d:84:33:33:0a:c2:f4:dc:a1:cb:39: 4d:ef:62:b5:e8:e4:8e:23:5f:36:f5:63:8f:d3:1f: 80:b1:43:0c:cd:73:dd:a6:ed:47:b3:b1:5f:f0:5e: 16:6c:24:8c:a1:f8:53:91:9a:6d:c7:17:7a:7c:72: c5:bc:9f:28:3a:9c:50:74:2f:4a:45:d7:65:d3:cf: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:3A:80:FA:F0:EA:E4:EF:08:80:E7:F2:95:16:15:D6:30:72:71 X509v3 Authority Key Identifier: keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ca:10:e5:bc:6c:b5:bf:00:83:27:ee:4f:56:22:fd:6b:66: 80:d1:9b:37:3d:11:25:f3:bb:d9:a5:77:b9:19:d0:4c:ab:91: 6f:e4:b0:32:65:4b:13:03:79:07:9a:23:96:42:0b:0c:71:05: 3a:75:20:5d:d1:16:92:a8:56:ef:ec:e5:2c:05:d5:ab:39:4d: 18:fc:b0:81:63:da:c8:80:30:80:33:99:70:ce:4a:b9:9e:75: 2e:5f:71:18:60:27:68:52:83:dd:c5:7e:21:a8:c1:73:cc:2f: f4:5d:16:b6:11:53:8f:b4:40:15:0b:ec:d4:0c:8f:12:14:f6: 3c:7e:36:65:85:b5:f8:86:15:9b:fd:e0:f9:73:ba:00:c0:b1: 65:8f:7c:89:82:7f:c1:c0:21:a6:80:1e:c8:68:9a:c7:7a:db: be:09:2d:ab:2f:e7:c6:bf:19:32:19:fc:17:85:6f:8f:7e:46: fd:c1:c8:54:b4:14:df:fb:4d:02:28:a3:eb:15:a5:fd:68:9c: b2:11:ce:25:66:cd:f0:18:01:8b:ed:24:f0:ca:5f:b5:f6:2e: 36:87:ab:44:ee:38:21:28:09:c4:b2:f3:8e:cb:6b:d8:8d:83: 61:c6:90:ec:7d:85:c9:e1:d9:e1:d3:d8:d4:71:dc:fe:7f:e7: 48:48:95:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SlXv66PWyufQvNnbdIn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm MGYzNWUwHhcNMjYwMTAxMTYwMDUwWhcNMjYwMTAyMTYwMDUwWjAzMTEwLwYDVQQD Eyg5YmYxM2E4MGZhZjBlYWU0ZWYwODgwZTdmMjk1MTYxNWQ2MzA3MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTZTZJIcI771s6YyezZWo3g6fi9b b6EeaYU2pOAEm7qCzFvGCAVdJvBWTNTc7WcPooqYHxKECgQMSHh3jnvIVlSZlibA FGd6PkK7+iibBkyE0xTwHCpSZIxmBTnJAgPe93oVcs7+T0xPRbLnPJgNBAgl0Xz8 AH36jmg/uLrWxjVcWJ8fOaiG7MA73nyXVBXrRb5TVe8vib3gNUuiFax2HT5TsG3R YwI0EFqS3u+OGHiW3Z2GW0KfbYQzMwrC9NyhyzlN72K16OSOI1829WOP0x+AsUMM zXPdpu1Hs7Ff8F4WbCSMofhTkZptxxd6fHLFvJ8oOpxQdC9KRddl088GxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvxOoD68Ork7wiA5/KVFhXWMHJxMB8GA1UdIwQY MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3 LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsoQ5bxs tb8AgyfuT1Yi/WtmgNGbNz0RJfO72aV3uRnQTKuRb+SwMmVLEwN5B5ojlkILDHEF OnUgXdEWkqhW7+zlLAXVqzlNGPywgWPayIAwgDOZcM5KuZ51Ll9xGGAnaFKD3cV+ IajBc8wv9F0WthFTj7RAFQvs1AyPEhT2PH42ZYW1+IYVm/3g+XO6AMCxZY98iYJ/ wcAhpoAeyGiax3rbvgktqy/nxr8ZMhn8F4Vvj35G/cHIVLQU3/tNAiij6xWl/Wic shHOJWbN8BgBi+0k8MpftfYuNoerRO44ISgJxLLzjstr2I2DYcaQ7H2FyeHZ4dPY 1HHc/n/nSEiVgQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:06:21 2026 by rpki-client