This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json) Hash identifier: 74Rvy91Cjk6jviRhXyPq/VL5BxiGO1MUAY6LvNP70/8= Subject key identifier: 6B:01:8C:F2:01:F2:97:BA:D2:B3:8E:6F:FD:B4:9B:32:BE:F5:21:34 Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Certificate serial: 019B7F3A032B69015C28866514428858BE99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft Manifest number: 1040 Signing time: Fri 02 Jan 2026 15:01:06 +0000 Manifest this update: Fri 02 Jan 2026 15:01:06 +0000 Manifest next update: Sat 03 Jan 2026 15:01:06 +0000 Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: TR0SPZaM1+iLHcJZ4RhXPyZVAeIZSDUUuiYd2hFw6kQ=) 2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:3a:03:2b:69:01:5c:28:86:65:14:42:88:58:be:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Validity Not Before: Jan 2 15:01:06 2026 GMT Not After : Jan 3 15:01:06 2026 GMT Subject: CN=6b018cf201f297bad2b38e6ffdb49b32bef52134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:d2:87:9f:46:84:d1:63:14:59:7e:c9:5b: ba:bf:fa:30:24:f6:96:e0:1a:3a:9f:44:f3:6b:9a: 3f:55:0f:ab:bd:7d:fe:d2:d2:58:45:ed:8c:90:55: f3:a7:b9:dc:0d:9f:4b:f8:82:ec:8e:2b:b5:7f:e7: 9d:6a:e5:ea:ed:9e:0e:a5:fb:77:38:a3:0f:e6:b2: ba:df:3d:77:80:3f:8c:fb:69:2c:da:60:c0:cf:39: ae:c9:37:e9:e1:e8:e9:9a:99:7e:96:e4:f5:64:a5: d9:2d:ae:7f:f2:14:29:51:79:c5:84:dc:d4:13:53: f0:9a:df:70:73:70:5d:d3:01:62:09:41:5b:f4:cf: 47:ec:17:be:dd:98:58:60:46:a1:fc:36:21:a7:9c: 44:fb:28:5f:3b:de:31:05:26:10:15:f8:42:9b:af: b6:96:1f:42:38:66:d5:5f:6c:b7:ee:69:e7:59:79: bd:96:24:b5:b8:3e:d7:d4:40:40:ed:68:f2:c9:53: 8d:36:cf:c3:81:cb:4c:2b:76:b1:8f:5e:a1:e2:49: f9:cb:68:99:2b:3d:c9:cc:f6:f3:5a:9a:0a:cf:b0: fe:fb:cc:79:2e:42:99:c7:87:cf:0e:a5:3a:98:8f: 2c:aa:57:fc:dd:55:6f:48:61:36:ab:15:b5:96:f9: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:8C:F2:01:F2:97:BA:D2:B3:8E:6F:FD:B4:9B:32:BE:F5:21:34 X509v3 Authority Key Identifier: keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:98:c6:8d:8b:fd:a7:a1:4b:2e:e8:d8:a9:61:4e:74:e0: 34:75:4d:81:d1:a7:4b:37:02:da:7e:1c:d9:7b:a9:c2:99:92: 1f:b6:d9:d6:3a:b6:2e:51:b6:29:a2:1d:c6:ea:92:89:61:e9: 95:06:59:cc:bd:64:c6:1c:39:12:ea:86:d8:90:da:26:1a:92: e4:b7:38:c4:2f:d9:8d:f0:d3:95:29:29:04:93:b9:0a:33:d9: 4b:e7:c4:93:fc:aa:0a:f2:32:60:c7:16:13:1f:0b:7d:9c:a2: 89:63:b1:8f:ca:8d:a9:f1:f1:79:30:57:a1:31:f7:91:de:84: d9:6a:5e:08:12:3a:71:6e:9f:d1:41:a3:95:9c:57:7f:97:be: c5:d4:9f:68:9d:f7:3c:ce:36:45:72:4b:59:a5:f9:ca:82:1c: 66:ac:c5:a0:8d:16:17:fa:6f:1e:2e:22:9a:f1:6f:e9:95:c5: c6:af:09:a9:db:3b:3c:21:3c:92:5a:b7:e0:45:89:a5:19:79: 4e:83:76:78:bd:b4:7e:a6:92:d9:95:23:b9:ca:b6:93:1c:e8: 85:52:1a:9e:57:68:71:d0:68:82:18:6f:fc:74:b9:d6:90:81: 74:00:ef:87:25:58:ac:e4:ad:b5:af:39:ab:ab:6a:69:41:1d: 9a:5b:ed:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/OgMraQFcKIZlFEKIWL6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1 YTIxZmEwHhcNMjYwMTAyMTUwMTA2WhcNMjYwMTAzMTUwMTA2WjAzMTEwLwYDVQQD Eyg2YjAxOGNmMjAxZjI5N2JhZDJiMzhlNmZmZGI0OWIzMmJlZjUyMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zSh59GhNFjFFl+yVu6v/owJPaW 4Bo6n0Tza5o/VQ+rvX3+0tJYRe2MkFXzp7ncDZ9L+ILsjiu1f+edauXq7Z4Opft3 OKMP5rK63z13gD+M+2ks2mDAzzmuyTfp4ejpmpl+luT1ZKXZLa5/8hQpUXnFhNzU E1Pwmt9wc3Bd0wFiCUFb9M9H7Be+3ZhYYEah/DYhp5xE+yhfO94xBSYQFfhCm6+2 lh9COGbVX2y37mnnWXm9liS1uD7X1EBA7WjyyVONNs/DgctMK3axj16h4kn5y2iZ Kz3JzPbzWpoKz7D++8x5LkKZx4fPDqU6mI8sqlf83VVvSGE2qxW1lvlIawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsBjPIB8pe60rOOb/20mzK+9SE0MB8GA1UdIwQY MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWOYxo2L /aehSy7o2KlhTnTgNHVNgdGnSzcC2n4c2XupwpmSH7bZ1jq2LlG2KaIdxuqSiWHp lQZZzL1kxhw5EuqG2JDaJhqS5Lc4xC/ZjfDTlSkpBJO5CjPZS+fEk/yqCvIyYMcW Ex8LfZyiiWOxj8qNqfHxeTBXoTH3kd6E2WpeCBI6cW6f0UGjlZxXf5e+xdSfaJ33 PM42RXJLWaX5yoIcZqzFoI0WF/pvHi4imvFv6ZXFxq8Jqds7PCE8klq34EWJpRl5 ToN2eL20fqaS2ZUjucq2kxzohVIanldocdBoghhv/HS51pCBdADvhyVYrOStta85 q6tqaUEdmlvt8g== -----END CERTIFICATE-----Generated at Fri Jan 2 23:29:33 2026 by rpki-client