This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json) Hash identifier: cV88hN29H0BhrvD9UPcSEPM/Vee9bMlyou80Ej/kFqo= Subject key identifier: F2:5F:CB:84:54:7F:F2:79:A4:C0:D1:17:60:CC:B8:BA:55:50:98:F5 Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Certificate serial: 019BAD93B332994728856C13B68368E4E884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 15:01:36 +0000 Manifest this update: Sun 11 Jan 2026 15:01:36 +0000 Manifest next update: Mon 12 Jan 2026 15:01:36 +0000 Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: Ni0D1B/wxpsViSf3XlFDvguSc2YsKH4KE+LZeJnsZII=) 2: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (hash: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:b3:32:99:47:28:85:6c:13:b6:83:68:e4:e8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Validity Not Before: Jan 11 15:01:36 2026 GMT Not After : Jan 12 15:01:36 2026 GMT Subject: CN=f25fcb84547ff279a4c0d11760ccb8ba555098f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:c3:ef:66:e0:ac:02:37:5f:23:14:7e:16: 2f:0e:48:4b:a5:30:4c:80:d5:3c:fe:c9:8c:04:94: 43:bb:11:59:bd:0e:e1:71:e9:67:9e:ec:d0:17:72: 59:ef:db:3f:e9:b6:60:ed:de:c7:7e:09:f2:5a:5e: bd:db:7f:c1:75:81:f7:3e:69:ce:34:65:c1:24:39: f5:ae:2f:55:8e:cf:cc:f7:51:12:3b:84:0b:c5:44: f9:2e:57:28:34:93:2b:8c:1f:ed:5c:13:7e:37:98: e9:1b:25:bf:e9:37:17:8f:00:24:3d:e3:85:43:c5: 00:f3:b7:f3:31:d3:fc:fd:ea:ba:38:d0:26:08:29: 2d:34:bd:ec:be:57:e8:0c:05:43:d7:f7:12:ce:de: c0:4d:2b:42:06:1a:8a:e3:4d:a0:e5:b0:26:a0:02: 68:b0:29:94:a9:d1:3b:b7:68:94:96:6b:68:01:d1: 1a:cd:65:3b:04:d1:ab:30:6c:03:fa:7f:09:10:b5: ea:b3:74:07:77:60:10:f7:5b:0b:13:a9:1e:99:34: f3:6a:9d:91:db:3e:47:ff:af:3f:ff:f6:44:95:14: e9:fe:63:cb:eb:70:42:14:df:e9:b7:b3:d6:c6:1f: f4:bd:02:4d:64:fa:1f:f4:6c:8f:26:2b:89:bb:b7: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5F:CB:84:54:7F:F2:79:A4:C0:D1:17:60:CC:B8:BA:55:50:98:F5 X509v3 Authority Key Identifier: keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0d:1c:d1:7e:ae:6d:dd:af:d1:ec:8a:80:93:2d:fc:32:dd: 6d:5f:f5:53:53:f8:59:5f:6a:15:9d:25:5e:86:36:ad:be:86: 90:b3:b2:fe:e3:7a:a0:a9:1d:e9:45:7b:72:4b:d3:4a:80:cc: 85:6a:90:67:f0:c3:b4:07:a1:92:77:5e:e6:75:67:e8:f9:fe: 69:a6:6c:c3:85:c4:7c:d6:9c:15:33:7a:3a:7a:2c:87:b1:f6: 3f:d0:c2:94:56:61:69:d8:0c:dd:56:55:92:de:6f:2c:0d:04: 02:85:a2:ca:03:14:6d:ef:c7:bf:14:a5:7e:9c:73:2c:0b:6c: fa:21:b4:35:69:d5:3c:19:1d:6f:7e:28:aa:e2:36:f4:e0:7e: 31:2b:c6:a0:e2:fc:0b:b3:77:76:45:34:1f:bd:01:1e:9d:23: 67:93:54:ef:eb:7a:85:b3:2b:9b:2c:e8:b9:ed:97:16:bd:9f: 96:99:25:5b:c6:87:05:b8:c2:1c:03:23:58:86:65:e9:af:52: 57:3b:93:90:cf:a8:1f:95:e8:4f:27:0a:66:61:6d:66:1c:fa: 9e:48:fe:28:34:29:5d:80:c4:bd:5f:aa:8e:2c:bf:b1:a7:01: 2f:16:67:a6:8a:f5:69:e4:bb:a8:e7:02:c3:88:6c:a8:69:ab: c8:c9:76:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutk7MymUcohWwTtoNo5OiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0 ZjAzYmYwHhcNMjYwMTExMTUwMTM2WhcNMjYwMTEyMTUwMTM2WjAzMTEwLwYDVQQD EyhmMjVmY2I4NDU0N2ZmMjc5YTRjMGQxMTc2MGNjYjhiYTU1NTA5OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoXD72bgrAI3XyMUfhYvDkhLpTBM gNU8/smMBJRDuxFZvQ7hcelnnuzQF3JZ79s/6bZg7d7HfgnyWl6923/BdYH3PmnO NGXBJDn1ri9Vjs/M91ESO4QLxUT5LlcoNJMrjB/tXBN+N5jpGyW/6TcXjwAkPeOF Q8UA87fzMdP8/eq6ONAmCCktNL3svlfoDAVD1/cSzt7ATStCBhqK402g5bAmoAJo sCmUqdE7t2iUlmtoAdEazWU7BNGrMGwD+n8JELXqs3QHd2AQ91sLE6kemTTzap2R 2z5H/68///ZElRTp/mPL63BCFN/pt7PWxh/0vQJNZPof9GyPJiuJu7duwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJfy4RUf/J5pMDRF2DMuLpVUJj1MB8GA1UdIwQY MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt MmE2ODVmNzhiMjlkLzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg0c0X6u bd2v0eyKgJMt/DLdbV/1U1P4WV9qFZ0lXoY2rb6GkLOy/uN6oKkd6UV7ckvTSoDM hWqQZ/DDtAehknde5nVn6Pn+aaZsw4XEfNacFTN6Onosh7H2P9DClFZhadgM3VZV kt5vLA0EAoWiygMUbe/HvxSlfpxzLAts+iG0NWnVPBkdb34oquI29OB+MSvGoOL8 C7N3dkU0H70BHp0jZ5NU7+t6hbMrmyzoue2XFr2flpklW8aHBbjCHAMjWIZl6a9S VzuTkM+oH5XoTycKZmFtZhz6nkj+KDQpXYDEvV+qjiy/sacBLxZnpor1aeS7qOcC w4hsqGmryMl2+A== -----END CERTIFICATE-----Generated at Mon Jan 12 01:31:57 2026 by rpki-client