This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json) Hash identifier: pmnE8bgF+js6F6KBJfCSA1HcKtLHIQTUrtBURVJUct4= Subject key identifier: D5:E4:C3:A8:CA:83:34:09:0D:28:8C:F3:87:20:00:BA:88:FB:8B:A6 Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Certificate serial: 019B801632FF1B7F1D54E80DC529F9E7313E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft Manifest number: 17AD Signing time: Fri 02 Jan 2026 19:01:37 +0000 Manifest this update: Fri 02 Jan 2026 19:01:37 +0000 Manifest next update: Sat 03 Jan 2026 19:01:37 +0000 Files and hashes: 1: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: EopeSRsoL8gn2GQyP5f6ILitG13vD6OKLoAkNM8FkSo=) 2: an0Gpu9MvO5HxbMKaMMDB3vXGH4.roa (hash: L1hE9hBMXzXjn0nVNvZTmOcQItrL+JjmXR1Zq5fow2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:16:32:ff:1b:7f:1d:54:e8:0d:c5:29:f9:e7:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Validity Not Before: Jan 2 19:01:37 2026 GMT Not After : Jan 3 19:01:37 2026 GMT Subject: CN=d5e4c3a8ca8334090d288cf3872000ba88fb8ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:22:ab:11:6f:42:a5:b9:d5:70:59:f5:ba: 5a:26:55:0f:7c:84:f2:d2:85:13:d3:a5:57:c3:d9: 16:d8:38:9c:5d:64:68:47:98:1a:92:96:ba:56:dc: ea:2b:0c:8c:31:f1:d4:ce:c8:15:8b:3f:79:4e:31: 8d:46:7c:f7:f0:2b:b3:0b:fa:07:f0:dc:06:07:bc: 28:4d:5a:d0:91:87:41:42:d1:b6:ee:f5:e9:e7:0e: aa:1e:aa:95:9a:fc:5a:80:62:e9:64:dd:66:ec:9e: 3d:bf:09:44:4d:f9:8d:40:8f:9f:d6:8a:5b:e3:b1: c3:63:98:fd:9a:4d:18:32:09:d8:bb:1b:07:60:e5: 6e:60:bd:a5:c7:6e:14:f9:b9:b8:c6:bd:55:35:45: a7:55:b6:bf:30:62:1b:2d:3c:4e:81:41:70:fc:e8: 1a:d1:5c:bb:87:74:64:7e:93:b7:c6:22:ae:a5:b8: 22:44:72:e6:a2:8f:90:9e:1f:13:c6:e4:94:d5:0e: 96:cc:7c:3d:e9:2e:2d:cd:1e:0b:e2:d8:15:3d:ab: 54:55:72:e8:69:81:09:45:7d:b3:cb:a0:46:82:a8: c6:64:42:fc:a8:b2:69:08:e8:30:3e:5d:52:71:bb: f8:37:cc:37:46:42:4b:5f:8a:a4:8a:85:c4:b6:c2: 6b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:C3:A8:CA:83:34:09:0D:28:8C:F3:87:20:00:BA:88:FB:8B:A6 X509v3 Authority Key Identifier: keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3e:65:f0:7a:da:6d:70:55:a2:16:63:c4:95:b6:0d:87:62: d5:0e:df:72:b3:5c:df:95:26:57:c7:3d:e4:4c:b9:a4:e2:be: 8d:f2:b2:8e:dd:31:37:fe:d9:a2:e3:a6:06:48:99:5f:0e:b1: 8e:5d:08:30:d7:6b:c4:ef:8e:7d:05:ef:b3:aa:d2:ee:d7:85: 8d:a3:ec:da:30:31:58:8b:89:70:f0:57:1f:5f:8d:f1:58:88: d5:37:70:3d:5c:44:06:be:f0:ac:dc:5b:0b:12:63:3e:ab:cc: 2a:97:ff:bd:ae:2c:35:83:53:ab:1b:74:a4:cd:9e:a9:1b:03: 68:22:af:b9:c4:b6:d2:3a:07:9a:dd:52:79:4f:01:e1:d8:25: d4:c5:2e:78:32:b9:f8:60:93:05:33:0f:26:12:a5:f7:7a:09: dd:d4:f9:d6:8d:4b:a0:c0:69:f1:9f:f5:e0:3b:f2:1d:73:f3: 2f:ce:c6:08:59:1c:35:f2:7e:20:f9:96:ee:70:a3:88:96:e9: 0a:05:8e:47:69:2e:53:2c:8e:84:d0:14:54:f1:35:ad:9f:64: 14:22:c3:37:a0:d9:3e:8f:2e:90:9a:10:09:09:0b:0d:99:77: 13:be:a0:28:8f:c7:7a:09:ae:92:cc:7e:f1:47:aa:27:6b:7a: 91:67:03:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAFjL/G38dVOgNxSn55zE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGNiM2NkMzVlZmJjODRmMmE4OWEyZjVkMmMxNjJjM2Q3 Y2UxNWIwHhcNMjYwMTAyMTkwMTM3WhcNMjYwMTAzMTkwMTM3WjAzMTEwLwYDVQQD EyhkNWU0YzNhOGNhODMzNDA5MGQyODhjZjM4NzIwMDBiYTg4ZmI4YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3kiqxFvQqW51XBZ9bpaJlUPfITy 0oUT06VXw9kW2DicXWRoR5gakpa6VtzqKwyMMfHUzsgViz95TjGNRnz38CuzC/oH 8NwGB7woTVrQkYdBQtG27vXp5w6qHqqVmvxagGLpZN1m7J49vwlETfmNQI+f1opb 47HDY5j9mk0YMgnYuxsHYOVuYL2lx24U+bm4xr1VNUWnVba/MGIbLTxOgUFw/Oga 0Vy7h3RkfpO3xiKupbgiRHLmoo+Qnh8TxuSU1Q6WzHw96S4tzR4L4tgVPatUVXLo aYEJRX2zy6BGgqjGZEL8qLJpCOgwPl1Scbv4N8w3RkJLX4qkioXEtsJrBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXkw6jKgzQJDSiM84cgALqI+4umMB8GA1UdIwQY MBaAFGtMs80177yE8qiaL10sFiw9fOFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEt NjNhZTc0YmIyMDNiLzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEtNjNhZTc0YmIyMDNi LzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET5l8Hra bXBVohZjxJW2DYdi1Q7fcrNc35UmV8c95Ey5pOK+jfKyjt0xN/7ZouOmBkiZXw6x jl0IMNdrxO+OfQXvs6rS7teFjaPs2jAxWIuJcPBXH1+N8ViI1TdwPVxEBr7wrNxb CxJjPqvMKpf/va4sNYNTqxt0pM2eqRsDaCKvucS20joHmt1SeU8B4dgl1MUueDK5 +GCTBTMPJhKl93oJ3dT51o1LoMBp8Z/14DvyHXPzL87GCFkcNfJ+IPmW7nCjiJbp CgWOR2kuUyyOhNAUVPE1rZ9kFCLDN6DZPo8ukJoQCQkLDZl3E76gKI/Hegmuksx+ 8UeqJ2t6kWcD2g== -----END CERTIFICATE-----Generated at Sat Jan 3 00:58:22 2026 by rpki-client