This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json) Hash identifier: SWBmbSILSXpJUGpcWWy5gh8Y462EKZgEsqvkxM4roHs= Subject key identifier: 41:AA:A6:40:F1:BE:AD:36:07:1A:80:FE:70:BC:90:5F:4F:EF:57:5E Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Certificate serial: 019BAC4A8A2559EC1C20EB3D9F6C5AF019F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft Manifest number: 10D0 Signing time: Sun 11 Jan 2026 09:02:04 +0000 Manifest this update: Sun 11 Jan 2026 09:02:04 +0000 Manifest next update: Mon 12 Jan 2026 09:02:04 +0000 Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: exng3N+E79Cm4gVf1ZS7sfKD489eJphQoPvn+NWH3jU=) 2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:4a:8a:25:59:ec:1c:20:eb:3d:9f:6c:5a:f0:19:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Validity Not Before: Jan 11 09:02:04 2026 GMT Not After : Jan 12 09:02:04 2026 GMT Subject: CN=41aaa640f1bead36071a80fe70bc905f4fef575e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:81:40:c0:aa:6a:72:62:e2:1d:59:05:9e: f2:74:52:83:bc:cb:65:42:9e:24:a0:da:a9:c5:2e: 7f:58:31:dc:7c:92:66:ac:a3:2e:43:00:cb:66:fb: d3:2a:56:7c:87:02:2f:17:8d:1c:47:da:17:8d:8f: 3d:e9:1e:22:0f:02:ed:5e:d1:95:f5:c2:37:bc:70: 6e:f7:dd:ce:25:0e:0e:a5:7a:7e:96:82:04:7f:bf: 15:64:cd:f7:a9:ed:6a:c4:71:3f:9d:e3:a8:7e:7f: 70:89:42:df:1e:49:6c:ab:88:be:f7:1d:23:81:cf: 3b:65:f9:63:d1:1b:61:b1:06:12:b4:1d:64:bd:5f: 98:c2:d9:08:cf:46:51:cc:78:b2:82:14:27:22:6a: 80:2f:03:ae:a6:7d:05:07:2d:2d:2c:20:b1:12:ff: ad:78:2d:91:2a:cf:e1:24:38:d6:bd:bf:54:61:c4: 00:71:7d:d5:24:f5:3a:fd:99:cc:27:67:74:4c:35: 9f:6b:d8:5c:b1:2e:9f:b8:5a:66:f2:34:e8:d5:9b: 55:cc:f2:49:d7:c0:79:2e:db:20:30:d2:ff:10:1c: 11:b7:ac:c2:49:ff:1d:eb:63:7d:fc:fd:83:87:b4: 4b:f6:04:17:66:00:2d:66:1f:ee:27:22:58:46:6d: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:A6:40:F1:BE:AD:36:07:1A:80:FE:70:BC:90:5F:4F:EF:57:5E X509v3 Authority Key Identifier: keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1d:1a:e8:00:1b:0a:cb:a0:7b:36:6b:f7:3e:cc:44:41:ca: a4:b1:81:ab:48:87:05:71:88:56:2d:30:90:3d:1a:af:f7:3a: 73:ad:1a:31:48:93:b7:26:5e:2e:22:c4:b9:fd:41:73:9f:91: 1a:60:83:4b:7a:34:2b:11:d5:b0:78:b1:ee:d7:25:ea:0c:ef: 27:4c:1f:e1:6a:6c:54:b7:3a:e9:21:d8:80:d0:0c:d8:b8:cb: 87:d7:d5:92:ef:14:84:79:f6:90:22:72:62:3c:aa:37:2c:bb: 3a:52:ec:b4:ac:57:2b:5e:16:69:4e:91:46:1f:d4:1f:71:82: 45:53:25:73:fc:69:62:08:7e:2e:0e:11:29:87:1b:ec:9f:bc: 5d:4f:88:17:6e:9b:cc:b6:19:d1:7c:75:f3:a6:5c:5f:89:cc: 2f:bf:7f:be:06:f6:6c:19:4f:39:99:8e:07:56:cf:ed:7e:31: 77:73:f3:69:81:8c:0f:ff:9e:25:90:2c:02:89:e0:bd:16:31: 22:62:c4:ff:10:66:02:d6:85:89:bf:ba:89:6b:cc:99:4f:b0: 85:33:89:63:50:37:1b:09:36:4f:d5:71:e3:49:63:2b:df:72: 49:8a:06:5a:27:94:4f:02:59:7b:4f:c9:a1:c8:23:86:25:62: 07:b4:98:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusSoolWewcIOs9n2xa8BnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1 ZjlmYTYwHhcNMjYwMTExMDkwMjA0WhcNMjYwMTEyMDkwMjA0WjAzMTEwLwYDVQQD Eyg0MWFhYTY0MGYxYmVhZDM2MDcxYTgwZmU3MGJjOTA1ZjRmZWY1NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgeBQMCqanJi4h1ZBZ7ydFKDvMtl Qp4koNqpxS5/WDHcfJJmrKMuQwDLZvvTKlZ8hwIvF40cR9oXjY896R4iDwLtXtGV 9cI3vHBu993OJQ4OpXp+loIEf78VZM33qe1qxHE/neOofn9wiULfHklsq4i+9x0j gc87Zflj0RthsQYStB1kvV+YwtkIz0ZRzHiyghQnImqALwOupn0FBy0tLCCxEv+t eC2RKs/hJDjWvb9UYcQAcX3VJPU6/ZnMJ2d0TDWfa9hcsS6fuFpm8jTo1ZtVzPJJ 18B5LtsgMNL/EBwRt6zCSf8d62N9/P2Dh7RL9gQXZgAtZh/uJyJYRm3WRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGqpkDxvq02BxqA/nC8kF9P71deMB8GA1UdIwQY MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex0a6AAb CsugezZr9z7MREHKpLGBq0iHBXGIVi0wkD0ar/c6c60aMUiTtyZeLiLEuf1Bc5+R GmCDS3o0KxHVsHix7tcl6gzvJ0wf4WpsVLc66SHYgNAM2LjLh9fVku8UhHn2kCJy YjyqNyy7OlLstKxXK14WaU6RRh/UH3GCRVMlc/xpYgh+Lg4RKYcb7J+8XU+IF26b zLYZ0Xx186ZcX4nML79/vgb2bBlPOZmOB1bP7X4xd3PzaYGMD/+eJZAsAongvRYx ImLE/xBmAtaFib+6iWvMmU+whTOJY1A3Gwk2T9Vx40ljK99ySYoGWieUTwJZe0/J ocgjhiViB7SYSQ== -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:45 2026 by rpki-client