This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json) Hash identifier: qvu1AwKxok4QUadSYoaNi/Ve7/VbO8JBvLJkJh2RBTg= Subject key identifier: B7:D2:89:09:D6:8C:FF:45:B7:AC:3E:D3:47:BB:41:96:53:CD:3F:DD Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1 Certificate serial: 019BD1A033376D8852CE91AEC5BF6E82F34A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft Manifest number: 3B Signing time: Sun 18 Jan 2026 15:01:35 +0000 Manifest this update: Sun 18 Jan 2026 15:01:35 +0000 Manifest next update: Mon 19 Jan 2026 15:01:35 +0000 Files and hashes: 1: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=) 2: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: k9xgspOMWl+ISCsXV6/dV7L5xbPxWHHmpCm6p+eyuCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:a0:33:37:6d:88:52:ce:91:ae:c5:bf:6e:82:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1 Validity Not Before: Jan 18 15:01:35 2026 GMT Not After : Jan 19 15:01:35 2026 GMT Subject: CN=b7d28909d68cff45b7ac3ed347bb419653cd3fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:32:9f:3b:c9:15:c2:17:92:d6:76:07:30: 79:e3:6f:50:f6:2f:17:3a:00:9b:e4:96:66:f2:ca: 1b:df:c5:3b:a0:59:4d:be:be:ba:e8:8d:85:b3:fe: c6:ac:f0:d5:41:1a:36:4b:79:b9:fb:92:70:b9:71: 71:c4:16:51:f5:ff:04:87:d6:2e:bc:e8:4d:9a:94: 1e:b1:fa:c2:33:54:cd:6f:a0:a3:9e:3f:aa:9f:5d: 84:56:26:45:59:4c:2c:36:27:75:be:66:bb:6e:5b: 51:2e:17:99:f1:b6:5d:2e:c8:cb:39:49:e5:ab:6f: 2f:1a:71:43:f5:1d:04:31:94:68:f8:2d:f3:55:96: b6:2f:38:47:4e:f2:f4:9d:5f:2d:43:ed:d4:31:7a: 47:52:8c:21:ac:f3:50:96:b9:24:ca:bd:77:ac:58: ae:85:ef:9e:40:34:d7:60:55:e4:6d:4f:1a:19:a1: a9:3c:c2:8d:5d:48:2c:83:8a:16:22:09:ab:6a:e6: 29:cc:0a:49:6e:26:d0:47:6f:fc:50:01:a2:72:56: 3d:ba:b9:11:0a:af:21:3a:94:6a:88:82:2a:d3:44: b2:72:82:c2:2e:fb:0e:7b:ea:c8:c0:c3:24:39:7c: 10:ab:83:af:2b:bd:b2:a4:cd:f2:75:b3:8d:ba:72: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D2:89:09:D6:8C:FF:45:B7:AC:3E:D3:47:BB:41:96:53:CD:3F:DD X509v3 Authority Key Identifier: keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a6:98:7f:31:8c:ea:e4:ba:f8:8f:b0:c4:7c:2e:c0:c9:07: c1:03:75:6c:6f:c4:8a:8c:64:78:67:f6:6e:04:26:2e:8a:25: c4:2f:20:c7:fd:c8:12:a0:8f:c2:dd:e1:fe:3a:13:87:e2:5f: 8a:53:0c:6b:c1:05:8d:7b:76:ad:27:22:15:26:82:2c:1b:d9: ed:1a:3c:cc:39:3e:32:f9:6d:dc:13:61:48:fc:09:08:66:56: 2f:ef:9e:ff:50:01:39:97:73:03:4b:45:11:90:2f:9d:1b:cc: 53:0a:b5:e3:51:3d:fd:92:8c:bd:0d:fe:ef:f6:14:f3:df:cb: d4:de:18:6c:4b:d2:9c:18:92:f5:c0:e5:44:92:88:ad:e5:52: 90:d1:4d:1b:a2:58:47:af:81:f5:ae:13:5b:e8:62:12:a6:ac: 42:0f:3a:05:3f:53:43:60:e6:3e:8a:5d:eb:98:ee:c5:1a:12: 5d:8e:2f:cd:ad:fc:95:6e:c1:ff:3d:58:39:bb:ec:68:da:7b: c8:82:0b:4b:78:f3:a9:24:ea:d5:2b:d7:bf:5f:1f:57:0d:3a: 6b:27:f2:e5:cf:5c:08:2e:76:00:bc:0c:23:18:44:e0:4f:be: cc:02:3f:68:58:81:73:6d:f4:b4:3b:61:0e:bf:53:5d:7b:fc: f7:13:e1:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRoDM3bYhSzpGuxb9ugvNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjIzMzNmMDY2NTczZjUzMTZlMDc1YTAxY2UyNDkwYjU4 YzZhZTEwHhcNMjYwMTE4MTUwMTM1WhcNMjYwMTE5MTUwMTM1WjAzMTEwLwYDVQQD EyhiN2QyODkwOWQ2OGNmZjQ1YjdhYzNlZDM0N2JiNDE5NjUzY2QzZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMynzvJFcIXktZ2BzB5429Q9i8X OgCb5JZm8sob38U7oFlNvr666I2Fs/7GrPDVQRo2S3m5+5JwuXFxxBZR9f8Eh9Yu vOhNmpQesfrCM1TNb6Cjnj+qn12EViZFWUwsNid1vma7bltRLheZ8bZdLsjLOUnl q28vGnFD9R0EMZRo+C3zVZa2LzhHTvL0nV8tQ+3UMXpHUowhrPNQlrkkyr13rFiu he+eQDTXYFXkbU8aGaGpPMKNXUgsg4oWIgmrauYpzApJbibQR2/8UAGiclY9urkR Cq8hOpRqiIIq00SycoLCLvsOe+rIwMMkOXwQq4OvK72ypM3ydbONunKZLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfSiQnWjP9Ft6w+00e7QZZTzT/dMB8GA1UdIwQY MBaAFLayMz8GZXP1MW4HWgHOJJC1jGrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYt ODA1MTcwYWM5YzBlLzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYtODA1MTcwYWM5YzBl LzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKaYfzGM 6uS6+I+wxHwuwMkHwQN1bG/EioxkeGf2bgQmLoolxC8gx/3IEqCPwt3h/joTh+Jf ilMMa8EFjXt2rSciFSaCLBvZ7Ro8zDk+Mvlt3BNhSPwJCGZWL++e/1ABOZdzA0tF EZAvnRvMUwq141E9/ZKMvQ3+7/YU89/L1N4YbEvSnBiS9cDlRJKIreVSkNFNG6JY R6+B9a4TW+hiEqasQg86BT9TQ2DmPopd65juxRoSXY4vza38lW7B/z1YObvsaNp7 yIILS3jzqSTq1SvXv18fVw06ayfy5c9cCC52ALwMIxhE4E++zAI/aFiBc230tDth Dr9TXXv89xPhaw== -----END CERTIFICATE-----Generated at Sun Jan 18 16:20:17 2026 by rpki-client