This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json) Hash identifier: vdXDBjBZDCfstC9iq0wzh58ZdxZs/s1BukK38AcNXaA= Subject key identifier: 5E:FB:AC:E5:F4:5E:FD:83:E7:B9:F1:92:74:90:A8:B4:09:97:36:77 Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9 Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9 Certificate serial: 019BD32013E08A1D3E1496C30CBC6F57FB22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft Manifest number: 1465 Signing time: Sun 18 Jan 2026 22:00:53 +0000 Manifest this update: Sun 18 Jan 2026 22:00:53 +0000 Manifest next update: Mon 19 Jan 2026 22:00:53 +0000 Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: P0TxfAYLpFshGixEK7KwG/eikf13AQB24HDOCrf65to=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d3:20:13:e0:8a:1d:3e:14:96:c3:0c:bc:6f:57:fb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9 Validity Not Before: Jan 18 22:00:53 2026 GMT Not After : Jan 19 22:00:53 2026 GMT Subject: CN=5efbace5f45efd83e7b9f1927490a8b409973677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:d7:80:27:0f:84:7c:f5:7b:32:f0:83:d8: 95:24:66:f0:28:a0:28:d8:de:83:e9:c6:a6:34:ac: 18:b0:c8:37:2c:c4:45:33:05:2c:89:2b:ea:e7:74: bc:d7:c1:24:c7:0a:40:b6:85:b0:9e:6c:bb:23:09: 9c:e7:a8:d4:52:3a:d2:9f:ce:46:ce:60:7c:5c:08: 31:3e:39:ef:02:a6:64:e9:c2:ce:6f:65:14:cd:2e: ef:0c:b3:82:53:ba:72:64:30:41:7e:d0:63:0d:d1: 79:a3:d7:36:89:48:e1:33:c5:8b:00:c1:04:e7:c6: 32:61:28:30:0a:9c:4e:21:51:95:2b:2e:4a:c3:66: 0f:48:b7:e8:eb:40:d0:e2:2c:1b:7e:03:7f:9f:e8: 62:b5:d0:2e:41:12:4d:fc:ac:cf:10:a6:96:41:06: d3:d3:c5:59:5e:c5:8d:e2:dc:74:c4:2c:92:05:5d: 1b:c8:88:a8:9b:4e:95:28:dc:fb:f6:ad:18:be:e5: 30:8d:fe:35:9e:a1:94:00:7e:77:14:69:07:2d:84: a5:13:95:48:90:e5:f8:9e:50:42:bd:6e:83:3c:4d: aa:01:15:d5:0c:82:49:2f:4a:41:85:aa:39:de:ba: 25:51:3f:d5:13:0f:26:38:ed:34:5d:0e:53:70:15: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FB:AC:E5:F4:5E:FD:83:E7:B9:F1:92:74:90:A8:B4:09:97:36:77 X509v3 Authority Key Identifier: keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7d:f6:36:11:d8:67:97:34:b3:80:06:30:42:5e:6a:b1:48: a0:4e:c3:3a:88:c0:a9:01:21:a6:00:71:19:29:64:57:d3:b8: 60:a4:89:b6:86:63:a3:41:55:88:bb:9b:b0:e9:f8:a3:ba:cb: 01:ab:3a:ae:63:a0:6d:f1:4f:21:3f:9d:72:eb:39:52:08:06: 06:a5:e6:06:cc:a2:42:04:ab:ba:79:0b:50:4a:33:af:d4:2d: cf:52:79:53:91:75:40:84:13:34:84:fa:0c:6a:f7:4d:c6:a9: cf:3a:88:db:33:eb:3a:66:11:e9:4b:b5:6e:98:67:07:c0:b7: 64:0e:39:c2:df:c6:d2:bf:fc:7c:ec:80:1c:04:58:f7:db:ae: 92:b9:fb:7c:80:09:29:48:e7:bd:f7:02:4f:b7:c2:a3:0d:6e: 29:24:5e:ef:b1:40:72:7c:7f:32:9e:7a:64:45:e3:fb:c8:9f: 2c:ea:94:34:aa:5b:5d:5a:d4:3a:c1:0f:ea:eb:4f:7b:cf:09: 5f:79:72:f0:4a:aa:36:6e:98:f3:5e:03:e9:7d:f7:ad:49:bb: 9c:c4:0d:c1:89:2c:39:46:37:3f:1b:3e:a5:4f:d3:a2:41:44: 01:69:d4:76:63:4b:bc:a3:a1:93:8a:96:5f:1e:ec:a6:19:2d: 9d:5d:01:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvTIBPgih0+FJbDDLxvV/siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZWU4MGViNWQzMDA0ODU1NGQwYWVmZDQzYmNlZWQzM2Vm ZGQ0YTkwHhcNMjYwMTE4MjIwMDUzWhcNMjYwMTE5MjIwMDUzWjAzMTEwLwYDVQQD Eyg1ZWZiYWNlNWY0NWVmZDgzZTdiOWYxOTI3NDkwYThiNDA5OTczNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMzXgCcPhHz1ezLwg9iVJGbwKKAo 2N6D6camNKwYsMg3LMRFMwUsiSvq53S818EkxwpAtoWwnmy7Iwmc56jUUjrSn85G zmB8XAgxPjnvAqZk6cLOb2UUzS7vDLOCU7pyZDBBftBjDdF5o9c2iUjhM8WLAMEE 58YyYSgwCpxOIVGVKy5Kw2YPSLfo60DQ4iwbfgN/n+hitdAuQRJN/KzPEKaWQQbT 08VZXsWN4tx0xCySBV0byIiom06VKNz79q0YvuUwjf41nqGUAH53FGkHLYSlE5VI kOX4nlBCvW6DPE2qARXVDIJJL0pBhao53rolUT/VEw8mOO00XQ5TcBXeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF77rOX0Xv2D57nxknSQqLQJlzZ3MB8GA1UdIwQY MBaAFNrugOtdMASFVNCu/UO87tM+/dSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMjA2NDItOGE1ZC00Nzc4LWE5YTUt NmNhNzYzMjJlMDg0LzEvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kMjA2NDItOGE1ZC00Nzc4LWE5YTUtNmNhNzYzMjJlMDg0 LzEvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn32NhHY Z5c0s4AGMEJearFIoE7DOojAqQEhpgBxGSlkV9O4YKSJtoZjo0FViLubsOn4o7rL Aas6rmOgbfFPIT+dcus5UggGBqXmBsyiQgSrunkLUEozr9Qtz1J5U5F1QIQTNIT6 DGr3TcapzzqI2zPrOmYR6Uu1bphnB8C3ZA45wt/G0r/8fOyAHARY99uukrn7fIAJ KUjnvfcCT7fCow1uKSRe77FAcnx/Mp56ZEXj+8ifLOqUNKpbXVrUOsEP6utPe88J X3ly8EqqNm6Y814D6X33rUm7nMQNwYksOUY3Pxs+pU/TokFEAWnUdmNLvKOhk4qW Xx7sphktnV0B2Q== -----END CERTIFICATE-----Generated at Mon Jan 19 06:30:03 2026 by rpki-client