This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json) Hash identifier: fEhfwBDImrdCKXifJp4OcteTSeTKWSO/Bv4OWETnqQw= Subject key identifier: 55:A4:65:B5:77:00:3C:20:E3:49:C0:6F:E5:BF:BA:C8:2C:16:70:C7 Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Certificate serial: 019BD9FE10C62329A505FC117736F95F19E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft Manifest number: 17D9 Signing time: Tue 20 Jan 2026 06:01:04 +0000 Manifest this update: Tue 20 Jan 2026 06:01:04 +0000 Manifest next update: Wed 21 Jan 2026 06:01:04 +0000 Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: 4BK+SRSZhO1OjRkxZ9YVPxUoPYg0wIF+gqKjYyeWOYY=) 2: VLzEBPYWpwlxw34UQJFFdOGntXc.roa (hash: MIMHe1Kmdz8phFSPAFOMKLvUlt1LLncBccV6RF4w1BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:fe:10:c6:23:29:a5:05:fc:11:77:36:f9:5f:19:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Validity Not Before: Jan 20 06:01:04 2026 GMT Not After : Jan 21 06:01:04 2026 GMT Subject: CN=55a465b577003c20e349c06fe5bfbac82c1670c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:51:69:a9:2a:2e:8a:1a:1e:2d:c5:5f:1c: b7:9f:f6:02:6b:01:2a:bf:b7:02:9e:ae:5c:06:03: c1:69:bf:0c:5c:04:38:a5:d6:66:19:c4:a1:0e:84: 29:43:64:5d:fa:0f:8d:84:3e:8c:16:e2:ab:90:f5: 97:dd:d1:e9:99:6b:d7:5d:a8:8a:a6:3e:05:61:14: 75:d2:17:14:ef:61:d7:41:24:14:35:63:31:21:0f: 82:38:db:36:6c:d3:f3:23:21:b2:dd:85:4c:bf:67: 7e:9b:d5:c8:08:40:d2:d7:d4:00:3e:8c:38:c0:5c: eb:b0:7a:65:37:93:d9:e2:38:be:cf:1a:3e:1f:94: 90:b8:0b:59:c9:bd:41:19:06:e4:e2:4d:9c:91:2c: 84:48:3e:85:a8:10:fd:3f:10:a0:c2:ed:a1:42:c3: 6f:5b:0e:67:24:b7:0a:31:c9:30:da:3c:91:b2:d7: de:7a:aa:80:c7:1d:1a:f8:c4:89:b7:11:b7:4d:04: 45:98:c3:06:0a:bd:60:68:b2:23:1b:bb:50:60:e7: 2c:88:57:6f:ce:e4:f6:75:fb:e0:ec:b1:26:e3:7a: 81:6e:c9:b4:39:65:48:f8:3a:3f:aa:75:c8:8f:6b: 94:f1:c6:1b:f3:60:44:2a:ef:02:38:e0:76:d0:c5: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:65:B5:77:00:3C:20:E3:49:C0:6F:E5:BF:BA:C8:2C:16:70:C7 X509v3 Authority Key Identifier: keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:1d:8d:76:a2:12:35:a4:de:0b:9c:5a:1d:28:f7:2e:c6:2a: b2:77:ad:f0:8f:e8:df:36:89:6c:fe:be:e2:27:d4:ac:4a:50: d1:f4:b4:f0:db:a4:9b:61:8f:97:2f:d3:f8:c5:dc:92:87:42: 2a:e8:4f:ba:6f:c5:f6:f9:a7:ab:1b:36:e7:dc:e3:20:c1:b2: 2a:2c:3b:63:47:b8:7a:c1:c6:df:29:28:69:38:b4:8b:61:87: 57:51:37:70:14:93:15:5d:3e:3f:ab:69:a0:1b:03:d0:a5:70: e7:b6:38:c7:b4:ea:21:b6:22:58:ce:3c:4b:19:77:d7:2a:70: e1:3f:16:c9:00:17:c8:1b:42:4f:1b:2e:f1:2a:5a:43:55:c1: 1a:eb:8f:4e:94:29:af:01:4a:30:f9:b9:ed:6c:3f:e1:44:28: 44:48:b8:63:b6:48:79:f2:b1:c3:68:99:e5:5c:9f:74:6f:9b: 25:f3:23:cb:f5:97:b2:f3:6e:ed:37:eb:22:61:92:62:df:13: 8f:41:36:08:f6:be:fd:df:e1:30:e7:9a:24:56:13:72:4c:3d: 56:c3:87:50:ff:84:11:c1:eb:92:a1:dd:f4:c9:1c:59:6d:1b: e3:bd:fa:d0:46:20:85:a4:9c:60:24:b7:7f:b9:d0:63:fe:16: 6d:94:3e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZ/hDGIymlBfwRdzb5XxnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NzRhZjFiYmRjNGNhNDgzYzY2OWM0ZmUwYmRkNzY0Yjhh YzE2NzUwHhcNMjYwMTIwMDYwMTA0WhcNMjYwMTIxMDYwMTA0WjAzMTEwLwYDVQQD Eyg1NWE0NjViNTc3MDAzYzIwZTM0OWMwNmZlNWJmYmFjODJjMTY3MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnhRaakqLooaHi3FXxy3n/YCawEq v7cCnq5cBgPBab8MXAQ4pdZmGcShDoQpQ2Rd+g+NhD6MFuKrkPWX3dHpmWvXXaiK pj4FYRR10hcU72HXQSQUNWMxIQ+CONs2bNPzIyGy3YVMv2d+m9XICEDS19QAPow4 wFzrsHplN5PZ4ji+zxo+H5SQuAtZyb1BGQbk4k2ckSyESD6FqBD9PxCgwu2hQsNv Ww5nJLcKMckw2jyRstfeeqqAxx0a+MSJtxG3TQRFmMMGCr1gaLIjG7tQYOcsiFdv zuT2dfvg7LEm43qBbsm0OWVI+Do/qnXIj2uU8cYb82BEKu8COOB20MVPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWkZbV3ADwg40nAb+W/usgsFnDHMB8GA1UdIwQY MBaAFEZ0rxu9xMpIPGacT+C912S4rBZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAt NTQ5MmUwZTRlYmMzLzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAtNTQ5MmUwZTRlYmMz LzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2B2NdqIS NaTeC5xaHSj3LsYqsnet8I/o3zaJbP6+4ifUrEpQ0fS08Nukm2GPly/T+MXckodC KuhPum/F9vmnqxs259zjIMGyKiw7Y0e4esHG3ykoaTi0i2GHV1E3cBSTFV0+P6tp oBsD0KVw57Y4x7TqIbYiWM48Sxl31ypw4T8WyQAXyBtCTxsu8SpaQ1XBGuuPTpQp rwFKMPm57Ww/4UQoREi4Y7ZIefKxw2iZ5VyfdG+bJfMjy/WXsvNu7TfrImGSYt8T j0E2CPa+/d/hMOeaJFYTckw9VsOHUP+EEcHrkqHd9MkcWW0b47360EYghaScYCS3 f7nQY/4WbZQ+1w== -----END CERTIFICATE-----Generated at Tue Jan 20 11:08:52 2026 by rpki-client