This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json) Hash identifier: gJfRN4CHqez1Nmbsz97kVoamptq41dbNcZ44vwXmThc= Subject key identifier: 74:93:46:71:C1:C5:93:B4:51:C4:0F:A4:1C:BC:EB:DE:43:12:D2:F8 Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698 Certificate serial: 019BADCB246A03770F1BEF422E52AD0D0D52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft Manifest number: 06B4 Signing time: Sun 11 Jan 2026 16:02:10 +0000 Manifest this update: Sun 11 Jan 2026 16:02:10 +0000 Manifest next update: Mon 12 Jan 2026 16:02:10 +0000 Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=) 2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=) 3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: bRctCLwxcVo5lqDBvl7fSQnk5aGk96TZccyj+oHSaPc=) 4: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:24:6a:03:77:0f:1b:ef:42:2e:52:ad:0d:0d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698 Validity Not Before: Jan 11 16:02:10 2026 GMT Not After : Jan 12 16:02:10 2026 GMT Subject: CN=74934671c1c593b451c40fa41cbcebde4312d2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:8c:cf:01:07:4c:58:87:dc:94:0b:ad:01: d8:1b:9c:27:ac:cd:84:f6:8a:19:1b:ef:7f:65:cf: b7:0d:72:a9:e1:bc:18:a4:09:ce:9f:8f:15:77:77: b0:6a:f0:10:bb:9f:0d:dc:84:ad:a5:54:5e:dc:39: 71:4a:38:0a:43:4a:4e:26:17:8e:55:22:33:9f:de: 13:69:f4:3d:3d:19:90:f8:e3:a8:b2:7d:c5:02:ce: 82:45:a6:36:c7:56:1b:a2:2f:03:93:45:7f:2b:7c: d7:0f:2f:89:c9:33:30:c0:9c:63:e7:da:37:35:98: 3f:42:59:e3:d1:b2:03:f6:88:e8:5c:bd:f8:63:c4: 9e:f9:9c:c6:28:58:dc:5f:46:dc:ad:2b:ed:8b:1c: 34:73:40:4a:61:0b:9f:bf:e6:36:58:90:3a:9b:ca: 8b:fb:cc:6d:d0:24:15:1c:a6:1f:94:5b:93:95:b3: 04:09:aa:79:e8:9c:2b:dd:b2:ce:6a:4e:e1:14:12: 9c:4f:a9:90:d6:13:0d:5a:c0:ab:0b:13:2d:40:93: cf:f1:c3:c6:6a:02:16:1c:a6:1f:36:f1:e3:02:27: f3:62:30:34:57:d5:1f:aa:01:a2:51:8e:83:74:c5: 91:4a:eb:b2:e6:7a:c8:f8:3c:1a:24:65:54:a8:63: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:46:71:C1:C5:93:B4:51:C4:0F:A4:1C:BC:EB:DE:43:12:D2:F8 X509v3 Authority Key Identifier: keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:c6:c3:92:1e:2f:e0:8e:a9:0f:77:9f:94:bc:8b:81:e8: 68:d1:a4:f4:b3:3f:60:62:e6:e3:90:0b:84:2a:27:60:1b:4d: ca:7e:01:b2:00:89:ff:13:de:4f:2b:67:de:c2:9a:b4:36:fa: ca:8a:15:7c:2e:39:11:ac:06:25:2d:b6:dc:7b:69:6f:26:14: a5:8a:83:25:0a:f0:ef:c5:bd:62:da:6f:12:ec:91:a0:ac:95: ce:10:cf:e5:3c:dc:30:81:4c:c2:ed:a2:29:21:a0:8e:49:72: ce:9d:9a:2a:11:0d:32:c1:c2:d2:af:3c:9b:93:d3:80:31:cf: bf:9d:62:79:7d:1d:dc:d8:6c:e9:52:26:ec:54:ab:f4:dd:13: 59:c6:18:1c:c3:ea:72:56:6f:7b:9e:9d:b8:18:b4:b3:16:fa: b8:72:5f:d1:10:f0:1e:74:e6:29:13:35:90:4d:cb:2a:2c:ad: 22:89:d5:8b:c1:48:0c:c9:da:1f:1a:88:4d:82:2e:d6:ec:43: 7b:8c:e7:bc:e8:94:d7:a3:bf:89:8b:4f:13:72:22:af:ab:d2: 1d:48:6a:e1:79:aa:e1:4e:e1:21:8f:ad:ce:ad:9e:da:46:74: 76:12:37:4c:e3:1b:22:dd:73:14:4c:8b:bf:de:54:e4:8a:8c: a1:b6:1b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutyyRqA3cPG+9CLlKtDQ1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh Mzk2OTgwHhcNMjYwMTExMTYwMjEwWhcNMjYwMTEyMTYwMjEwWjAzMTEwLwYDVQQD Eyg3NDkzNDY3MWMxYzU5M2I0NTFjNDBmYTQxY2JjZWJkZTQzMTJkMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9qMzwEHTFiH3JQLrQHYG5wnrM2E 9ooZG+9/Zc+3DXKp4bwYpAnOn48Vd3ewavAQu58N3IStpVRe3DlxSjgKQ0pOJheO VSIzn94TafQ9PRmQ+OOosn3FAs6CRaY2x1Yboi8Dk0V/K3zXDy+JyTMwwJxj59o3 NZg/Qlnj0bID9ojoXL34Y8Se+ZzGKFjcX0bcrSvtixw0c0BKYQufv+Y2WJA6m8qL +8xt0CQVHKYflFuTlbMECap56Jwr3bLOak7hFBKcT6mQ1hMNWsCrCxMtQJPP8cPG agIWHKYfNvHjAifzYjA0V9UfqgGiUY6DdMWRSuuy5nrI+DwaJGVUqGPYEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSTRnHBxZO0UcQPpBy8695DEtL4MB8GA1UdIwQY MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2 LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSzGw5Ie L+COqQ93n5S8i4HoaNGk9LM/YGLm45ALhConYBtNyn4BsgCJ/xPeTytn3sKatDb6 yooVfC45EawGJS223HtpbyYUpYqDJQrw78W9YtpvEuyRoKyVzhDP5TzcMIFMwu2i KSGgjklyzp2aKhENMsHC0q88m5PTgDHPv51ieX0d3Nhs6VIm7FSr9N0TWcYYHMPq clZve56duBi0sxb6uHJf0RDwHnTmKRM1kE3LKiytIonVi8FIDMnaHxqITYIu1uxD e4znvOiU16O/iYtPE3Iir6vSHUhq4Xmq4U7hIY+tzq2e2kZ0dhI3TOMbIt1zFEyL v95U5IqMobYbTw== -----END CERTIFICATE-----Generated at Sun Jan 11 18:17:31 2026 by rpki-client