This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json) Hash identifier: 2Lqz4bY1G9Q0uO350QaWGPatI3KXgjfyNCwh+1hGMHU= Subject key identifier: C1:14:7A:32:E3:4C:B9:56:33:40:DF:EF:5F:4B:99:35:7A:F4:86:36 Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Certificate serial: 019B815F447EC7E002CD189F2C6E89E61E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft Manifest number: 173D Signing time: Sat 03 Jan 2026 01:01:02 +0000 Manifest this update: Sat 03 Jan 2026 01:01:02 +0000 Manifest next update: Sun 04 Jan 2026 01:01:02 +0000 Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: Jn1YBeYTbWwlJ3327NouDP4MomVrcBZqSZ+7/bVpPWk=) 2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:5f:44:7e:c7:e0:02:cd:18:9f:2c:6e:89:e6:1e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Validity Not Before: Jan 3 01:01:02 2026 GMT Not After : Jan 4 01:01:02 2026 GMT Subject: CN=c1147a32e34cb9563340dfef5f4b99357af48636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:23:05:f4:7b:29:db:3d:a6:c6:9c:cb:dc: 77:2b:8b:c5:f9:e1:b6:a1:72:36:25:5f:ec:e8:b2: dc:68:09:27:cb:19:c0:dd:00:c7:df:98:4a:63:d3: ca:39:2c:02:1f:d8:d6:11:56:06:84:06:cf:c0:20: 4d:e0:e0:ae:04:d5:5c:fc:12:5a:07:a4:a9:b6:4f: 41:11:01:89:37:26:e2:bf:8c:22:a1:0a:54:9c:ec: ce:f7:37:c4:90:ae:76:fb:5a:48:ad:62:b9:f5:47: ae:6b:39:df:dd:3b:b6:00:e4:67:aa:54:52:4e:9f: 0f:9b:bb:ec:03:b8:ef:1a:22:ff:28:71:df:19:fe: 72:da:06:05:43:6d:51:3d:56:15:ce:90:80:a5:16: c9:02:38:b2:ca:b3:58:9f:a5:a8:9b:3d:f2:72:53: 67:35:1c:a3:a9:2a:3d:17:fa:91:00:b3:cc:33:1f: 94:f7:c9:25:82:5e:4a:dc:62:67:00:0d:37:90:a1: 52:27:3a:e6:7b:91:4a:ed:97:37:f9:c4:4f:3d:d3: e5:55:e3:5d:c2:e1:b0:f2:bd:ff:f5:5a:02:16:c6: 71:89:14:3f:27:35:97:31:75:1c:ab:62:fc:1c:4c: 0a:f4:f7:da:a0:64:1d:62:96:0a:ff:7e:9a:5e:00: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:7A:32:E3:4C:B9:56:33:40:DF:EF:5F:4B:99:35:7A:F4:86:36 X509v3 Authority Key Identifier: keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:36:30:b8:c9:f2:ff:ec:a5:99:45:96:f4:3f:03:c3:77:51: 0b:2e:71:b7:46:79:75:0f:99:26:c8:c1:5f:ad:28:51:a3:4d: 48:e8:f2:35:51:53:13:d7:ad:ec:8a:c5:06:18:8f:52:6b:f0: 87:5c:42:3d:c0:4c:c1:f2:b0:12:5f:a9:46:81:cd:c2:b2:dd: 39:7d:fa:b3:69:73:81:f7:cd:2d:16:9f:bc:7a:19:82:ff:a4: bc:bb:11:0c:1a:3b:b5:7f:1a:24:2c:2d:f5:77:e1:04:e1:72: 5d:d6:0f:b3:47:19:2b:47:8a:57:9d:a7:85:68:b9:0f:cd:80: e2:a0:73:92:d9:a0:30:22:3b:9f:ad:e5:c3:6c:50:0c:1a:9e: ec:a3:3b:ed:8f:7a:15:7c:22:58:8c:8a:99:c6:3f:75:bd:ce: 7c:ea:9d:b7:dc:8b:b7:d2:58:4c:9d:3f:14:50:a8:b4:2d:8f: bc:09:f1:3f:0e:82:37:ed:05:d0:6b:ac:38:13:d5:1b:ac:c5: 79:96:81:2e:66:ed:bc:33:30:f3:67:5d:84:af:d2:34:14:43: 3a:f7:21:63:05:44:b1:36:0c:de:6c:ab:f6:e1:4c:f8:d3:d6: e8:9b:7c:96:90:3e:95:4b:1a:3c:14:77:be:a1:9a:cc:80:aa: 66:8f:9b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBX0R+x+ACzRifLG6J5h5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy MzEzZjIwHhcNMjYwMTAzMDEwMTAyWhcNMjYwMTA0MDEwMTAyWjAzMTEwLwYDVQQD EyhjMTE0N2EzMmUzNGNiOTU2MzM0MGRmZWY1ZjRiOTkzNTdhZjQ4NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWwjBfR7Kds9psacy9x3K4vF+eG2 oXI2JV/s6LLcaAknyxnA3QDH35hKY9PKOSwCH9jWEVYGhAbPwCBN4OCuBNVc/BJa B6Sptk9BEQGJNybiv4wioQpUnOzO9zfEkK52+1pIrWK59Ueuaznf3Tu2AORnqlRS Tp8Pm7vsA7jvGiL/KHHfGf5y2gYFQ21RPVYVzpCApRbJAjiyyrNYn6Womz3yclNn NRyjqSo9F/qRALPMMx+U98klgl5K3GJnAA03kKFSJzrme5FK7Zc3+cRPPdPlVeNd wuGw8r3/9VoCFsZxiRQ/JzWXMXUcq2L8HEwK9PfaoGQdYpYK/36aXgAkUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEUejLjTLlWM0Df719LmTV69IY2MB8GA1UdIwQY MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt Mjg5NzhjM2M3ZWM1LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1 LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDYwuMny /+ylmUWW9D8Dw3dRCy5xt0Z5dQ+ZJsjBX60oUaNNSOjyNVFTE9et7IrFBhiPUmvw h1xCPcBMwfKwEl+pRoHNwrLdOX36s2lzgffNLRafvHoZgv+kvLsRDBo7tX8aJCwt 9XfhBOFyXdYPs0cZK0eKV52nhWi5D82A4qBzktmgMCI7n63lw2xQDBqe7KM77Y96 FXwiWIyKmcY/db3OfOqdt9yLt9JYTJ0/FFCotC2PvAnxPw6CN+0F0GusOBPVG6zF eZaBLmbtvDMw82ddhK/SNBRDOvchYwVEsTYM3myr9uFM+NPW6Jt8lpA+lUsaPBR3 vqGazICqZo+bZA== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:13 2026 by rpki-client