This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json) Hash identifier: tH+RCklJsQCIv1sjLxvi06W3CWvx4IaFDsWlLaX25Us= Subject key identifier: 95:B7:75:96:E4:67:2B:D1:F6:78:B6:B7:FC:3C:B6:D8:E7:7A:C5:11 Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3 Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3 Certificate serial: 019BA2A2363D3167AE7CCAF12E59E38F77EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft Manifest number: 02C8 Signing time: Fri 09 Jan 2026 12:01:37 +0000 Manifest this update: Fri 09 Jan 2026 12:01:37 +0000 Manifest next update: Sat 10 Jan 2026 12:01:37 +0000 Files and hashes: 1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=) 2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: RkgeWy3xan053RssuwlI7lrgQl1/bHFgaieg03zjPeg=) 3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a2:36:3d:31:67:ae:7c:ca:f1:2e:59:e3:8f:77:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3 Validity Not Before: Jan 9 12:01:37 2026 GMT Not After : Jan 10 12:01:37 2026 GMT Subject: CN=95b77596e4672bd1f678b6b7fc3cb6d8e77ac511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:c7:00:0f:22:b8:4a:34:a5:06:c4:59:55: 0e:6a:19:c2:3d:e0:7e:9f:1c:df:6f:a9:9c:f0:32: 84:ad:e9:09:b8:39:0d:14:a3:72:da:eb:3c:fd:a3: a4:8d:65:7d:95:9c:3c:92:c5:0f:9f:cc:f5:39:49: a7:58:6e:be:59:d1:c9:e6:1b:25:73:85:3e:d4:52: ad:bc:fd:e5:15:86:3e:e4:89:d3:14:9f:80:57:08: cd:8a:b9:8d:42:f1:94:7c:57:df:64:7e:43:02:e3: 13:d6:82:39:39:67:ea:ca:52:5c:47:69:8d:5f:4d: a5:04:c2:27:b9:53:a3:9f:d4:46:c5:05:e7:5a:8c: 2f:c8:a7:f0:9c:f0:1a:9d:1f:4e:4e:bc:4c:ca:64: 22:56:36:ef:07:08:bd:06:a2:02:92:fb:97:1c:5b: 2f:f7:8f:0b:02:3f:73:da:4f:40:e8:74:83:e7:e0: 8f:47:1c:21:df:c1:93:4f:c5:f2:c2:36:ee:d3:7c: da:22:66:21:f2:8b:81:8a:ee:2d:72:84:12:98:9d: 01:78:25:9d:66:62:b3:f0:66:13:9a:3a:2e:b7:97: 12:0d:02:ef:8e:44:78:a1:09:83:3e:a2:e4:7a:3a: d4:c5:5e:eb:ec:63:cc:b6:2f:51:c9:0a:c2:ba:fa: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B7:75:96:E4:67:2B:D1:F6:78:B6:B7:FC:3C:B6:D8:E7:7A:C5:11 X509v3 Authority Key Identifier: keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:d1:35:7a:d1:d3:dd:66:27:35:35:2e:d5:4d:18:e1:96: 19:0c:d8:52:dc:0f:21:54:7a:04:be:95:03:04:74:34:68:c3: 13:d9:99:9f:5a:14:b9:e3:12:23:9e:9f:f1:fd:d7:de:b3:1e: 46:43:84:d1:18:a6:01:02:d8:a4:d6:04:20:b5:2d:dd:3a:a4: 3d:1d:95:ef:3d:c4:1c:d4:ea:c9:2a:52:05:5c:41:a7:74:03: 20:f0:84:47:e3:fd:8e:4a:cb:7a:20:f2:a1:81:cc:65:35:01: a3:f8:8e:f7:3d:6b:bf:1b:48:1e:8b:e5:fa:2c:d4:05:5b:24: fd:6f:de:e1:a8:1b:25:6b:d0:8a:de:8d:83:ea:f6:16:91:8c: 4b:9a:1a:91:8d:29:e2:d5:58:84:8b:7b:8c:26:5d:78:31:d8: db:6f:75:8e:73:67:54:a5:f1:0e:68:ec:83:71:80:9f:8e:aa: 7d:97:5d:bb:72:07:d2:c5:76:d6:d1:8b:56:b4:70:98:c9:94: 2f:39:76:0e:16:df:c0:d2:1b:c0:75:6c:5e:86:6b:a8:73:6c: 54:78:7d:91:85:6b:0d:e9:b7:d0:11:73:28:14:0b:04:80:68: 15:3c:6c:be:16:b9:b1:1a:12:f1:b1:62:95:d9:c9:c6:bb:bd: fb:e0:b6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiojY9MWeufMrxLlnjj3fqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZDM0ZmQwNDhiNTk3YjNlNWY3ZGE4OWRmZTY0NjU3Njk3 ZThlZTMwHhcNMjYwMTA5MTIwMTM3WhcNMjYwMTEwMTIwMTM3WjAzMTEwLwYDVQQD Eyg5NWI3NzU5NmU0NjcyYmQxZjY3OGI2YjdmYzNjYjZkOGU3N2FjNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspTHAA8iuEo0pQbEWVUOahnCPeB+ nxzfb6mc8DKErekJuDkNFKNy2us8/aOkjWV9lZw8ksUPn8z1OUmnWG6+WdHJ5hsl c4U+1FKtvP3lFYY+5InTFJ+AVwjNirmNQvGUfFffZH5DAuMT1oI5OWfqylJcR2mN X02lBMInuVOjn9RGxQXnWowvyKfwnPAanR9OTrxMymQiVjbvBwi9BqICkvuXHFsv 948LAj9z2k9A6HSD5+CPRxwh38GTT8Xywjbu03zaImYh8ouBiu4tcoQSmJ0BeCWd ZmKz8GYTmjout5cSDQLvjkR4oQmDPqLkejrUxV7r7GPMti9RyQrCuvqoHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW3dZbkZyvR9ni2t/w8ttjnesURMB8GA1UdIwQY MBaAFEXTT9BItZez5ffaid/mRldpfo7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2It ODQzOTQ4Y2JmYjgxLzEvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2ItODQzOTQ4Y2JmYjgx LzEvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNzRNXrR 091mJzU1LtVNGOGWGQzYUtwPIVR6BL6VAwR0NGjDE9mZn1oUueMSI56f8f3X3rMe RkOE0RimAQLYpNYEILUt3TqkPR2V7z3EHNTqySpSBVxBp3QDIPCER+P9jkrLeiDy oYHMZTUBo/iO9z1rvxtIHovl+izUBVsk/W/e4agbJWvQit6Ng+r2FpGMS5oakY0p 4tVYhIt7jCZdeDHY2291jnNnVKXxDmjsg3GAn46qfZddu3IH0sV21tGLVrRwmMmU Lzl2DhbfwNIbwHVsXoZrqHNsVHh9kYVrDem30BFzKBQLBIBoFTxsvha5sRoS8bFi ldnJxru9++C2BQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:31 2026 by rpki-client