This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json) Hash identifier: XCDgVtbZr+zJnP7AbnTeI9q/4mxnKh9torcP8toQot4= Subject key identifier: 5C:56:56:7F:7B:C1:5C:6C:DB:26:19:38:2F:E5:99:A8:55:BB:08:39 Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42 Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342 Certificate serial: 019B7FDEA5FE94623EBC5BEB8B3A6C1903E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft Manifest number: 05D1 Signing time: Fri 02 Jan 2026 18:00:56 +0000 Manifest this update: Fri 02 Jan 2026 18:00:56 +0000 Manifest next update: Sat 03 Jan 2026 18:00:56 +0000 Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=) 2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: gTppVNExomGYkwz1fBpRLT9InOqwBsx5CKEw4yXlHfM=) 3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:a5:fe:94:62:3e:bc:5b:eb:8b:3a:6c:19:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342 Validity Not Before: Jan 2 18:00:56 2026 GMT Not After : Jan 3 18:00:56 2026 GMT Subject: CN=5c56567f7bc15c6cdb2619382fe599a855bb0839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:ab:65:73:09:4d:fb:37:52:c7:95:64:c6: 6f:3f:9a:77:8d:27:9a:35:9a:65:bd:da:de:d3:ab: 6e:bf:7c:16:61:66:5d:ef:f0:61:43:36:93:77:3a: 04:cc:0e:15:b0:bc:8b:95:c4:0e:a7:8f:90:97:6e: fd:24:68:c2:c1:9a:61:64:2c:27:08:1f:f6:4d:f7: cc:e9:9a:6e:4c:ee:be:0e:29:e8:44:a1:05:bf:28: 9d:5b:b9:af:7a:f8:b5:fd:3b:64:d1:90:bb:e9:1b: 12:b0:d7:ff:1d:6c:b2:a7:8b:28:45:fb:92:57:84: 23:9a:c2:86:34:cb:1a:d0:f6:ce:b4:19:9f:09:ef: b7:ec:26:75:fa:f0:b9:a0:9f:a5:c7:b9:37:d9:70: 98:48:6c:9f:2b:40:99:da:6f:13:be:60:eb:5f:5d: 5d:ec:cf:1f:1e:88:20:d2:36:35:de:75:4b:01:4d: 08:6b:5e:e4:c8:46:85:ad:ab:48:7b:01:90:dd:b7: 5f:b6:80:bd:fc:70:40:c2:ee:c2:f7:92:ab:df:f6: f7:87:06:66:bb:6d:1d:5a:b6:82:d2:6f:78:5c:0d: 79:bc:96:c7:de:31:1d:eb:6a:22:bd:aa:96:d4:ae: 4c:da:14:72:5c:f4:44:e3:aa:51:0e:9d:60:e3:1e: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:56:7F:7B:C1:5C:6C:DB:26:19:38:2F:E5:99:A8:55:BB:08:39 X509v3 Authority Key Identifier: keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bf:e7:a7:07:61:84:0b:18:7f:80:75:51:89:c2:73:76:1b: 10:8d:a6:3c:b5:e6:76:83:f2:0e:d9:3e:08:8f:15:7e:ad:b4: b9:32:ea:8e:76:03:18:c0:63:aa:e5:1f:79:d6:01:5c:8e:b5: 87:22:f6:be:68:b9:63:db:c6:1f:17:18:76:d1:a2:29:a3:e4: 85:d9:3b:2e:06:dc:d5:43:09:7f:e6:7d:3b:73:31:5b:94:24: bf:fd:ef:cf:d4:46:e3:58:00:48:bc:e8:63:19:42:40:37:a8: ec:8f:7a:48:77:74:e4:77:0b:90:60:87:6c:cf:79:f1:4a:5c: 18:67:d2:17:9a:89:42:15:8f:b4:e4:f1:ae:c4:28:15:e9:ea: 95:4c:88:26:4b:ae:47:1c:07:67:6b:eb:55:be:d1:2d:53:b1: 6c:5c:59:07:82:c9:91:10:c3:98:64:14:d3:6d:fc:ad:65:7b: 57:60:90:ad:28:79:96:b8:2e:d0:e1:47:e6:42:80:99:21:f1: d7:eb:83:e1:e8:e8:57:af:ad:03:5d:fc:ed:88:6c:d5:a2:fd: b5:56:0f:69:5d:83:e8:59:1d:17:7a:0d:2d:4d:28:89:ca:60: 20:ee:0f:31:0e:d5:16:35:14:70:e3:9d:00:3d:f7:73:98:37: 65:13:41:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3qX+lGI+vFvrizpsGQPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0 ZDczNDIwHhcNMjYwMTAyMTgwMDU2WhcNMjYwMTAzMTgwMDU2WjAzMTEwLwYDVQQD Eyg1YzU2NTY3ZjdiYzE1YzZjZGIyNjE5MzgyZmU1OTlhODU1YmIwODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHSrZXMJTfs3UseVZMZvP5p3jSea NZplvdre06tuv3wWYWZd7/BhQzaTdzoEzA4VsLyLlcQOp4+Ql279JGjCwZphZCwn CB/2TffM6ZpuTO6+DinoRKEFvyidW7mvevi1/Ttk0ZC76RsSsNf/HWyyp4soRfuS V4QjmsKGNMsa0PbOtBmfCe+37CZ1+vC5oJ+lx7k32XCYSGyfK0CZ2m8TvmDrX11d 7M8fHogg0jY13nVLAU0Ia17kyEaFratIewGQ3bdftoC9/HBAwu7C95Kr3/b3hwZm u20dWraC0m94XA15vJbH3jEd62oivaqW1K5M2hRyXPRE46pRDp1g4x64nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxWVn97wVxs2yYZOC/lmahVuwg5MB8GA1UdIwQY MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0 LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr/npwdh hAsYf4B1UYnCc3YbEI2mPLXmdoPyDtk+CI8Vfq20uTLqjnYDGMBjquUfedYBXI61 hyL2vmi5Y9vGHxcYdtGiKaPkhdk7Lgbc1UMJf+Z9O3MxW5Qkv/3vz9RG41gASLzo YxlCQDeo7I96SHd05HcLkGCHbM958UpcGGfSF5qJQhWPtOTxrsQoFenqlUyIJkuu RxwHZ2vrVb7RLVOxbFxZB4LJkRDDmGQU0238rWV7V2CQrSh5lrgu0OFH5kKAmSHx 1+uD4ejoV6+tA1387Yhs1aL9tVYPaV2D6FkdF3oNLU0oicpgIO4PMQ7VFjUUcOOd AD33c5g3ZRNBpg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:52:28 2026 by rpki-client