This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft File: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft (raw, json) Hash identifier: wCku1VcubvdqV1jE6bxpLbsiuIhnmP0ltIFszfFUmBQ= Subject key identifier: 2B:25:E8:1B:EA:2C:FC:75:53:02:DB:FA:8D:20:E7:66:9A:B3:3C:7F Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6 Certificate issuer: /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6 Certificate serial: 019BF318C036CCF1079E2F326EE8C8983F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft Manifest number: 47 Signing time: Sun 25 Jan 2026 03:00:44 +0000 Manifest this update: Sun 25 Jan 2026 03:00:44 +0000 Manifest next update: Mon 26 Jan 2026 03:00:44 +0000 Files and hashes: 1: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl (hash: HpIfsK0KipQ3baRipS6jJKw+aSbckGni4+XrFYiXEYs=) 2: _d50tgZOaaHxAsvsHHjmYCktf-E.asa (hash: OHNXsl9BXwPqg9JQv0/mmVOU1cOIGA7WbshHHxiswuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:c0:36:cc:f1:07:9e:2f:32:6e:e8:c8:98:3f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6 Validity Not Before: Jan 25 03:00:44 2026 GMT Not After : Jan 26 03:00:44 2026 GMT Subject: CN=2b25e81bea2cfc755302dbfa8d20e7669ab33c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:ef:f5:d5:bf:a2:22:8a:db:32:77:cb:ef: a7:df:51:de:95:59:60:8e:1c:d6:f5:ed:1b:d6:d5: 71:7b:c2:b9:70:d7:6b:6f:e3:10:f1:cd:86:46:ba: cf:1f:35:c2:67:62:bf:70:85:70:50:b6:10:5e:57: a5:2c:9a:44:14:42:6f:b4:18:da:92:2d:db:70:7c: f1:b9:85:41:3c:9d:85:0a:df:5c:27:a0:6e:c5:cc: e3:f5:63:90:4d:7f:89:28:4a:e3:be:b9:27:0a:2f: a6:6c:33:37:a4:59:9c:52:8e:5b:1d:62:31:5c:66: cc:3a:6d:a1:c8:2f:dd:fb:52:1d:f2:08:a7:c1:9b: fd:09:fd:85:16:aa:ff:64:bc:af:cd:3b:18:90:ca: 01:b7:1c:98:09:9e:4b:20:a6:d2:e3:7d:d4:b8:62: e5:ad:77:a8:02:83:a5:61:39:5d:da:76:69:30:11: 8d:d4:0b:42:0c:9d:3c:4f:16:0b:4c:d9:31:b2:9c: 6a:53:c4:cb:41:cb:0c:f0:d6:24:06:18:00:81:7a: 10:41:be:a8:1a:48:ec:dc:74:d1:d2:e7:12:62:81: 7e:3f:30:df:51:10:64:f2:05:20:c6:c7:85:aa:d7: 4e:eb:59:7f:e7:ec:c3:f1:62:40:b3:35:b1:77:ab: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:E8:1B:EA:2C:FC:75:53:02:DB:FA:8D:20:E7:66:9A:B3:3C:7F X509v3 Authority Key Identifier: keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:db:c1:d3:4b:ce:8f:53:e2:bb:7f:68:60:23:c8:d7:43:01: 42:a1:49:ae:18:76:23:c2:e7:f1:65:4e:98:94:5e:e0:9c:12: 31:c8:63:e2:39:51:a3:4a:08:28:78:31:4c:a9:7e:82:f9:50: b7:2b:03:24:52:11:3d:db:bf:ea:2b:2c:dd:17:c1:a9:e4:0c: 20:f0:1f:af:77:57:84:18:2f:20:3a:3d:ed:5d:e2:82:13:17: 71:24:13:d0:02:ba:a8:a3:d6:a3:63:cf:c3:2d:c9:1d:28:34: 57:33:46:20:d5:06:09:f8:09:46:90:1c:b7:b2:62:43:e6:97: eb:00:25:20:5a:74:0c:4a:ea:bc:2c:ce:13:61:da:42:e6:b0: e5:c3:8b:35:1c:a4:13:27:4a:cd:70:6d:e3:af:29:66:cf:12: 72:b5:74:fb:91:ef:95:a7:a9:99:a0:82:f8:3b:89:64:c7:41: 00:99:1d:3a:c1:dd:51:37:a8:2d:da:65:6f:79:1d:d7:22:a0: 2c:4e:a3:8d:29:36:64:91:82:29:5b:df:20:df:a6:54:15:c9: ac:ac:68:06:e6:78:a4:b6:30:20:cf:15:e7:b5:56:80:12:ed: 3d:d0:05:1c:41:d4:d7:e0:ee:a9:e6:a4:9c:e6:36:9a:30:3d: 4a:8c:b4:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGMA2zPEHni8ybujImD9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2JiYzgxNzk2MTUxOWNhNWEzMThlODRlNzVhZDliYjNk Y2M3ZTYwHhcNMjYwMTI1MDMwMDQ0WhcNMjYwMTI2MDMwMDQ0WjAzMTEwLwYDVQQD EygyYjI1ZTgxYmVhMmNmYzc1NTMwMmRiZmE4ZDIwZTc2NjlhYjMzYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslrv9dW/oiKK2zJ3y++n31HelVlg jhzW9e0b1tVxe8K5cNdrb+MQ8c2GRrrPHzXCZ2K/cIVwULYQXlelLJpEFEJvtBja ki3bcHzxuYVBPJ2FCt9cJ6Buxczj9WOQTX+JKErjvrknCi+mbDM3pFmcUo5bHWIx XGbMOm2hyC/d+1Id8ginwZv9Cf2FFqr/ZLyvzTsYkMoBtxyYCZ5LIKbS433UuGLl rXeoAoOlYTld2nZpMBGN1AtCDJ08TxYLTNkxspxqU8TLQcsM8NYkBhgAgXoQQb6o Gkjs3HTR0ucSYoF+PzDfURBk8gUgxseFqtdO61l/5+zD8WJAszWxd6v7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsl6BvqLPx1UwLb+o0g52aaszx/MB8GA1UdIwQY MBaAFAA7vIF5YVGcpaMY6E51rZuz3MfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt MTQyMWQ3YzU0ZmE1LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1 LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudvB00vO j1Piu39oYCPI10MBQqFJrhh2I8Ln8WVOmJRe4JwSMchj4jlRo0oIKHgxTKl+gvlQ tysDJFIRPdu/6iss3RfBqeQMIPAfr3dXhBgvIDo97V3ighMXcSQT0AK6qKPWo2PP wy3JHSg0VzNGINUGCfgJRpAct7JiQ+aX6wAlIFp0DErqvCzOE2HaQuaw5cOLNRyk EydKzXBt468pZs8ScrV0+5HvlaepmaCC+DuJZMdBAJkdOsHdUTeoLdplb3kd1yKg LE6jjSk2ZJGCKVvfIN+mVBXJrKxoBuZ4pLYwIM8V57VWgBLtPdAFHEHU1+Duqeak nOY2mjA9Soy0dw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:59 2026 by rpki-client