This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json) Hash identifier: I0LKUkFIMlyughqGfE4JZdsfujaTALb56beKOiXjfYg= Subject key identifier: 09:00:25:4E:CD:37:15:ED:3F:28:70:EC:FA:59:24:B3:F6:B5:E4:E0 Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df Certificate serial: 019B785BE7B5D0262D2586B42DC4EB8F8B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft Manifest number: 13C7 Signing time: Thu 01 Jan 2026 07:00:47 +0000 Manifest this update: Thu 01 Jan 2026 07:00:47 +0000 Manifest next update: Fri 02 Jan 2026 07:00:47 +0000 Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: 2VHWBq0jertL//pLTtUwzQC3AeT9pZ8Oaf4XgZT19Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:e7:b5:d0:26:2d:25:86:b4:2d:c4:eb:8f:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df Validity Not Before: Jan 1 07:00:47 2026 GMT Not After : Jan 2 07:00:47 2026 GMT Subject: CN=0900254ecd3715ed3f2870ecfa5924b3f6b5e4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:a4:03:ef:fc:62:fa:37:2a:33:dc:0f:3a: c0:ca:66:3c:a7:95:6f:67:0e:84:99:83:0c:d4:73: fe:9b:dd:6a:2f:64:03:d6:34:e3:0f:c4:01:70:e5: 8a:f8:ef:1e:68:48:f1:8f:5d:ae:49:b1:4d:f3:bd: 65:be:99:18:8b:fd:64:13:f4:6c:f2:d6:57:21:e0: 3d:85:ad:cd:29:53:fb:d7:a9:d3:16:0b:ac:1e:ce: d8:29:ad:41:58:f7:f7:63:e3:34:39:df:3a:6e:dc: 69:ad:70:5e:02:9a:e9:e1:50:2a:e7:2d:e3:5f:e7: 58:f6:f9:5b:49:97:1b:4e:99:b1:e5:a8:f7:f7:fe: 27:a0:c7:0d:66:6d:bd:d1:d2:08:93:0f:4f:4e:a1: 10:52:da:6d:95:1d:a5:9e:34:69:8b:b7:c9:fe:50: 2e:12:57:2f:c6:60:17:53:91:43:6a:41:35:d5:ee: a0:76:37:db:57:57:5e:90:92:b9:b5:36:33:ad:26: af:cd:bd:47:70:46:81:f7:36:74:2d:66:f5:df:be: ec:54:5e:5b:6b:bc:b5:79:4c:c6:58:13:a4:67:6c: a2:4d:60:4b:4a:2a:ac:a0:ce:ec:61:3a:5b:9c:5b: d7:1d:53:7e:b6:43:18:23:90:cc:1e:74:cc:8d:b8: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:00:25:4E:CD:37:15:ED:3F:28:70:EC:FA:59:24:B3:F6:B5:E4:E0 X509v3 Authority Key Identifier: keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d3:ea:22:df:65:5f:92:95:6b:d4:3f:6f:4b:59:ab:38:8a: d8:bc:0a:80:03:b2:2a:15:a9:86:82:f3:7d:b4:1b:67:63:69: 03:71:2a:4f:fd:79:ba:3d:30:81:ee:a7:e4:ee:6d:66:c1:60: 56:aa:8d:ce:bc:d4:e4:5a:44:dd:db:85:77:19:78:83:0b:75: e5:fc:5a:97:7e:6b:a9:e9:b2:40:59:4e:7b:f9:e4:86:40:0b: d4:12:6e:dd:a6:a2:0d:27:13:08:2d:0e:90:db:b0:9e:2a:ab: a4:d9:1f:e6:9a:e6:7a:4f:2b:2b:b1:fc:71:a2:97:35:23:2f: cc:bc:09:21:00:33:08:cd:69:be:7a:e2:c9:1b:f6:d6:13:23: d3:9a:00:97:eb:c5:a5:00:48:64:80:d5:40:d3:0f:6d:f3:98: b4:ec:28:35:3a:a4:f1:8f:8a:3c:68:ab:b8:fe:6d:07:3c:94: 92:fd:a7:6b:23:29:64:e3:a6:78:2f:d6:9f:b9:80:9c:72:22: 19:5b:0f:8a:5e:28:6f:c9:98:f8:ed:b8:97:5e:7f:9f:5f:74: 13:7e:3a:93:cf:5b:13:f7:9a:b2:e7:cc:64:5c:90:af:8a:46: de:7d:a9:87:83:87:54:f1:92:6b:0c:fe:ce:fe:cc:5a:67:7b: 31:14:be:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W+e10CYtJYa0LcTrj4sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjE1MmI2YTBkMDA0NjI3ZDI4NWQ4NzlhYTgzZTU4NDYx YWIyZGYwHhcNMjYwMTAxMDcwMDQ3WhcNMjYwMTAyMDcwMDQ3WjAzMTEwLwYDVQQD EygwOTAwMjU0ZWNkMzcxNWVkM2YyODcwZWNmYTU5MjRiM2Y2YjVlNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ekA+/8Yvo3KjPcDzrAymY8p5Vv Zw6EmYMM1HP+m91qL2QD1jTjD8QBcOWK+O8eaEjxj12uSbFN871lvpkYi/1kE/Rs 8tZXIeA9ha3NKVP716nTFgusHs7YKa1BWPf3Y+M0Od86btxprXBeAprp4VAq5y3j X+dY9vlbSZcbTpmx5aj39/4noMcNZm290dIIkw9PTqEQUtptlR2lnjRpi7fJ/lAu ElcvxmAXU5FDakE11e6gdjfbV1dekJK5tTYzrSavzb1HcEaB9zZ0LWb1377sVF5b a7y1eUzGWBOkZ2yiTWBLSiqsoM7sYTpbnFvXHVN+tkMYI5DMHnTMjbh/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkAJU7NNxXtPyhw7PpZJLP2teTgMB8GA1UdIwQY MBaAFMXxUrag0ARifShdh5qoPlhGGrLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYt NzM3ZTc4Yzg3MDEyLzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYtNzM3ZTc4Yzg3MDEy LzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9PqIt9l X5KVa9Q/b0tZqziK2LwKgAOyKhWphoLzfbQbZ2NpA3EqT/15uj0wge6n5O5tZsFg VqqNzrzU5FpE3duFdxl4gwt15fxal35rqemyQFlOe/nkhkAL1BJu3aaiDScTCC0O kNuwniqrpNkf5prmek8rK7H8caKXNSMvzLwJIQAzCM1pvnriyRv21hMj05oAl+vF pQBIZIDVQNMPbfOYtOwoNTqk8Y+KPGiruP5tBzyUkv2nayMpZOOmeC/Wn7mAnHIi GVsPil4ob8mY+O24l15/n190E346k89bE/easufMZFyQr4pG3n2ph4OHVPGSawz+ zv7MWmd7MRS+Bg== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:45 2026 by rpki-client