This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json) Hash identifier: 4XUvGI1gKOfy1irhJHZT96+VBfJmMNIy5ZT7+sYXkJ4= Subject key identifier: C0:C9:8F:C6:85:44:87:82:BB:07:AA:71:43:BC:86:07:0D:98:54:4D Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Certificate serial: 019B7911AF8910BF7FE88AE97EED6B947E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft Manifest number: 0975 Signing time: Thu 01 Jan 2026 10:19:20 +0000 Manifest this update: Thu 01 Jan 2026 10:19:20 +0000 Manifest next update: Fri 02 Jan 2026 10:19:20 +0000 Files and hashes: 1: DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa (hash: GhWbmT/ccSmGK7MXgJ3YFU4Byveo2K+FzqXT4zrtxYs=) 2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: 17WrXDmDZhvxI2KVcTlFTAwMYbxjvoC2AiDAK26BI+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:af:89:10:bf:7f:e8:8a:e9:7e:ed:6b:94:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Validity Not Before: Jan 1 10:19:20 2026 GMT Not After : Jan 2 10:19:20 2026 GMT Subject: CN=c0c98fc685448782bb07aa7143bc86070d98544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:9f:55:78:30:a7:92:02:e6:ae:94:a6:05: 64:b9:0e:96:7e:a8:15:b8:06:22:80:a4:7c:1c:41: 12:ab:22:9f:a7:a2:51:4b:d6:74:4a:8a:40:4d:2f: 08:e2:3c:20:03:bd:a5:f3:6e:df:25:ce:f6:67:db: dc:09:01:f1:08:cb:d4:bf:b8:e3:f7:d5:3a:65:79: 5f:c4:56:17:e6:f1:6e:bf:a3:37:8b:e9:68:7e:9b: 48:ad:12:f0:9b:75:df:ec:97:b3:25:a4:05:6b:fb: f3:30:df:c8:90:9c:86:4a:4d:9e:fe:77:80:6e:fa: 70:c7:c6:0d:3d:10:8a:1e:a5:8c:57:a2:57:a1:c0: 97:04:fc:eb:e4:7d:7a:cf:6c:e7:08:92:4f:5d:06: 7e:0d:3b:31:45:1f:85:3c:80:3e:4e:ea:71:1c:f3: 66:49:54:26:fd:2d:3b:5d:ba:79:60:63:07:25:e9: 53:e9:b9:8f:45:e2:5a:48:06:20:47:70:c6:aa:3a: 7d:3b:32:83:83:ab:f5:bd:6e:09:87:84:b1:94:a6: 49:e8:15:18:bf:40:4e:82:f7:c9:f3:70:6b:8b:c0: 3e:be:ff:68:75:b4:69:23:76:20:f2:4a:25:75:ca: de:c4:22:a4:f9:9f:9c:bb:b4:dd:cf:4b:35:5f:b6: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C9:8F:C6:85:44:87:82:BB:07:AA:71:43:BC:86:07:0D:98:54:4D X509v3 Authority Key Identifier: keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:a6:95:c2:0f:ba:36:52:0d:52:f2:a9:e2:40:0f:82:4a: e2:1a:a3:eb:61:cd:7b:ea:d0:db:08:17:5f:7c:3e:4d:fe:82: d1:1f:31:8d:a6:21:27:23:76:8f:99:ca:23:47:f6:90:c7:6c: a3:35:f4:df:7a:bf:54:d0:d2:0e:b6:8f:83:a7:27:13:3c:18: d0:01:f9:c5:ed:8c:23:e6:b2:80:d7:44:91:f5:da:fd:78:55: 1f:67:e0:41:6b:1a:3f:8d:25:52:4e:0a:c4:73:af:c3:38:21: 17:23:f2:7d:77:3c:d9:28:1a:ce:3b:8a:bb:26:28:87:11:41: 28:a8:a7:2a:86:65:fe:cc:93:e4:4a:7e:2a:92:27:ae:b9:4d: 46:1c:2a:ce:38:36:3c:a9:84:e6:61:f9:a9:59:23:1b:0f:0b: 87:f5:35:11:c5:53:e7:2d:68:52:89:39:57:7a:db:fc:e6:c1: a8:93:c3:ff:cf:0f:ad:50:bc:85:3b:fd:30:db:b3:9a:f4:60: 67:93:23:45:0b:f3:30:37:65:ce:09:74:9a:07:44:a1:f0:54: 57:3f:17:6d:6e:78:d9:c7:6f:f2:88:91:a8:e7:9b:52:70:25: 38:23:d7:60:cf:c8:8f:d1:a7:94:ad:64:f7:8b:26:04:bd:7b: 17:5c:f2:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5Ea+JEL9/6Irpfu1rlH4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNGZiZTU1OTQ3MDdmZGNmOTQwMjVlYTE1NTcxYTY4YzI0 ZGE5YWIwHhcNMjYwMTAxMTAxOTIwWhcNMjYwMTAyMTAxOTIwWjAzMTEwLwYDVQQD EyhjMGM5OGZjNjg1NDQ4NzgyYmIwN2FhNzE0M2JjODYwNzBkOTg1NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hCfVXgwp5IC5q6UpgVkuQ6WfqgV uAYigKR8HEESqyKfp6JRS9Z0SopATS8I4jwgA72l827fJc72Z9vcCQHxCMvUv7jj 99U6ZXlfxFYX5vFuv6M3i+lofptIrRLwm3Xf7JezJaQFa/vzMN/IkJyGSk2e/neA bvpwx8YNPRCKHqWMV6JXocCXBPzr5H16z2znCJJPXQZ+DTsxRR+FPIA+TupxHPNm SVQm/S07Xbp5YGMHJelT6bmPReJaSAYgR3DGqjp9OzKDg6v1vW4Jh4SxlKZJ6BUY v0BOgvfJ83Bri8A+vv9odbRpI3Yg8koldcrexCKk+Z+cu7Tdz0s1X7ZCowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDJj8aFRIeCuweqcUO8hgcNmFRNMB8GA1UdIwQY MBaAFH1PvlWUcH/c+UAl6hVXGmjCTamrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMt N2M3MzA1OTI3OGVmLzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMtN2M3MzA1OTI3OGVm LzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJemlcIP ujZSDVLyqeJAD4JK4hqj62HNe+rQ2wgXX3w+Tf6C0R8xjaYhJyN2j5nKI0f2kMds ozX033q/VNDSDraPg6cnEzwY0AH5xe2MI+aygNdEkfXa/XhVH2fgQWsaP40lUk4K xHOvwzghFyPyfXc82SgazjuKuyYohxFBKKinKoZl/syT5Ep+KpInrrlNRhwqzjg2 PKmE5mH5qVkjGw8Lh/U1EcVT5y1oUok5V3rb/ObBqJPD/88PrVC8hTv9MNuzmvRg Z5MjRQvzMDdlzgl0mgdEofBUVz8XbW542cdv8oiRqOebUnAlOCPXYM/Ij9GnlK1k 94smBL17F1zy9g== -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:18 2026 by rpki-client