This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json) Hash identifier: r9dhMHEVA/ScoQYhsOjlLyD9xTa3UxbByW9QuZL9AgM= Subject key identifier: 58:46:6D:EE:49:F7:D1:2A:37:F7:B7:7F:1F:81:77:81:98:1E:D6:7A Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Certificate serial: 019B7C38BDCE41038B4CB999381509C4B857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 01:00:51 +0000 Manifest this update: Fri 02 Jan 2026 01:00:51 +0000 Manifest next update: Sat 03 Jan 2026 01:00:51 +0000 Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 2Ydo0kV8QxKS6YnXa04eh6W/axeIpfdXE622oWo5uyk=) 2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:38:bd:ce:41:03:8b:4c:b9:99:38:15:09:c4:b8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Validity Not Before: Jan 2 01:00:51 2026 GMT Not After : Jan 3 01:00:51 2026 GMT Subject: CN=58466dee49f7d12a37f7b77f1f817781981ed67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:fe:46:08:17:d0:5b:37:22:cd:9d:c2:2f: c2:b1:fa:e1:6b:a5:4f:e1:09:9e:e2:d3:71:98:2b: 3d:75:c4:77:47:59:35:2a:aa:ae:d2:b4:04:39:81: 30:45:10:c8:8c:00:60:78:e6:2d:b7:7a:71:bb:10: 1c:ce:5b:8c:2c:90:f9:fa:d2:07:31:cb:52:20:ab: a9:06:22:df:76:4e:32:86:5e:45:22:21:85:a8:ac: 11:1d:45:62:54:10:71:01:e3:12:d8:75:f9:c8:38: 12:80:08:4f:dc:5a:0e:0c:71:9c:bf:00:60:f8:dc: 1b:38:4b:eb:88:a6:6f:15:3d:a9:84:60:90:78:ff: 0d:cf:31:c2:7b:27:3e:79:a1:0a:e9:c2:b6:ed:eb: 12:30:fa:67:c8:ce:cc:6c:28:38:58:b2:1a:2d:b9: 08:e8:a0:35:fd:85:c5:49:00:23:b1:cf:2a:0c:2b: 2c:5f:78:e0:c0:4f:ff:ee:ad:f7:83:2e:3c:97:d5: e8:13:84:2b:6e:30:9b:01:e0:eb:2f:10:77:49:d5: 8a:b1:94:f7:b3:90:f0:4f:5a:75:bd:72:6f:54:20: 90:e1:f2:15:34:33:37:20:5c:16:84:b2:f5:08:ef: 76:a3:38:7f:c4:65:cd:88:da:25:34:63:be:5b:4f: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:6D:EE:49:F7:D1:2A:37:F7:B7:7F:1F:81:77:81:98:1E:D6:7A X509v3 Authority Key Identifier: keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:14:16:73:0b:24:99:16:45:14:1a:a9:22:2b:fb:dd:e9: 43:9a:12:7e:b8:db:fc:8d:f0:18:aa:74:09:c4:85:a7:93:10: a6:1b:52:4a:44:52:c2:9d:9d:dc:77:5c:ea:39:84:0b:cf:a3: a2:cd:a5:00:22:06:1a:76:bf:6e:01:31:d6:d1:79:97:20:95: 0a:80:a0:4e:9d:14:ff:59:42:27:a4:15:b1:9b:b2:9b:a6:11: 61:8f:08:be:38:fe:df:60:93:fa:13:ed:fc:02:79:59:41:ed: 9f:d5:e1:ba:7c:42:94:ab:93:e4:4d:0a:94:9a:83:92:97:c9: 43:27:83:05:19:f5:92:14:e7:d1:fb:d7:61:3f:05:e0:42:21: 5d:67:76:32:0b:85:54:17:47:19:61:cb:4c:7f:7d:25:aa:30: d3:85:dc:ff:30:1f:f0:81:fc:75:18:d3:b9:ad:d6:57:41:a3: 6c:db:4a:7f:de:15:4e:6a:2a:d6:01:1e:f5:dd:57:f0:92:5d: fc:c2:b2:66:5c:69:a2:55:22:21:e5:ef:79:5c:81:95:a9:bc: f4:66:54:69:38:ef:6d:d9:c7:7b:33:b8:f3:0a:20:ce:f6:1c: bd:10:29:c7:73:20:56:21:27:25:85:f7:a2:e6:31:b9:f5:67: d4:24:fc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8OL3OQQOLTLmZOBUJxLhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll Y2IyZDYwHhcNMjYwMTAyMDEwMDUxWhcNMjYwMTAzMDEwMDUxWjAzMTEwLwYDVQQD Eyg1ODQ2NmRlZTQ5ZjdkMTJhMzdmN2I3N2YxZjgxNzc4MTk4MWVkNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jL+RggX0Fs3Is2dwi/Csfrha6VP 4Qme4tNxmCs9dcR3R1k1Kqqu0rQEOYEwRRDIjABgeOYtt3pxuxAczluMLJD5+tIH MctSIKupBiLfdk4yhl5FIiGFqKwRHUViVBBxAeMS2HX5yDgSgAhP3FoODHGcvwBg +NwbOEvriKZvFT2phGCQeP8NzzHCeyc+eaEK6cK27esSMPpnyM7MbCg4WLIaLbkI 6KA1/YXFSQAjsc8qDCssX3jgwE//7q33gy48l9XoE4QrbjCbAeDrLxB3SdWKsZT3 s5DwT1p1vXJvVCCQ4fIVNDM3IFwWhLL1CO92ozh/xGXNiNolNGO+W0+m4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhGbe5J99EqN/e3fx+Bd4GYHtZ6MB8GA1UdIwQY MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0MUFnML JJkWRRQaqSIr+93pQ5oSfrjb/I3wGKp0CcSFp5MQphtSSkRSwp2d3Hdc6jmEC8+j os2lACIGGna/bgEx1tF5lyCVCoCgTp0U/1lCJ6QVsZuym6YRYY8Ivjj+32CT+hPt /AJ5WUHtn9XhunxClKuT5E0KlJqDkpfJQyeDBRn1khTn0fvXYT8F4EIhXWd2MguF VBdHGWHLTH99Jaow04Xc/zAf8IH8dRjTua3WV0GjbNtKf94VTmoq1gEe9d1X8JJd /MKyZlxpolUiIeXveVyBlam89GZUaTjvbdnHezO48wogzvYcvRApx3MgViEnJYX3 ouYxufVn1CT8xA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:40 2026 by rpki-client