This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json) Hash identifier: sYvz8t3dnRRAFbLQtVSb1ucTgyNzcBYoguRqqVJK6xE= Subject key identifier: EE:8A:6A:7B:97:97:68:30:C3:35:94:9D:31:38:77:8D:CF:34:CD:9C Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Certificate serial: 019B7835D962A44D914883406F7579312DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft Manifest number: 0CEA Signing time: Thu 01 Jan 2026 06:19:13 +0000 Manifest this update: Thu 01 Jan 2026 06:19:13 +0000 Manifest next update: Fri 02 Jan 2026 06:19:13 +0000 Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: XWWOuRZBqzKA/W1qclYk9gyOcmzXDdiGfqyx5QI3Iyc=) 2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:d9:62:a4:4d:91:48:83:40:6f:75:79:31:2d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Validity Not Before: Jan 1 06:19:13 2026 GMT Not After : Jan 2 06:19:13 2026 GMT Subject: CN=ee8a6a7b97976830c335949d3138778dcf34cd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:04:1d:54:d4:1b:36:0e:ed:51:74:af:80: e8:c0:7c:f3:f7:f0:2c:58:f0:b1:25:34:b5:02:94: 10:d2:35:f7:eb:c1:6a:c7:35:25:12:bf:a9:ef:bf: 48:54:c6:b7:c0:44:11:d6:eb:7b:1d:61:ca:07:5b: f2:02:2d:ed:69:30:ef:23:c7:ad:37:bb:33:c9:4e: c7:a9:77:94:a4:e1:f1:39:1e:ad:03:8b:c6:84:a3: 35:28:81:a4:d4:11:95:2a:3c:a2:9f:2f:7b:93:87: 1d:6c:e1:dd:fd:4f:78:22:02:80:4b:70:8d:d0:44: fe:0d:40:80:01:08:a2:19:a9:53:d6:70:27:8e:b0: 9d:78:6f:ad:69:1f:8f:14:c2:31:ad:26:0a:dd:a6: e5:f8:02:ca:bd:d6:9e:77:ee:09:1d:f8:ce:cf:b5: 37:b8:5d:83:6c:a0:a4:26:ce:c9:5a:13:4a:9c:b7: de:a9:90:d3:a6:f4:4a:8b:f7:74:18:8e:bb:80:06: c9:30:f3:80:3e:85:d4:db:b8:35:16:03:c8:71:29: e1:50:c0:03:43:95:8c:08:38:34:93:68:1a:e7:71: c4:35:a1:7f:ba:ec:8b:f0:4e:07:94:ca:2d:ec:28: 22:96:39:b6:d7:b5:dc:1d:3c:12:17:03:c3:3c:a4: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:6A:7B:97:97:68:30:C3:35:94:9D:31:38:77:8D:CF:34:CD:9C X509v3 Authority Key Identifier: keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8f:59:a0:51:5b:e1:ee:18:85:14:cd:4c:8a:7b:bb:9f:8b: 14:6c:06:92:17:7a:e0:0f:e6:be:97:10:fb:06:4f:77:44:c1: 3c:2f:89:57:03:87:31:28:f8:e0:0d:f6:bf:dd:33:b8:5b:56: b9:ae:e0:e2:4e:74:7e:64:b4:42:02:71:fc:e0:6d:19:97:e3: b3:9a:f8:36:1d:fa:01:37:9b:df:89:2d:19:7e:27:71:89:91: af:2a:12:9e:39:7d:61:7a:f4:d0:00:ee:40:ca:c5:c5:f9:d4: 93:05:cd:82:e4:03:ed:01:ab:60:5c:05:12:03:c5:86:d4:48: 01:c9:cf:e1:37:6f:b4:9e:c1:02:ce:5a:52:89:7b:40:37:11: a6:b8:33:cf:25:c1:7f:e8:cd:2f:34:fd:6a:70:90:12:8e:1d: bf:38:a6:9a:d7:e7:9a:a4:96:ff:ba:e1:1c:ae:37:16:7b:20: f5:69:c1:40:a1:17:ed:05:f1:b2:76:a7:73:49:0a:ca:de:a8: bc:b6:72:10:4e:f5:87:89:7f:02:88:e8:75:3b:ea:af:5c:ef: b7:b1:d4:32:3f:fa:a3:81:06:fc:fe:2b:e7:f4:1a:e2:96:2c: 86:7d:38:d3:c0:d4:98:de:00:95:e5:78:65:56:73:70:a4:94: 90:30:a3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4NdlipE2RSINAb3V5MS3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz ZjY3ODUwHhcNMjYwMTAxMDYxOTEzWhcNMjYwMTAyMDYxOTEzWjAzMTEwLwYDVQQD EyhlZThhNmE3Yjk3OTc2ODMwYzMzNTk0OWQzMTM4Nzc4ZGNmMzRjZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19oEHVTUGzYO7VF0r4DowHzz9/As WPCxJTS1ApQQ0jX368FqxzUlEr+p779IVMa3wEQR1ut7HWHKB1vyAi3taTDvI8et N7szyU7HqXeUpOHxOR6tA4vGhKM1KIGk1BGVKjyiny97k4cdbOHd/U94IgKAS3CN 0ET+DUCAAQiiGalT1nAnjrCdeG+taR+PFMIxrSYK3abl+ALKvdaed+4JHfjOz7U3 uF2DbKCkJs7JWhNKnLfeqZDTpvRKi/d0GI67gAbJMPOAPoXU27g1FgPIcSnhUMAD Q5WMCDg0k2ga53HENaF/uuyL8E4HlMot7Cgiljm217XcHTwSFwPDPKQ7RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6KanuXl2gwwzWUnTE4d43PNM2cMB8GA1UdIwQY MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAso9ZoFFb 4e4YhRTNTIp7u5+LFGwGkhd64A/mvpcQ+wZPd0TBPC+JVwOHMSj44A32v90zuFtW ua7g4k50fmS0QgJx/OBtGZfjs5r4Nh36ATeb34ktGX4ncYmRryoSnjl9YXr00ADu QMrFxfnUkwXNguQD7QGrYFwFEgPFhtRIAcnP4TdvtJ7BAs5aUol7QDcRprgzzyXB f+jNLzT9anCQEo4dvzimmtfnmqSW/7rhHK43Fnsg9WnBQKEX7QXxsnanc0kKyt6o vLZyEE71h4l/AojodTvqr1zvt7HUMj/6o4EG/P4r5/Qa4pYshn0408DUmN4AleV4 ZVZzcKSUkDCj8g== -----END CERTIFICATE-----Generated at Thu Jan 1 08:45:20 2026 by rpki-client