This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json) Hash identifier: mlXZunkiF5OhL5E0jw4OEiP0yOdJdkGd/Nq5Jwk2o3k= Subject key identifier: D8:81:51:92:E0:1A:C4:3D:E3:1D:14:9A:9C:44:34:5B:40:1D:A3:C8 Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Certificate serial: 019B98C2C04D0432F50AC4136BE932C760F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft Manifest number: 17BE Signing time: Wed 07 Jan 2026 14:00:58 +0000 Manifest this update: Wed 07 Jan 2026 14:00:58 +0000 Manifest next update: Thu 08 Jan 2026 14:00:58 +0000 Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=) 2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: 5YGxTBrbiyPTBLwey04VDcB+13z2fU8rB6fJt6TBRSU=) 3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=) 4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:c2:c0:4d:04:32:f5:0a:c4:13:6b:e9:32:c7:60:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Validity Not Before: Jan 7 14:00:58 2026 GMT Not After : Jan 8 14:00:58 2026 GMT Subject: CN=d8815192e01ac43de31d149a9c44345b401da3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:ec:35:8d:7a:fc:f6:12:72:ed:93:88:53: e4:42:19:c2:6e:78:a2:c0:0d:4c:a1:40:eb:32:55: 8e:5c:a0:e7:5a:50:bd:f6:5b:2e:44:00:e5:ad:9b: dd:37:dc:e5:fd:fd:ce:62:31:2e:f3:8a:21:e7:04: f4:20:20:f7:84:e9:6d:7a:ce:82:99:b8:42:82:fb: 67:d1:91:c9:aa:79:41:29:bc:03:6a:85:87:c8:d2: 85:ed:5f:0d:b7:94:27:ba:f0:4d:00:33:76:3d:1a: 31:56:01:9c:3c:6a:11:02:41:93:50:bb:8b:ae:97: 6f:98:a5:01:d3:38:aa:d9:69:e3:a6:3f:a5:b5:76: 3d:12:40:f0:46:2e:be:c1:52:1e:4c:f2:66:4f:4e: e5:c6:1b:11:c6:1b:7b:e0:41:85:20:48:85:60:d6: d3:12:e0:4d:59:78:58:2e:23:a7:35:50:f2:b6:e2: 62:94:e6:b1:77:2c:79:7b:91:11:31:18:b2:4f:dd: 14:39:45:41:78:3b:6b:14:88:f7:19:f2:c7:eb:33: b5:7b:c7:4a:7b:5b:76:b6:36:aa:f9:6f:52:d0:f3: 8d:60:5a:e2:b1:2a:c1:52:bc:8c:4d:b9:cc:11:a4: 25:89:37:89:d9:82:d3:e6:9c:cb:84:30:e1:b0:93: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:51:92:E0:1A:C4:3D:E3:1D:14:9A:9C:44:34:5B:40:1D:A3:C8 X509v3 Authority Key Identifier: keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:14:2c:17:79:ed:80:e2:9c:26:08:fc:bf:79:da:f4:2e: c4:5f:0e:23:05:aa:5a:21:d4:17:83:7a:1e:e0:92:14:cd:3f: c8:ca:fa:fb:78:d5:96:b8:21:17:64:53:81:80:ba:d6:da:4c: 26:b9:0c:26:55:5f:5c:81:95:9e:a2:be:c3:2f:1d:0f:6a:9a: 84:44:98:68:c7:6c:9b:f6:6c:ad:8d:ce:df:37:8d:a0:91:e2: 12:7e:4b:34:4a:61:69:10:4b:17:88:d0:be:73:dc:4a:72:93: 96:29:af:87:c3:56:e9:62:76:fb:6d:26:5e:fa:0b:8b:e5:8b: 89:4d:87:bc:34:c3:7c:07:1b:81:cf:c5:05:5b:fd:ae:d0:f5: e5:37:f8:db:09:2a:df:fa:22:67:9d:a0:a2:db:9f:36:f8:42: 59:e4:b2:5a:5c:bd:db:55:22:e7:49:2f:86:2c:58:70:7d:d3: b8:40:35:3e:dc:17:8d:08:fb:b3:97:3a:d0:76:03:5e:2e:45: 33:22:47:4c:95:a2:75:ad:52:eb:d7:a5:13:d2:86:a7:4d:1c: 70:9d:d2:d2:00:7c:56:2d:33:bc:dd:b2:7f:ab:45:2a:8e:3a: 3d:ee:44:97:d7:c7:a2:94:ae:62:b0:38:7d:29:c0:f3:53:38: 20:79:cc:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuYwsBNBDL1CsQTa+kyx2D3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz MThmODYwHhcNMjYwMTA3MTQwMDU4WhcNMjYwMTA4MTQwMDU4WjAzMTEwLwYDVQQD EyhkODgxNTE5MmUwMWFjNDNkZTMxZDE0OWE5YzQ0MzQ1YjQwMWRhM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3bsNY16/PYScu2TiFPkQhnCbnii wA1MoUDrMlWOXKDnWlC99lsuRADlrZvdN9zl/f3OYjEu84oh5wT0ICD3hOltes6C mbhCgvtn0ZHJqnlBKbwDaoWHyNKF7V8Nt5QnuvBNADN2PRoxVgGcPGoRAkGTULuL rpdvmKUB0ziq2Wnjpj+ltXY9EkDwRi6+wVIeTPJmT07lxhsRxht74EGFIEiFYNbT EuBNWXhYLiOnNVDytuJilOaxdyx5e5ERMRiyT90UOUVBeDtrFIj3GfLH6zO1e8dK e1t2tjaq+W9S0PONYFrisSrBUryMTbnMEaQliTeJ2YLT5pzLhDDhsJPcnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiBUZLgGsQ94x0UmpxENFtAHaPIMB8GA1UdIwQY MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4 LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaMULBd5 7YDinCYI/L952vQuxF8OIwWqWiHUF4N6HuCSFM0/yMr6+3jVlrghF2RTgYC61tpM JrkMJlVfXIGVnqK+wy8dD2qahESYaMdsm/ZsrY3O3zeNoJHiEn5LNEphaRBLF4jQ vnPcSnKTlimvh8NW6WJ2+20mXvoLi+WLiU2HvDTDfAcbgc/FBVv9rtD15Tf42wkq 3/oiZ52gotufNvhCWeSyWly921Ui50kvhixYcH3TuEA1PtwXjQj7s5c60HYDXi5F MyJHTJWida1S69elE9KGp00ccJ3S0gB8Vi0zvN2yf6tFKo46Pe5El9fHopSuYrA4 fSnA81M4IHnMew== -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:38 2026 by rpki-client