This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft File: USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json) Hash identifier: Z9/UMoCPY+jBJsBG5Xk1kWcTtdRM8/Eqmc1scqRVdRs= Subject key identifier: 0E:1D:E4:60:BC:E0:FA:6F:B2:FE:9C:98:1B:A3:E4:48:74:E7:B3:23 Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F Certificate issuer: /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f Certificate serial: 019B78A3D407B8F82E2FBAF33938BCD02BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft Manifest number: 072B Signing time: Thu 01 Jan 2026 08:19:21 +0000 Manifest this update: Thu 01 Jan 2026 08:19:21 +0000 Manifest next update: Fri 02 Jan 2026 08:19:21 +0000 Files and hashes: 1: 8641rsKg9fD7lx-GPNjbC4vuzsc.roa (hash: Vka8GFo29c9tBpzyWSVh9ZUdbW2Ls5cI8qhExZNURvw=) 2: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: S6BqtFSJrrUnVy2lLd66BNigTTz8QleCvLofH2LW2Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:d4:07:b8:f8:2e:2f:ba:f3:39:38:bc:d0:2b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f Validity Not Before: Jan 1 08:19:21 2026 GMT Not After : Jan 2 08:19:21 2026 GMT Subject: CN=0e1de460bce0fa6fb2fe9c981ba3e44874e7b323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:18:34:a9:19:a9:f6:7b:86:ca:a7:55:8d: 79:2a:b0:76:f5:9f:75:d5:16:2e:16:be:32:7a:4b: 68:c3:e8:3e:4e:6e:6c:19:ed:21:43:0d:00:c4:8b: d2:22:ff:94:e3:50:52:09:6a:0d:24:ee:13:c1:3b: 2e:1a:76:2a:a6:41:9f:69:69:9c:ea:0c:fe:c4:db: ae:d9:d9:f5:17:3a:fb:b6:48:9b:97:a6:03:32:6c: c3:24:1d:67:02:74:95:34:25:c2:d3:57:48:ed:35: 2b:89:fb:09:d2:b2:16:a8:b4:50:8b:ae:c8:a5:04: d2:46:3e:ea:9f:ca:23:46:61:e1:6c:2b:01:10:7e: 04:fb:af:f7:a1:17:2a:29:3f:5f:e4:90:4c:9a:62: 63:cb:26:d5:8a:fc:28:73:67:4e:6c:dc:fc:14:c1: e5:32:d2:14:05:3e:84:ca:18:20:d6:f1:29:d6:62: 70:37:59:f2:e9:21:13:fa:99:32:1c:14:71:45:cb: 0c:84:ce:50:22:ec:d6:c8:19:8c:fd:47:f1:dc:6a: b9:50:d9:7e:cb:e1:0b:07:84:33:1e:1c:0e:40:ce: 8f:29:7d:d5:76:7a:84:dd:89:a3:12:5e:15:94:c4: 93:5f:08:c8:49:20:4c:fc:b3:e0:b2:2f:b6:fb:b6: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1D:E4:60:BC:E0:FA:6F:B2:FE:9C:98:1B:A3:E4:48:74:E7:B3:23 X509v3 Authority Key Identifier: keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:8d:d6:56:c6:97:de:9f:73:ad:4c:f0:a9:f7:98:c9:39: 1e:75:ae:12:9d:84:6d:1e:28:26:ac:cd:da:d1:fe:79:c5:ef: 08:8a:a5:b7:4a:1c:17:36:49:17:1d:36:08:5a:28:ad:9b:be: b0:e4:ea:ec:86:16:f4:b3:ef:94:14:b2:dc:eb:33:ae:50:48: b7:46:84:29:a4:97:66:3c:37:1e:e1:01:aa:e8:43:33:12:db: f4:aa:c0:ca:26:3a:07:1e:a2:54:4f:c4:54:85:15:d2:71:3d: 01:d4:b7:2d:24:13:04:f9:a5:be:3a:fe:e4:64:c6:8e:0c:08: e5:9a:94:89:f0:32:0c:0d:a9:e6:6f:ee:64:10:b8:cc:c1:12: 04:44:7f:61:ab:cd:f1:f7:aa:a5:c8:7d:6e:c2:90:aa:a5:17: c4:2f:d2:a8:48:a2:7a:0b:f6:26:90:50:90:26:f2:c1:fb:9a: d1:74:26:02:c5:db:15:93:49:8c:39:1d:7a:f3:52:48:e5:dc: 2b:fd:d9:e3:db:2a:d5:31:7b:0c:55:ca:06:5b:ad:12:67:da: b7:3d:55:b7:1d:84:db:8b:1e:40:a3:2e:e1:4b:12:61:7f:92: 1e:5f:50:82:17:14:23:ee:97:61:56:50:17:d1:40:91:af:92: 9e:17:3b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4o9QHuPguL7rzOTi80CuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMmI3YmE5MWRjMzBlYmI0MTNjZDA1NWJkNDMyOTJlMmQx NDAxOGYwHhcNMjYwMTAxMDgxOTIxWhcNMjYwMTAyMDgxOTIxWjAzMTEwLwYDVQQD EygwZTFkZTQ2MGJjZTBmYTZmYjJmZTljOTgxYmEzZTQ0ODc0ZTdiMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NoYNKkZqfZ7hsqnVY15KrB29Z91 1RYuFr4yektow+g+Tm5sGe0hQw0AxIvSIv+U41BSCWoNJO4TwTsuGnYqpkGfaWmc 6gz+xNuu2dn1Fzr7tkibl6YDMmzDJB1nAnSVNCXC01dI7TUrifsJ0rIWqLRQi67I pQTSRj7qn8ojRmHhbCsBEH4E+6/3oRcqKT9f5JBMmmJjyybVivwoc2dObNz8FMHl MtIUBT6Eyhgg1vEp1mJwN1ny6SET+pkyHBRxRcsMhM5QIuzWyBmM/Ufx3Gq5UNl+ y+ELB4QzHhwOQM6PKX3VdnqE3YmjEl4VlMSTXwjISSBM/LPgsi+2+7bszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4d5GC84Ppvsv6cmBuj5Eh057MjMB8GA1UdIwQY MBaAFFEre6kdww67QTzQVb1DKS4tFAGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEt MTY3Mzc0OWJjZWVjLzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEtMTY3Mzc0OWJjZWVj LzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaaN1lbG l96fc61M8Kn3mMk5HnWuEp2EbR4oJqzN2tH+ecXvCIqlt0ocFzZJFx02CFoorZu+ sOTq7IYW9LPvlBSy3OszrlBIt0aEKaSXZjw3HuEBquhDMxLb9KrAyiY6Bx6iVE/E VIUV0nE9AdS3LSQTBPmlvjr+5GTGjgwI5ZqUifAyDA2p5m/uZBC4zMESBER/YavN 8feqpch9bsKQqqUXxC/SqEiiegv2JpBQkCbywfua0XQmAsXbFZNJjDkdevNSSOXc K/3Z49sq1TF7DFXKBlutEmfatz1Vtx2E24seQKMu4UsSYX+SHl9QghcUI+6XYVZQ F9FAka+Snhc7Qw== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:14 2026 by rpki-client