This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json) Hash identifier: iJN15lYMijv5YsF3HSmDiuDrWFOCBHg+HjhJQksHoVM= Subject key identifier: 36:CA:D4:75:17:A4:96:FE:91:64:67:EC:20:64:2F:13:EE:80:EB:B7 Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04 Certificate serial: 019BAF4ACADCE3277A5A403CE05A14F84494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 23:01:12 +0000 Manifest this update: Sun 11 Jan 2026 23:01:12 +0000 Manifest next update: Mon 12 Jan 2026 23:01:12 +0000 Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: UfnwdMr5iEFZImjwgXPDm6opwydPPlF6NLBryxtt2l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4a:ca:dc:e3:27:7a:5a:40:3c:e0:5a:14:f8:44:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04 Validity Not Before: Jan 11 23:01:12 2026 GMT Not After : Jan 12 23:01:12 2026 GMT Subject: CN=36cad47517a496fe916467ec20642f13ee80ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:a8:72:40:65:2e:3b:d7:a0:92:fc:0c:5c: a0:93:73:bf:01:6f:96:be:33:a3:66:bd:d3:80:25: 16:44:eb:3e:1c:a1:59:e2:12:7b:ec:5a:59:51:c4: 33:69:fe:7d:94:71:3c:a6:4c:91:68:90:b2:fd:e9: 35:1c:11:7c:34:8f:42:81:6e:7f:ee:8e:24:fa:6a: 2a:c0:9c:60:e0:a1:83:bc:f3:5a:48:9f:1c:19:2b: 90:2a:be:d5:8e:7e:17:83:8a:6e:10:10:a2:55:97: cd:f1:e2:d2:0a:d8:03:6d:d0:1a:df:3a:bc:b1:77: 57:4b:42:a5:94:79:ed:db:4a:fc:6a:64:f7:b0:63: b1:96:e2:c0:8e:00:1f:96:9b:93:e2:9e:c0:1c:b3: b1:23:13:c9:9d:19:be:6e:2f:a4:00:24:2d:1b:80: 2d:89:92:26:5d:ba:c6:db:1d:02:7d:a1:b3:dd:4a: d9:47:98:b0:c3:90:44:ac:16:79:6a:cd:e3:1f:09: 8f:c6:cf:30:3b:15:c4:65:df:e4:8a:05:d0:d0:9f: 39:10:82:4a:e6:bd:28:02:61:02:28:fc:2e:46:3e: 3b:e8:66:97:0c:fd:a2:80:b0:55:0e:c6:d7:0f:e1: b7:81:89:b5:d8:cd:f1:1d:48:5c:32:2f:b3:f5:97: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CA:D4:75:17:A4:96:FE:91:64:67:EC:20:64:2F:13:EE:80:EB:B7 X509v3 Authority Key Identifier: keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5a:24:c0:fa:8b:e1:f7:cb:f9:f1:cd:04:87:e1:7d:0f:a6: fa:d8:f9:fd:8e:b6:01:4b:ca:2d:3e:8d:68:59:e8:56:db:0b: 8a:25:51:14:0d:5e:f9:30:39:ed:ee:54:29:82:b1:6d:b3:39: 17:af:6e:0f:76:6c:47:f1:75:4a:7a:16:7e:a1:12:60:06:44: e7:ef:75:34:51:2f:37:ba:1c:43:38:14:4f:d8:af:d8:b7:28: 82:28:d2:85:ab:82:38:07:b2:34:f6:ed:d7:9b:09:fa:d1:c1: 70:97:66:94:3b:5b:26:33:80:ab:a5:4c:f5:05:78:9c:49:3f: 83:c1:8e:0d:4a:06:3d:65:a8:f3:c6:ec:27:c8:09:20:7a:ad: 64:9e:79:8f:d9:4d:b0:8b:54:63:65:21:1a:5a:15:d4:79:f7: 96:58:53:b3:c0:fa:b8:b5:42:37:7e:0f:e4:d3:92:75:32:a8: dd:5e:50:35:85:aa:43:b2:57:7a:76:a4:7f:c9:22:bd:73:9b: 98:d8:1e:27:81:36:19:2b:f0:47:0d:11:e9:80:76:6e:7d:e5: f1:cc:18:83:22:36:ff:43:44:d6:86:cc:ac:c4:f7:cf:7b:ff: 28:7e:7f:69:d9:aa:4e:87:18:6d:c4:44:80:02:5a:92:c0:42: 5b:e8:66:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSsrc4yd6WkA84FoU+ESUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWI5YTVkNmQ5ODcwM2MzODcyYTFiYjNmOTBkMTAzNjg1 Y2JkMDQwHhcNMjYwMTExMjMwMTEyWhcNMjYwMTEyMjMwMTEyWjAzMTEwLwYDVQQD EygzNmNhZDQ3NTE3YTQ5NmZlOTE2NDY3ZWMyMDY0MmYxM2VlODBlYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ICockBlLjvXoJL8DFygk3O/AW+W vjOjZr3TgCUWROs+HKFZ4hJ77FpZUcQzaf59lHE8pkyRaJCy/ek1HBF8NI9CgW5/ 7o4k+moqwJxg4KGDvPNaSJ8cGSuQKr7Vjn4Xg4puEBCiVZfN8eLSCtgDbdAa3zq8 sXdXS0KllHnt20r8amT3sGOxluLAjgAflpuT4p7AHLOxIxPJnRm+bi+kACQtG4At iZImXbrG2x0CfaGz3UrZR5iww5BErBZ5as3jHwmPxs8wOxXEZd/kigXQ0J85EIJK 5r0oAmECKPwuRj476GaXDP2igLBVDsbXD+G3gYm12M3xHUhcMi+z9ZfgXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbK1HUXpJb+kWRn7CBkLxPugOu3MB8GA1UdIwQY MBaAFOYbml1tmHA8OHKhuz+Q0QNoXL0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMt ZTE4ZDk5OGM2NGVmLzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMtZTE4ZDk5OGM2NGVm LzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglokwPqL 4ffL+fHNBIfhfQ+m+tj5/Y62AUvKLT6NaFnoVtsLiiVRFA1e+TA57e5UKYKxbbM5 F69uD3ZsR/F1SnoWfqESYAZE5+91NFEvN7ocQzgUT9iv2LcogijShauCOAeyNPbt 15sJ+tHBcJdmlDtbJjOAq6VM9QV4nEk/g8GODUoGPWWo88bsJ8gJIHqtZJ55j9lN sItUY2UhGloV1Hn3llhTs8D6uLVCN34P5NOSdTKo3V5QNYWqQ7JXenakf8kivXOb mNgeJ4E2GSvwRw0R6YB2bn3l8cwYgyI2/0NE1obMrMT3z3v/KH5/admqTocYbcRE gAJaksBCW+hmQg== -----END CERTIFICATE-----Generated at Mon Jan 12 08:09:47 2026 by rpki-client