This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft File: immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json) Hash identifier: FGmMwm/VecoyM/d/KLXpuSHMZLW/SBk3KwdyGxI4LXY= Subject key identifier: AE:CE:B1:4C:EE:6B:B1:D3:4C:0B:EA:7E:5C:F5:26:67:FF:BB:1C:C9 Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82 Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282 Certificate serial: 019B8EE490C2B2A28CB34306D02F6D2D8274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft Manifest number: 054D Signing time: Mon 05 Jan 2026 16:01:42 +0000 Manifest this update: Mon 05 Jan 2026 16:01:42 +0000 Manifest next update: Tue 06 Jan 2026 16:01:42 +0000 Files and hashes: 1: HxmIn0AGzA-g9k-4bheqqTcmLgI.roa (hash: uHSpZAAfzcw7ixBYZphuiZW4nA4GJ515tOk36J46Jqw=) 2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: XfnE9TQ3jS573rY2yAQeTWOUruGASj4858peGG/91/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:e4:90:c2:b2:a2:8c:b3:43:06:d0:2f:6d:2d:82:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282 Validity Not Before: Jan 5 16:01:42 2026 GMT Not After : Jan 6 16:01:42 2026 GMT Subject: CN=aeceb14cee6bb1d34c0bea7e5cf52667ffbb1cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:93:46:2f:6d:40:6f:d6:a3:0e:72:4b:59: f8:59:7c:89:af:62:bc:f6:84:02:9b:b5:84:b1:33: 4b:e2:eb:b5:66:03:de:e2:a1:63:f1:99:8f:e6:3b: 6b:c8:3c:8d:a3:fd:f2:a9:d5:c8:67:cd:d7:6e:8a: 97:5d:27:58:0a:ed:19:6c:6d:03:a6:57:b8:37:fe: d7:75:ef:4d:73:aa:f2:72:8d:0f:fd:6b:1e:4e:e9: a7:8d:d4:b2:3d:01:e2:73:0f:12:f1:5a:73:7c:75: 60:8a:e4:d3:d2:93:fb:fe:a8:d2:58:ec:83:2f:cd: be:db:64:05:6a:14:47:ca:48:05:5e:26:f7:27:cd: 4f:70:5e:b7:bf:c7:b5:cf:2b:1f:2c:3e:cc:17:bd: 80:da:ca:69:12:64:db:83:a2:90:72:08:e9:19:c1: 4c:d2:2f:96:78:0c:4d:34:fa:81:6f:67:69:eb:a4: f3:e9:03:05:2f:51:31:3b:27:35:21:9c:27:3f:e2: 37:8a:05:bd:2f:2f:6c:95:71:8b:c7:e7:04:0e:90: e9:8f:79:3e:bc:76:9c:31:ab:08:7a:4d:f8:88:4a: 2e:e5:5d:d7:8b:d0:e2:bf:05:68:91:46:f9:8c:a4: 58:fe:d2:4b:fe:33:1d:ab:97:00:31:16:73:cf:2b: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:B1:4C:EE:6B:B1:D3:4C:0B:EA:7E:5C:F5:26:67:FF:BB:1C:C9 X509v3 Authority Key Identifier: keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:42:d7:9a:bc:47:56:ea:ca:32:f0:51:0b:24:39:a2:10:19: dd:5a:e7:5e:11:a8:48:1c:d5:62:3a:dd:55:bd:95:c9:ab:c2: 11:ae:00:27:d7:31:d9:19:fd:3d:85:d5:7e:c8:99:d6:54:51: 1a:d0:76:b8:47:6c:4c:ed:d6:cf:c6:27:23:42:b4:03:c2:cc: 9f:a8:37:98:66:f7:a2:7f:a2:34:02:a4:b1:86:fc:47:65:f6: 49:20:1a:40:32:0c:f2:b5:ba:77:91:7a:60:ef:a4:ba:6b:21: 92:ab:70:56:75:31:03:6e:a0:bd:0e:6e:35:0c:bb:1f:bd:02: 26:e7:c9:6a:c5:07:11:31:18:30:5d:2b:d3:65:82:c7:b2:bb: df:d9:d5:6b:3e:17:f3:1d:7c:d8:27:6d:d8:ff:b3:d1:52:65: 10:80:02:06:f3:ed:66:7d:8a:5d:7d:0c:4e:2c:30:51:e2:0f: 66:1c:fd:f5:c4:e2:6a:c7:4d:9f:40:f5:67:60:15:10:a0:8b: 72:83:a7:d3:ae:a7:00:7c:0e:bb:42:fc:c6:78:8b:36:8d:d8: 28:ca:5c:a0:80:92:a8:0b:dc:23:4f:5f:ba:36:82:4b:1d:4b: 49:73:33:12:fc:68:6b:26:18:f3:34:84:ef:be:4d:41:f2:66: 00:65:f6:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuO5JDCsqKMs0MG0C9tLYJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjk4YTE0ZmI2MWE2ODdhZjBhNjNmN2M2NTVjMDAxZjY3 MDEyODIwHhcNMjYwMTA1MTYwMTQyWhcNMjYwMTA2MTYwMTQyWjAzMTEwLwYDVQQD EyhhZWNlYjE0Y2VlNmJiMWQzNGMwYmVhN2U1Y2Y1MjY2N2ZmYmIxY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDOTRi9tQG/Wow5yS1n4WXyJr2K8 9oQCm7WEsTNL4uu1ZgPe4qFj8ZmP5jtryDyNo/3yqdXIZ83XboqXXSdYCu0ZbG0D ple4N/7Xde9Nc6ryco0P/WseTumnjdSyPQHicw8S8VpzfHVgiuTT0pP7/qjSWOyD L82+22QFahRHykgFXib3J81PcF63v8e1zysfLD7MF72A2sppEmTbg6KQcgjpGcFM 0i+WeAxNNPqBb2dp66Tz6QMFL1ExOyc1IZwnP+I3igW9Ly9slXGLx+cEDpDpj3k+ vHacMasIek34iEou5V3Xi9DivwVokUb5jKRY/tJL/jMdq5cAMRZzzyvoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7OsUzua7HTTAvqflz1Jmf/uxzJMB8GA1UdIwQY MBaAFIppihT7YaaHrwpj98ZVwAH2cBKCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQt MjE4Mjg5ZDgxYzUzLzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQtMjE4Mjg5ZDgxYzUz LzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkULXmrxH VurKMvBRCyQ5ohAZ3VrnXhGoSBzVYjrdVb2VyavCEa4AJ9cx2Rn9PYXVfsiZ1lRR GtB2uEdsTO3Wz8YnI0K0A8LMn6g3mGb3on+iNAKksYb8R2X2SSAaQDIM8rW6d5F6 YO+kumshkqtwVnUxA26gvQ5uNQy7H70CJufJasUHETEYMF0r02WCx7K739nVaz4X 8x182Cdt2P+z0VJlEIACBvPtZn2KXX0MTiwwUeIPZhz99cTiasdNn0D1Z2AVEKCL coOn066nAHwOu0L8xniLNo3YKMpcoICSqAvcI09fujaCSx1LSXMzEvxoayYY8zSE 775NQfJmAGX2NQ== -----END CERTIFICATE-----Generated at Mon Jan 5 19:13:41 2026 by rpki-client