This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json) Hash identifier: wXLSpY4qeCBwTOC1H96yg50KeaMVn9Kn/c/PELJKlpQ= Subject key identifier: D9:31:C7:52:87:E3:65:83:79:04:83:44:15:DB:51:04:38:39:16:44 Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Certificate serial: 019B78930D96DA655A7BE3C7344F0D2024AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft Manifest number: 0522 Signing time: Thu 01 Jan 2026 08:01:01 +0000 Manifest this update: Thu 01 Jan 2026 08:01:01 +0000 Manifest next update: Fri 02 Jan 2026 08:01:01 +0000 Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: laFvWM4WmsKmkhBA/8VjhFVrgQZmlHCR0A9MUKB0nlA=) 2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:93:0d:96:da:65:5a:7b:e3:c7:34:4f:0d:20:24:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Validity Not Before: Jan 1 08:01:01 2026 GMT Not After : Jan 2 08:01:01 2026 GMT Subject: CN=d931c75287e365837904834415db510438391644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:a5:67:71:9c:d2:c3:1f:df:7d:f7:e8:fb: 36:c0:f0:48:37:64:25:ac:0a:2a:44:d9:f0:0a:80: 87:0d:05:52:d4:ff:2a:85:c4:91:2b:1e:98:02:43: 4e:9f:f5:34:9f:a3:4a:83:0f:3d:d4:cf:f4:a0:28: 6a:e7:19:ee:e7:d3:58:40:a4:79:ed:28:29:97:28: 43:9a:bc:d9:98:a8:07:cc:d8:d7:49:74:8b:fe:29: 7d:ec:c4:be:0a:d5:f1:a5:cb:ed:2e:40:5c:1b:90: c2:d3:8a:70:eb:86:62:bf:9f:b9:da:f8:a0:b4:83: 60:18:3b:a1:7d:dd:ac:6f:2f:80:d8:d7:1f:94:3f: cb:05:d8:dc:bc:34:52:f2:26:87:41:b6:a6:73:bd: f2:3d:4d:1f:fa:27:27:87:08:5b:da:6d:90:0f:66: 56:91:c9:0c:1c:ea:16:3f:f5:76:96:ec:61:54:18: 44:0f:e0:01:86:9b:6b:58:79:a3:31:66:de:a0:85: 2f:3c:7b:9d:c7:d3:7e:3c:cb:d2:50:94:4d:88:5a: b5:e8:50:86:df:83:6a:a0:37:31:24:b8:52:9f:98: d5:68:38:ce:0a:c2:f9:29:c6:42:c4:c1:c9:e7:db: a6:77:54:be:56:46:47:3f:f6:87:14:ec:d0:62:ea: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:C7:52:87:E3:65:83:79:04:83:44:15:DB:51:04:38:39:16:44 X509v3 Authority Key Identifier: keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:dc:49:ff:b3:16:92:5f:c7:64:17:21:28:af:f1:6d:8d:b6: 0b:e2:43:f8:bf:07:f8:95:d2:c0:21:06:1c:4d:32:0e:dc:b4: ef:85:32:44:4f:46:16:68:d5:cf:4d:60:ea:c2:ab:77:2f:08: 4d:01:36:b1:25:19:27:6b:96:9c:f3:dd:1a:b3:ee:87:cb:eb: 47:ff:51:10:69:c8:ee:59:33:e0:7b:f6:9b:9a:83:f5:82:0e: 0f:b2:70:fb:df:89:21:d3:b8:d7:c7:b0:9a:87:77:a8:7b:e6: ff:0f:25:9d:94:f5:07:47:51:5a:eb:22:6c:2a:fe:6f:68:ef: 87:8f:07:17:b4:9a:63:99:58:95:17:c3:a6:92:1c:b7:95:22: 05:d8:a7:0a:1b:66:a7:a6:65:69:62:6d:a2:a9:b9:e1:bf:01: d4:82:12:d0:23:15:c9:f5:a1:a7:dc:cc:2c:29:98:5b:78:d8: 06:71:81:4e:95:3a:3e:25:b5:d3:24:bc:f4:ab:c8:9d:cc:44: 15:f0:42:98:e3:67:77:a9:83:69:93:a0:bb:54:de:c2:0b:ab: d9:30:10:ef:c6:47:a6:4b:b3:90:56:27:fd:2b:6f:bc:4e:0a: be:74:a8:3c:89:ec:23:ef:58:51:6f:21:d8:ed:1b:4d:1b:70: da:a6:7c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4kw2W2mVae+PHNE8NICSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2 MTkyYTMwHhcNMjYwMTAxMDgwMTAxWhcNMjYwMTAyMDgwMTAxWjAzMTEwLwYDVQQD EyhkOTMxYzc1Mjg3ZTM2NTgzNzkwNDgzNDQxNWRiNTEwNDM4MzkxNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73alZ3Gc0sMf33336Ps2wPBIN2Ql rAoqRNnwCoCHDQVS1P8qhcSRKx6YAkNOn/U0n6NKgw891M/0oChq5xnu59NYQKR5 7SgplyhDmrzZmKgHzNjXSXSL/il97MS+CtXxpcvtLkBcG5DC04pw64Ziv5+52vig tINgGDuhfd2sby+A2NcflD/LBdjcvDRS8iaHQbamc73yPU0f+icnhwhb2m2QD2ZW kckMHOoWP/V2luxhVBhED+ABhptrWHmjMWbeoIUvPHudx9N+PMvSUJRNiFq16FCG 34NqoDcxJLhSn5jVaDjOCsL5KcZCxMHJ59umd1S+VkZHP/aHFOzQYupBQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkxx1KH42WDeQSDRBXbUQQ4ORZEMB8GA1UdIwQY MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9xJ/7MW kl/HZBchKK/xbY22C+JD+L8H+JXSwCEGHE0yDty074UyRE9GFmjVz01g6sKrdy8I TQE2sSUZJ2uWnPPdGrPuh8vrR/9REGnI7lkz4Hv2m5qD9YIOD7Jw+9+JIdO418ew mod3qHvm/w8lnZT1B0dRWusibCr+b2jvh48HF7SaY5lYlRfDppIct5UiBdinChtm p6ZlaWJtoqm54b8B1IIS0CMVyfWhp9zMLCmYW3jYBnGBTpU6PiW10yS89KvIncxE FfBCmONnd6mDaZOgu1Tewgur2TAQ78ZHpkuzkFYn/StvvE4KvnSoPInsI+9YUW8h 2O0bTRtw2qZ8PA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:30:48 2026 by rpki-client