This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json) Hash identifier: ATDp2rc8LDwVRQkN5wMq3LZZpxuFVlnB/6qgIclnEqM= Subject key identifier: 8C:70:2A:9A:E1:20:07:45:D0:30:91:ED:03:C8:7C:AE:77:A9:78:19 Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858 Certificate serial: 019BAEDCF8BE0F217CF17C43A787FC89F8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft Manifest number: 0619 Signing time: Sun 11 Jan 2026 21:01:15 +0000 Manifest this update: Sun 11 Jan 2026 21:01:15 +0000 Manifest next update: Mon 12 Jan 2026 21:01:15 +0000 Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=) 2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=) 3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: CkkmF7Gl9tRhjHSTimyURmRYf1Kzv82CH0dctx+UzXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:f8:be:0f:21:7c:f1:7c:43:a7:87:fc:89:f8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452e7d87922129df90c4870da2a7738404724858 Validity Not Before: Jan 11 21:01:15 2026 GMT Not After : Jan 12 21:01:15 2026 GMT Subject: CN=8c702a9ae1200745d03091ed03c87cae77a97819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:0d:17:b0:64:20:2f:5c:bd:c3:33:e2:26: 2b:d2:20:73:dd:2c:79:74:97:85:94:e4:e7:6e:b1: 06:53:0b:9d:18:40:79:3e:87:65:e5:58:eb:5d:93: 28:2a:82:91:32:da:27:e6:a4:35:15:8c:e8:11:29: 50:0f:fc:d2:fd:0c:98:f1:99:9d:30:b9:95:cf:c8: 9c:30:35:7f:c3:fe:0b:d1:97:03:31:c0:15:5a:1a: e2:cb:6d:ff:e0:93:d4:60:7e:b7:3e:78:ca:8c:f3: 06:15:42:48:f3:13:0a:a1:af:ed:de:8d:78:33:44: 35:84:b4:43:e3:95:60:65:99:99:78:1d:63:eb:7c: 1e:d2:af:4c:ba:38:29:ee:85:f8:b2:47:de:ef:11: 68:da:c4:e2:7f:c2:9f:4b:a5:59:f8:84:d8:ed:9f: ed:40:4e:3b:32:1f:7a:bf:7a:f7:36:92:da:bf:c2: fe:66:ee:4b:25:b7:8e:07:d6:3d:6e:1a:3f:58:f9: fd:a7:83:cf:02:b3:2e:a2:fe:4a:ca:15:59:3e:c5: 34:3b:e5:9c:c5:1d:c8:3e:a0:90:17:d7:86:8f:13: 56:28:48:4b:92:25:8c:ed:ac:70:62:28:16:2f:0f: 24:14:18:d6:70:7d:a8:f4:c1:75:03:2e:c3:34:08: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:2A:9A:E1:20:07:45:D0:30:91:ED:03:C8:7C:AE:77:A9:78:19 X509v3 Authority Key Identifier: keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b2:bd:d1:3a:f9:b6:4d:12:49:72:b5:90:d8:04:88:0c:6c: a2:d9:ba:e9:49:63:cc:8d:b0:37:72:cc:0b:97:a2:29:ca:b7: c0:a2:99:bf:02:8b:3b:c9:29:99:b0:e7:6d:6c:09:16:58:a1: 01:a8:91:a4:7b:23:40:a1:88:5e:72:1e:a7:c8:24:05:8f:da: 51:13:3f:18:54:c1:d8:3f:c8:9f:7d:11:f5:74:6c:9a:ad:d3: 11:85:b6:05:3f:67:61:55:82:72:c1:db:f5:05:f6:62:54:82: 5a:a1:8a:c6:6f:6c:58:d1:81:05:24:2a:ee:17:67:79:e9:f0: b0:44:e2:cc:51:c0:52:f3:9f:a5:8c:0e:be:74:b8:b2:01:0c: 7d:ee:c8:f0:4f:71:5a:b3:1e:7c:b6:1d:8a:30:b6:af:bf:db: d1:de:97:68:46:9a:6a:2c:91:1b:95:2d:68:bc:8d:e1:21:f1: e2:f2:94:ee:c4:84:9b:74:2c:c1:7b:a8:4f:fc:09:5a:37:2a: 4f:2b:9d:e3:03:fb:7a:00:20:a7:a9:01:2b:b5:07:da:7a:7f: 7a:42:0d:0e:a9:16:5c:45:e9:fc:60:fb:42:16:ab:eb:86:2b: fc:30:f5:b1:db:a8:ac:d9:f2:20:f8:cc:8f:a5:e9:da:71:1f: e1:f0:d5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3Pi+DyF88XxDp4f8ifjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3 MjQ4NTgwHhcNMjYwMTExMjEwMTE1WhcNMjYwMTEyMjEwMTE1WjAzMTEwLwYDVQQD Eyg4YzcwMmE5YWUxMjAwNzQ1ZDAzMDkxZWQwM2M4N2NhZTc3YTk3ODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSMNF7BkIC9cvcMz4iYr0iBz3Sx5 dJeFlOTnbrEGUwudGEB5Podl5VjrXZMoKoKRMton5qQ1FYzoESlQD/zS/QyY8Zmd MLmVz8icMDV/w/4L0ZcDMcAVWhriy23/4JPUYH63PnjKjPMGFUJI8xMKoa/t3o14 M0Q1hLRD45VgZZmZeB1j63we0q9Mujgp7oX4skfe7xFo2sTif8KfS6VZ+ITY7Z/t QE47Mh96v3r3NpLav8L+Zu5LJbeOB9Y9bho/WPn9p4PPArMuov5KyhVZPsU0O+Wc xR3IPqCQF9eGjxNWKEhLkiWM7axwYigWLw8kFBjWcH2o9MF1Ay7DNAiepQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxwKprhIAdF0DCR7QPIfK53qXgZMB8GA1UdIwQY MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrK90Tr5 tk0SSXK1kNgEiAxsotm66UljzI2wN3LMC5eiKcq3wKKZvwKLO8kpmbDnbWwJFlih AaiRpHsjQKGIXnIep8gkBY/aURM/GFTB2D/In30R9XRsmq3TEYW2BT9nYVWCcsHb 9QX2YlSCWqGKxm9sWNGBBSQq7hdneenwsETizFHAUvOfpYwOvnS4sgEMfe7I8E9x WrMefLYdijC2r7/b0d6XaEaaaiyRG5UtaLyN4SHx4vKU7sSEm3QswXuoT/wJWjcq Tyud4wP7egAgp6kBK7UH2np/ekINDqkWXEXp/GD7Qhar64Yr/DD1sduorNnyIPjM j6Xp2nEf4fDVvA== -----END CERTIFICATE-----Generated at Mon Jan 12 06:31:13 2026 by rpki-client