This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json) Hash identifier: C0xVD+djUiw/TL4rZgGR3V2Vz/GrZfdM4JDDP7U+cOI= Subject key identifier: 5B:14:6A:E5:BA:F1:E9:A2:71:41:54:A7:96:AA:A4:FC:BC:DA:65:83 Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858 Certificate serial: 019B9D7B88B397E55250A09A815B9E199D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft Manifest number: 0610 Signing time: Thu 08 Jan 2026 12:01:17 +0000 Manifest this update: Thu 08 Jan 2026 12:01:17 +0000 Manifest next update: Fri 09 Jan 2026 12:01:17 +0000 Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=) 2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=) 3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: 4/8u7rNW5+bgm1Hf/JKyyaUGbJCO8bFdySYN3RB+BtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:7b:88:b3:97:e5:52:50:a0:9a:81:5b:9e:19:9d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452e7d87922129df90c4870da2a7738404724858 Validity Not Before: Jan 8 12:01:17 2026 GMT Not After : Jan 9 12:01:17 2026 GMT Subject: CN=5b146ae5baf1e9a2714154a796aaa4fcbcda6583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:e3:23:40:8c:d1:9d:ef:77:0d:94:a0:d5: 04:d2:11:25:da:4b:0f:f3:e0:9b:87:c6:f4:28:51: 98:1b:25:64:f1:4b:d7:ac:28:e5:73:43:03:58:44: c9:a2:f2:e1:7d:bf:10:a2:28:a7:30:f3:74:43:01: c2:61:15:b6:da:23:9a:8c:29:46:a8:6b:73:7c:70: 3f:c3:82:5a:3b:1b:5b:9d:d5:8b:b2:bc:bc:f2:b6: 64:2c:f4:27:10:a9:cf:f7:80:b7:b2:13:1e:f3:d6: 4e:87:08:28:80:9c:24:ff:2f:55:b4:5e:15:75:6b: 6b:89:d9:f9:c7:f4:47:b4:4c:a2:67:81:f7:c3:21: c3:1a:a1:c2:32:bd:79:1b:93:68:4d:03:06:ad:98: ac:de:b3:ba:2e:c0:36:e3:90:8e:9e:75:70:e1:f3: 23:2c:2c:db:6f:cc:dc:12:d6:75:f5:65:bb:68:26: 4a:d2:5c:4a:b3:9f:d6:b6:ea:98:02:1f:5a:dd:63: 0b:70:45:1c:7e:09:95:bb:c5:df:58:5d:e8:fc:d6: a4:58:49:b6:96:3b:b2:74:a5:81:b6:e4:f5:ee:52: fe:56:4a:5c:ec:b2:6d:14:7c:67:63:0a:fb:e1:d0: 43:43:2b:23:0a:d5:7d:56:e8:a1:6c:82:86:c5:83: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:6A:E5:BA:F1:E9:A2:71:41:54:A7:96:AA:A4:FC:BC:DA:65:83 X509v3 Authority Key Identifier: keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:11:c0:65:5c:8d:da:fc:59:84:27:1e:61:cc:00:18:90:a4: 8f:a1:c3:49:02:75:71:bc:e6:de:11:fc:e8:c0:d9:95:01:33: 5b:8b:49:12:43:23:af:d9:a5:8c:22:74:11:5f:1c:b1:0d:67: 84:b7:6c:c9:7e:5c:91:e0:3b:86:41:65:31:15:d0:cb:08:9b: d8:d8:cb:31:bb:f4:f8:b1:13:e4:ac:3f:66:91:ca:a2:43:a3: a4:a3:53:a8:f2:c8:80:d0:7f:fd:aa:65:22:0b:29:62:14:fa: d7:a0:1d:b9:28:f5:46:be:3b:f3:f2:68:33:27:c6:05:ed:8a: 43:70:da:59:45:7f:33:ff:0f:27:b6:6a:bd:5e:63:f5:2e:bf: 38:56:e4:fa:b9:ac:82:a6:02:cd:05:b3:d5:de:a4:93:cc:a8: 78:9e:e0:a0:f1:d9:40:7d:de:22:b6:9a:92:47:3a:73:84:de: 49:0e:24:8c:2a:d4:29:76:84:cf:5d:6d:78:32:75:49:98:8a: 94:c8:62:13:1b:0c:b5:1f:e3:08:ea:d8:d5:8b:e3:35:d7:4b: 8a:59:a5:07:37:50:98:40:0e:10:79:f4:95:16:c5:a4:7d:fd: 6f:7f:5c:b2:37:7f:c4:68:be:a4:25:3b:a6:fb:3c:9d:db:1c: 37:80:f1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZude4izl+VSUKCagVueGZ09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3 MjQ4NTgwHhcNMjYwMTA4MTIwMTE3WhcNMjYwMTA5MTIwMTE3WjAzMTEwLwYDVQQD Eyg1YjE0NmFlNWJhZjFlOWEyNzE0MTU0YTc5NmFhYTRmY2JjZGE2NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNvjI0CM0Z3vdw2UoNUE0hEl2ksP 8+Cbh8b0KFGYGyVk8UvXrCjlc0MDWETJovLhfb8QoiinMPN0QwHCYRW22iOajClG qGtzfHA/w4JaOxtbndWLsry88rZkLPQnEKnP94C3shMe89ZOhwgogJwk/y9VtF4V dWtridn5x/RHtEyiZ4H3wyHDGqHCMr15G5NoTQMGrZis3rO6LsA245COnnVw4fMj LCzbb8zcEtZ19WW7aCZK0lxKs5/WtuqYAh9a3WMLcEUcfgmVu8XfWF3o/NakWEm2 ljuydKWBtuT17lL+Vkpc7LJtFHxnYwr74dBDQysjCtV9VuihbIKGxYNfnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsUauW68emicUFUp5aqpPy82mWDMB8GA1UdIwQY MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShHAZVyN 2vxZhCceYcwAGJCkj6HDSQJ1cbzm3hH86MDZlQEzW4tJEkMjr9mljCJ0EV8csQ1n hLdsyX5ckeA7hkFlMRXQywib2NjLMbv0+LET5Kw/ZpHKokOjpKNTqPLIgNB//apl IgspYhT616AduSj1Rr478/JoMyfGBe2KQ3DaWUV/M/8PJ7ZqvV5j9S6/OFbk+rms gqYCzQWz1d6kk8yoeJ7goPHZQH3eIraakkc6c4TeSQ4kjCrUKXaEz11teDJ1SZiK lMhiExsMtR/jCOrY1YvjNddLilmlBzdQmEAOEHn0lRbFpH39b39csjd/xGi+pCU7 pvs8ndscN4DxPw== -----END CERTIFICATE-----Generated at Thu Jan 8 13:46:40 2026 by rpki-client