This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft File: adeHWeDsbxRWbRC4PIPyvxmbcQA.mft (raw, json) Hash identifier: vOX94+bd9PBDvy9z+GQrzQdvEBYIOjpiTyNmDr+2NpY= Subject key identifier: 52:E1:63:E2:B0:44:3D:F2:AF:06:0E:49:75:16:CA:FA:6F:93:3B:B1 Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 Certificate issuer: /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Certificate serial: 019B77EE2B03E23173B4EE538B151517C193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 05:00:55 +0000 Manifest this update: Thu 01 Jan 2026 05:00:55 +0000 Manifest next update: Fri 02 Jan 2026 05:00:55 +0000 Files and hashes: 1: adeHWeDsbxRWbRC4PIPyvxmbcQA.crl (hash: 5PxB/y0e65wsJAsAQ4ircblbjUqLV/xD3Dyy7qqzo5g=) 2: nVf4_JDF5Jd9blmd8M4doxhRW2o.roa (hash: fALm6gvriMfPKqnoL8NdKDlRyE7vGyHBMNh6mS8vfwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:ee:2b:03:e2:31:73:b4:ee:53:8b:15:15:17:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Validity Not Before: Jan 1 05:00:55 2026 GMT Not After : Jan 2 05:00:55 2026 GMT Subject: CN=52e163e2b0443df2af060e497516cafa6f933bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:80:8b:fc:34:24:41:39:5b:f3:12:12:3b: e0:19:63:d4:d8:80:65:d7:2e:a2:9a:e2:86:4e:5c: 9b:ae:a5:80:c9:01:98:e9:47:52:95:6b:44:6d:2a: 8e:29:9f:9e:81:eb:91:96:47:5c:3e:20:84:47:3c: c8:0c:b7:62:20:f3:66:b8:96:e5:0a:a6:08:e7:b6: 58:6a:4e:91:ae:31:93:3b:b7:69:3a:f7:1c:1c:ba: a1:aa:d9:06:fd:f1:77:24:9c:bb:e0:4a:f0:9e:5b: 8d:52:67:17:59:24:33:36:11:37:74:06:d9:fc:bd: fa:c9:9c:59:56:cc:1a:8c:57:e9:cf:21:7b:69:64: aa:e3:6a:a5:7d:1a:4e:32:da:32:90:a2:10:26:55: 10:df:01:81:a5:8c:cd:3a:de:51:65:b6:02:94:d6: 16:c5:b4:56:c3:f2:a3:61:73:74:39:b9:03:db:54: 83:fb:52:eb:81:09:be:a0:47:e8:28:5e:08:b8:69: b8:23:75:60:39:24:52:0c:fe:1e:36:c2:56:77:7a: a4:d1:b2:fe:d1:82:e6:5c:c4:fb:b3:b9:92:7c:ce: a4:13:cd:7c:9d:1d:d9:46:38:60:14:c9:71:ab:92: 99:bc:05:a0:04:e4:eb:bb:67:d7:5b:0f:0c:5b:0a: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E1:63:E2:B0:44:3D:F2:AF:06:0E:49:75:16:CA:FA:6F:93:3B:B1 X509v3 Authority Key Identifier: keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:18:44:dd:b8:d3:4f:d0:51:59:84:4a:0a:b6:dd:8e:7e:9b: 31:a8:b1:07:28:81:a1:1e:56:5b:24:89:a0:8f:13:fa:de:cc: 8a:b8:7e:57:eb:bc:84:6a:81:9f:ac:39:11:78:db:cc:c3:a6: d1:df:a8:3f:cd:15:57:c8:d5:0f:ea:42:d4:da:06:80:c5:fc: 6c:f1:ea:35:30:b3:f4:33:86:5f:ab:8f:c9:8b:eb:da:1f:ed: aa:1c:44:dd:e0:27:06:09:06:de:dc:68:f5:e1:3b:cb:1d:25: 6b:18:56:7f:6e:5c:91:3f:83:81:ed:17:21:e4:dd:b3:f3:ff: 1b:5c:e5:27:35:7e:02:fa:a0:02:ae:85:4e:00:42:b3:f2:7d: 20:fd:c6:02:d1:8e:13:e0:fe:ea:0f:4f:21:ac:d0:c4:24:5e: 13:09:e1:43:99:8e:03:f7:0e:9f:73:1b:f1:51:1a:a2:bf:8d: ed:e3:d8:34:3e:80:23:19:40:2d:e7:b4:52:b4:09:84:d1:d6: b1:b4:36:47:73:08:10:f7:44:82:38:7a:89:1f:a0:8e:9e:12: b0:a0:40:b8:92:47:95:82:3e:f9:88:d3:e0:46:71:b4:2c:6b: 5d:59:57:d0:2d:97:87:df:de:ae:73:79:b0:c6:ee:a6:03:06: aa:62:b7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt37isD4jFztO5TixUVF8GTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDc4NzU5ZTBlYzZmMTQ1NjZkMTBiODNjODNmMmJmMTk5 YjcxMDAwHhcNMjYwMTAxMDUwMDU1WhcNMjYwMTAyMDUwMDU1WjAzMTEwLwYDVQQD Eyg1MmUxNjNlMmIwNDQzZGYyYWYwNjBlNDk3NTE2Y2FmYTZmOTMzYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyAi/w0JEE5W/MSEjvgGWPU2IBl 1y6imuKGTlybrqWAyQGY6UdSlWtEbSqOKZ+egeuRlkdcPiCERzzIDLdiIPNmuJbl CqYI57ZYak6RrjGTO7dpOvccHLqhqtkG/fF3JJy74ErwnluNUmcXWSQzNhE3dAbZ /L36yZxZVswajFfpzyF7aWSq42qlfRpOMtoykKIQJlUQ3wGBpYzNOt5RZbYClNYW xbRWw/KjYXN0ObkD21SD+1LrgQm+oEfoKF4IuGm4I3VgOSRSDP4eNsJWd3qk0bL+ 0YLmXMT7s7mSfM6kE818nR3ZRjhgFMlxq5KZvAWgBOTru2fXWw8MWwqtnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLhY+KwRD3yrwYOSXUWyvpvkzuxMB8GA1UdIwQY MBaAFGnXh1ng7G8UVm0QuDyD8r8Zm3EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzIt ZTE4YWFjNTA1NGE5LzEvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzItZTE4YWFjNTA1NGE5 LzEvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBhE3bjT T9BRWYRKCrbdjn6bMaixByiBoR5WWySJoI8T+t7Mirh+V+u8hGqBn6w5EXjbzMOm 0d+oP80VV8jVD+pC1NoGgMX8bPHqNTCz9DOGX6uPyYvr2h/tqhxE3eAnBgkG3txo 9eE7yx0laxhWf25ckT+Dge0XIeTds/P/G1zlJzV+AvqgAq6FTgBCs/J9IP3GAtGO E+D+6g9PIazQxCReEwnhQ5mOA/cOn3Mb8VEaor+N7ePYND6AIxlALee0UrQJhNHW sbQ2R3MIEPdEgjh6iR+gjp4SsKBAuJJHlYI++YjT4EZxtCxrXVlX0C2Xh9/ernN5 sMbupgMGqmK3gw== -----END CERTIFICATE-----Generated at Thu Jan 1 10:57:59 2026 by rpki-client