This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json) Hash identifier: wob3Sgj7J/pla2IZsU+xPs8IA0WJzJQSVNlolZIH3NY= Subject key identifier: 4A:6B:DC:FC:48:4F:64:20:22:02:3C:9C:4C:70:C5:93:40:79:83:B4 Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e Certificate serial: 019B7FA7916240140B721C2572A61C35FBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft Manifest number: 1120 Signing time: Fri 02 Jan 2026 17:00:46 +0000 Manifest this update: Fri 02 Jan 2026 17:00:46 +0000 Manifest next update: Sat 03 Jan 2026 17:00:46 +0000 Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: 8Us2KYstRbs9r+J+oxGXx40Wq6cwVBXBbTRZKwV2sWM=) 2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:91:62:40:14:0b:72:1c:25:72:a6:1c:35:fb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=144b315ae0f24c891fca18456c66917792af165e Validity Not Before: Jan 2 17:00:46 2026 GMT Not After : Jan 3 17:00:46 2026 GMT Subject: CN=4a6bdcfc484f642022023c9c4c70c593407983b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:e1:ac:90:62:a0:45:de:92:63:d5:d1:5c: f0:1d:96:8d:23:90:71:bc:c5:d9:a3:e6:eb:11:eb: 74:36:04:dd:37:a3:e0:0e:18:47:5a:c2:18:55:3b: f9:37:81:b0:91:8b:f6:e9:9a:81:00:50:e4:e9:f2: 23:f1:60:8d:d3:d3:8a:fb:3e:f9:84:a4:f5:0d:c9: 31:d3:2b:5b:10:62:f1:23:07:7c:96:9b:44:eb:4c: 34:18:4d:0f:ff:6c:57:fd:16:b6:e9:f1:49:61:80: b7:49:b7:df:8f:af:c1:d4:a9:03:fa:88:8a:22:b6: ad:be:aa:dd:e8:bc:fc:35:69:07:ea:a4:f2:f1:ca: e8:06:b7:31:9f:f7:61:fb:de:09:8c:01:5c:f8:d5: 21:0f:f1:ac:59:2d:a4:95:7a:b9:41:75:07:02:a8: cb:76:81:7b:01:c6:a0:87:2d:54:0f:6d:cc:84:a3: dc:f8:cf:a9:ce:d8:d2:b5:78:aa:49:88:9a:20:0e: 45:99:01:dd:dc:72:15:ea:1d:62:bf:57:2d:f1:5b: b0:a4:16:07:a5:20:6d:70:93:2a:32:91:53:f0:07: 3b:5b:63:77:85:57:b3:58:8c:2b:99:27:f0:14:67: 34:ac:f3:13:03:49:20:54:70:b2:fd:51:6b:30:97: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6B:DC:FC:48:4F:64:20:22:02:3C:9C:4C:70:C5:93:40:79:83:B4 X509v3 Authority Key Identifier: keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0d:82:72:95:98:73:34:2f:ad:d9:f6:ca:44:ab:95:db:a0: ff:46:9e:c7:88:a1:f4:90:72:97:c6:5c:76:42:26:e7:df:70: b1:23:80:ea:e0:19:11:3c:50:c2:c9:1e:ca:4d:bf:62:b4:48: 4b:33:79:c0:c7:dc:db:5e:82:f9:0b:4d:99:ab:f2:0c:fe:55: 35:2b:86:1b:c7:34:fe:6c:e1:33:59:87:b1:da:dd:e0:aa:e3: ae:6a:ba:8c:f4:0b:14:09:7d:16:b9:cd:4d:11:b2:83:83:47: e3:d3:02:32:b1:be:38:a4:27:6d:04:c7:18:bc:68:13:7b:3c: ae:e0:ba:6f:94:ec:f9:4c:13:7f:7e:4a:37:db:f7:09:98:04: eb:02:36:0d:b7:84:6b:b0:d3:ed:7d:69:38:b5:f2:c1:6e:ab: c8:2c:21:69:aa:5f:28:56:c7:f8:db:cd:44:fb:13:23:85:3c: 25:bd:f5:1f:b3:fd:f8:59:ee:4d:7b:a0:1a:12:72:53:51:ea: 80:da:71:30:f7:09:60:bb:f3:54:8b:6e:0d:e7:b7:d3:d2:74: bf:cd:df:14:f7:df:65:e7:6d:f3:d5:8b:01:24:a7:26:e4:13: 4c:a7:63:f6:2a:2d:ab:17:1d:e4:c0:8d:3c:ac:9b:69:b0:f9: b5:ba:e8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p5FiQBQLchwlcqYcNfvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh ZjE2NWUwHhcNMjYwMTAyMTcwMDQ2WhcNMjYwMTAzMTcwMDQ2WjAzMTEwLwYDVQQD Eyg0YTZiZGNmYzQ4NGY2NDIwMjIwMjNjOWM0YzcwYzU5MzQwNzk4M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiHhrJBioEXekmPV0VzwHZaNI5Bx vMXZo+brEet0NgTdN6PgDhhHWsIYVTv5N4GwkYv26ZqBAFDk6fIj8WCN09OK+z75 hKT1Dckx0ytbEGLxIwd8lptE60w0GE0P/2xX/Ra26fFJYYC3Sbffj6/B1KkD+oiK Iratvqrd6Lz8NWkH6qTy8croBrcxn/dh+94JjAFc+NUhD/GsWS2klXq5QXUHAqjL doF7Acaghy1UD23MhKPc+M+pztjStXiqSYiaIA5FmQHd3HIV6h1iv1ct8VuwpBYH pSBtcJMqMpFT8Ac7W2N3hVezWIwrmSfwFGc0rPMTA0kgVHCy/VFrMJfbVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpr3PxIT2QgIgI8nExwxZNAeYO0MB8GA1UdIwQY MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ2CcpWY czQvrdn2ykSrldug/0aex4ih9JByl8ZcdkIm599wsSOA6uAZETxQwskeyk2/YrRI SzN5wMfc216C+QtNmavyDP5VNSuGG8c0/mzhM1mHsdrd4Krjrmq6jPQLFAl9FrnN TRGyg4NH49MCMrG+OKQnbQTHGLxoE3s8ruC6b5Ts+UwTf35KN9v3CZgE6wI2DbeE a7DT7X1pOLXywW6ryCwhaapfKFbH+NvNRPsTI4U8Jb31H7P9+FnuTXugGhJyU1Hq gNpxMPcJYLvzVItuDee309J0v83fFPffZedt89WLASSnJuQTTKdj9iotqxcd5MCN PKybabD5tbroTQ== -----END CERTIFICATE-----Generated at Sat Jan 3 00:56:02 2026 by rpki-client