This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json) Hash identifier: uwDOUcge7KyT2Pa1huw127T+oeeeXH/IIuU7QqH258E= Subject key identifier: E4:93:4F:0E:10:9F:93:45:94:AE:9F:3F:18:0D:00:5A:D1:45:90:03 Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Certificate serial: 019B771258FFC91BBCE0C650E73E514358C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 01:00:49 +0000 Manifest this update: Thu 01 Jan 2026 01:00:49 +0000 Manifest next update: Fri 02 Jan 2026 01:00:49 +0000 Files and hashes: 1: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: LTHUyuXMb2etm2Gxnk1WHTCmxbfDZ4lpYmye6lFulaA=) 2: h82ZxYcXJj3A_ouwSUkDjq1RQKA.roa (hash: HzpbwQWXXcH0ZanQNW1jXafsl7bjkIHUFjSCCkES4YM=) 3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:58:ff:c9:1b:bc:e0:c6:50:e7:3e:51:43:58:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Validity Not Before: Jan 1 01:00:49 2026 GMT Not After : Jan 2 01:00:49 2026 GMT Subject: CN=e4934f0e109f934594ae9f3f180d005ad1459003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:8d:7e:04:a8:c4:d9:4e:e9:52:0b:2a:c7: 98:e9:fc:0a:bb:ea:7f:2c:3d:d1:3e:5c:6e:6a:68: af:a3:45:8b:67:70:56:ef:d5:41:15:a1:72:52:22: c5:8d:6a:ec:4c:94:e9:5c:80:7e:89:d2:bd:b8:61: dd:af:bc:f9:46:76:06:14:ba:c0:a1:62:42:42:57: 1e:9d:a3:b6:f9:f9:92:8e:65:44:67:05:c0:28:b2: d3:b8:fb:d7:15:1c:41:5e:57:73:c2:42:4b:7b:1e: 66:32:4c:6c:d6:58:ae:01:8d:30:e9:fd:bd:7e:c8: ed:57:d9:a5:34:9b:df:5a:37:31:45:2a:75:20:0b: 16:df:dc:55:7c:cc:78:ee:d5:d0:e9:59:f3:e2:cf: 3f:4f:4d:1f:25:a6:40:48:63:f9:a1:b0:39:67:c7: 6c:09:84:31:ef:8e:02:f0:87:bf:ba:26:98:cd:e3: 91:98:94:42:6d:92:74:46:2c:52:54:3c:c6:c9:af: 86:35:86:e7:c2:86:86:ae:cd:ba:be:ed:39:c0:d6: 35:ec:a7:ee:a6:ad:db:cb:d7:ba:3a:d4:eb:25:a6: 87:1c:af:5f:bb:df:da:0a:9e:91:f4:ec:13:e6:ff: 50:d4:da:d5:80:0b:f9:52:d5:d1:0d:11:5d:ee:1f: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:4F:0E:10:9F:93:45:94:AE:9F:3F:18:0D:00:5A:D1:45:90:03 X509v3 Authority Key Identifier: keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:f5:d5:19:11:3e:a3:b5:9c:b2:9b:26:c8:1a:a9:3b:d1: fa:c2:b7:09:0a:1b:61:65:74:b7:d2:02:ae:49:9c:44:e1:58: ad:7e:d6:e8:d5:ed:d9:1f:e6:32:3c:1a:f7:9a:95:f6:c1:9e: ba:72:14:e1:64:97:67:b4:2b:3f:7c:4a:7d:cc:1d:1f:76:b6: cd:32:15:03:48:8e:c3:de:e8:32:13:10:b3:50:d8:90:1f:4b: 32:0c:07:99:62:be:72:d8:43:23:8b:47:c3:c4:bf:06:61:d7: 9f:e9:96:81:9d:35:11:ed:95:66:bf:8e:ee:31:65:59:08:b0: 33:5f:71:d3:70:03:57:e6:88:ad:40:24:6d:75:b0:9b:ec:94: f1:09:6f:5f:d1:1b:91:25:24:17:6e:55:98:6e:5b:fa:d4:e9: 53:59:8f:47:f7:95:75:64:82:19:a0:6b:44:a9:da:e4:83:62: d6:24:88:82:8a:4a:55:a0:6c:58:27:e0:d1:2b:3a:10:13:96: ff:62:48:a0:b4:71:83:8f:da:74:2d:01:98:48:c9:98:c5:12: 9b:dc:b9:20:41:52:65:1c:bf:48:b4:7b:bc:16:8c:e8:b2:92: 28:3f:9a:36:bd:c0:08:e0:a4:f3:05:8f:80:8c:32:3b:5e:e6: 3f:67:97:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3Elj/yRu84MZQ5z5RQ1jFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk MWE5YWYwHhcNMjYwMTAxMDEwMDQ5WhcNMjYwMTAyMDEwMDQ5WjAzMTEwLwYDVQQD EyhlNDkzNGYwZTEwOWY5MzQ1OTRhZTlmM2YxODBkMDA1YWQxNDU5MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyONfgSoxNlO6VILKseY6fwKu+p/ LD3RPlxuamivo0WLZ3BW79VBFaFyUiLFjWrsTJTpXIB+idK9uGHdr7z5RnYGFLrA oWJCQlcenaO2+fmSjmVEZwXAKLLTuPvXFRxBXldzwkJLex5mMkxs1liuAY0w6f29 fsjtV9mlNJvfWjcxRSp1IAsW39xVfMx47tXQ6Vnz4s8/T00fJaZASGP5obA5Z8ds CYQx744C8Ie/uiaYzeORmJRCbZJ0RixSVDzGya+GNYbnwoaGrs26vu05wNY17Kfu pq3by9e6OtTrJaaHHK9fu9/aCp6R9OwT5v9Q1NrVgAv5UtXRDRFd7h/21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSTTw4Qn5NFlK6fPxgNAFrRRZADMB8GA1UdIwQY MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2 LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkr11RkR PqO1nLKbJsgaqTvR+sK3CQobYWV0t9ICrkmcROFYrX7W6NXt2R/mMjwa95qV9sGe unIU4WSXZ7QrP3xKfcwdH3a2zTIVA0iOw97oMhMQs1DYkB9LMgwHmWK+cthDI4tH w8S/BmHXn+mWgZ01Ee2VZr+O7jFlWQiwM19x03ADV+aIrUAkbXWwm+yU8QlvX9Eb kSUkF25VmG5b+tTpU1mPR/eVdWSCGaBrRKna5INi1iSIgopKVaBsWCfg0Ss6EBOW /2JIoLRxg4/adC0BmEjJmMUSm9y5IEFSZRy/SLR7vBaM6LKSKD+aNr3ACOCk8wWP gIwyO17mP2eXXw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:54:18 2026 by rpki-client