This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json) Hash identifier: 5grKvn288at1d/yk/O/oNIZaYn1waHDC92SX+s4Y5nI= Subject key identifier: 36:6C:A4:EE:6E:F3:C0:8C:FA:1F:53:BE:0E:3A:BF:7B:DC:6B:09:CF Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a Certificate serial: 019B797FDE7063F19DAA80BAEC983BB3ACAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft Manifest number: 0EA2 Signing time: Thu 01 Jan 2026 12:19:41 +0000 Manifest this update: Thu 01 Jan 2026 12:19:41 +0000 Manifest next update: Fri 02 Jan 2026 12:19:41 +0000 Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: Pz9e00y3JNHgvYzXJ7CuBAv6uQWcifVe0HyvVJE4aCw=) 2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:de:70:63:f1:9d:aa:80:ba:ec:98:3b:b3:ac:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a Validity Not Before: Jan 1 12:19:41 2026 GMT Not After : Jan 2 12:19:41 2026 GMT Subject: CN=366ca4ee6ef3c08cfa1f53be0e3abf7bdc6b09cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:a2:47:df:62:c0:da:fc:9f:4f:48:d7:e2: 11:92:9f:61:a6:22:51:2d:bb:63:67:24:bd:2a:20: ca:8b:ad:44:30:f9:06:a9:23:7c:d4:96:1f:6f:9a: 50:23:ad:a9:38:0b:b0:4a:eb:64:ae:43:8c:92:cc: 84:60:bb:96:be:e9:49:e9:89:48:35:f7:75:fa:8e: cb:d3:a7:2e:bd:b6:e0:53:1e:0a:d6:de:b0:9c:20: 03:1c:6d:a4:52:e5:08:88:4c:ca:04:c2:6a:93:c3: e4:ec:a8:55:f3:12:77:c4:1a:98:61:ba:94:97:28: ed:8c:a7:30:c2:3c:07:51:b1:44:3f:c4:56:4e:79: 60:18:3a:2b:fd:9d:6c:c7:17:a0:ec:65:c0:27:71: 5f:41:6a:ab:a7:36:7c:04:cb:16:8f:3a:7e:1f:b5: 5e:69:ea:0d:e4:5d:a4:8a:0f:f8:31:ad:ef:6d:de: be:fc:d2:ca:b0:e0:9e:60:6d:b0:07:f9:5d:83:dc: 88:8f:80:0a:8f:e2:05:ad:b7:6b:15:eb:60:5d:fd: 34:3d:0e:f0:04:f8:ab:1f:aa:80:23:ea:0e:9e:0f: a6:a4:d0:25:fd:1a:b1:f1:53:02:ef:65:30:c2:94: 1e:ff:28:7a:c6:96:2c:1e:d6:c7:b3:21:22:11:62: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:A4:EE:6E:F3:C0:8C:FA:1F:53:BE:0E:3A:BF:7B:DC:6B:09:CF X509v3 Authority Key Identifier: keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b6:d3:35:a7:28:e0:1b:f9:20:4e:fa:b7:f8:99:66:be:c2: e7:7b:9a:68:07:d5:d4:83:1b:2a:28:7f:5d:4f:cc:43:fc:82: b1:a2:e3:3e:63:fc:db:7c:3a:8d:46:3f:b7:6e:67:11:17:3f: 45:c8:90:42:0d:0c:7e:ab:a8:dd:77:be:83:aa:c9:91:99:c7: 94:7e:99:fd:6d:3d:f9:dd:c4:88:0e:cb:63:ce:d9:dd:c8:84: ee:cb:f0:e3:80:58:9c:ab:f0:db:13:78:ed:b4:58:58:aa:2a: af:04:fa:b1:50:a6:67:12:9e:e0:21:01:f4:70:20:8d:4a:4a: c0:73:bd:dd:00:2a:ea:82:72:36:71:fb:16:d9:be:92:49:87: 26:d7:3e:83:20:9d:31:cf:40:48:be:fb:fc:d6:1a:c1:35:42: 38:e9:e9:68:4d:8a:76:f9:60:50:7b:26:23:de:72:53:ae:ef: 64:a3:a8:b0:cc:41:58:0f:cd:3d:5a:75:e8:52:aa:e5:46:7c: a8:a3:65:0c:af:65:43:52:7d:3f:5d:2a:e8:23:bf:dd:f5:f9: 8f:ca:75:cb:b7:8c:e6:10:9b:a8:2f:73:4e:51:88:32:75:2a: da:6d:16:79:49:c5:bf:b4:77:92:ac:2c:53:8a:55:f5:78:06: 20:cb:63:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5f95wY/GdqoC67Jg7s6ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4 MmQ0M2EwHhcNMjYwMTAxMTIxOTQxWhcNMjYwMTAyMTIxOTQxWjAzMTEwLwYDVQQD EygzNjZjYTRlZTZlZjNjMDhjZmExZjUzYmUwZTNhYmY3YmRjNmIwOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ2iR99iwNr8n09I1+IRkp9hpiJR LbtjZyS9KiDKi61EMPkGqSN81JYfb5pQI62pOAuwSutkrkOMksyEYLuWvulJ6YlI Nfd1+o7L06cuvbbgUx4K1t6wnCADHG2kUuUIiEzKBMJqk8Pk7KhV8xJ3xBqYYbqU lyjtjKcwwjwHUbFEP8RWTnlgGDor/Z1sxxeg7GXAJ3FfQWqrpzZ8BMsWjzp+H7Ve aeoN5F2kig/4Ma3vbd6+/NLKsOCeYG2wB/ldg9yIj4AKj+IFrbdrFetgXf00PQ7w BPirH6qAI+oOng+mpNAl/Rqx8VMC72UwwpQe/yh6xpYsHtbHsyEiEWJakwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZspO5u88CM+h9Tvg46v3vcawnPMB8GA1UdIwQY MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4 LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrbTNaco 4Bv5IE76t/iZZr7C53uaaAfV1IMbKih/XU/MQ/yCsaLjPmP823w6jUY/t25nERc/ RciQQg0Mfquo3Xe+g6rJkZnHlH6Z/W09+d3EiA7LY87Z3ciE7svw44BYnKvw2xN4 7bRYWKoqrwT6sVCmZxKe4CEB9HAgjUpKwHO93QAq6oJyNnH7Ftm+kkmHJtc+gyCd Mc9ASL77/NYawTVCOOnpaE2KdvlgUHsmI95yU67vZKOosMxBWA/NPVp16FKq5UZ8 qKNlDK9lQ1J9P10q6CO/3fX5j8p1y7eM5hCbqC9zTlGIMnUq2m0WeUnFv7R3kqws U4pV9XgGIMtjpQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:25 2026 by rpki-client