This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft File: F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json) Hash identifier: 4YaCBhPqwNhJDmUlxw7wddR8ceKN/wp1kVEpSVReT5Y= Subject key identifier: C5:45:64:2D:09:C5:67:CB:99:99:58:F4:B0:F1:BD:BA:A3:FF:E8:DC Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4 Certificate issuer: /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4 Certificate serial: 019B812850E61EFD05162A11CF036F07260A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft Manifest number: 04CC Signing time: Sat 03 Jan 2026 00:01:01 +0000 Manifest this update: Sat 03 Jan 2026 00:01:01 +0000 Manifest next update: Sun 04 Jan 2026 00:01:01 +0000 Files and hashes: 1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: xq32bcPBlTYEeMk07l4XeColk9XXiKXI8c0nmHZmCkw=) 2: PuYckfTPaEQN4beiQXX7upuOr3I.roa (hash: sBCyR1KSqyGnMo+n9mb4woR1xziuhqzF6ro+c/USxkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:28:50:e6:1e:fd:05:16:2a:11:cf:03:6f:07:26:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4 Validity Not Before: Jan 3 00:01:01 2026 GMT Not After : Jan 4 00:01:01 2026 GMT Subject: CN=c545642d09c567cb999958f4b0f1bdbaa3ffe8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:c5:87:26:84:28:7f:e5:7f:01:a8:40:4e: 9a:fd:d1:0f:8e:29:19:c3:7f:94:f7:49:a2:4b:7c: 0c:9f:52:dd:99:9f:f2:2d:60:b8:b1:04:5d:b4:65: 59:a6:bc:df:c4:c7:95:ae:71:b4:cc:3f:4c:df:9d: f9:2a:5f:c1:f1:0f:a2:40:81:2c:81:1c:83:ea:65: 46:ec:4c:7f:53:5f:6d:ed:ef:a8:36:4f:22:3c:63: a8:ef:fb:64:b0:72:34:e4:07:05:db:15:ed:db:6e: 4f:03:7d:9a:c4:28:49:a0:89:22:db:63:6b:51:ff: 63:3e:8b:5f:7c:d7:ae:c6:23:25:d6:37:20:57:2c: e4:f1:bd:00:3d:56:20:94:74:ad:dc:40:6e:e4:4b: 35:4a:43:38:5f:f7:7e:a7:d8:fd:7a:9e:8d:f3:61: c8:ed:c2:f5:28:b9:ed:34:b1:c8:65:2e:e6:b7:d0: 1a:ef:d5:a2:fc:62:d6:14:63:06:8e:e5:56:4c:f3: 88:dd:df:05:6d:08:37:3d:60:10:e0:dc:d0:b5:b2: 4e:0d:3c:6d:e2:18:5e:c8:61:f0:05:9e:19:53:a1: 3d:eb:a3:6c:19:84:b4:5d:7b:03:36:53:06:09:99: 03:50:78:8d:af:e4:cd:60:d6:89:d9:e1:a6:99:f2: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:64:2D:09:C5:67:CB:99:99:58:F4:B0:F1:BD:BA:A3:FF:E8:DC X509v3 Authority Key Identifier: keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:10:61:32:67:38:0e:4e:91:1e:d0:6d:75:cd:8a:b8:51:71: 96:7e:98:a8:e3:ab:8f:f8:ef:a2:16:60:b3:85:12:b2:16:37: ba:7b:02:58:c0:7e:6d:9d:f8:3c:45:0e:48:b7:1f:8f:be:86: 76:f8:80:c0:39:d7:93:77:fc:25:e9:ac:f6:e0:5f:6e:92:57: d9:7b:d8:59:b5:c1:8c:7b:14:51:1d:e5:ba:60:1d:48:0f:bc: 65:24:2a:2c:b7:2b:7a:1b:46:be:7f:4f:6e:a4:94:12:a9:7b: 50:53:ba:cb:d8:25:1d:f4:ee:e8:86:34:1e:31:a4:74:b5:e6: 93:b2:4c:bf:f1:8a:a0:07:a5:83:41:51:2b:2e:69:49:5f:d6: f6:ba:77:44:4d:85:f2:31:4d:f5:80:3f:7f:02:e1:56:4e:b8: 95:75:a9:6d:8f:57:a8:9d:fa:2f:af:be:a4:ca:1b:2c:fc:34: e2:27:35:5f:44:fc:ea:e8:3d:a9:22:2e:61:a0:e4:96:1c:19: 3d:89:4b:dc:1a:39:a3:e4:40:b3:46:f7:65:7a:14:f5:e4:f7: e1:4e:c0:d0:e9:91:78:a3:af:17:5f:32:2b:25:b7:5e:20:f8: 4c:ad:a0:b6:df:e9:c2:17:c9:74:ea:96:07:39:6c:05:f1:95: 87:bf:77:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBKFDmHv0FFioRzwNvByYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OWViODdiZGMzMjc5M2RiZmVkMTg0YTZmZmJjMTRlZDE1 ZDMyYTQwHhcNMjYwMTAzMDAwMTAxWhcNMjYwMTA0MDAwMTAxWjAzMTEwLwYDVQQD EyhjNTQ1NjQyZDA5YzU2N2NiOTk5OTU4ZjRiMGYxYmRiYWEzZmZlOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKPFhyaEKH/lfwGoQE6a/dEPjikZ w3+U90miS3wMn1LdmZ/yLWC4sQRdtGVZprzfxMeVrnG0zD9M3535Kl/B8Q+iQIEs gRyD6mVG7Ex/U19t7e+oNk8iPGOo7/tksHI05AcF2xXt225PA32axChJoIki22Nr Uf9jPotffNeuxiMl1jcgVyzk8b0APVYglHSt3EBu5Es1SkM4X/d+p9j9ep6N82HI 7cL1KLntNLHIZS7mt9Aa79Wi/GLWFGMGjuVWTPOI3d8FbQg3PWAQ4NzQtbJODTxt 4hheyGHwBZ4ZU6E966NsGYS0XXsDNlMGCZkDUHiNr+TNYNaJ2eGmmfIEJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVFZC0JxWfLmZlY9LDxvbqj/+jcMB8GA1UdIwQY MBaAFBeeuHvcMnk9v+0YSm/7wU7RXTKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUt ZWYxNTkxYWZhYTg2LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUtZWYxNTkxYWZhYTg2 LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxBhMmc4 Dk6RHtBtdc2KuFFxln6YqOOrj/jvohZgs4USshY3unsCWMB+bZ34PEUOSLcfj76G dviAwDnXk3f8Jems9uBfbpJX2XvYWbXBjHsUUR3lumAdSA+8ZSQqLLcrehtGvn9P bqSUEql7UFO6y9glHfTu6IY0HjGkdLXmk7JMv/GKoAelg0FRKy5pSV/W9rp3RE2F 8jFN9YA/fwLhVk64lXWpbY9XqJ36L6++pMobLPw04ic1X0T86ug9qSIuYaDklhwZ PYlL3Bo5o+RAs0b3ZXoU9eT34U7A0OmReKOvF18yKyW3XiD4TK2gtt/pwhfJdOqW BzlsBfGVh793vg== -----END CERTIFICATE-----Generated at Sat Jan 3 02:19:25 2026 by rpki-client