This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json) Hash identifier: ORGT4wMd5GHDwqNXkLfYhooWuPDbhfRnYv+bANyhAs0= Subject key identifier: 97:8F:1B:CF:D4:6B:82:C5:EA:DA:9D:B0:C8:14:80:57:CB:AD:CA:C5 Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29 Certificate serial: 019B78A3C79F34F02789BAC0E6DE973C9C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft Manifest number: 025E Signing time: Thu 01 Jan 2026 08:19:17 +0000 Manifest this update: Thu 01 Jan 2026 08:19:17 +0000 Manifest next update: Fri 02 Jan 2026 08:19:17 +0000 Files and hashes: 1: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: pMIhxOlsJcGXj9Ts8iyxiyHYQfyshqTKwQW1qjTArYM=) 2: zc3uA_Kqejq-ynl5hw7DgsICqZs.roa (hash: J23fc0kk/YQdneIepC92Zz7vs5gfl3zjCFcARQvJKXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:c7:9f:34:f0:27:89:ba:c0:e6:de:97:3c:9c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29 Validity Not Before: Jan 1 08:19:17 2026 GMT Not After : Jan 2 08:19:17 2026 GMT Subject: CN=978f1bcfd46b82c5eada9db0c8148057cbadcac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:d5:7f:da:c0:9d:a5:6f:82:16:ae:21:9f: c0:50:5d:e9:4e:71:e0:a9:47:fd:c8:09:0b:8d:6e: 60:46:7a:f8:1c:d7:92:57:06:cc:84:1b:f9:95:57: 05:7e:c1:a7:eb:10:28:37:3a:0c:be:55:0c:1d:8e: 37:02:70:8b:58:1a:4d:14:3f:13:05:a7:b6:b5:f1: 57:55:67:02:8e:e0:06:94:94:a8:a1:83:02:b2:de: 4b:53:56:da:06:b1:31:08:0c:10:58:58:c8:13:e6: a0:5b:dc:2c:02:e8:a0:30:d3:be:e0:59:91:50:ee: 55:3e:d4:5c:7e:b2:5a:8c:f5:c2:b6:87:99:de:62: c8:e4:23:73:b4:b1:91:12:21:68:00:d2:9c:88:29: 70:a7:d6:e7:b4:37:af:8d:0e:db:07:4a:59:07:82: 09:4b:55:94:1c:a1:da:0f:5e:5f:89:fd:1c:d3:33: 4e:ec:93:81:a4:e0:ad:17:0a:a9:8d:04:e6:ff:b4: 45:ec:5f:86:15:ce:b0:f3:af:95:ee:7e:86:07:b6: a0:af:b1:53:73:c5:a6:9a:a9:34:14:fd:73:8b:2a: 8f:b6:bf:32:78:ec:2c:b7:0b:4e:e2:f5:de:8b:bd: 51:a7:25:78:df:4f:b1:0a:b3:8f:8f:68:ae:a5:46: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8F:1B:CF:D4:6B:82:C5:EA:DA:9D:B0:C8:14:80:57:CB:AD:CA:C5 X509v3 Authority Key Identifier: keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:dc:ad:14:20:a9:a7:d9:b6:97:57:86:d0:e3:fe:20:26:34: 26:bf:91:14:4d:ab:95:07:e1:65:66:e8:b9:dc:85:b0:df:63: f7:18:04:94:88:13:c1:4d:a6:60:3e:8a:ef:3e:fc:18:87:c4: 47:a3:64:be:f1:d8:48:a2:4b:75:73:c4:63:96:e4:2f:12:aa: b9:02:77:f3:58:36:53:76:ff:a0:d7:aa:16:5f:b3:00:75:10: ee:38:b9:8a:76:a6:46:30:38:ea:db:c3:a4:12:a4:a0:52:2a: d9:18:8c:cd:7d:40:8c:5e:d0:44:83:50:82:f7:93:01:fc:e5: 3b:d2:b3:08:10:01:9a:19:ba:4c:d8:8e:07:24:ad:4f:6e:25: b6:a0:69:5f:eb:e4:af:3e:8e:95:03:16:43:ea:25:83:23:bc: e1:06:3f:3d:b4:fa:3a:0c:a7:f5:64:36:05:df:c4:0e:47:a0: 22:c0:c9:49:00:54:b1:c8:6c:50:89:87:99:54:ec:68:14:dc: d0:eb:8e:c9:ed:bc:2e:15:a6:cc:33:99:d1:11:f2:bc:98:b4: 72:f7:38:a9:a2:61:2d:db:7a:be:f6:ea:e6:a1:4f:a7:3d:5a: fc:4f:8f:6a:94:bf:70:24:6d:21:e6:e7:2f:a3:96:60:a6:87: cb:b0:e8:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4o8efNPAnibrA5t6XPJx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx MDllMjkwHhcNMjYwMTAxMDgxOTE3WhcNMjYwMTAyMDgxOTE3WjAzMTEwLwYDVQQD Eyg5NzhmMWJjZmQ0NmI4MmM1ZWFkYTlkYjBjODE0ODA1N2NiYWRjYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8HVf9rAnaVvghauIZ/AUF3pTnHg qUf9yAkLjW5gRnr4HNeSVwbMhBv5lVcFfsGn6xAoNzoMvlUMHY43AnCLWBpNFD8T Bae2tfFXVWcCjuAGlJSooYMCst5LU1baBrExCAwQWFjIE+agW9wsAuigMNO+4FmR UO5VPtRcfrJajPXCtoeZ3mLI5CNztLGREiFoANKciClwp9bntDevjQ7bB0pZB4IJ S1WUHKHaD15fif0c0zNO7JOBpOCtFwqpjQTm/7RF7F+GFc6w86+V7n6GB7agr7FT c8Wmmqk0FP1ziyqPtr8yeOwstwtO4vXei71RpyV430+xCrOPj2iupUa9jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJePG8/Ua4LF6tqdsMgUgFfLrcrFMB8GA1UdIwQY MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt ZTk1MDY5OTE1N2UxLzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdytFCCp p9m2l1eG0OP+ICY0Jr+RFE2rlQfhZWboudyFsN9j9xgElIgTwU2mYD6K7z78GIfE R6NkvvHYSKJLdXPEY5bkLxKquQJ381g2U3b/oNeqFl+zAHUQ7ji5inamRjA46tvD pBKkoFIq2RiMzX1AjF7QRINQgveTAfzlO9KzCBABmhm6TNiOByStT24ltqBpX+vk rz6OlQMWQ+olgyO84QY/PbT6Ogyn9WQ2Bd/EDkegIsDJSQBUschsUImHmVTsaBTc 0OuOye28LhWmzDOZ0RHyvJi0cvc4qaJhLdt6vvbq5qFPpz1a/E+PapS/cCRtIebn L6OWYKaHy7DoWw== -----END CERTIFICATE-----Generated at Thu Jan 1 15:42:16 2026 by rpki-client