This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json) Hash identifier: n89GOlXYbP1LEL9grP+UgaJ1AMDJwxiHXsXj07pKhGQ= Subject key identifier: 15:3D:54:93:AC:1D:98:30:06:4D:D9:8C:6F:6F:FD:3F:DA:7C:0D:2C Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Certificate serial: 019B79A5A2E07049FE8C40947AA3BF9F7E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 13:00:56 +0000 Manifest this update: Thu 01 Jan 2026 13:00:56 +0000 Manifest next update: Fri 02 Jan 2026 13:00:56 +0000 Files and hashes: 1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: T7Y7n5Z6GUVl0Up3h356LI86AanKv8zqX40M2PtiVLU=) 2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:a5:a2:e0:70:49:fe:8c:40:94:7a:a3:bf:9f:7e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Validity Not Before: Jan 1 13:00:56 2026 GMT Not After : Jan 2 13:00:56 2026 GMT Subject: CN=153d5493ac1d9830064dd98c6f6ffd3fda7c0d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:9a:55:3d:52:79:00:9f:1d:45:7d:55:78: 47:75:08:3c:b3:78:fd:00:a5:e3:9d:77:ef:10:da: ec:d2:d5:b5:3d:9b:09:9c:29:61:2a:f1:57:cb:f9: 0c:f9:d0:82:05:9a:35:f3:af:42:f6:9f:78:b7:b3: 8c:9e:f5:8c:e2:1c:31:ef:57:9a:77:8a:0e:68:30: 43:99:81:f0:2d:5e:38:06:dc:e7:92:ac:8d:41:0c: 8c:a7:49:7f:95:2e:27:62:15:9e:94:f1:9e:e4:47: 89:fa:54:82:59:5a:4d:14:09:c8:7b:ac:19:b4:95: 35:02:8e:e2:df:5d:2a:11:b6:43:57:d3:30:9d:bc: 25:90:0b:1f:49:e3:77:41:d4:1d:9f:26:78:c2:df: ec:f8:73:16:42:a7:b9:0d:7b:06:c0:fa:c9:d6:1f: c8:83:e6:82:f2:8a:50:3b:86:fd:22:1d:d0:49:bf: 09:58:29:58:fb:5c:32:3e:bc:8a:4c:5e:23:0f:ed: 6f:2c:dc:41:43:bc:97:f1:fd:39:e7:18:cb:bc:c5: 06:96:fa:f7:43:2d:d3:11:18:01:f1:75:83:c6:60: 48:3c:1d:c6:69:0d:04:c7:00:5b:ac:67:0d:3a:70: dd:c3:3a:de:32:90:1a:3b:7c:1e:e2:49:d9:03:9c: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3D:54:93:AC:1D:98:30:06:4D:D9:8C:6F:6F:FD:3F:DA:7C:0D:2C X509v3 Authority Key Identifier: keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8e:3b:4a:35:eb:56:ab:67:af:b0:8c:ee:6f:20:84:c6:be: 8a:60:bc:43:3c:7d:4f:58:93:6c:f2:d5:c6:03:5e:17:ce:ae: 7e:cf:57:06:ac:30:66:4f:5d:cd:03:fb:79:d9:9f:a3:42:b6: c3:ab:69:a4:a6:3d:8e:58:df:64:8f:4c:06:69:64:5e:41:09: 31:11:0a:bf:fd:93:c1:06:44:2c:9b:35:35:e4:d7:01:bd:df: 79:6e:e9:a8:e4:37:c5:7b:53:d2:72:9e:30:58:2f:1e:4e:97: 27:4f:88:4d:c9:d6:30:0b:50:98:44:c1:98:e1:66:dd:d0:65: de:3d:0e:87:c2:e4:0a:f5:b0:76:be:94:bd:e3:e1:a5:31:a2: c0:c9:ad:04:48:e0:ee:b4:7b:fc:88:c2:03:87:7b:4a:24:20: 87:56:1b:1b:c0:0c:92:47:7c:e5:e0:01:d3:fc:d5:d0:dc:b9: 61:cb:f1:bd:ce:69:ba:18:d5:b8:db:c4:f3:3a:e3:8b:1b:87: af:9c:aa:78:19:de:73:a2:3e:fd:c6:a6:60:b4:52:2e:10:24: 37:44:ef:43:a1:76:57:4a:a2:51:fe:c7:b4:fb:67:0b:b8:cf: f1:99:37:d8:7e:05:8a:78:c1:f4:2a:cb:58:2d:e6:8c:ce:fc: c5:2e:38:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5paLgcEn+jECUeqO/n35dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4 ZDg1YTAwHhcNMjYwMTAxMTMwMDU2WhcNMjYwMTAyMTMwMDU2WjAzMTEwLwYDVQQD EygxNTNkNTQ5M2FjMWQ5ODMwMDY0ZGQ5OGM2ZjZmZmQzZmRhN2MwZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDKaVT1SeQCfHUV9VXhHdQg8s3j9 AKXjnXfvENrs0tW1PZsJnClhKvFXy/kM+dCCBZo1869C9p94t7OMnvWM4hwx71ea d4oOaDBDmYHwLV44BtznkqyNQQyMp0l/lS4nYhWelPGe5EeJ+lSCWVpNFAnIe6wZ tJU1Ao7i310qEbZDV9MwnbwlkAsfSeN3QdQdnyZ4wt/s+HMWQqe5DXsGwPrJ1h/I g+aC8opQO4b9Ih3QSb8JWClY+1wyPryKTF4jD+1vLNxBQ7yX8f055xjLvMUGlvr3 Qy3TERgB8XWDxmBIPB3GaQ0ExwBbrGcNOnDdwzreMpAaO3we4knZA5zmxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU9VJOsHZgwBk3ZjG9v/T/afA0sMB8GA1UdIwQY MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2 LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY47SjXr Vqtnr7CM7m8ghMa+imC8Qzx9T1iTbPLVxgNeF86ufs9XBqwwZk9dzQP7edmfo0K2 w6tppKY9jljfZI9MBmlkXkEJMREKv/2TwQZELJs1NeTXAb3feW7pqOQ3xXtT0nKe MFgvHk6XJ0+ITcnWMAtQmETBmOFm3dBl3j0Oh8LkCvWwdr6UvePhpTGiwMmtBEjg 7rR7/IjCA4d7SiQgh1YbG8AMkkd85eAB0/zV0Ny5Ycvxvc5puhjVuNvE8zrjixuH r5yqeBnec6I+/camYLRSLhAkN0TvQ6F2V0qiUf7HtPtnC7jP8Zk32H4FinjB9CrL WC3mjM78xS44zA== -----END CERTIFICATE-----Generated at Thu Jan 1 15:38:48 2026 by rpki-client