This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json) Hash identifier: mOBT4+OekvUiWaCWgoiMsfh8WrIUbuqfiYPqCcJsQuI= Subject key identifier: F4:22:3C:23:9E:70:C1:0A:73:A2:23:C2:79:0B:4C:CE:A8:B1:AE:0B Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Certificate serial: 019B77C824B7FA757F79C97D8905EBBB28C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 04:19:23 +0000 Manifest this update: Thu 01 Jan 2026 04:19:23 +0000 Manifest next update: Fri 02 Jan 2026 04:19:23 +0000 Files and hashes: 1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: /8ZqK2Tug6XoJcTv2abhFQ1IhT8U/vaVvSlVw7sq1i4=) 2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c8:24:b7:fa:75:7f:79:c9:7d:89:05:eb:bb:28:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Validity Not Before: Jan 1 04:19:23 2026 GMT Not After : Jan 2 04:19:23 2026 GMT Subject: CN=f4223c239e70c10a73a223c2790b4ccea8b1ae0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:c4:cd:e3:03:11:b1:80:5d:b4:ba:f6:f1: 31:ee:9a:02:66:5a:77:6d:87:c6:57:03:be:5b:1e: 29:f7:f1:ca:85:ec:97:9a:b6:73:27:bf:c9:65:95: 20:73:cc:07:dd:58:4c:cd:e4:25:23:cb:33:e4:26: 0f:49:62:ee:b8:46:50:8f:ad:02:ec:f2:8d:07:44: 3a:f0:c3:d0:a7:98:0d:d6:c0:d4:bd:3f:64:99:39: 79:84:f6:4a:66:4d:44:36:e3:a8:a8:30:d1:48:53: 38:83:36:ed:e7:b7:9e:f3:3c:72:2a:d3:0a:0f:bd: 5e:c0:a0:51:2b:0d:24:28:c6:b0:53:c7:90:89:28: fe:65:b4:8c:1c:b7:4e:df:69:d6:fb:ef:f9:ff:de: b0:49:25:ce:89:05:02:26:7d:f8:f2:9b:c1:59:b9: 89:95:96:aa:e1:17:1c:85:bb:69:f4:26:1b:09:26: 05:cd:57:73:4f:d3:2a:99:1e:43:f9:2c:79:6e:a3: de:d5:b0:0f:9a:a9:0e:4b:52:71:42:f7:21:82:c6: 24:55:f2:66:b5:df:b4:93:aa:1d:a1:70:d6:b0:41: f8:cf:5f:9a:7a:e4:38:14:c8:88:51:61:39:51:52: 35:c6:ad:67:aa:6f:d9:af:12:69:73:27:bd:b4:a3: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:22:3C:23:9E:70:C1:0A:73:A2:23:C2:79:0B:4C:CE:A8:B1:AE:0B X509v3 Authority Key Identifier: keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4c:75:22:23:79:4d:01:d8:26:ec:3e:58:e5:b7:b0:3b:f1: 9f:c0:97:2e:38:57:5e:9d:94:e4:50:9e:5e:3b:6c:20:a9:6a: 7f:fb:a4:1c:f0:0e:85:9d:b8:a7:d0:1d:1b:83:19:fb:34:6a: f8:17:0d:a6:84:7f:3a:a6:9f:92:33:b8:a4:26:05:dc:50:7e: 0f:46:9c:83:8a:8b:ae:68:83:29:bf:db:f7:46:ac:ba:7a:17: 11:41:11:ed:52:86:04:d8:6d:37:93:fb:d8:8b:d5:8b:c2:17: 36:bf:bd:6a:08:0f:4e:6b:a9:ba:eb:f8:6b:84:ab:b8:82:0c: ad:37:4e:be:50:35:09:21:93:a0:8f:58:7c:eb:9c:9a:a7:95: 83:f6:c8:4f:83:02:99:bf:34:e0:c7:11:18:15:4d:5f:31:61: 0b:ce:7a:19:29:0a:e4:85:02:fb:9a:08:86:8a:ed:c8:f5:26: 62:93:4d:c7:da:66:26:75:ff:9b:08:5c:48:80:67:fc:ec:ef: 86:5a:ec:75:ec:e1:98:ed:52:5c:2e:b9:64:aa:12:b8:aa:0b: 14:87:2d:55:7d:fe:22:0a:68:da:52:1a:73:0c:db:c6:6d:06: ac:b0:ae:0e:29:7f:b5:57:2e:2b:b8:71:d8:e7:3c:45:45:89: a1:e0:77:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3yCS3+nV/ecl9iQXruyjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4 ZDg1YTAwHhcNMjYwMTAxMDQxOTIzWhcNMjYwMTAyMDQxOTIzWjAzMTEwLwYDVQQD EyhmNDIyM2MyMzllNzBjMTBhNzNhMjIzYzI3OTBiNGNjZWE4YjFhZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm3EzeMDEbGAXbS69vEx7poCZlp3 bYfGVwO+Wx4p9/HKheyXmrZzJ7/JZZUgc8wH3VhMzeQlI8sz5CYPSWLuuEZQj60C 7PKNB0Q68MPQp5gN1sDUvT9kmTl5hPZKZk1ENuOoqDDRSFM4gzbt57ee8zxyKtMK D71ewKBRKw0kKMawU8eQiSj+ZbSMHLdO32nW++/5/96wSSXOiQUCJn348pvBWbmJ lZaq4Rcchbtp9CYbCSYFzVdzT9MqmR5D+Sx5bqPe1bAPmqkOS1JxQvchgsYkVfJm td+0k6odoXDWsEH4z1+aeuQ4FMiIUWE5UVI1xq1nqm/ZrxJpcye9tKOA6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQiPCOecMEKc6IjwnkLTM6osa4LMB8GA1UdIwQY MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2 LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskx1IiN5 TQHYJuw+WOW3sDvxn8CXLjhXXp2U5FCeXjtsIKlqf/ukHPAOhZ24p9AdG4MZ+zRq +BcNpoR/OqafkjO4pCYF3FB+D0acg4qLrmiDKb/b90asunoXEUER7VKGBNhtN5P7 2IvVi8IXNr+9aggPTmupuuv4a4SruIIMrTdOvlA1CSGToI9YfOucmqeVg/bIT4MC mb804McRGBVNXzFhC856GSkK5IUC+5oIhortyPUmYpNNx9pmJnX/mwhcSIBn/Ozv hlrsdezhmO1SXC65ZKoSuKoLFIctVX3+Igpo2lIacwzbxm0GrLCuDil/tVcuK7hx 2Oc8RUWJoeB3qQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:42 2026 by rpki-client