This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json) Hash identifier: BMqyas+pNebOEbc+7lQE+2nGJGrvMqNzTmMi3tbiHiM= Subject key identifier: FD:17:97:01:D5:CA:54:9D:4F:37:D6:B1:54:C9:18:02:0A:0D:E4:11 Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Certificate serial: 019B79EE078CAC3AC6F9A1CE7A4740A20E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft Manifest number: 11A5 Signing time: Thu 01 Jan 2026 14:20:01 +0000 Manifest this update: Thu 01 Jan 2026 14:20:01 +0000 Manifest next update: Fri 02 Jan 2026 14:20:01 +0000 Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=) 2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: NoAKc6F0RBK8T3m5/4q5wyA4sh4RkhfpQLUYsZSksVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ee:07:8c:ac:3a:c6:f9:a1:ce:7a:47:40:a2:0e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Validity Not Before: Jan 1 14:20:01 2026 GMT Not After : Jan 2 14:20:01 2026 GMT Subject: CN=fd179701d5ca549d4f37d6b154c918020a0de411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:ac:50:d2:18:68:16:78:0a:f2:ac:c8:f5: be:78:54:ea:f1:69:35:1b:40:f9:90:af:3e:90:79: 38:3e:b3:a7:48:92:63:c2:21:d8:b2:bc:c4:09:0a: ed:36:3d:3d:33:e1:0a:6d:61:af:05:97:61:03:40: 8b:a5:1f:75:87:16:b8:67:e0:29:b4:c4:58:31:df: 16:5d:40:fb:48:07:4f:dc:0c:7d:0c:26:76:7c:89: 49:9a:14:cb:29:2a:75:f1:18:aa:ab:65:98:03:48: c1:6b:7d:49:28:70:fb:e1:d9:d7:10:04:c5:f6:dc: 84:ce:97:3a:8f:9d:82:60:3b:b0:6a:ba:17:4b:bb: 14:60:b4:2b:76:8f:4a:bb:da:41:8e:ef:ec:c2:ac: 2d:45:7c:75:29:9e:17:57:39:0c:86:07:31:66:46: 25:f6:af:db:a1:34:e1:d6:48:36:b2:98:c4:ef:2b: b9:04:ca:e1:1c:26:b2:24:0b:31:99:91:49:9d:14: 29:ad:f0:8c:20:1f:54:8e:50:6f:c3:60:84:86:9b: c8:ce:13:d1:4a:f5:0b:6e:bd:ec:e6:24:f5:40:de: 4e:3b:d3:59:31:39:55:d6:a5:32:bf:95:c3:c7:76: b8:bb:6f:19:91:27:ad:1c:05:ad:99:a8:3b:18:06: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:97:01:D5:CA:54:9D:4F:37:D6:B1:54:C9:18:02:0A:0D:E4:11 X509v3 Authority Key Identifier: keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f6:4d:30:0d:ef:81:88:21:14:ca:89:d4:62:be:9a:e7:1c: 39:0c:65:79:4e:4e:f0:07:16:52:b1:9d:59:c4:f5:1d:5b:00: 1e:b0:d1:13:d3:a3:66:26:3f:da:03:44:2e:28:ab:82:80:a8: 40:31:05:d6:a4:3b:5b:04:4e:a3:0c:9a:5f:82:6c:17:99:f9: ea:b9:67:63:ae:92:98:69:07:fa:01:3f:c4:63:a2:24:8a:74: 01:bb:b7:52:9b:4f:8a:03:43:47:1b:24:f2:36:3b:8f:d0:9b: d7:c0:89:9d:f0:12:52:b3:03:9e:c9:25:a7:4d:ca:b4:af:e4: f8:e7:79:e1:8e:98:66:3e:59:b9:fc:88:14:3c:d2:90:1b:1e: 94:8d:ac:6e:d7:9c:d3:aa:06:a9:b9:91:13:c3:7d:ee:18:ad: 4f:36:9e:5b:d3:25:80:01:cc:17:b6:79:b6:fa:f0:e1:bb:7c: 45:12:1a:5b:5e:de:a0:6c:2e:38:b0:55:88:58:01:c8:4b:56: 30:75:b3:7d:b4:29:e0:c2:68:97:09:61:1e:8b:3f:99:21:13: 7d:9e:ba:fe:e4:e1:61:2c:40:19:6d:e5:83:2f:dc:9d:c6:06: f7:24:bb:cc:ae:b2:a1:e1:72:1a:16:42:86:08:73:a9:3b:4b: 74:e4:f9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt57geMrDrG+aHOekdAog6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi Yjc2MjgwHhcNMjYwMTAxMTQyMDAxWhcNMjYwMTAyMTQyMDAxWjAzMTEwLwYDVQQD EyhmZDE3OTcwMWQ1Y2E1NDlkNGYzN2Q2YjE1NGM5MTgwMjBhMGRlNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkWsUNIYaBZ4CvKsyPW+eFTq8Wk1 G0D5kK8+kHk4PrOnSJJjwiHYsrzECQrtNj09M+EKbWGvBZdhA0CLpR91hxa4Z+Ap tMRYMd8WXUD7SAdP3Ax9DCZ2fIlJmhTLKSp18Riqq2WYA0jBa31JKHD74dnXEATF 9tyEzpc6j52CYDuwaroXS7sUYLQrdo9Ku9pBju/swqwtRXx1KZ4XVzkMhgcxZkYl 9q/boTTh1kg2spjE7yu5BMrhHCayJAsxmZFJnRQprfCMIB9UjlBvw2CEhpvIzhPR SvULbr3s5iT1QN5OO9NZMTlV1qUyv5XDx3a4u28ZkSetHAWtmag7GAaFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0XlwHVylSdTzfWsVTJGAIKDeQRMB8GA1UdIwQY MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4 LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/ZNMA3v gYghFMqJ1GK+muccOQxleU5O8AcWUrGdWcT1HVsAHrDRE9OjZiY/2gNELiirgoCo QDEF1qQ7WwROowyaX4JsF5n56rlnY66SmGkH+gE/xGOiJIp0Abu3UptPigNDRxsk 8jY7j9Cb18CJnfASUrMDnsklp03KtK/k+Od54Y6YZj5ZufyIFDzSkBselI2sbtec 06oGqbmRE8N97hitTzaeW9MlgAHMF7Z5tvrw4bt8RRIaW17eoGwuOLBViFgByEtW MHWzfbQp4MJolwlhHos/mSETfZ66/uThYSxAGW3lgy/cncYG9yS7zK6yoeFyGhZC hghzqTtLdOT5hA== -----END CERTIFICATE-----Generated at Thu Jan 1 22:58:20 2026 by rpki-client