This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json) Hash identifier: zokqD10ntVeoUEEuVcKmpX1ybfvCrhk/UrV+okCz8hs= Subject key identifier: E1:82:72:CB:82:CE:0D:3C:39:AA:EC:D7:1C:5A:4C:6D:54:37:CB:A0 Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f Certificate serial: 019B785C433514B6D35105094C70CA04FD8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 07:01:10 +0000 Manifest this update: Thu 01 Jan 2026 07:01:10 +0000 Manifest next update: Fri 02 Jan 2026 07:01:10 +0000 Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: YPXWRyf7/5Asw8xlaSsjf6M9yq70VkTELNf4ANFHd8U=) 2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:43:35:14:b6:d3:51:05:09:4c:70:ca:04:fd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f Validity Not Before: Jan 1 07:01:10 2026 GMT Not After : Jan 2 07:01:10 2026 GMT Subject: CN=e18272cb82ce0d3c39aaecd71c5a4c6d5437cba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:cd:f7:11:75:99:d3:2a:cd:28:ae:da:9e: 60:65:37:f0:8c:b3:96:cc:0e:04:29:dc:0c:dc:96: f4:ea:c2:6b:52:d7:bc:b7:d0:af:a7:76:79:8a:9b: 02:e6:a3:1f:8a:ed:01:4b:aa:2c:06:79:ee:0f:ee: 3a:40:ee:80:b1:19:dd:49:68:6f:4e:76:e0:f6:fc: 1b:66:6d:9e:62:46:2f:28:ad:e5:45:0f:34:21:b1: 49:2d:28:a5:4b:66:fb:40:02:7a:b6:71:36:0f:23: 98:e2:63:d3:82:5f:7d:76:bf:b0:60:7a:b6:d7:8c: 42:b5:cd:4e:0a:da:27:9b:bf:43:d7:ef:fa:c4:ed: 07:bf:31:ea:c2:1f:80:93:bb:4a:07:7c:97:ed:52: 88:25:7e:ac:15:58:eb:08:78:32:f6:ff:91:a1:70: db:07:7d:d2:01:c3:7f:9d:fd:62:7b:34:b2:83:7c: 8d:52:d3:ef:e9:63:b2:4b:27:03:85:51:5f:f9:f2: 92:94:52:35:9f:58:4d:e8:b8:4e:83:bb:56:70:89: 71:39:32:0d:56:03:32:bc:c6:ae:ab:b5:88:60:06: 6c:4c:84:f2:09:df:6f:24:a0:98:96:1a:bf:ca:bc: c5:95:14:51:34:9c:71:3b:a6:0e:ce:d7:ba:8f:68: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:72:CB:82:CE:0D:3C:39:AA:EC:D7:1C:5A:4C:6D:54:37:CB:A0 X509v3 Authority Key Identifier: keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5c:d1:58:b0:06:ce:74:79:c9:9e:4b:fd:f1:5f:ba:cc:4c: 02:24:a3:5e:a9:6b:71:cc:ec:a7:de:21:85:33:59:77:42:86: 67:b0:a9:82:f6:2e:b4:e2:ad:0d:34:c8:00:12:88:99:46:51: c0:c1:9e:63:ed:86:38:dc:8d:3a:37:f6:07:86:10:1c:f6:ab: 9a:2a:05:8d:74:1a:1c:cf:d0:40:0f:72:6c:9d:39:50:6e:a4: ad:6b:de:4f:fd:50:93:b9:98:fb:e4:b3:85:77:23:11:07:1f: 9a:b7:26:f2:bf:3a:4f:f9:5d:73:a6:7f:59:f8:72:0b:22:bf: eb:98:0d:6a:ab:7d:d7:1f:79:b1:68:9f:4e:8f:90:10:0a:90: 5a:f6:35:2e:bd:be:96:0f:28:5f:74:dc:aa:c5:d0:1b:7d:93: 41:bd:51:a2:1f:db:6c:0a:99:4d:b9:ef:31:db:18:ea:57:df: fd:6e:fe:a0:8f:f0:a8:49:e1:fe:28:de:a2:0c:87:10:54:b6: b8:f8:93:34:65:c7:c8:bb:95:6f:0e:0c:c2:23:dd:19:25:46: a1:98:70:1e:42:3a:db:b2:9e:16:bc:97:8d:84:66:3a:7a:61: 58:c7:a9:28:2e:33:e8:cb:3e:1b:57:98:d6:45:13:bd:df:96: aa:87:94:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XEM1FLbTUQUJTHDKBP2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk YWY0MGYwHhcNMjYwMTAxMDcwMTEwWhcNMjYwMTAyMDcwMTEwWjAzMTEwLwYDVQQD EyhlMTgyNzJjYjgyY2UwZDNjMzlhYWVjZDcxYzVhNGM2ZDU0MzdjYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArovN9xF1mdMqzSiu2p5gZTfwjLOW zA4EKdwM3Jb06sJrUte8t9Cvp3Z5ipsC5qMfiu0BS6osBnnuD+46QO6AsRndSWhv Tnbg9vwbZm2eYkYvKK3lRQ80IbFJLSilS2b7QAJ6tnE2DyOY4mPTgl99dr+wYHq2 14xCtc1OCtonm79D1+/6xO0HvzHqwh+Ak7tKB3yX7VKIJX6sFVjrCHgy9v+RoXDb B33SAcN/nf1iezSyg3yNUtPv6WOySycDhVFf+fKSlFI1n1hN6LhOg7tWcIlxOTIN VgMyvMauq7WIYAZsTITyCd9vJKCYlhq/yrzFlRRRNJxxO6YOzte6j2gOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGCcsuCzg08Oars1xxaTG1UN8ugMB8GA1UdIwQY MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0 LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFzRWLAG znR5yZ5L/fFfusxMAiSjXqlrcczsp94hhTNZd0KGZ7CpgvYutOKtDTTIABKImUZR wMGeY+2GONyNOjf2B4YQHParmioFjXQaHM/QQA9ybJ05UG6krWveT/1Qk7mY++Sz hXcjEQcfmrcm8r86T/ldc6Z/WfhyCyK/65gNaqt91x95sWifTo+QEAqQWvY1Lr2+ lg8oX3TcqsXQG32TQb1Roh/bbAqZTbnvMdsY6lff/W7+oI/wqEnh/ijeogyHEFS2 uPiTNGXHyLuVbw4MwiPdGSVGoZhwHkI627KeFryXjYRmOnphWMepKC4z6Ms+G1eY 1kUTvd+WqoeU1w== -----END CERTIFICATE-----Generated at Thu Jan 1 14:28:30 2026 by rpki-client