This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: 0tlzS+XRP0E+3T8Ay0eCjS7ad2dGSIA4y5N7I/mM6kM= Subject key identifier: 11:DD:58:E5:BD:40:1E:DD:0E:67:09:D8:6F:C1:B4:1F:53:F2:E5:F8 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B932E7D0F80ABEAFC245455F8BDE37B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0B63 Signing time: Tue 06 Jan 2026 12:00:55 +0000 Manifest this update: Tue 06 Jan 2026 12:00:55 +0000 Manifest next update: Wed 07 Jan 2026 12:00:55 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: LXsb1LJ+ZDlcY0jCwxVjy9WUdwxz8YGi44M43bcKsyA=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 14: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 15: ye1vO91j3zEaNLIkUtTaqaqrzqo.roa (hash: CZnBVB6wY1pdHrVxfveoiFUyTPJ5AHcYnnd9cEm8rlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:2e:7d:0f:80:ab:ea:fc:24:54:55:f8:bd:e3:7b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 6 12:00:55 2026 GMT Not After : Jan 7 12:00:55 2026 GMT Subject: CN=11dd58e5bd401edd0e6709d86fc1b41f53f2e5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:33:c1:9c:3a:31:8a:58:51:b5:a6:71:99: 37:b3:e7:62:29:f3:4f:dd:0c:65:d2:ae:b3:1f:dd: 18:86:7a:f0:6e:fc:d2:21:b4:ca:2b:84:c1:cf:44: a5:76:fe:bf:aa:19:38:ed:ef:92:27:b7:fd:c4:bc: 4b:a4:a8:a1:c8:c9:42:3d:d4:bf:4d:89:bb:66:44: 15:20:f7:f7:15:7b:d2:ca:d3:63:02:a0:0f:96:8a: f0:29:14:24:6e:4f:3a:4f:e5:21:b4:14:06:07:a6: 7f:fb:a5:2e:ef:25:06:e0:e5:47:a2:ec:0f:69:b6: 2b:d2:ce:45:6d:13:b8:d1:65:92:c9:6a:4b:4d:6a: 3c:67:16:84:fa:1a:b2:ca:1b:70:d2:5d:41:91:55: 31:be:f7:87:92:dc:7d:f0:f0:f3:27:64:d0:d2:63: 21:36:80:3f:f7:c2:da:23:ea:16:05:7c:0f:ed:a3: da:61:ab:c7:d8:9d:05:33:0b:50:00:ae:43:1b:21: 74:84:6a:3e:01:f7:04:a6:37:3f:49:8b:66:a0:1b: 2c:07:ae:78:b1:c0:44:66:97:f6:fe:9b:2e:2c:e2: d5:90:ae:61:cb:8e:78:5d:11:d7:ee:77:c4:bb:a7: 57:cf:97:ec:13:2b:13:b0:0b:57:43:d0:bd:56:55: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:58:E5:BD:40:1E:DD:0E:67:09:D8:6F:C1:B4:1F:53:F2:E5:F8 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9e:31:09:43:3d:fa:04:27:c9:00:c0:3a:6f:c9:c8:f4:29: 53:42:a1:96:5f:a6:ed:6f:6f:75:2b:39:13:7c:55:6f:4f:7b: 28:c6:8c:50:b8:d5:f7:9d:9b:f9:d7:78:30:90:76:15:d4:26: a4:8c:2b:1f:98:b4:d5:96:60:21:e3:dc:11:77:cf:09:fc:05: bc:75:d7:58:da:24:ac:e3:e1:79:18:4e:1f:ab:4d:fd:17:da: 24:68:be:06:b0:47:3f:79:06:6c:92:11:bf:a7:7f:a3:5b:37: 47:28:b4:c3:1a:ca:54:d1:e9:1d:a0:52:36:d7:28:50:f5:30: 6f:55:93:df:a4:b7:73:d1:26:84:ad:58:33:66:4f:4b:4b:2e: c4:0a:9b:e5:b6:54:b2:76:90:54:4a:c2:d6:87:e0:26:21:5e: ec:a9:a3:76:78:21:7a:58:78:05:82:27:de:29:c2:a2:35:89: a7:21:67:95:07:70:7a:e8:83:75:01:85:72:3f:4c:92:ec:ee: d4:eb:a1:f7:15:f9:cb:3d:f5:43:6f:37:12:70:51:1d:36:1f: 4c:44:be:71:79:b7:75:f1:36:d8:5d:62:a8:83:b3:0b:bf:0e: 03:9f:92:c8:2f:78:f9:4e:78:42:13:de:02:3e:e4:bd:89:31: 8f:9c:14:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuTLn0PgKvq/CRUVfi943uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTA2MTIwMDU1WhcNMjYwMTA3MTIwMDU1WjAzMTEwLwYDVQQD EygxMWRkNThlNWJkNDAxZWRkMGU2NzA5ZDg2ZmMxYjQxZjUzZjJlNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VMzwZw6MYpYUbWmcZk3s+diKfNP 3Qxl0q6zH90YhnrwbvzSIbTKK4TBz0Sldv6/qhk47e+SJ7f9xLxLpKihyMlCPdS/ TYm7ZkQVIPf3FXvSytNjAqAPlorwKRQkbk86T+UhtBQGB6Z/+6Uu7yUG4OVHouwP abYr0s5FbRO40WWSyWpLTWo8ZxaE+hqyyhtw0l1BkVUxvveHktx98PDzJ2TQ0mMh NoA/98LaI+oWBXwP7aPaYavH2J0FMwtQAK5DGyF0hGo+AfcEpjc/SYtmoBssB654 scBEZpf2/psuLOLVkK5hy454XRHX7nfEu6dXz5fsEysTsAtXQ9C9VlXMFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHdWOW9QB7dDmcJ2G/BtB9T8uX4MB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxp4xCUM9 +gQnyQDAOm/JyPQpU0Khll+m7W9vdSs5E3xVb097KMaMULjV952b+dd4MJB2FdQm pIwrH5i01ZZgIePcEXfPCfwFvHXXWNokrOPheRhOH6tN/RfaJGi+BrBHP3kGbJIR v6d/o1s3Ryi0wxrKVNHpHaBSNtcoUPUwb1WT36S3c9EmhK1YM2ZPS0suxAqb5bZU snaQVErC1ofgJiFe7Kmjdnghelh4BYIn3inCojWJpyFnlQdweuiDdQGFcj9Mkuzu 1Ouh9xX5yz31Q283EnBRHTYfTES+cXm3dfE22F1iqIOzC78OA5+SyC94+U54QhPe Aj7kvYkxj5wUxQ== -----END CERTIFICATE-----Generated at Tue Jan 6 20:29:35 2026 by rpki-client