This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json) Hash identifier: hXbNnGG5kPQlEvkYkkqndVZxl6LSirhGh+Jp7Lvi+QM= Subject key identifier: 6F:3F:19:33:44:2B:A6:DF:9A:16:51:7F:57:9B:77:81:4F:4B:79:D5 Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Certificate serial: 019B8FBFA09BF2392B5BF87A3BF3F714C2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft Manifest number: 17B9 Signing time: Mon 05 Jan 2026 20:00:58 +0000 Manifest this update: Mon 05 Jan 2026 20:00:58 +0000 Manifest next update: Tue 06 Jan 2026 20:00:58 +0000 Files and hashes: 1: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (hash: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU=) 2: PSfeFOCMS0X0DbK201fv7mhOqbQ.roa (hash: WJgLDQpReiQHOtzp+BWaEyBhXQtmTrQB0VphBgJmuek=) 3: QjQLmAt4m_YleTlWkKVih21BNgk.roa (hash: dq7HIavQuv8fREOJW5tnnd2hgLRsWh/EorRZKaqBVuc=) 4: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (hash: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg=) 5: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: CkZmservqaiHarj2q9bmnW1I+zpSYkXX8ho44vMuA74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:bf:a0:9b:f2:39:2b:5b:f8:7a:3b:f3:f7:14:c2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Validity Not Before: Jan 5 20:00:58 2026 GMT Not After : Jan 6 20:00:58 2026 GMT Subject: CN=6f3f1933442ba6df9a16517f579b77814f4b79d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:51:80:5b:61:61:92:a0:52:66:f3:1b:06: 08:fd:2a:10:2f:ca:67:08:b0:29:db:3b:be:de:04: fe:a0:d8:ac:29:6b:96:73:35:70:a0:4d:cc:d4:a7: 1b:b1:37:35:9f:f6:1f:05:9b:e1:7c:7a:97:9a:22: 39:cd:e6:99:af:02:22:6c:ea:5b:02:1a:02:a1:9c: 86:3f:a8:3b:08:9a:67:3d:64:d5:6b:da:9c:4e:23: 97:2a:cc:72:20:48:3a:20:2f:0f:b9:36:51:f8:78: de:3d:80:1d:8d:32:7b:17:e6:ba:ff:f4:d2:64:19: 34:26:42:14:e4:7f:a8:7c:1a:9b:99:c2:49:f0:b5: 49:9f:cd:10:c9:90:e6:81:a2:c1:44:a1:6e:b4:e0: 2b:53:20:6b:c8:ac:fb:19:fb:8e:f8:bc:2a:a2:6a: 52:7c:a4:c9:94:b0:9e:1b:12:73:5b:f8:67:01:dc: 77:a6:b2:7d:34:f4:40:2a:69:22:99:42:85:ed:4c: 48:e5:e1:e0:7d:29:d3:d7:13:ae:8f:67:25:76:2f: 8f:d2:40:7f:ac:d6:80:a2:52:bd:8c:39:2c:87:e9: 01:7d:3d:4b:60:8f:8e:4b:34:6b:50:7a:56:3a:f7: 4c:d5:03:14:81:be:a8:94:88:d8:19:b6:e5:3e:67: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3F:19:33:44:2B:A6:DF:9A:16:51:7F:57:9B:77:81:4F:4B:79:D5 X509v3 Authority Key Identifier: keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:46:21:e6:14:c5:ef:38:94:84:72:b1:9e:59:84:4f:7b:a0: 99:72:68:d5:03:e7:1e:ce:99:54:50:a6:4f:9a:a8:77:59:5a: 0d:e4:43:c5:19:c8:7e:7b:c1:2a:cf:66:ce:2a:f9:0a:8e:70: 7d:5e:d3:01:f1:5d:d8:56:73:3a:bc:bd:cb:3e:78:ad:41:cb: 73:29:cb:94:06:b5:44:cf:d9:04:3e:8b:cd:b8:d3:eb:c1:cc: b8:69:a9:20:f0:76:63:e2:0a:8c:b0:90:34:e1:4e:38:44:14: f4:69:53:2c:8c:26:b5:ea:f0:84:77:06:d7:1a:dd:d9:47:b8: 17:69:ee:f8:85:26:ae:f6:8a:66:31:b4:a4:fe:ee:23:9a:8a: 10:57:55:d2:5d:8e:b7:3c:94:dd:8e:6c:aa:20:97:53:24:c6: 7d:28:9c:3b:ab:89:92:a2:1a:23:0e:25:31:e5:3b:33:2d:a1: 14:54:2e:00:49:bd:71:47:bb:ff:77:b0:86:82:fe:a8:88:a4: 15:dc:12:68:4a:84:44:4d:27:4b:73:80:ce:4d:7a:de:ca:52: b2:a1:38:c3:06:48:eb:e4:e6:63:6c:d4:d5:6d:0a:6c:3d:29: 2c:28:83:09:f7:5d:97:09:c2:55:de:15:b3:0d:e3:b7:e5:77: 02:1a:a3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuPv6Cb8jkrW/h6O/P3FMLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh OGZmOGIwHhcNMjYwMTA1MjAwMDU4WhcNMjYwMTA2MjAwMDU4WjAzMTEwLwYDVQQD Eyg2ZjNmMTkzMzQ0MmJhNmRmOWExNjUxN2Y1NzliNzc4MTRmNGI3OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubtRgFthYZKgUmbzGwYI/SoQL8pn CLAp2zu+3gT+oNisKWuWczVwoE3M1KcbsTc1n/YfBZvhfHqXmiI5zeaZrwIibOpb AhoCoZyGP6g7CJpnPWTVa9qcTiOXKsxyIEg6IC8PuTZR+HjePYAdjTJ7F+a6//TS ZBk0JkIU5H+ofBqbmcJJ8LVJn80QyZDmgaLBRKFutOArUyBryKz7GfuO+LwqompS fKTJlLCeGxJzW/hnAdx3prJ9NPRAKmkimUKF7UxI5eHgfSnT1xOuj2cldi+P0kB/ rNaAolK9jDksh+kBfT1LYI+OSzRrUHpWOvdM1QMUgb6olIjYGbblPmcyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8/GTNEK6bfmhZRf1ebd4FPS3nVMB8GA1UdIwQY MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEYh5hTF 7ziUhHKxnlmET3ugmXJo1QPnHs6ZVFCmT5qod1laDeRDxRnIfnvBKs9mzir5Co5w fV7TAfFd2FZzOry9yz54rUHLcynLlAa1RM/ZBD6LzbjT68HMuGmpIPB2Y+IKjLCQ NOFOOEQU9GlTLIwmterwhHcG1xrd2Ue4F2nu+IUmrvaKZjG0pP7uI5qKEFdV0l2O tzyU3Y5sqiCXUyTGfSicO6uJkqIaIw4lMeU7My2hFFQuAEm9cUe7/3ewhoL+qIik FdwSaEqERE0nS3OAzk163spSsqE4wwZI6+TmY2zU1W0KbD0pLCiDCfddlwnCVd4V sw3jt+V3AhqjSQ== -----END CERTIFICATE-----Generated at Tue Jan 6 05:40:00 2026 by rpki-client