This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json) Hash identifier: rWEqkhBozC1VWDYxzqDDj6w98WAr1P4aCURzE01mTzY= Subject key identifier: 12:F3:2C:82:CA:84:AE:A9:49:43:F9:E9:03:D5:93:1E:66:32:6A:32 Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda Certificate serial: 019B78931C3CF3E42E98A9810C0351A769D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft Manifest number: 0388 Signing time: Thu 01 Jan 2026 08:01:05 +0000 Manifest this update: Thu 01 Jan 2026 08:01:05 +0000 Manifest next update: Fri 02 Jan 2026 08:01:05 +0000 Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: EblIYDovnaEKDY+k75RNINIWUGge41+oZ9aRFKfgncU=) 2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:93:1c:3c:f3:e4:2e:98:a9:81:0c:03:51:a7:69:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda Validity Not Before: Jan 1 08:01:05 2026 GMT Not After : Jan 2 08:01:05 2026 GMT Subject: CN=12f32c82ca84aea94943f9e903d5931e66326a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:20:37:00:46:bb:a4:fb:e4:15:56:b7:23: b2:1a:13:9e:94:80:b2:95:8b:d3:10:3b:94:38:bf: a0:79:b9:d5:3b:ef:99:b9:2b:7b:ac:eb:8f:3e:ec: c8:86:41:bc:36:04:a1:e2:5f:e8:f7:18:1c:f3:1b: 50:d4:45:75:81:f6:91:08:65:3a:cb:39:e9:44:67: e5:e6:a1:48:f3:e2:e5:c1:18:e0:58:d0:53:d4:1f: 25:f7:b8:06:6e:76:8a:86:e1:bb:60:82:05:98:ec: e9:c3:c1:c3:bf:3b:7a:6f:ca:5a:9d:83:bc:22:c4: 33:4d:c0:dd:a1:f8:73:7d:f0:d8:0a:fa:18:3a:b0: 34:f3:44:1d:04:d6:03:af:42:b9:cc:15:26:94:6c: fd:51:7e:b4:6e:c2:9c:d8:4e:bf:86:ed:c6:d9:e3: 69:5b:f6:60:ed:c1:31:bb:c6:c7:db:37:08:83:b8: 97:9d:56:72:22:76:f8:a0:4b:e3:83:23:b7:93:54: d8:2c:b7:06:0c:02:d3:82:ea:6b:7d:7e:02:58:48: 77:c8:22:68:c8:94:7d:99:34:60:ce:9e:a9:ff:a3: db:26:be:36:b2:f7:cd:a0:96:5e:8d:a5:07:f7:98: 2f:27:6d:66:89:8a:d3:d9:3c:21:5d:f0:59:c5:e5: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:2C:82:CA:84:AE:A9:49:43:F9:E9:03:D5:93:1E:66:32:6A:32 X509v3 Authority Key Identifier: keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:2f:c2:ca:e8:41:b5:d0:6e:f2:af:1a:b2:9e:7a:5b:0c: 4f:c3:b5:7d:24:79:24:a9:8c:44:b6:6a:cd:64:52:5f:f3:dc: 3c:b4:d9:4f:d6:3c:80:ba:87:36:91:a1:5c:48:84:4f:00:5b: 81:22:e1:be:4c:d0:d9:99:fa:18:2a:67:f4:51:3b:e7:c7:29: a5:5a:cb:bf:ee:0a:ec:55:3e:53:42:c0:84:5b:f8:3b:6d:22: 7f:57:1f:55:33:24:c4:51:3b:bc:af:ad:59:22:57:39:51:37: 2d:5a:07:10:6a:93:15:20:67:ff:db:b0:dd:12:66:1d:8a:35: 92:90:ef:f7:37:75:a4:80:d8:9c:a5:93:63:15:2a:b5:c7:78: ef:ee:13:5b:a8:f7:cb:d0:1f:de:28:bf:43:18:ff:c8:1c:84: 29:92:71:a6:28:d3:5b:8b:b9:82:e0:d2:38:78:7b:7e:2c:f5: fb:25:df:79:8e:01:e6:65:5b:f7:cb:d3:fd:23:fa:64:88:1b: c1:80:b8:02:2c:07:99:07:1b:20:96:38:db:2a:bd:0a:a5:ea: 2d:b1:c0:b3:b1:07:98:59:ac:fb:47:54:af:c9:5c:38:8a:35: aa:d9:da:cb:57:86:cc:6b:a9:a6:d9:68:96:33:a2:e0:4e:ee: 4d:ed:eb:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4kxw88+QumKmBDANRp2nWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjFkMGVhNjgzY2M2NzU5NDJjMDk4ZjU5YzQxMWM4NjBl OGFlZGEwHhcNMjYwMTAxMDgwMTA1WhcNMjYwMTAyMDgwMTA1WjAzMTEwLwYDVQQD EygxMmYzMmM4MmNhODRhZWE5NDk0M2Y5ZTkwM2Q1OTMxZTY2MzI2YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VQgNwBGu6T75BVWtyOyGhOelICy lYvTEDuUOL+gebnVO++ZuSt7rOuPPuzIhkG8NgSh4l/o9xgc8xtQ1EV1gfaRCGU6 yznpRGfl5qFI8+LlwRjgWNBT1B8l97gGbnaKhuG7YIIFmOzpw8HDvzt6b8panYO8 IsQzTcDdofhzffDYCvoYOrA080QdBNYDr0K5zBUmlGz9UX60bsKc2E6/hu3G2eNp W/Zg7cExu8bH2zcIg7iXnVZyInb4oEvjgyO3k1TYLLcGDALTguprfX4CWEh3yCJo yJR9mTRgzp6p/6PbJr42svfNoJZejaUH95gvJ21miYrT2TwhXfBZxeXNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLzLILKhK6pSUP56QPVkx5mMmoyMB8GA1UdIwQY MBaAFOch0OpoPMZ1lCwJj1nEEchg6K7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUt NzJjYTEzZGZhZDJiLzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUtNzJjYTEzZGZhZDJi LzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTQvwsro QbXQbvKvGrKeelsMT8O1fSR5JKmMRLZqzWRSX/PcPLTZT9Y8gLqHNpGhXEiETwBb gSLhvkzQ2Zn6GCpn9FE758cppVrLv+4K7FU+U0LAhFv4O20if1cfVTMkxFE7vK+t WSJXOVE3LVoHEGqTFSBn/9uw3RJmHYo1kpDv9zd1pIDYnKWTYxUqtcd47+4TW6j3 y9Af3ii/Qxj/yByEKZJxpijTW4u5guDSOHh7fiz1+yXfeY4B5mVb98vT/SP6ZIgb wYC4AiwHmQcbIJY42yq9CqXqLbHAs7EHmFms+0dUr8lcOIo1qtnay1eGzGupptlo ljOi4E7uTe3rtg== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:35 2026 by rpki-client