This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft File: 19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json) Hash identifier: tu+IcyT/gHWtO5ZHufYbdZaDQdVYOaXuq4DryuW8VFE= Subject key identifier: 0C:EF:F5:82:24:53:E0:93:AA:1D:4B:AF:5B:B4:BF:8C:68:D8:53:27 Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Certificate serial: 019B7D82C0912A5AB23D724A827212885B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft Manifest number: 0AC7 Signing time: Fri 02 Jan 2026 07:01:19 +0000 Manifest this update: Fri 02 Jan 2026 07:01:19 +0000 Manifest next update: Sat 03 Jan 2026 07:01:19 +0000 Files and hashes: 1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: itdjjrlwNEFhMU4eP/kIHoQX8Bd66LsQolBC4EPtAoE=) 2: mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa (hash: UVnquJ+GGNXvnJEV311l0LcTpr92LD6i72Q9lhofEe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:c0:91:2a:5a:b2:3d:72:4a:82:72:12:88:5b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Validity Not Before: Jan 2 07:01:19 2026 GMT Not After : Jan 3 07:01:19 2026 GMT Subject: CN=0ceff5822453e093aa1d4baf5bb4bf8c68d85327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:4f:3f:44:4f:de:5d:c7:2a:8e:0d:7e:38: 86:66:69:75:0f:8e:7a:17:9a:05:08:6a:24:32:44: 84:46:58:31:ee:3d:48:66:12:50:64:83:67:59:dc: 5c:4d:65:e4:c4:c7:c4:02:26:fc:86:c0:d4:9a:f5: 7f:40:e8:ef:26:5b:88:4d:6c:27:3c:ad:f0:e3:78: fb:81:7d:dc:a8:bf:d4:e7:35:da:f0:95:3b:ee:39: 0e:0f:64:91:98:a1:75:8f:27:79:4c:30:a9:90:e7: cf:51:8c:74:2c:08:d3:27:75:f6:c1:93:c6:29:81: 8a:1d:5d:ef:8d:f8:77:37:83:d5:5c:53:80:2a:d1: 2b:9b:fe:be:e6:6f:f9:b6:56:70:c4:82:25:a1:c6: 69:00:69:5d:dd:7d:fe:71:f2:d2:96:c9:7e:a5:2a: 02:62:6d:36:66:a1:0d:3d:dc:07:0a:f8:98:97:52: 72:2a:90:5e:fc:6f:99:13:76:43:ea:70:3f:b1:9a: a3:f9:a1:af:50:fe:d1:73:58:6d:34:15:5a:81:f9: 59:bb:5f:a5:10:cc:47:c4:b8:55:a0:e2:57:8e:d8: 07:cc:a5:d2:a0:7d:c0:18:7f:c6:f8:3e:4a:8c:3a: be:89:77:c2:9c:4a:71:6b:23:8b:f7:e0:69:81:1b: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EF:F5:82:24:53:E0:93:AA:1D:4B:AF:5B:B4:BF:8C:68:D8:53:27 X509v3 Authority Key Identifier: keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0c:54:1c:74:86:a8:d3:03:9f:f7:b3:6e:ec:9d:ac:36:d9: 3a:f7:f8:90:fa:d8:b2:ab:9c:a8:9e:ff:70:c3:cb:b9:17:7f: c3:b6:56:ef:ae:21:13:49:fc:c3:9c:f5:d6:aa:38:8a:c4:bf: 66:89:ee:c7:3b:ee:51:01:84:23:3c:ef:14:47:f4:4f:59:36: 53:3e:7a:60:52:05:36:45:2f:ab:5f:ae:18:14:28:21:b7:d5: 23:0a:72:20:67:0e:3f:cf:4d:b8:1b:2e:e7:1f:09:9f:33:4d: 2c:32:70:67:7c:d0:2d:07:14:ee:c1:4d:85:64:3b:1c:07:ea: 37:a9:7c:30:14:1f:3e:27:91:04:f8:42:f5:fc:18:44:ea:02: 17:a7:1b:94:5f:35:18:6f:96:d1:65:8c:4c:eb:c3:13:5b:f9: 23:25:30:14:5e:37:ea:33:04:c4:91:94:ca:8d:53:22:ad:ef: 3e:ba:00:41:c8:53:25:2b:96:ba:99:ce:ec:b4:4a:83:d7:ef: 80:1b:72:c3:cc:64:69:d3:7c:f2:85:4d:76:61:41:e2:e2:01: d8:a3:0f:44:3e:17:d7:55:3e:ca:7f:a1:49:c5:c1:8e:b2:ad: 3e:ba:09:1a:5d:e2:dd:22:ad:71:df:82:cc:a5:b4:91:4d:6d: 53:60:86:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9gsCRKlqyPXJKgnISiFteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZGIxMzJiNDdjOGVkZDgzZmVkMDJkNTYxZTc1MDYwNGMy MGIxZjgwHhcNMjYwMTAyMDcwMTE5WhcNMjYwMTAzMDcwMTE5WjAzMTEwLwYDVQQD EygwY2VmZjU4MjI0NTNlMDkzYWExZDRiYWY1YmI0YmY4YzY4ZDg1MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ptPP0RP3l3HKo4NfjiGZml1D456 F5oFCGokMkSERlgx7j1IZhJQZINnWdxcTWXkxMfEAib8hsDUmvV/QOjvJluITWwn PK3w43j7gX3cqL/U5zXa8JU77jkOD2SRmKF1jyd5TDCpkOfPUYx0LAjTJ3X2wZPG KYGKHV3vjfh3N4PVXFOAKtErm/6+5m/5tlZwxIIlocZpAGld3X3+cfLSlsl+pSoC Ym02ZqENPdwHCviYl1JyKpBe/G+ZE3ZD6nA/sZqj+aGvUP7Rc1htNBVagflZu1+l EMxHxLhVoOJXjtgHzKXSoH3AGH/G+D5KjDq+iXfCnEpxayOL9+BpgRuYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzv9YIkU+CTqh1Lr1u0v4xo2FMnMB8GA1UdIwQY MBaAFNfbEytHyO3YP+0C1WHnUGBMILH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTkt YTA0NjAzNzA5NTE5LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTktYTA0NjAzNzA5NTE5 LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQxUHHSG qNMDn/ezbuydrDbZOvf4kPrYsqucqJ7/cMPLuRd/w7ZW764hE0n8w5z11qo4isS/ ZonuxzvuUQGEIzzvFEf0T1k2Uz56YFIFNkUvq1+uGBQoIbfVIwpyIGcOP89NuBsu 5x8JnzNNLDJwZ3zQLQcU7sFNhWQ7HAfqN6l8MBQfPieRBPhC9fwYROoCF6cblF81 GG+W0WWMTOvDE1v5IyUwFF436jMExJGUyo1TIq3vProAQchTJSuWupnO7LRKg9fv gBtyw8xkadN88oVNdmFB4uIB2KMPRD4X11U+yn+hScXBjrKtProJGl3i3SKtcd+C zKW0kU1tU2CGqA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:52:36 2026 by rpki-client