This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json) Hash identifier: ggcVPDShp2rqjqv6Rebg01W5GAJ4UdnUcIu89DSqwuE= Subject key identifier: 0D:79:C0:40:45:FE:F7:47:A6:97:7C:8B:13:DF:22:3E:4F:BC:C5:40 Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e Certificate serial: 019B7D82A75300C75BD5350880BC1B85C78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft Manifest number: 17A9 Signing time: Fri 02 Jan 2026 07:01:13 +0000 Manifest this update: Fri 02 Jan 2026 07:01:13 +0000 Manifest next update: Sat 03 Jan 2026 07:01:13 +0000 Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: PAkutrYtfhKcFGrKvcEp7Z5Ht46ZfZRk5vTv0emGvVo=) 2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:a7:53:00:c7:5b:d5:35:08:80:bc:1b:85:c7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e Validity Not Before: Jan 2 07:01:13 2026 GMT Not After : Jan 3 07:01:13 2026 GMT Subject: CN=0d79c04045fef747a6977c8b13df223e4fbcc540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:92:70:28:30:4c:94:61:e6:b6:ca:9d:61: 14:db:59:1c:a7:79:29:c3:82:c5:28:40:a2:37:f8: de:24:9b:e5:d1:23:11:bd:ca:c1:e0:c6:26:1a:72: 4f:ca:55:6a:ef:46:71:bf:da:68:44:f6:82:08:ba: 19:52:a6:9e:77:1d:e4:37:0f:2a:a4:d8:4c:d4:6f: 20:26:19:30:83:db:ad:7a:ee:24:a5:2f:2c:55:5e: a7:dd:41:8a:48:ac:96:36:fa:1c:a6:0f:33:ff:5c: 57:34:09:03:a8:36:eb:1e:f2:71:b4:88:e1:31:df: ea:52:3d:f2:36:b0:ee:1c:73:b1:b0:8d:1e:d9:c2: 08:54:e1:8f:58:bd:33:38:d8:04:e2:99:2f:45:97: e7:2e:b9:ba:20:5d:38:31:c2:52:d7:43:06:33:ac: 18:6b:4c:dc:8f:26:cc:8a:f0:3f:83:e2:90:e9:f6: af:f5:a2:93:96:52:88:44:24:e5:10:a7:a3:e7:b9: 2a:d4:5e:9d:d0:cd:8c:5f:74:d1:4e:96:30:aa:0d: cb:d1:30:43:03:a5:82:98:4d:e8:6f:02:f6:75:fc: 8e:93:54:62:59:dc:fc:56:19:5a:bb:a1:f2:72:49: ee:29:be:05:48:19:33:56:5d:ba:47:af:11:d0:b6: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:79:C0:40:45:FE:F7:47:A6:97:7C:8B:13:DF:22:3E:4F:BC:C5:40 X509v3 Authority Key Identifier: keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:63:94:d7:13:aa:20:d8:cb:f7:94:18:5f:f0:a7:02:0a:d6: ab:6b:1d:09:81:c9:75:52:f4:6b:a7:22:2f:97:c1:19:53:46: 4a:b7:c7:a2:e8:5f:fa:cb:86:5b:4c:c5:9f:09:02:64:2b:09: 1d:7f:cc:18:5c:37:df:a5:42:4c:2f:57:36:31:93:cd:27:b6: c2:d9:c3:5b:73:1f:42:13:8c:39:fe:98:fa:16:97:e7:bf:f5: 82:02:a5:0d:71:8e:65:e2:35:02:2c:a0:b5:28:6d:b3:47:85: ba:82:77:ff:fc:67:39:2b:e9:53:5f:53:d8:e4:d0:5d:bc:09: b5:9d:6b:93:87:e2:a7:db:55:9d:53:f0:4b:c8:c4:f4:47:0e: 1f:f2:d2:87:58:e7:8e:87:e3:26:d7:a8:aa:cb:a3:ae:9b:19: 83:5c:f3:1e:8a:dc:37:69:9b:88:d9:59:70:9f:f3:5c:3a:47: de:23:bf:85:f7:1d:ed:36:24:a9:b0:cd:e6:d2:ea:a6:85:91: 5a:98:90:45:a9:5e:98:0f:89:1a:eb:c9:cf:74:5c:34:2d:66: 98:d6:41:1d:3c:9a:8e:b7:df:8d:52:49:18:32:61:80:df:51: a3:4b:7a:ea:91:04:f5:03:14:32:bc:81:73:67:09:ee:2e:99: 88:79:cb:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9gqdTAMdb1TUIgLwbhceMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0 MzRmMWUwHhcNMjYwMTAyMDcwMTEzWhcNMjYwMTAzMDcwMTEzWjAzMTEwLwYDVQQD EygwZDc5YzA0MDQ1ZmVmNzQ3YTY5NzdjOGIxM2RmMjIzZTRmYmNjNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wCScCgwTJRh5rbKnWEU21kcp3kp w4LFKECiN/jeJJvl0SMRvcrB4MYmGnJPylVq70Zxv9poRPaCCLoZUqaedx3kNw8q pNhM1G8gJhkwg9uteu4kpS8sVV6n3UGKSKyWNvocpg8z/1xXNAkDqDbrHvJxtIjh Md/qUj3yNrDuHHOxsI0e2cIIVOGPWL0zONgE4pkvRZfnLrm6IF04McJS10MGM6wY a0zcjybMivA/g+KQ6fav9aKTllKIRCTlEKej57kq1F6d0M2MX3TRTpYwqg3L0TBD A6WCmE3obwL2dfyOk1RiWdz8Vhlau6HycknuKb4FSBkzVl26R68R0La95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA15wEBF/vdHppd8ixPfIj5PvMVAMB8GA1UdIwQY MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGOU1xOq INjL95QYX/CnAgrWq2sdCYHJdVL0a6ciL5fBGVNGSrfHouhf+suGW0zFnwkCZCsJ HX/MGFw336VCTC9XNjGTzSe2wtnDW3MfQhOMOf6Y+haX57/1ggKlDXGOZeI1Aiyg tShts0eFuoJ3//xnOSvpU19T2OTQXbwJtZ1rk4fip9tVnVPwS8jE9EcOH/LSh1jn jofjJteoqsujrpsZg1zzHorcN2mbiNlZcJ/zXDpH3iO/hfcd7TYkqbDN5tLqpoWR WpiQRalemA+JGuvJz3RcNC1mmNZBHTyajrffjVJJGDJhgN9Ro0t66pEE9QMUMryB c2cJ7i6ZiHnL6g== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:43 2026 by rpki-client