This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json) Hash identifier: 0J/MVGLmQa4Tfxk080q0DbELC93ovKsC6XNnJGm4wEM= Subject key identifier: 9D:54:BE:E1:FD:E9:EE:B5:1E:D4:3E:BF:27:0F:39:06:54:BC:EF:37 Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa Certificate serial: 019B963013109EB92E93F194128F7ECABAC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft Manifest number: 07B8 Signing time: Wed 07 Jan 2026 02:01:31 +0000 Manifest this update: Wed 07 Jan 2026 02:01:31 +0000 Manifest next update: Thu 08 Jan 2026 02:01:31 +0000 Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: idQ7NPOMmtFJMpoiwloShIf+5NxuasXWWRCoFtVHbAs=) 2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:30:13:10:9e:b9:2e:93:f1:94:12:8f:7e:ca:ba:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa Validity Not Before: Jan 7 02:01:31 2026 GMT Not After : Jan 8 02:01:31 2026 GMT Subject: CN=9d54bee1fde9eeb51ed43ebf270f390654bcef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:e9:a4:93:aa:9c:d2:99:5e:cf:9c:30:44: 63:fe:d7:8d:cb:61:9e:2a:44:8b:1a:34:69:11:81: 1b:5e:9b:25:2b:16:4d:b5:43:1c:c1:19:d8:25:89: 51:c0:e8:39:a9:e3:c0:3d:71:5b:1b:2a:c1:e0:55: 6d:c8:00:93:a2:1d:34:01:8d:f1:b3:24:52:9d:62: 32:e6:70:b4:bf:b1:a9:26:ef:71:c4:d8:1e:82:a6: 2c:48:f0:5c:1b:52:7b:06:a4:c0:56:c9:39:1d:67: 20:28:fa:a4:46:4d:c2:48:df:55:3d:61:14:29:46: 19:7a:ab:89:a1:b7:ab:6d:f9:32:56:bc:09:af:fc: dd:6a:8b:3f:84:0f:3b:ed:7d:65:f5:0b:3a:f8:fc: 0b:28:d2:81:c7:5a:68:28:4a:a4:1e:d4:93:ec:dc: 9d:32:a2:af:96:fd:a7:37:82:18:3a:2e:f1:c7:06: 0e:c1:2d:c5:ab:89:14:97:b0:45:c2:84:87:13:46: 9d:5d:75:ee:97:f4:8f:78:6e:93:e7:81:d1:27:51: 67:40:f8:fa:35:0b:c1:ca:de:c0:15:69:ec:33:1c: f0:ab:ec:01:d1:0b:b7:46:d5:30:c0:e1:b0:2f:a6: 90:85:98:33:8a:56:82:37:27:88:18:82:df:fb:52: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:BE:E1:FD:E9:EE:B5:1E:D4:3E:BF:27:0F:39:06:54:BC:EF:37 X509v3 Authority Key Identifier: keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b1:c4:18:09:98:ce:c1:5c:1a:7f:be:2a:8d:b9:f3:63:c4: ba:70:79:16:ac:c4:f5:e2:5a:c5:40:5e:76:4e:0a:2c:af:68: 24:6f:74:b0:ec:75:ae:e4:ac:3e:d5:fb:ff:ad:fb:eb:c7:ef: 35:b2:d9:23:0b:6f:0d:9a:9e:10:ef:0b:95:c2:53:c5:cb:26: 01:37:90:f1:58:3f:92:ea:73:ac:5e:cf:e8:af:34:9c:98:e7: cf:a2:f1:6a:32:07:64:c8:62:fb:77:1a:57:28:22:8e:f3:3d: 98:61:11:2e:7b:47:d5:29:12:bb:4b:8a:52:9c:28:30:01:01: 34:20:af:54:ed:57:ca:7f:c1:f9:45:ab:9a:fc:9e:ca:38:5f: 59:fb:43:fb:11:51:e7:f1:7c:60:b0:36:67:19:e6:2b:d7:4b: 6e:12:53:fc:10:9d:fe:97:4b:3a:de:d6:18:37:4e:db:3f:c3: 58:a3:f5:4b:36:ff:dd:fd:35:3d:0d:e2:3e:e3:49:87:9f:84: 0c:d9:25:d8:9a:32:ef:80:2d:a3:e6:32:6a:88:e2:c6:02:ea: 47:00:09:f8:8c:69:55:a9:b7:90:e1:06:9b:20:40:54:82:e9: 24:bb:ca:2a:be:cf:6b:04:06:7c:c7:c3:93:05:1d:fd:a0:40: 15:8e:93:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWMBMQnrkuk/GUEo9+yrrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MmFiYTY0MTA4Mjk3NTgyY2NhZThlN2JhODZmMmNmYzll MWQ1YWEwHhcNMjYwMTA3MDIwMTMxWhcNMjYwMTA4MDIwMTMxWjAzMTEwLwYDVQQD Eyg5ZDU0YmVlMWZkZTllZWI1MWVkNDNlYmYyNzBmMzkwNjU0YmNlZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDvppJOqnNKZXs+cMERj/teNy2Ge KkSLGjRpEYEbXpslKxZNtUMcwRnYJYlRwOg5qePAPXFbGyrB4FVtyACToh00AY3x syRSnWIy5nC0v7GpJu9xxNgegqYsSPBcG1J7BqTAVsk5HWcgKPqkRk3CSN9VPWEU KUYZequJoberbfkyVrwJr/zdaos/hA877X1l9Qs6+PwLKNKBx1poKEqkHtST7Nyd MqKvlv2nN4IYOi7xxwYOwS3Fq4kUl7BFwoSHE0adXXXul/SPeG6T54HRJ1FnQPj6 NQvByt7AFWnsMxzwq+wB0Qu3RtUwwOGwL6aQhZgzilaCNyeIGILf+1JTgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1UvuH96e61HtQ+vycPOQZUvO83MB8GA1UdIwQY MBaAFOYqumQQgpdYLMro57qG8s/J4dWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQt NzNiZGNiOWRlNzU1LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQtNzNiZGNiOWRlNzU1 LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLHEGAmY zsFcGn++Ko2582PEunB5FqzE9eJaxUBedk4KLK9oJG90sOx1ruSsPtX7/63768fv NbLZIwtvDZqeEO8LlcJTxcsmATeQ8Vg/kupzrF7P6K80nJjnz6LxajIHZMhi+3ca VygijvM9mGERLntH1SkSu0uKUpwoMAEBNCCvVO1Xyn/B+UWrmvyeyjhfWftD+xFR 5/F8YLA2ZxnmK9dLbhJT/BCd/pdLOt7WGDdO2z/DWKP1Szb/3f01PQ3iPuNJh5+E DNkl2Joy74Ato+YyaojixgLqRwAJ+IxpVam3kOEGmyBAVILpJLvKKr7PawQGfMfD kwUd/aBAFY6T6A== -----END CERTIFICATE-----Generated at Wed Jan 7 07:01:06 2026 by rpki-client