This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json) Hash identifier: y3F+p+i/JLabJhNY2INtdi6qxdfdJVvQC/bAKHHEXQM= Subject key identifier: 3E:1F:C0:77:5A:2B:33:65:5A:89:2B:30:74:44:F1:F2:76:C4:A3:82 Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Certificate serial: 019B7D82077E7B35673E2387D16DCC168EF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft Manifest number: 059F Signing time: Fri 02 Jan 2026 07:00:31 +0000 Manifest this update: Fri 02 Jan 2026 07:00:31 +0000 Manifest next update: Sat 03 Jan 2026 07:00:31 +0000 Files and hashes: 1: R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa (hash: nQU1BjOZCkDFTHZ5GWt9nYnHvXRxdvBnHniV1Cq7F7M=) 2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: bAwAPP3jZYI4tqPWSbWq+3F4cPO6fXoZvkvTZBE7LzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:07:7e:7b:35:67:3e:23:87:d1:6d:cc:16:8e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Validity Not Before: Jan 2 07:00:31 2026 GMT Not After : Jan 3 07:00:31 2026 GMT Subject: CN=3e1fc0775a2b33655a892b307444f1f276c4a382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:06:7d:37:b3:8e:ff:43:1e:da:cb:75:25: 63:e0:e1:1c:ec:27:36:c2:95:8a:d7:7f:bc:c9:63: 96:3e:40:b9:70:c8:87:90:ab:74:ca:46:f3:fe:50: c4:5d:03:3a:73:6a:b3:f7:21:b7:52:f2:62:d8:c8: 7d:2c:7c:a4:e2:79:f6:fd:5e:08:e1:56:5c:d2:e1: 7e:d0:d6:ef:56:a7:5d:0d:d7:fd:b6:df:0b:b0:cd: 3d:4a:cd:43:84:a1:9b:cd:6f:c5:8e:21:08:47:4e: b4:a2:ce:de:8f:bf:81:93:a1:29:a9:02:1c:1c:f2: e3:fc:02:a4:1a:42:93:a1:e0:2d:e9:4c:2a:3e:18: 6a:44:79:68:b0:e9:77:9e:c5:fd:cb:e7:dd:68:6f: ff:11:42:19:c8:d9:86:d6:53:26:f6:c6:5d:23:3f: 28:1d:f9:69:c9:e4:1e:01:a0:7f:9a:99:ff:0c:15: 01:64:ec:71:29:c9:ac:6e:4d:8e:e5:2e:a4:93:38: 14:d3:7e:62:fd:04:05:f7:c1:e9:06:d1:8d:76:d3: 8d:ec:fa:b4:ff:09:0a:07:f3:af:99:cb:80:14:75: d3:d7:7a:09:25:fe:e3:54:f6:45:49:96:30:27:3b: a7:19:5f:03:d7:fd:c6:67:94:8e:90:ba:1c:a0:af: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:C0:77:5A:2B:33:65:5A:89:2B:30:74:44:F1:F2:76:C4:A3:82 X509v3 Authority Key Identifier: keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f2:25:ff:10:18:22:e5:37:24:eb:54:c1:21:14:ff:a4:b9: 66:73:f2:08:43:d1:a8:a5:5e:d8:9c:fa:1c:a4:35:d5:83:a2: 64:23:9c:0a:da:cc:58:a9:e2:8e:c7:59:31:1e:5f:87:bf:15: a5:38:a1:ca:dc:fa:12:a5:26:9b:61:7a:73:fa:41:ae:26:18: a8:f3:da:57:c9:74:36:97:dd:2b:e0:ee:4f:3a:36:93:70:e4: e4:b8:df:33:6d:d6:2e:a3:47:dd:6b:03:3b:af:01:6b:a3:c2: 19:80:09:1c:8d:88:7c:a0:72:17:8c:bf:20:5e:b9:20:58:fa: a9:c9:a2:13:0a:d5:fc:20:35:40:d5:ba:f6:2e:db:98:91:41: e1:1c:cf:15:28:21:ca:59:40:5f:df:66:0b:20:9f:13:ff:fa: a3:16:f4:ee:de:ef:75:38:60:30:d2:32:23:00:f5:82:9c:7d: ea:d4:8f:fa:e1:be:04:a8:1f:7c:fa:d9:c5:47:7d:cf:6a:61: 6c:20:77:8a:72:23:fe:2c:4a:67:2d:ce:2e:67:7b:af:1a:4e: 28:e8:5a:04:9b:9b:bb:38:79:e5:e7:2e:a8:99:f0:66:e9:39: 68:c8:78:dd:68:79:1a:3f:a1:35:be:01:82:58:1e:9d:d8:91: c1:3e:7d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9ggd+ezVnPiOH0W3MFo7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTYyN2I5MjM5ZmVhMzQ1N2NkODdjYjkzN2FiNGM3OTg2 Y2FjMDkwHhcNMjYwMTAyMDcwMDMxWhcNMjYwMTAzMDcwMDMxWjAzMTEwLwYDVQQD EygzZTFmYzA3NzVhMmIzMzY1NWE4OTJiMzA3NDQ0ZjFmMjc2YzRhMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMwGfTezjv9DHtrLdSVj4OEc7Cc2 wpWK13+8yWOWPkC5cMiHkKt0ykbz/lDEXQM6c2qz9yG3UvJi2Mh9LHyk4nn2/V4I 4VZc0uF+0NbvVqddDdf9tt8LsM09Ss1DhKGbzW/FjiEIR060os7ej7+Bk6EpqQIc HPLj/AKkGkKToeAt6UwqPhhqRHlosOl3nsX9y+fdaG//EUIZyNmG1lMm9sZdIz8o HflpyeQeAaB/mpn/DBUBZOxxKcmsbk2O5S6kkzgU035i/QQF98HpBtGNdtON7Pq0 /wkKB/OvmcuAFHXT13oJJf7jVPZFSZYwJzunGV8D1/3GZ5SOkLocoK9JrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4fwHdaKzNlWokrMHRE8fJ2xKOCMB8GA1UdIwQY MBaAFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2Qt YTVmZWIzOTczNTEyLzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2QtYTVmZWIzOTczNTEy LzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvIl/xAY IuU3JOtUwSEU/6S5ZnPyCEPRqKVe2Jz6HKQ11YOiZCOcCtrMWKnijsdZMR5fh78V pTihytz6EqUmm2F6c/pBriYYqPPaV8l0NpfdK+DuTzo2k3Dk5LjfM23WLqNH3WsD O68Ba6PCGYAJHI2IfKByF4y/IF65IFj6qcmiEwrV/CA1QNW69i7bmJFB4RzPFSgh yllAX99mCyCfE//6oxb07t7vdThgMNIyIwD1gpx96tSP+uG+BKgffPrZxUd9z2ph bCB3inIj/ixKZy3OLmd7rxpOKOhaBJubuzh55ecuqJnwZuk5aMh43Wh5Gj+hNb4B glgendiRwT59WA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:40 2026 by rpki-client