This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json) Hash identifier: uhV8+92We+um9tC6Xt1TOJ0B0pVYQ2ivzRze1jlM8NE= Subject key identifier: CD:8F:5D:BB:E4:6C:18:C0:4F:CD:E7:6B:C7:AE:B7:65:E1:2E:C5:20 Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Certificate serial: 019B8271996A530B84B9733363818174A72F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft Manifest number: 17B1 Signing time: Sat 03 Jan 2026 06:00:41 +0000 Manifest this update: Sat 03 Jan 2026 06:00:41 +0000 Manifest next update: Sun 04 Jan 2026 06:00:41 +0000 Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=) 2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=) 3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: rLZ62ygx18fKbTjv8j+dtmFWvdy80UH83Q9tn0CZfrw=) 4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:71:99:6a:53:0b:84:b9:73:33:63:81:81:74:a7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Validity Not Before: Jan 3 06:00:41 2026 GMT Not After : Jan 4 06:00:41 2026 GMT Subject: CN=cd8f5dbbe46c18c04fcde76bc7aeb765e12ec520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:91:e5:3e:f3:29:44:94:ac:e6:e2:b3:a8: fd:bd:07:e5:8b:10:e3:8e:1f:ed:d0:b8:c2:23:f1: 88:b8:b5:5c:2e:5c:9e:93:5a:b3:a9:01:0c:a6:20: 82:fe:e5:26:37:0c:a6:20:be:06:da:5a:f5:06:80: 38:09:5f:83:1c:13:93:ed:92:5a:9e:7d:93:65:d4: 5e:aa:6b:eb:2c:bf:86:28:07:09:b3:1a:ca:30:b4: f6:8d:8b:82:5a:9a:ce:62:69:22:24:d6:82:4d:56: e3:ca:00:1e:a3:bf:a0:5a:ec:0f:81:b0:02:11:14: 5e:ba:08:8e:a0:b4:2a:2b:62:1a:42:69:fe:07:ae: 07:94:1c:2d:5e:f4:ba:1a:d4:41:6b:29:1b:d7:36: cc:09:3a:70:f5:3a:05:f8:ab:f2:72:53:3a:27:30: cd:e2:22:b1:94:c9:40:ba:99:cc:e7:ea:a5:17:fe: 45:73:4d:80:aa:62:a7:43:ae:cc:1c:43:fd:0f:e3: 85:88:c3:3f:26:19:29:7b:58:cc:34:d3:95:8e:d1: 6d:a4:de:8f:e2:0e:dd:f0:f2:e2:ff:30:ea:72:bf: 4b:d1:d9:be:a3:7a:00:be:0e:d6:61:b1:1e:17:31: 46:bf:51:8b:c2:6e:57:9d:f1:31:fb:49:0a:9c:54: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:5D:BB:E4:6C:18:C0:4F:CD:E7:6B:C7:AE:B7:65:E1:2E:C5:20 X509v3 Authority Key Identifier: keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e9:92:26:06:b0:9f:b7:5c:4f:8c:36:e3:08:c6:51:cd:09: fa:91:06:8e:8b:3c:3e:6b:04:ac:a7:70:e3:4c:3c:a9:ed:cb: 46:1e:bf:a6:2d:4a:ca:03:d8:d8:ee:73:b7:a6:3b:60:18:c2: f0:77:ee:1f:10:32:d2:43:ab:4c:3b:58:bb:68:89:f4:6f:bb: e7:de:23:6b:84:41:75:ee:3d:43:8e:f3:96:84:ee:3b:ad:0e: 7a:e0:7b:44:a5:6c:4a:61:4f:04:d9:9c:aa:46:a6:09:83:a9: 1c:55:84:8b:f3:8a:01:c9:e1:f8:18:8f:f2:ae:93:36:8b:b6: 38:11:34:60:0e:44:30:81:23:5b:63:a1:df:fc:4d:4f:b3:ea: 9b:e1:63:86:d7:3f:a3:3c:10:46:13:88:20:7a:0d:0d:2b:36: 07:fe:c6:ad:58:97:c8:40:9a:40:e0:e6:ee:62:bd:98:3c:c9: e9:e0:2f:94:ad:c2:7a:5e:88:58:f2:fe:ea:7d:0b:8e:83:7e: 25:79:a4:36:8d:6c:cf:1b:52:77:75:80:88:d6:c7:04:e5:b0: 7a:9b:f6:d1:7d:ff:58:0d:28:8c:94:91:22:25:2b:34:82:dd: 0c:c9:c7:81:e5:54:f2:a9:0a:57:62:22:9f:ea:cc:78:79:14: f0:35:8a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCcZlqUwuEuXMzY4GBdKcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz NzM1ZGIwHhcNMjYwMTAzMDYwMDQxWhcNMjYwMTA0MDYwMDQxWjAzMTEwLwYDVQQD EyhjZDhmNWRiYmU0NmMxOGMwNGZjZGU3NmJjN2FlYjc2NWUxMmVjNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BmR5T7zKUSUrObis6j9vQflixDj jh/t0LjCI/GIuLVcLlyek1qzqQEMpiCC/uUmNwymIL4G2lr1BoA4CV+DHBOT7ZJa nn2TZdReqmvrLL+GKAcJsxrKMLT2jYuCWprOYmkiJNaCTVbjygAeo7+gWuwPgbAC ERReugiOoLQqK2IaQmn+B64HlBwtXvS6GtRBaykb1zbMCTpw9ToF+KvyclM6JzDN 4iKxlMlAupnM5+qlF/5Fc02AqmKnQ67MHEP9D+OFiMM/Jhkpe1jMNNOVjtFtpN6P 4g7d8PLi/zDqcr9L0dm+o3oAvg7WYbEeFzFGv1GLwm5XnfEx+0kKnFSkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2PXbvkbBjAT83na8eut2XhLsUgMB8GA1UdIwQY MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt M2Y2ZWMyNDk3MTdjLzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjemSJgaw n7dcT4w24wjGUc0J+pEGjos8PmsErKdw40w8qe3LRh6/pi1KygPY2O5zt6Y7YBjC 8HfuHxAy0kOrTDtYu2iJ9G+7594ja4RBde49Q47zloTuO60OeuB7RKVsSmFPBNmc qkamCYOpHFWEi/OKAcnh+BiP8q6TNou2OBE0YA5EMIEjW2Oh3/xNT7Pqm+Fjhtc/ ozwQRhOIIHoNDSs2B/7GrViXyECaQODm7mK9mDzJ6eAvlK3Cel6IWPL+6n0LjoN+ JXmkNo1szxtSd3WAiNbHBOWwepv20X3/WA0ojJSRIiUrNILdDMnHgeVU8qkKV2Ii n+rMeHkU8DWKmw== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:15 2026 by rpki-client