This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json) Hash identifier: QFSxbesTLA1docO53711QhutL/CuL1SkhSYyGmDyS5o= Subject key identifier: 01:03:21:50:7C:11:EA:6F:76:59:20:FD:C3:0E:A6:C1:8A:22:58:DE Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Certificate serial: 019B7DCC2F326D5794E20B8151BBF2071163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft Manifest number: 17B0 Signing time: Fri 02 Jan 2026 08:21:31 +0000 Manifest this update: Fri 02 Jan 2026 08:21:31 +0000 Manifest next update: Sat 03 Jan 2026 08:21:31 +0000 Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=) 2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: WO7kNJe8Or/NFXawA/JlJzSqnRbwgLpPtN/3X4h2WOM=) 3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=) 4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cc:2f:32:6d:57:94:e2:0b:81:51:bb:f2:07:11:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Validity Not Before: Jan 2 08:21:31 2026 GMT Not After : Jan 3 08:21:31 2026 GMT Subject: CN=010321507c11ea6f765920fdc30ea6c18a2258de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:45:cb:97:d1:3d:c6:7b:89:42:b2:ff:4c: da:8b:ad:58:ff:b6:ea:ba:2b:bd:3e:fa:6e:bf:a9: bd:a4:ba:7f:db:12:73:ae:c0:5e:09:29:56:c2:9f: 3c:25:19:e5:a7:8d:d1:e3:1d:31:36:97:10:11:f2: 0e:a6:f7:64:1a:5b:b1:16:6d:76:f7:ec:bf:2f:ff: f8:09:a9:59:26:f3:3f:80:2c:4a:95:2d:c8:38:fd: 55:a2:9b:0a:d4:d7:d2:52:43:c7:a1:8c:da:a3:ac: 3b:8d:e9:4e:c6:8b:7a:ee:54:31:0e:7e:19:92:28: 1d:4a:9b:11:74:b5:d4:7f:f9:f2:24:03:d4:e7:cb: 66:fa:06:67:99:23:84:3a:98:af:1e:38:92:30:94: b9:1a:3d:b8:d9:1b:e4:5c:56:f3:c8:80:08:39:6b: c1:97:20:a2:f2:6e:8e:f2:d4:0e:0d:66:0a:1b:fa: 55:34:73:57:cd:57:f5:38:2d:38:a7:d7:ba:85:08: 79:25:cd:f4:28:b8:1b:10:07:b3:01:f8:c6:20:b4: cc:cc:80:7a:0d:a4:a2:82:a7:8a:76:10:95:4f:c1: 9f:64:a6:f5:2c:7c:d0:37:94:6d:8a:3b:46:26:f1: 98:e9:b2:c5:0a:31:a7:93:c1:2c:eb:2d:3b:ab:55: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:03:21:50:7C:11:EA:6F:76:59:20:FD:C3:0E:A6:C1:8A:22:58:DE X509v3 Authority Key Identifier: keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:32:1e:d1:46:b9:f8:db:b0:e4:2a:3a:79:33:ef:ba:25:f9: 2b:8a:38:82:5d:da:01:7a:71:fc:71:5c:8e:27:12:55:c3:97: 30:2f:e6:eb:1d:89:eb:00:4c:6d:77:bb:48:92:e7:80:a1:16: 2e:bb:58:9c:98:07:06:d4:37:4d:b1:06:ec:b8:6b:04:87:fe: 94:2b:13:f3:37:ab:10:b3:b9:16:ed:46:45:67:30:65:9a:18: 5b:c7:a7:da:c6:0c:4e:04:74:f9:89:f3:35:1d:40:b8:14:ea: f6:18:2b:fd:44:aa:87:f6:cb:61:78:6d:92:66:6d:3d:af:77: be:33:91:da:2c:c2:41:6c:18:6e:b3:b4:c0:30:4f:c9:62:a1: a8:65:4f:05:46:f0:a3:11:eb:ae:01:7d:a5:63:f3:a0:15:39: 1d:82:16:eb:85:d8:c1:ea:bc:2d:02:5a:9c:ba:4e:c1:c1:31: 23:f1:49:1d:f7:2a:9c:73:c0:cf:63:2f:e9:e3:55:1b:4c:ff: 2b:20:43:82:c0:6b:41:9a:48:ea:e5:04:44:3c:ed:d1:b0:ad: 3d:57:25:20:6f:26:9a:b4:ca:cd:d8:e9:f7:08:7e:37:51:19: 1b:00:aa:58:87:5b:b1:d7:70:e8:21:37:05:0b:e7:a1:88:ea: ed:62:45:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9zC8ybVeU4guBUbvyBxFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz MThmODYwHhcNMjYwMTAyMDgyMTMxWhcNMjYwMTAzMDgyMTMxWjAzMTEwLwYDVQQD EygwMTAzMjE1MDdjMTFlYTZmNzY1OTIwZmRjMzBlYTZjMThhMjI1OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0VFy5fRPcZ7iUKy/0zai61Y/7bq uiu9Pvpuv6m9pLp/2xJzrsBeCSlWwp88JRnlp43R4x0xNpcQEfIOpvdkGluxFm12 9+y/L//4CalZJvM/gCxKlS3IOP1VopsK1NfSUkPHoYzao6w7jelOxot67lQxDn4Z kigdSpsRdLXUf/nyJAPU58tm+gZnmSOEOpivHjiSMJS5Gj242RvkXFbzyIAIOWvB lyCi8m6O8tQODWYKG/pVNHNXzVf1OC04p9e6hQh5Jc30KLgbEAezAfjGILTMzIB6 DaSigqeKdhCVT8GfZKb1LHzQN5RtijtGJvGY6bLFCjGnk8Es6y07q1V1ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEDIVB8Eepvdlkg/cMOpsGKIljeMB8GA1UdIwQY MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4 LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjIe0Ua5 +Nuw5Co6eTPvuiX5K4o4gl3aAXpx/HFcjicSVcOXMC/m6x2J6wBMbXe7SJLngKEW LrtYnJgHBtQ3TbEG7LhrBIf+lCsT8zerELO5Fu1GRWcwZZoYW8en2sYMTgR0+Ynz NR1AuBTq9hgr/USqh/bLYXhtkmZtPa93vjOR2izCQWwYbrO0wDBPyWKhqGVPBUbw oxHrrgF9pWPzoBU5HYIW64XYweq8LQJanLpOwcExI/FJHfcqnHPAz2Mv6eNVG0z/ KyBDgsBrQZpI6uUERDzt0bCtPVclIG8mmrTKzdjp9wh+N1EZGwCqWIdbsddw6CE3 BQvnoYjq7WJFOw== -----END CERTIFICATE-----Generated at Fri Jan 2 11:21:14 2026 by rpki-client