This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json) Hash identifier: OmN4j+xZyjpEJpyH+JiEdhk7ZwOOUrJFxDokW4J1gro= Subject key identifier: 19:F9:C5:4F:30:1F:9B:54:FD:1D:F6:33:10:C6:8A:C1:38:8F:73:BF Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1 Certificate serial: 019B7CDD92EDF55E73E1A08D52FA31232F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft Manifest number: 17B3 Signing time: Fri 02 Jan 2026 04:00:54 +0000 Manifest this update: Fri 02 Jan 2026 04:00:54 +0000 Manifest next update: Sat 03 Jan 2026 04:00:54 +0000 Files and hashes: 1: IwITwGp3B4_pSMBNtVpyOQEaMCE.roa (hash: DL9ccQKNzsDchyhG4KBBhWIj3j9jhXmlBTwSGH+MLOI=) 2: aX67thVuhkTa2S1WbEsDaaxyx_U.roa (hash: e6/sW4ioMZgIWgsgRys4jC3T5C0ZPSKh0y+ZX7aZe5E=) 3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: S132hjcMSYjfynuXXU+G98w2pQy/a7jnS7uY5KScf2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:dd:92:ed:f5:5e:73:e1:a0:8d:52:fa:31:23:2f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1 Validity Not Before: Jan 2 04:00:54 2026 GMT Not After : Jan 3 04:00:54 2026 GMT Subject: CN=19f9c54f301f9b54fd1df63310c68ac1388f73bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:5f:cf:15:77:61:29:06:4b:c0:63:56:a9: 61:21:c0:a2:6c:84:35:f8:2c:a7:25:de:03:0a:a1: cf:6b:ad:92:bf:28:57:bb:94:ca:b7:96:58:6c:d0: cf:f2:45:28:a7:a4:39:2d:14:5b:2d:bc:86:33:7f: ec:98:5d:f3:19:ea:c3:34:7c:ae:d0:5a:98:84:84: c6:5f:92:01:23:17:e5:2f:40:06:b9:3e:a2:a4:5c: 35:76:4c:12:f2:41:01:fc:11:95:5a:1d:b6:40:f7: 56:07:58:92:a8:58:31:05:9e:ec:21:d8:c7:db:e4: a2:5b:78:a4:ac:31:99:77:d0:a6:65:58:fc:85:b9: 55:1c:78:12:e6:b9:d1:3f:bf:cd:62:d9:65:2c:1c: cf:76:38:5c:57:9d:55:4f:e3:56:94:22:d0:71:76: 76:f8:ce:88:68:16:27:fe:4f:7d:ca:ac:f0:f6:4d: 27:50:ac:5a:f5:ff:c1:dc:ce:72:3a:df:6e:c7:9a: d5:47:ec:c3:a5:5b:e4:ad:e8:cb:90:95:65:02:b0: bb:35:1e:3e:88:0c:0d:27:e6:d5:46:26:a9:5f:f9: a6:68:5a:97:fd:66:b2:a9:36:95:45:08:cd:62:d0: 69:f2:90:cf:06:95:43:ea:16:a3:56:4f:f4:b9:3e: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:C5:4F:30:1F:9B:54:FD:1D:F6:33:10:C6:8A:C1:38:8F:73:BF X509v3 Authority Key Identifier: keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:93:f4:ba:cb:5c:d3:31:ec:99:29:3b:34:63:0b:a2:9d: 80:bd:1c:80:67:e9:56:12:4f:7a:56:3b:d1:59:38:a1:6e:d6: b5:f5:d5:3b:3e:76:35:85:84:59:1d:68:9c:01:f3:cb:2c:01: 34:fd:0f:22:73:8e:24:36:fc:bc:2f:41:83:12:df:ea:c8:0e: 71:23:42:ad:e1:cf:dd:a8:8f:6d:f7:72:34:b5:31:4d:00:54: f0:4e:53:4f:b6:53:bb:ec:27:ec:76:c4:0e:2c:5c:d5:67:ed: 8e:94:3f:31:3a:73:26:ea:58:07:59:28:d6:21:d9:59:c9:00: 55:c0:51:05:26:1c:d7:52:9d:b9:fe:a0:81:20:63:ea:1a:8c: d6:65:c9:be:ce:23:c2:ab:9a:a6:03:f1:55:b9:5c:a6:a1:98: 61:36:66:f1:c1:00:8b:10:6f:73:9e:b4:c6:06:1c:45:23:49: e4:54:24:07:88:c9:8b:ca:b9:4a:5c:16:8b:b0:08:f2:cc:6e: 4f:10:7e:07:24:f6:99:18:52:32:2a:02:7b:e1:6b:f6:d9:1d: 62:d9:f9:a2:95:21:5a:25:ee:14:6b:57:0b:61:a6:34:55:1f: 28:c0:31:b5:ee:3f:99:d2:b5:63:53:05:f1:50:60:cf:99:b8: 7d:0e:c4:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt83ZLt9V5z4aCNUvoxIy8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2 ZGY1ZTEwHhcNMjYwMTAyMDQwMDU0WhcNMjYwMTAzMDQwMDU0WjAzMTEwLwYDVQQD EygxOWY5YzU0ZjMwMWY5YjU0ZmQxZGY2MzMxMGM2OGFjMTM4OGY3M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFfzxV3YSkGS8BjVqlhIcCibIQ1 +CynJd4DCqHPa62SvyhXu5TKt5ZYbNDP8kUop6Q5LRRbLbyGM3/smF3zGerDNHyu 0FqYhITGX5IBIxflL0AGuT6ipFw1dkwS8kEB/BGVWh22QPdWB1iSqFgxBZ7sIdjH 2+SiW3ikrDGZd9CmZVj8hblVHHgS5rnRP7/NYtllLBzPdjhcV51VT+NWlCLQcXZ2 +M6IaBYn/k99yqzw9k0nUKxa9f/B3M5yOt9ux5rVR+zDpVvkrejLkJVlArC7NR4+ iAwNJ+bVRiapX/mmaFqX/WayqTaVRQjNYtBp8pDPBpVD6hajVk/0uT5R/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn5xU8wH5tU/R32MxDGisE4j3O/MB8GA1UdIwQY MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYduT9LrL XNMx7JkpOzRjC6KdgL0cgGfpVhJPelY70Vk4oW7WtfXVOz52NYWEWR1onAHzyywB NP0PInOOJDb8vC9BgxLf6sgOcSNCreHP3aiPbfdyNLUxTQBU8E5TT7ZTu+wn7HbE Dixc1WftjpQ/MTpzJupYB1ko1iHZWckAVcBRBSYc11Kduf6ggSBj6hqM1mXJvs4j wquapgPxVblcpqGYYTZm8cEAixBvc560xgYcRSNJ5FQkB4jJi8q5SlwWi7AI8sxu TxB+ByT2mRhSMioCe+Fr9tkdYtn5opUhWiXuFGtXC2GmNFUfKMAxte4/mdK1Y1MF 8VBgz5m4fQ7Etg== -----END CERTIFICATE-----Generated at Fri Jan 2 11:17:12 2026 by rpki-client