This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft File: X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json) Hash identifier: 0E2xKXz4r7ju7TohNpQr0ANTfurdM7ZJNASHxcBizcs= Subject key identifier: 47:06:CC:1A:20:02:8F:98:D8:F7:40:74:52:4B:05:32:32:E3:70:B3 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B790047C67DCAE3D86A41A33A3C0F0822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft Manifest number: 17CF Signing time: Thu 01 Jan 2026 10:00:20 +0000 Manifest this update: Thu 01 Jan 2026 10:00:20 +0000 Manifest next update: Fri 02 Jan 2026 10:00:20 +0000 Files and hashes: 1: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (hash: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=) 2: STf9L7OysAzVA3auf6efELGrMic.roa (hash: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=) 3: X6Ge5pTJM2TQvpxoovtE1H9eUeA.roa (hash: f5V2NLGb6EKAPQor95L+ViYAFY7a+iuaMDNRzXJ+gZU=) 4: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: 16bgpTvpW6jQsAzhEX01KVraqoi90SNVe6RwNBtSKa4=) 5: ffaMH-0hGgHTMNCXX78L-h1LWAo.roa (hash: GyPeNrQVWNT93bYYebXS2jRf00/jNRqVqCrgj4gVPMY=) 6: izRNa0oL3e2eX_U7FLdTA8x8d_Y.roa (hash: GfiLvxiLmuSXyDoe6/SEEQh4OcwyzJumCewLEz4xWY0=) 7: rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa (hash: xb5ZEXJ0QV1z7XXKAlC/1y6Tcd7ByFjDX9SUb7O///E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:47:c6:7d:ca:e3:d8:6a:41:a3:3a:3c:0f:08:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 1 10:00:20 2026 GMT Not After : Jan 2 10:00:20 2026 GMT Subject: CN=4706cc1a20028f98d8f74074524b053232e370b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:5a:2e:1e:9c:b4:a6:4e:06:55:62:67:fa: 08:8b:4a:95:9c:64:0c:84:ad:01:13:fa:87:3e:fc: 0b:0e:e3:25:42:f1:e8:bc:3c:80:77:87:33:03:52: 17:b1:3e:b3:89:c5:d4:87:4a:50:29:21:e3:ff:d5: 4a:df:61:9b:76:d9:4b:a3:bb:9b:81:4f:93:0f:a4: 76:f0:15:8e:70:a7:8b:f1:a7:fa:0d:ed:5f:32:d9: c8:17:6e:7a:df:f9:fa:1b:ba:ac:0c:1a:bc:c1:a6: 1f:ff:27:4f:a3:2c:0d:97:6d:6e:db:44:4c:ea:0b: 50:a7:7e:63:5f:56:8b:d2:cb:d9:c9:90:e9:aa:e8: 7e:67:33:f1:fc:fe:9c:ae:95:8d:40:67:b7:33:cf: cb:f8:48:2a:97:2b:6f:ac:67:47:b5:f8:64:a1:e7: df:a2:67:dc:95:b1:4c:60:33:e9:16:cf:87:93:db: 99:a1:f7:a8:10:34:1f:07:d1:9a:74:9b:ea:47:d6: 90:46:30:72:15:51:41:a2:52:74:70:2d:5c:1d:20: e3:50:23:c2:b3:da:43:cc:4a:cb:be:06:05:58:bd: dc:02:ae:5f:66:69:6f:6f:dc:05:64:db:df:dc:bc: 6b:79:8e:55:75:65:b0:59:c7:e6:f2:70:68:74:f6: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:CC:1A:20:02:8F:98:D8:F7:40:74:52:4B:05:32:32:E3:70:B3 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b8:ef:1b:17:a4:ba:ca:a7:39:6e:81:4b:ac:4f:8c:c8:98: 0d:94:04:e3:a0:b5:74:ca:ba:6d:de:c2:69:c6:99:bc:9e:61: 34:fe:8a:63:f2:08:40:4d:53:4b:ac:01:c1:db:59:dd:20:42: f0:2c:37:60:fd:19:7d:29:33:b8:e5:7d:97:2b:2f:0c:94:87: aa:7e:76:fc:1c:45:0f:a8:af:8e:8c:69:8b:4d:90:39:50:b6: f6:f2:0d:75:1a:21:8b:d9:64:b9:07:98:fa:4e:17:40:f3:b9: 56:67:91:b2:74:27:5a:c9:82:63:84:8d:36:1a:4f:be:73:63: f8:25:aa:6b:a6:e0:dc:e6:04:20:94:c3:f8:95:e5:47:3f:6e: 21:6a:71:37:bf:a2:41:2e:d1:4e:a1:89:8b:73:c2:74:d5:bf: d0:61:0e:00:2f:34:23:e7:c7:d0:06:b4:2a:21:70:c8:76:b8: 2d:8d:24:07:37:9a:ec:66:d7:26:9d:2e:58:51:0a:57:31:6c: 0b:0d:f0:1c:15:98:a0:aa:e5:af:1c:16:69:9d:96:d7:fa:8e: b7:97:48:6e:91:10:10:03:93:86:e4:88:7b:a0:af:63:11:3a: 29:cc:58:15:47:e2:36:8b:05:f1:f5:31:75:eb:9f:31:cc:5d: 16:3e:81:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5AEfGfcrj2GpBozo8DwgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTAxMTAwMDIwWhcNMjYwMTAyMTAwMDIwWjAzMTEwLwYDVQQD Eyg0NzA2Y2MxYTIwMDI4Zjk4ZDhmNzQwNzQ1MjRiMDUzMjMyZTM3MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8taLh6ctKZOBlViZ/oIi0qVnGQM hK0BE/qHPvwLDuMlQvHovDyAd4czA1IXsT6zicXUh0pQKSHj/9VK32GbdtlLo7ub gU+TD6R28BWOcKeL8af6De1fMtnIF2563/n6G7qsDBq8waYf/ydPoywNl21u20RM 6gtQp35jX1aL0svZyZDpquh+ZzPx/P6crpWNQGe3M8/L+EgqlytvrGdHtfhkoeff omfclbFMYDPpFs+Hk9uZofeoEDQfB9GadJvqR9aQRjByFVFBolJ0cC1cHSDjUCPC s9pDzErLvgYFWL3cAq5fZmlvb9wFZNvf3LxreY5VdWWwWcfm8nBodPaHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcGzBogAo+Y2PdAdFJLBTIy43CzMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7jvGxek usqnOW6BS6xPjMiYDZQE46C1dMq6bd7CacaZvJ5hNP6KY/IIQE1TS6wBwdtZ3SBC 8Cw3YP0ZfSkzuOV9lysvDJSHqn52/BxFD6ivjoxpi02QOVC29vINdRohi9lkuQeY +k4XQPO5VmeRsnQnWsmCY4SNNhpPvnNj+CWqa6bg3OYEIJTD+JXlRz9uIWpxN7+i QS7RTqGJi3PCdNW/0GEOAC80I+fH0Aa0KiFwyHa4LY0kBzea7GbXJp0uWFEKVzFs Cw3wHBWYoKrlrxwWaZ2W1/qOt5dIbpEQEAOThuSIe6CvYxE6KcxYFUfiNosF8fUx deufMcxdFj6Bag== -----END CERTIFICATE-----Generated at Thu Jan 1 17:47:45 2026 by rpki-client