This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json) Hash identifier: lgTibfkjzHtvYrBv4j35xBZd8bpUOG/eevooCTgGMMk= Subject key identifier: F1:57:46:00:E5:7D:27:3B:B0:63:A4:EC:9F:76:C8:88:24:16:8F:76 Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Certificate serial: 019B785B9B246E45C650B477A69248B55260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 07:00:27 +0000 Manifest this update: Thu 01 Jan 2026 07:00:27 +0000 Manifest next update: Fri 02 Jan 2026 07:00:27 +0000 Files and hashes: 1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=) 2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=) 3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=) 4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=) 5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=) 6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: 35p7GIgBN6U6bt8TAKJTwvPU/ihSu71O3W5UPUuvkrc=) 7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:9b:24:6e:45:c6:50:b4:77:a6:92:48:b5:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Validity Not Before: Jan 1 07:00:27 2026 GMT Not After : Jan 2 07:00:27 2026 GMT Subject: CN=f1574600e57d273bb063a4ec9f76c88824168f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:e7:b5:4c:86:45:95:8b:56:a8:5b:08:9c: cd:e0:03:45:a1:10:4f:17:49:28:a7:b4:e8:8a:5a: 19:03:eb:71:f2:8d:9f:28:97:b8:48:11:bc:68:64: e6:ff:97:d7:e2:f4:8d:1a:b3:a0:74:e8:65:c6:7f: 1e:a9:53:80:51:eb:04:e6:98:3c:56:e5:39:e3:f1: d7:21:ae:a0:03:30:cb:24:10:4f:d1:cf:53:ee:3d: 03:1f:80:50:b9:24:a8:75:6a:17:13:a0:0e:35:ca: 1d:02:81:ae:73:9c:16:4a:7f:cf:ef:56:79:b8:b3: 7d:b7:cb:41:d4:9a:74:8c:3d:66:06:e3:e7:3a:49: 7d:aa:80:64:28:6c:af:66:fa:be:12:06:e1:29:d2: 7b:09:27:b4:47:86:84:d5:a2:08:4f:5c:5f:6c:ba: b3:8a:d6:2b:fc:eb:cf:11:d7:40:d2:f5:4e:66:60: 7d:3d:d7:10:1b:02:2e:62:8c:f5:5f:45:04:cd:63: e8:39:78:4a:7f:b3:93:7c:22:b8:10:1c:61:52:21: c1:46:72:19:f1:4c:20:31:09:06:d1:00:ff:da:4f: 2e:00:6d:ab:25:50:ff:25:fd:94:b6:a4:34:a4:64: f7:78:e1:30:ca:8b:c1:2b:a0:53:c5:11:f7:fb:35: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:46:00:E5:7D:27:3B:B0:63:A4:EC:9F:76:C8:88:24:16:8F:76 X509v3 Authority Key Identifier: keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:57:25:74:cf:74:59:c0:7b:64:6c:a6:d9:57:17:ee:7c:8b: d1:27:3a:e9:06:61:f6:fd:cf:0a:87:90:b9:3c:ca:f7:f0:c5: b0:d1:59:59:4e:39:a1:de:d7:e6:4d:0c:d7:46:37:02:d3:23: a5:74:a6:cb:38:a6:86:b1:df:dc:11:8f:1d:60:bf:1b:77:c3: a2:3d:2b:9e:30:4d:0b:05:94:ff:6f:bb:8d:1e:c5:57:38:40: 60:94:44:2b:6c:dd:24:8a:0e:8c:f5:e3:c9:ef:b3:30:af:9c: 28:1e:ef:a4:01:7e:e1:3a:aa:12:1f:0a:cc:e0:ae:13:c6:4a: e4:a8:54:ad:ef:12:54:68:2b:f8:03:52:c0:d9:93:62:1a:5f: 41:4b:99:3b:36:de:33:2b:8d:58:59:ab:fb:1c:2f:c2:1c:3f: 57:66:73:5a:24:8d:5b:97:0c:9b:0e:01:d9:7b:6b:84:27:0e: 93:15:77:77:ec:8d:e5:21:ae:a5:16:28:e0:97:02:c0:de:76: 45:8c:57:02:f6:12:81:c5:fe:6e:3a:24:7a:1c:fb:c0:ae:2e: 55:6d:f3:55:4c:6a:73:27:09:a3:90:6c:32:6b:f1:7a:96:2b: 1e:e9:1e:be:71:b5:06:6d:0b:cb:41:dc:b5:31:c7:3f:56:6b: 63:d8:4f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W5skbkXGULR3ppJItVJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2 MWNiMTMwHhcNMjYwMTAxMDcwMDI3WhcNMjYwMTAyMDcwMDI3WjAzMTEwLwYDVQQD EyhmMTU3NDYwMGU1N2QyNzNiYjA2M2E0ZWM5Zjc2Yzg4ODI0MTY4Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG/ntUyGRZWLVqhbCJzN4ANFoRBP F0kop7ToiloZA+tx8o2fKJe4SBG8aGTm/5fX4vSNGrOgdOhlxn8eqVOAUesE5pg8 VuU54/HXIa6gAzDLJBBP0c9T7j0DH4BQuSSodWoXE6AONcodAoGuc5wWSn/P71Z5 uLN9t8tB1Jp0jD1mBuPnOkl9qoBkKGyvZvq+EgbhKdJ7CSe0R4aE1aIIT1xfbLqz itYr/OvPEddA0vVOZmB9PdcQGwIuYoz1X0UEzWPoOXhKf7OTfCK4EBxhUiHBRnIZ 8UwgMQkG0QD/2k8uAG2rJVD/Jf2UtqQ0pGT3eOEwyovBK6BTxRH3+zUbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFXRgDlfSc7sGOk7J92yIgkFo92MB8GA1UdIwQY MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt MDVkYjQ5N2FjNDU1LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1 LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlcldM90 WcB7ZGym2VcX7nyL0Sc66QZh9v3PCoeQuTzK9/DFsNFZWU45od7X5k0M10Y3AtMj pXSmyzimhrHf3BGPHWC/G3fDoj0rnjBNCwWU/2+7jR7FVzhAYJREK2zdJIoOjPXj ye+zMK+cKB7vpAF+4TqqEh8KzOCuE8ZK5KhUre8SVGgr+ANSwNmTYhpfQUuZOzbe MyuNWFmr+xwvwhw/V2ZzWiSNW5cMmw4B2XtrhCcOkxV3d+yN5SGupRYo4JcCwN52 RYxXAvYSgcX+bjokehz7wK4uVW3zVUxqcycJo5BsMmvxepYrHukevnG1Bm0Ly0Hc tTHHP1ZrY9hPHA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:12 2026 by rpki-client