This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: xE2OMEYGZrRQjS+l5mMrXV8z94+0hCxtrFHkkVUgOmM= Subject key identifier: 1E:79:6C:5E:B7:F1:5E:8C:22:F6:D4:DE:8C:4C:1B:83:EB:83:CC:C5 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B7DF057EABBF330107E61B1E542BEA6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 17D4 Signing time: Fri 02 Jan 2026 09:01:01 +0000 Manifest this update: Fri 02 Jan 2026 09:01:01 +0000 Manifest next update: Sat 03 Jan 2026 09:01:01 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 47ab4ZIEpiQc7ysAiD/ViiBfcVu3druSCJ/rtNZ3+ZM=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:f0:57:ea:bb:f3:30:10:7e:61:b1:e5:42:be:a6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 2 09:01:01 2026 GMT Not After : Jan 3 09:01:01 2026 GMT Subject: CN=1e796c5eb7f15e8c22f6d4de8c4c1b83eb83ccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:cb:2f:fe:dc:ae:65:a3:ac:ce:e2:cb:59: ae:fd:c8:c2:46:83:28:72:2d:3b:a9:4a:7a:af:51: 12:89:69:03:82:01:2f:8b:46:8c:8c:94:70:45:fd: eb:35:26:69:81:26:96:40:86:d2:78:01:d5:62:eb: 16:1d:3f:78:b5:b8:87:58:1f:c4:e6:ad:45:db:6f: 87:30:68:c2:f8:63:3d:d3:f1:55:db:73:0e:dc:c3: 7c:d6:f7:f4:49:28:2b:aa:16:d9:7c:34:76:70:fa: de:8c:f0:4a:f4:7e:c2:e2:e8:5b:d5:95:31:ab:9b: 90:f4:8d:ac:01:ba:ba:83:50:59:63:d2:97:57:95: ad:e3:5d:10:4e:14:ce:46:d1:a1:15:ec:5d:0e:bf: 41:a4:51:70:a0:84:a3:86:c1:b8:0d:22:6e:78:85: bf:fa:f4:52:0d:94:98:76:3f:fc:a5:37:d9:54:59: 1b:24:4b:05:35:b2:fa:fc:ec:16:db:12:41:bc:61: 50:00:f7:f4:b0:1b:7c:ac:2c:3b:39:92:5d:a8:69: 87:89:53:56:6a:90:ee:e7:a6:5e:51:22:34:a2:05: 92:59:b7:7f:4d:2c:20:0b:bb:e8:93:02:85:88:69: d1:d5:3f:37:84:5c:6d:52:4c:62:4d:2e:ad:f8:5e: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:6C:5E:B7:F1:5E:8C:22:F6:D4:DE:8C:4C:1B:83:EB:83:CC:C5 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:ff:29:1e:24:d9:42:5c:45:c9:1a:d2:e9:7a:85:ce:96: 76:ee:20:f0:94:d5:d8:03:a5:28:bf:f3:0c:4d:b6:6b:65:4f: 9e:7d:0d:82:0d:67:51:66:92:df:0d:81:d8:c1:42:21:11:72: b7:04:6a:ba:4d:e8:a3:e9:7a:79:20:3f:2b:ea:f7:fe:0e:88: 3d:65:b1:41:21:8a:80:30:17:9d:ec:4f:7f:3d:f3:ca:de:43: bd:4e:bc:6a:88:2f:42:c9:35:34:92:5c:33:18:53:b2:41:f1: 05:3d:36:c7:21:78:fa:1f:f6:86:ea:56:d7:52:cf:f1:fe:e3: 95:61:46:f2:d8:d5:d9:0b:6b:2d:f1:5c:e9:03:ae:69:3b:70: c8:2a:5e:b2:fe:1e:5f:c4:73:eb:fc:2a:d7:4b:59:a3:5e:48: 2d:b2:2c:35:89:68:43:e5:0d:e6:3e:71:f6:c7:a7:41:d3:c1: 66:2b:6a:4e:ce:09:77:35:4b:2b:55:8c:3c:64:ef:a3:de:ab: 34:7f:3e:2d:77:1a:45:d2:32:a9:31:39:58:ea:e0:e0:7d:c9: 4b:fd:2a:a2:02:75:f9:65:44:48:82:6a:a2:31:25:5f:ff:b2: b4:ba:13:53:0c:86:04:5e:7d:3e:c0:d0:9c:8c:0f:39:85:e6: a8:cd:ce:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt98Ffqu/MwEH5hseVCvqbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTAyMDkwMTAxWhcNMjYwMTAzMDkwMTAxWjAzMTEwLwYDVQQD EygxZTc5NmM1ZWI3ZjE1ZThjMjJmNmQ0ZGU4YzRjMWI4M2ViODNjY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PzLL/7crmWjrM7iy1mu/cjCRoMo ci07qUp6r1ESiWkDggEvi0aMjJRwRf3rNSZpgSaWQIbSeAHVYusWHT94tbiHWB/E 5q1F22+HMGjC+GM90/FV23MO3MN81vf0SSgrqhbZfDR2cPrejPBK9H7C4uhb1ZUx q5uQ9I2sAbq6g1BZY9KXV5Wt410QThTORtGhFexdDr9BpFFwoISjhsG4DSJueIW/ +vRSDZSYdj/8pTfZVFkbJEsFNbL6/OwW2xJBvGFQAPf0sBt8rCw7OZJdqGmHiVNW apDu56ZeUSI0ogWSWbd/TSwgC7vokwKFiGnR1T83hFxtUkxiTS6t+F5KsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB55bF638V6MIvbU3oxMG4Prg8zFMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaz/KR4k 2UJcRcka0ul6hc6Wdu4g8JTV2AOlKL/zDE22a2VPnn0Ngg1nUWaS3w2B2MFCIRFy twRquk3oo+l6eSA/K+r3/g6IPWWxQSGKgDAXnexPfz3zyt5DvU68aogvQsk1NJJc MxhTskHxBT02xyF4+h/2hupW11LP8f7jlWFG8tjV2QtrLfFc6QOuaTtwyCpesv4e X8Rz6/wq10tZo15ILbIsNYloQ+UN5j5x9senQdPBZitqTs4JdzVLK1WMPGTvo96r NH8+LXcaRdIyqTE5WOrg4H3JS/0qogJ1+WVESIJqojElX/+ytLoTUwyGBF59PsDQ nIwPOYXmqM3OIw== -----END CERTIFICATE-----Generated at Fri Jan 2 16:29:47 2026 by rpki-client