This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json) Hash identifier: 6nSEd5/vJRX8ai2wtOaP+jy43FKXuX7AInE0eVbssSc= Subject key identifier: 3A:BE:4D:C6:63:6D:DC:62:61:D0:90:CD:E8:96:5B:8A:6E:FF:C2:A1 Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Certificate serial: 019B80F111999D67D1901D93C9A67D2CFDB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft Manifest number: 1524 Signing time: Fri 02 Jan 2026 23:00:40 +0000 Manifest this update: Fri 02 Jan 2026 23:00:40 +0000 Manifest next update: Sat 03 Jan 2026 23:00:40 +0000 Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 4Mi1HsjdRXypaQicX4JcVwvECSn4XauET/9awksdcN4=) 2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:11:99:9d:67:d1:90:1d:93:c9:a6:7d:2c:fd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Validity Not Before: Jan 2 23:00:40 2026 GMT Not After : Jan 3 23:00:40 2026 GMT Subject: CN=3abe4dc6636ddc6261d090cde8965b8a6effc2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:76:a8:92:95:4e:57:8f:60:41:e2:8c:f1: c3:2a:c5:97:ec:19:e1:7a:45:cf:aa:69:28:06:39: 40:ae:e4:e7:d7:9e:f9:f6:9d:a0:64:dc:0e:d0:9d: 41:b6:db:5d:67:4d:35:f3:cf:47:78:67:56:39:fd: 14:cf:18:f1:68:d4:cf:6b:0f:66:04:cd:95:e3:3d: 9f:b1:de:2a:b8:dd:be:aa:60:6f:5a:59:92:25:cc: 78:58:03:c8:a4:6f:66:cd:09:c0:eb:6f:cb:26:f7: 98:12:a4:46:cd:29:21:62:49:29:00:38:3e:ea:12: 7a:62:02:95:e2:22:ed:a3:e4:a1:1e:1d:d5:63:2a: 4e:b1:2d:b0:64:d3:7a:a0:d2:fa:7e:1b:a1:2c:86: 3d:33:5f:88:c5:01:3a:9e:6e:e1:34:7b:b8:59:c8: 3c:49:db:94:a0:38:66:82:cd:3a:d8:6d:a8:64:81: 5b:ca:3a:9d:53:c4:dc:7b:44:2a:2e:87:fa:a0:cb: 81:38:2f:25:34:90:c7:15:3f:e8:a6:d4:38:a2:1b: 20:73:d8:30:11:f9:4b:5e:48:4f:01:8c:d1:79:b3: 10:dd:21:07:9e:cd:3c:85:70:da:3d:c3:ca:70:57: ed:5b:60:35:ca:9f:3d:56:d9:51:c3:f5:0c:ad:79: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BE:4D:C6:63:6D:DC:62:61:D0:90:CD:E8:96:5B:8A:6E:FF:C2:A1 X509v3 Authority Key Identifier: keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:53:b3:90:dd:79:17:bc:ba:ac:57:98:21:5d:e9:8f:e7:0d: e0:b7:74:67:5d:a7:9e:0e:72:c6:3a:04:2e:95:d6:e6:4f:67: 3e:f1:c2:00:03:de:e2:61:1d:f5:50:c3:1f:10:fa:bd:61:ab: 23:f0:8b:df:71:f3:9e:06:7d:f3:b4:f3:a0:e0:cf:ea:ad:66: df:72:ff:5d:f5:70:02:f4:70:1a:96:2a:cb:e4:0c:c0:73:6d: 72:bc:23:3f:c5:0c:24:1a:c0:c3:41:3f:53:35:5a:85:5b:c8: 90:47:f4:48:17:c4:cc:cf:4b:fb:88:8c:8d:ee:af:bd:2d:aa: 67:67:35:61:09:4f:77:b3:a7:72:bc:bf:bf:41:94:0e:ba:3b: 0e:0b:94:0d:e1:c0:32:0c:ac:2f:5d:a6:0a:b9:87:d1:11:81: 56:0a:06:13:ea:55:14:e0:3c:91:45:4e:95:ad:35:22:bd:00: ff:c9:41:5b:09:0f:7d:6f:ee:cb:d8:3a:df:f0:f1:40:fb:17: cb:46:bb:d3:f6:14:c1:3f:aa:eb:e5:b7:4e:55:a4:e4:2b:58: c8:30:19:7d:c7:c6:e2:ae:92:60:06:1c:3b:87:c0:93:03:ca: 80:02:0f:ad:d7:d1:d1:0f:0a:6e:69:9c:d6:3e:39:f1:47:fa: 30:e3:48:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8RGZnWfRkB2TyaZ9LP23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2 Y2U0NzkwHhcNMjYwMTAyMjMwMDQwWhcNMjYwMTAzMjMwMDQwWjAzMTEwLwYDVQQD EygzYWJlNGRjNjYzNmRkYzYyNjFkMDkwY2RlODk2NWI4YTZlZmZjMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKh2qJKVTlePYEHijPHDKsWX7Bnh ekXPqmkoBjlAruTn15759p2gZNwO0J1BtttdZ001889HeGdWOf0UzxjxaNTPaw9m BM2V4z2fsd4quN2+qmBvWlmSJcx4WAPIpG9mzQnA62/LJveYEqRGzSkhYkkpADg+ 6hJ6YgKV4iLto+ShHh3VYypOsS2wZNN6oNL6fhuhLIY9M1+IxQE6nm7hNHu4Wcg8 SduUoDhmgs062G2oZIFbyjqdU8Tce0QqLof6oMuBOC8lNJDHFT/optQ4ohsgc9gw EflLXkhPAYzRebMQ3SEHns08hXDaPcPKcFftW2A1yp89VtlRw/UMrXk7HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq+TcZjbdxiYdCQzeiWW4pu/8KhMB8GA1UdIwQY MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4 LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlOzkN15 F7y6rFeYIV3pj+cN4Ld0Z12nng5yxjoELpXW5k9nPvHCAAPe4mEd9VDDHxD6vWGr I/CL33HzngZ987TzoODP6q1m33L/XfVwAvRwGpYqy+QMwHNtcrwjP8UMJBrAw0E/ UzVahVvIkEf0SBfEzM9L+4iMje6vvS2qZ2c1YQlPd7Oncry/v0GUDro7DguUDeHA MgysL12mCrmH0RGBVgoGE+pVFOA8kUVOla01Ir0A/8lBWwkPfW/uy9g63/DxQPsX y0a70/YUwT+q6+W3TlWk5CtYyDAZfcfG4q6SYAYcO4fAkwPKgAIPrdfR0Q8Kbmmc 1j458Uf6MONIYg== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:15 2026 by rpki-client