This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json) Hash identifier: 6buNbynMI3utDoaaNiCsYHL2PT8dkcCNviyDwAFMeq8= Subject key identifier: 21:C9:38:C0:CD:26:F2:A5:25:3F:66:A9:1C:E6:B3:42:81:C3:43:23 Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Certificate serial: 019BF462C46F1565DA2D7444EE8AFCA31F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft Manifest number: 0873 Signing time: Sun 25 Jan 2026 09:01:12 +0000 Manifest this update: Sun 25 Jan 2026 09:01:12 +0000 Manifest next update: Mon 26 Jan 2026 09:01:12 +0000 Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: vFswNT0q7C3mjPWdQ0t8s1FJhBj6124DEEhkaGOiCu4=) 2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c4:6f:15:65:da:2d:74:44:ee:8a:fc:a3:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Validity Not Before: Jan 25 09:01:12 2026 GMT Not After : Jan 26 09:01:12 2026 GMT Subject: CN=21c938c0cd26f2a5253f66a91ce6b34281c34323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:15:47:c0:bd:cf:cd:42:4f:d3:88:bc:d6: 03:ae:83:f1:49:40:ed:74:39:1e:da:19:88:75:de: 7f:38:4c:83:b5:1c:62:d8:ff:35:6b:62:28:de:8c: 9a:55:64:c8:d7:d1:c1:61:87:3d:8e:0b:a7:06:31: 21:d4:05:31:23:0a:45:36:17:81:b4:2f:43:fb:e6: c3:5c:ff:de:5b:87:a7:9d:39:6b:8a:57:75:03:f3: 5d:d7:bf:d5:de:58:68:8b:58:c2:25:5e:4a:4c:1a: d7:61:f5:69:b6:ad:68:f7:12:94:61:40:0a:3f:70: d1:c9:1a:2d:56:16:80:09:72:f6:65:65:1a:15:9f: c0:24:ec:6c:5c:39:96:a7:5d:d3:47:e1:c1:69:c4: 68:3d:4e:c4:3a:16:f9:58:7d:55:cb:6e:33:22:1f: de:d2:24:58:4a:fa:3e:2a:b4:e4:75:81:df:84:45: 37:fa:3b:76:1b:ff:cf:57:58:f4:19:9d:08:13:82: 86:0e:e7:f2:c4:0c:d4:17:e9:44:83:e3:2f:e5:d5: fe:66:03:52:9b:cc:95:08:99:b6:96:c1:f3:76:d2: 23:36:58:72:bf:fd:62:ba:3e:c4:ba:ab:c5:88:63: f8:da:bf:81:36:7f:1f:97:e7:b7:b1:3d:e2:2d:20: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:38:C0:CD:26:F2:A5:25:3F:66:A9:1C:E6:B3:42:81:C3:43:23 X509v3 Authority Key Identifier: keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8e:6f:78:25:57:5d:ee:b0:d6:57:1b:6f:b3:c3:0a:42:87: 94:9b:a9:33:b2:8f:af:08:8b:a1:db:99:a6:f5:06:c6:ef:6b: a1:aa:e1:fd:ca:8f:14:a0:9a:90:fa:2c:44:2a:27:05:80:d8: f4:76:ba:51:a5:43:2c:5a:91:26:ba:f4:ed:cc:ee:d8:2c:7c: 39:94:5c:26:bc:63:df:fe:da:c6:45:dd:09:0b:eb:3a:a4:0d: ee:cd:fa:c2:68:59:19:93:b5:5f:b9:2c:56:90:fb:af:83:96: af:7d:6e:02:d7:a1:84:b3:14:6e:5c:10:98:62:57:fd:1d:6c: ef:30:01:7e:7a:d0:ad:18:f6:40:44:ac:25:e5:4d:b1:01:3d: c3:a6:10:78:3a:69:e2:f3:8d:91:2d:f9:79:8b:5c:8d:87:18: 81:f8:66:22:31:2d:e2:31:0c:e7:ee:f0:e1:57:76:25:a6:fb: 84:ce:73:20:b6:91:be:28:5f:d4:06:a5:5e:73:50:35:0f:1b: e5:15:d0:cc:ae:fe:88:cb:81:85:e2:10:fb:13:da:72:c7:d5: fd:97:1a:a8:fd:88:13:3f:8c:d3:57:e4:6c:2c:44:79:94:8e: 27:67:0c:9e:0c:28:ee:69:21:b5:ba:a9:46:98:2a:10:b0:43: 23:d1:ce:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsRvFWXaLXRE7or8ox9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw ZGU2YmYwHhcNMjYwMTI1MDkwMTEyWhcNMjYwMTI2MDkwMTEyWjAzMTEwLwYDVQQD EygyMWM5MzhjMGNkMjZmMmE1MjUzZjY2YTkxY2U2YjM0MjgxYzM0MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpMVR8C9z81CT9OIvNYDroPxSUDt dDke2hmIdd5/OEyDtRxi2P81a2Io3oyaVWTI19HBYYc9jgunBjEh1AUxIwpFNheB tC9D++bDXP/eW4ennTlrild1A/Nd17/V3lhoi1jCJV5KTBrXYfVptq1o9xKUYUAK P3DRyRotVhaACXL2ZWUaFZ/AJOxsXDmWp13TR+HBacRoPU7EOhb5WH1Vy24zIh/e 0iRYSvo+KrTkdYHfhEU3+jt2G//PV1j0GZ0IE4KGDufyxAzUF+lEg+Mv5dX+ZgNS m8yVCJm2lsHzdtIjNlhyv/1iuj7EuqvFiGP42r+BNn8fl+e3sT3iLSAulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHJOMDNJvKlJT9mqRzms0KBw0MjMB8GA1UdIwQY MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAII5veCVX Xe6w1lcbb7PDCkKHlJupM7KPrwiLoduZpvUGxu9roarh/cqPFKCakPosRConBYDY 9Ha6UaVDLFqRJrr07czu2Cx8OZRcJrxj3/7axkXdCQvrOqQN7s36wmhZGZO1X7ks VpD7r4OWr31uAtehhLMUblwQmGJX/R1s7zABfnrQrRj2QESsJeVNsQE9w6YQeDpp 4vONkS35eYtcjYcYgfhmIjEt4jEM5+7w4Vd2Jab7hM5zILaRvihf1AalXnNQNQ8b 5RXQzK7+iMuBheIQ+xPacsfV/ZcaqP2IEz+M01fkbCxEeZSOJ2cMngwo7mkhtbqp RpgqELBDI9HObg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:05 2026 by rpki-client