This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json) Hash identifier: PLmzNE1GTx0Xpx/egcFgmk+xTecefOrBDkKnqWjy7s8= Subject key identifier: D2:14:5F:7C:6B:DF:26:02:21:C2:81:71:36:26:2D:F0:B4:35:E4:A1 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019BF4D11780CE6CAE18A54D481F9BEB9278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft Manifest number: 12C8 Signing time: Sun 25 Jan 2026 11:01:42 +0000 Manifest this update: Sun 25 Jan 2026 11:01:42 +0000 Manifest next update: Mon 26 Jan 2026 11:01:42 +0000 Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: /uhvg7h0uSBEePnEkcqYJsxxfHlNuIev+Lyzmjau8AE=) 2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=) 3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=) 4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:17:80:ce:6c:ae:18:a5:4d:48:1f:9b:eb:92:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Jan 25 11:01:42 2026 GMT Not After : Jan 26 11:01:42 2026 GMT Subject: CN=d2145f7c6bdf260221c2817136262df0b435e4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:60:12:b6:3b:ca:31:25:f1:6b:bb:3d:09: a0:65:ed:7f:7f:9a:fd:6e:a2:d4:91:6a:a8:46:ee: 5f:68:65:21:f2:be:43:0c:19:28:d5:69:0a:ba:a3: 09:e4:c5:fa:78:76:8d:51:9f:cf:22:25:58:1f:94: 39:f6:c1:07:fc:ae:0d:3a:06:07:6b:b3:84:f2:60: d5:65:ed:a3:12:d5:13:ef:8b:78:a9:a4:48:49:69: ba:34:76:f6:c1:21:b1:0e:51:59:5f:ed:9d:3a:35: 83:25:10:00:fd:51:9b:ce:15:bd:2d:87:fa:fa:82: 74:b9:45:ce:2c:26:11:a0:10:6b:4c:36:d3:f5:17: d3:18:e1:f5:92:75:fa:b7:d7:64:41:67:f0:90:fe: d2:10:c0:a5:b8:90:6b:d1:65:aa:1f:41:69:46:76: e1:9f:e1:f6:d2:01:68:5a:b1:2a:72:e8:ec:2d:19: 7e:2c:0c:c2:73:08:06:df:38:9a:31:79:bf:26:25: de:4b:2a:9d:a3:1f:02:2f:a6:76:23:54:1c:5d:96: 9e:cd:5e:00:0c:43:7e:10:93:6a:89:ba:8c:e3:e8: b8:12:cf:fb:12:b9:b5:47:66:1f:93:6d:48:ca:0f: 58:70:24:04:fd:b5:8c:25:e2:75:a4:47:9e:9a:9b: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:5F:7C:6B:DF:26:02:21:C2:81:71:36:26:2D:F0:B4:35:E4:A1 X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ac:f1:35:c5:02:43:19:82:55:ff:e9:50:2c:4d:b5:f1:a1: 12:7f:79:d9:a0:10:fb:2a:e2:7b:15:04:e3:a2:0d:b5:82:4b: 00:44:0a:8a:4c:e6:68:6d:dd:62:ce:42:6d:0c:f1:2b:86:82: 5b:e5:ee:00:2c:65:f5:91:ce:c0:39:60:f2:4c:18:80:6f:a9: 14:ea:c4:2d:d7:42:5e:ca:66:76:69:04:47:52:fa:f9:b5:e9: 9d:c1:ff:60:84:39:cb:5b:90:2a:63:89:77:f1:cd:aa:36:b3: 22:0f:91:aa:7a:6f:9c:8e:31:c6:79:79:b1:89:57:94:ca:ce: 6e:15:18:7b:b0:fe:f4:82:73:d4:70:01:51:a1:28:b8:88:dc: e0:de:ce:46:9e:4a:d6:eb:5a:de:79:75:72:25:54:82:52:88: 40:87:e2:47:fb:a6:e9:2b:b7:03:09:ee:9e:c2:0b:37:b9:f2: b3:c4:ae:09:65:b8:5f:ea:04:f0:14:04:67:b7:11:7f:13:2f: 83:9c:44:5e:3c:d2:13:a0:b7:cd:31:78:63:b0:5d:de:e3:06: 72:41:9d:f1:83:c9:5b:76:dd:04:39:e1:1c:d1:51:83:0b:05: f9:02:5a:cf:d4:3d:9c:cd:93:cb:3c:90:27:09:ef:e3:8d:04: fd:93:40:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00ReAzmyuGKVNSB+b65J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjYwMTI1MTEwMTQyWhcNMjYwMTI2MTEwMTQyWjAzMTEwLwYDVQQD EyhkMjE0NWY3YzZiZGYyNjAyMjFjMjgxNzEzNjI2MmRmMGI0MzVlNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFgErY7yjEl8Wu7PQmgZe1/f5r9 bqLUkWqoRu5faGUh8r5DDBko1WkKuqMJ5MX6eHaNUZ/PIiVYH5Q59sEH/K4NOgYH a7OE8mDVZe2jEtUT74t4qaRISWm6NHb2wSGxDlFZX+2dOjWDJRAA/VGbzhW9LYf6 +oJ0uUXOLCYRoBBrTDbT9RfTGOH1knX6t9dkQWfwkP7SEMCluJBr0WWqH0FpRnbh n+H20gFoWrEqcujsLRl+LAzCcwgG3ziaMXm/JiXeSyqdox8CL6Z2I1QcXZaezV4A DEN+EJNqibqM4+i4Es/7Erm1R2Yfk21Iyg9YcCQE/bWMJeJ1pEeempuxyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIUX3xr3yYCIcKBcTYmLfC0NeShMB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEazxNcUC QxmCVf/pUCxNtfGhEn952aAQ+yriexUE46INtYJLAEQKikzmaG3dYs5CbQzxK4aC W+XuACxl9ZHOwDlg8kwYgG+pFOrELddCXspmdmkER1L6+bXpncH/YIQ5y1uQKmOJ d/HNqjazIg+RqnpvnI4xxnl5sYlXlMrObhUYe7D+9IJz1HABUaEouIjc4N7ORp5K 1uta3nl1ciVUglKIQIfiR/um6Su3AwnunsILN7nys8SuCWW4X+oE8BQEZ7cRfxMv g5xEXjzSE6C3zTF4Y7Bd3uMGckGd8YPJW3bdBDnhHNFRgwsF+QJaz9Q9nM2TyzyQ Jwnv440E/ZNAAA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:19 2026 by rpki-client