This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json) Hash identifier: 4CDWj9/oI+YIkcLquD5+inFYGgyHsOlBhx5+38ufZG8= Subject key identifier: 52:F4:90:3F:15:64:5C:8E:B6:ED:83:39:E8:C7:CB:52:D7:DB:EF:25 Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019BF763429458D808A0D7741B29938A6BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft Manifest number: 0FBC Signing time: Sun 25 Jan 2026 23:00:35 +0000 Manifest this update: Sun 25 Jan 2026 23:00:35 +0000 Manifest next update: Mon 26 Jan 2026 23:00:35 +0000 Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: H9EE5vyMUjiGY1lqKofvSpQSlFvJsgBFH2KEf6FhXpc=) 2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=) 3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=) 4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:42:94:58:d8:08:a0:d7:74:1b:29:93:8a:6b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Jan 25 23:00:35 2026 GMT Not After : Jan 26 23:00:35 2026 GMT Subject: CN=52f4903f15645c8eb6ed8339e8c7cb52d7dbef25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:61:06:45:a1:a7:c3:1e:51:0a:fc:04:12:38: ff:ab:a0:1b:6c:67:0e:f1:98:5f:1b:16:9c:70:b8: 24:cd:b6:bd:b3:86:d3:6a:87:14:88:fd:5f:97:60: 9a:49:7f:b9:9a:42:15:a9:2a:2a:dd:55:07:f9:66: a6:f6:93:05:29:b0:42:e1:25:01:a4:ea:de:1c:18: 62:57:59:c0:30:d7:b7:1e:68:1e:b5:35:5c:da:12: 34:d7:ff:9e:8b:53:07:ec:e4:b1:74:40:fc:8a:35: 8c:4b:51:b2:f4:4b:9d:45:78:c8:dd:14:4d:ca:1b: c1:6b:59:ed:91:82:56:34:fb:33:1c:22:c1:25:24: 82:bc:70:0a:d8:5f:8e:df:9a:7f:33:31:02:4b:94: a5:09:83:68:b6:5f:05:47:e6:f4:a0:fa:32:fb:66: c2:47:bf:f5:90:23:ac:16:95:88:1e:52:bf:40:fc: 86:38:8a:98:d5:ee:36:90:e0:59:b5:98:c3:54:c0: bc:29:e3:c5:6f:1a:d2:9a:ac:2a:be:41:de:9e:ed: 31:15:ca:dc:3e:22:b5:8f:60:f4:05:80:5f:e1:dd: 16:6c:f3:11:59:2e:bd:66:11:94:8d:38:a6:ac:ce: 4f:19:dd:c9:2a:65:06:e6:87:16:56:35:94:db:ca: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F4:90:3F:15:64:5C:8E:B6:ED:83:39:E8:C7:CB:52:D7:DB:EF:25 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7a:41:e2:37:b2:ae:de:14:d4:b8:8b:a1:b4:c2:9f:be:fd: 8c:ab:2d:fc:48:72:84:bc:64:3c:6b:12:92:2f:7b:3b:7e:17: 0d:9f:3f:96:1d:e5:ca:0e:4a:13:34:47:a9:9a:bc:2d:d4:b9: ce:c6:00:9e:48:39:f5:dd:0f:fc:f8:6b:a0:e1:97:d8:e9:70: 91:f8:c0:5d:53:7d:b5:aa:fd:21:6c:19:e9:3f:ac:5b:a1:65: ec:c9:5b:76:2f:7b:26:7a:ab:5e:a6:8d:2f:f8:2c:de:c3:3d: d8:17:7d:c0:41:cb:0b:94:60:7a:e6:2a:5d:c1:bf:ac:ab:6e: 53:17:8e:76:ee:1b:41:b5:04:28:c3:13:90:04:d0:b0:ec:c0: fe:0d:94:75:6d:e2:8c:af:69:19:38:bd:4a:e1:0f:e1:47:01: 1f:4f:73:9f:d3:2c:da:85:95:df:a6:52:e5:cf:a0:88:a0:2a: 16:2c:d6:14:49:44:60:1b:ad:9d:d6:6a:fd:60:65:fa:da:d0: 9b:0f:7a:c5:3d:7e:1c:e4:61:46:84:c1:16:64:05:ca:b2:a0: 5a:6c:8d:7d:c3:3b:d0:c8:69:ff:8c:d6:ab:2b:4c:65:01:7b: 63:94:3f:a2:7a:e6:95:fa:97:01:38:1e:37:60:fd:d2:42:0d: fd:b9:a1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0KUWNgIoNd0GymTimvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjYwMTI1MjMwMDM1WhcNMjYwMTI2MjMwMDM1WjAzMTEwLwYDVQQD Eyg1MmY0OTAzZjE1NjQ1YzhlYjZlZDgzMzllOGM3Y2I1MmQ3ZGJlZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mEGRaGnwx5RCvwEEjj/q6AbbGcO 8ZhfGxaccLgkzba9s4bTaocUiP1fl2CaSX+5mkIVqSoq3VUH+Wam9pMFKbBC4SUB pOreHBhiV1nAMNe3HmgetTVc2hI01/+ei1MH7OSxdED8ijWMS1Gy9EudRXjI3RRN yhvBa1ntkYJWNPszHCLBJSSCvHAK2F+O35p/MzECS5SlCYNotl8FR+b0oPoy+2bC R7/1kCOsFpWIHlK/QPyGOIqY1e42kOBZtZjDVMC8KePFbxrSmqwqvkHenu0xFcrc PiK1j2D0BYBf4d0WbPMRWS69ZhGUjTimrM5PGd3JKmUG5ocWVjWU28qIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFL0kD8VZFyOtu2DOejHy1LX2+8lMB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXpB4jey rt4U1LiLobTCn779jKst/EhyhLxkPGsSki97O34XDZ8/lh3lyg5KEzRHqZq8LdS5 zsYAnkg59d0P/PhroOGX2OlwkfjAXVN9tar9IWwZ6T+sW6Fl7Mlbdi97JnqrXqaN L/gs3sM92Bd9wEHLC5RgeuYqXcG/rKtuUxeOdu4bQbUEKMMTkATQsOzA/g2UdW3i jK9pGTi9SuEP4UcBH09zn9Ms2oWV36ZS5c+giKAqFizWFElEYButndZq/WBl+trQ mw96xT1+HORhRoTBFmQFyrKgWmyNfcM70Mhp/4zWqytMZQF7Y5Q/onrmlfqXATge N2D90kIN/bmhdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:10 2026 by rpki-client