This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json) Hash identifier: Bw5cxtECJrR9SbiGmM80dXuWa1QXEeDiGX0r4zQ88wI= Subject key identifier: A0:A5:D3:37:68:2B:9E:1F:EC:94:43:82:32:B5:0F:7E:D5:B4:17:D8 Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Certificate serial: 019BF6BEE232BB980C222B9F0CD6D96F3B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft Manifest number: 0AA1 Signing time: Sun 25 Jan 2026 20:01:03 +0000 Manifest this update: Sun 25 Jan 2026 20:01:03 +0000 Manifest next update: Mon 26 Jan 2026 20:01:03 +0000 Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: 2R4i9k/tthKR2HmGWRSi/ZAjoNw8R1cPnNm5Qakl2Eo=) 2: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (hash: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:e2:32:bb:98:0c:22:2b:9f:0c:d6:d9:6f:3b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Validity Not Before: Jan 25 20:01:03 2026 GMT Not After : Jan 26 20:01:03 2026 GMT Subject: CN=a0a5d337682b9e1fec94438232b50f7ed5b417d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:e3:18:44:45:c8:48:3c:80:2a:4d:60:79: f5:4f:da:eb:c0:94:ee:7f:94:b0:1e:0b:dd:b0:8b: 1f:ef:96:e9:9f:04:21:a3:03:66:5b:50:23:1f:c4: 1f:11:7f:33:78:79:d3:d0:d0:92:8a:f7:58:83:23: 85:98:12:1f:f7:5b:05:70:6c:b1:1f:08:7b:33:f0: 54:a7:0c:27:12:8e:5f:55:19:f6:1d:ea:7f:2e:95: 78:79:1f:2c:da:b1:c8:2a:4f:51:2b:e4:39:00:d5: fb:ec:5f:b9:17:ed:da:c4:66:53:bb:63:c4:83:ce: e2:64:b4:b7:54:af:92:80:6d:18:8b:b7:3f:16:41: 97:51:bc:04:80:03:3c:66:19:47:4d:29:12:42:3e: c0:ac:8d:fb:96:81:4f:fd:b9:88:3f:ee:d8:ac:f0: 7c:b6:37:ee:dc:2b:88:21:1e:f4:74:6f:a2:08:1a: cc:e0:87:3e:73:3a:f9:cc:d9:58:b3:fe:da:83:2c: f6:1f:84:cf:7f:2c:a4:6c:24:a7:f3:8c:3a:8c:89: 6e:5c:72:bc:95:51:8a:5d:d7:fe:90:36:96:14:36: 58:94:af:a4:d2:d5:25:23:23:3f:81:e4:73:3e:0d: 5d:2d:71:6c:aa:11:81:c5:07:a1:b0:f8:bd:27:22: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:D3:37:68:2B:9E:1F:EC:94:43:82:32:B5:0F:7E:D5:B4:17:D8 X509v3 Authority Key Identifier: keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c4:8d:35:f2:c2:34:76:92:e3:ca:1a:f6:fa:75:c6:a6:a3: 85:ec:a9:37:ea:38:da:12:ba:36:c2:85:1b:94:fc:1b:2f:95: 89:13:1f:be:1c:59:5e:cd:75:35:84:e7:a1:9e:e3:55:b3:3b: 13:70:d1:e7:73:69:64:e3:30:68:14:8a:7e:18:c6:e3:be:39: bd:03:f3:e5:8d:a0:79:5f:54:0d:1c:8b:12:85:88:8a:7d:b5: 0a:68:ed:69:3b:c6:ed:b2:5a:15:f7:68:7c:31:f6:48:e5:ea: 87:4a:e0:1b:e4:bf:1c:16:80:58:6b:73:48:dd:ea:42:88:3e: 96:68:85:32:48:0b:7e:c3:9c:27:32:f8:15:a6:11:c8:e4:a5: 2b:32:60:8b:c2:f0:75:5e:11:ba:fe:04:8f:37:be:c7:69:cb: c6:66:e5:a4:3e:d5:3b:31:70:f6:56:92:b2:b3:49:c3:21:c0: e5:6e:9d:ea:63:67:db:a3:e0:82:eb:25:85:db:e5:13:30:ae: 0e:3a:5b:eb:eb:df:e0:96:41:50:55:3b:4c:a0:d6:4a:6d:c0: 0e:b9:80:68:a9:ef:24:1a:31:96:39:cd:6d:7a:c8:66:d9:cb: 72:31:8b:1e:11:f7:98:ee:af:75:b3:05:62:94:39:e4:9c:fa: 0a:2f:46:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuIyu5gMIiufDNbZbzsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx ZWI5OTMwHhcNMjYwMTI1MjAwMTAzWhcNMjYwMTI2MjAwMTAzWjAzMTEwLwYDVQQD EyhhMGE1ZDMzNzY4MmI5ZTFmZWM5NDQzODIzMmI1MGY3ZWQ1YjQxN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq3jGERFyEg8gCpNYHn1T9rrwJTu f5SwHgvdsIsf75bpnwQhowNmW1AjH8QfEX8zeHnT0NCSivdYgyOFmBIf91sFcGyx Hwh7M/BUpwwnEo5fVRn2Hep/LpV4eR8s2rHIKk9RK+Q5ANX77F+5F+3axGZTu2PE g87iZLS3VK+SgG0Yi7c/FkGXUbwEgAM8ZhlHTSkSQj7ArI37loFP/bmIP+7YrPB8 tjfu3CuIIR70dG+iCBrM4Ic+czr5zNlYs/7agyz2H4TPfyykbCSn84w6jIluXHK8 lVGKXdf+kDaWFDZYlK+k0tUlIyM/geRzPg1dLXFsqhGBxQehsPi9JyLKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCl0zdoK54f7JRDgjK1D37VtBfYMB8GA1UdIwQY MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcSNNfLC NHaS48oa9vp1xqajheypN+o42hK6NsKFG5T8Gy+ViRMfvhxZXs11NYTnoZ7jVbM7 E3DR53NpZOMwaBSKfhjG4745vQPz5Y2geV9UDRyLEoWIin21CmjtaTvG7bJaFfdo fDH2SOXqh0rgG+S/HBaAWGtzSN3qQog+lmiFMkgLfsOcJzL4FaYRyOSlKzJgi8Lw dV4Ruv4Ejze+x2nLxmblpD7VOzFw9laSsrNJwyHA5W6d6mNn26PgguslhdvlEzCu Djpb6+vf4JZBUFU7TKDWSm3ADrmAaKnvJBoxljnNbXrIZtnLcjGLHhH3mO6vdbMF YpQ55Jz6Ci9Gtg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:05 2026 by rpki-client