This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json) Hash identifier: oNxGyf7BUqzKJOxrWtTgASSwKE57ShtWAj//EJFx3Fw= Subject key identifier: 24:6D:FD:03:92:74:CD:26:06:B8:28:E4:1B:F4:94:88:EA:A8:74:70 Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Certificate serial: 019BF72D919BCF8EA95687AC27438C7C9FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft Manifest number: 053C Signing time: Sun 25 Jan 2026 22:01:57 +0000 Manifest this update: Sun 25 Jan 2026 22:01:57 +0000 Manifest next update: Mon 26 Jan 2026 22:01:57 +0000 Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: W7HIsGSut3PZFjyGszD48yV2Eg2kE6jg32gqOqVthSo=) 2: de6ErolZQIyqyskxIJ9qsMNkKNo.roa (hash: jruSnROhXq+S2qj6HU2rC2fPnP4UTAP+/5sPjL7DukM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:91:9b:cf:8e:a9:56:87:ac:27:43:8c:7c:9f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Validity Not Before: Jan 25 22:01:57 2026 GMT Not After : Jan 26 22:01:57 2026 GMT Subject: CN=246dfd039274cd2606b828e41bf49488eaa87470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:de:9d:94:68:05:31:23:aa:f4:12:cb:39: 4a:ec:e7:62:36:4f:7b:44:15:5a:b2:11:c1:87:2b: fd:67:85:8b:94:1c:8f:0a:9e:06:de:e1:4f:14:a9: b8:08:d2:53:27:cc:b5:dd:cd:8b:5a:11:cc:b5:85: 8b:e0:2a:30:f0:d9:dc:ed:ea:4f:42:64:5a:33:11: c7:00:c9:c5:0f:56:2f:e2:40:18:f1:f6:c9:ca:6f: f7:45:26:0c:60:c1:4e:9d:7c:56:7d:c1:c7:a3:f4: 0e:0c:87:ef:6c:3e:50:3e:60:b8:69:f8:bf:34:01: 34:45:83:c4:2b:48:eb:90:b6:c9:98:f6:f3:1c:2e: 1e:d3:77:39:52:1f:9d:d4:9e:84:f3:91:77:39:91: e0:a2:bc:21:19:27:cc:46:76:c7:90:dd:0b:27:b6: e4:e3:fb:ce:10:c1:f2:ef:02:f1:e7:59:66:c5:26: 10:ce:24:85:8a:24:54:01:34:d3:ac:ae:9f:e1:8d: 0b:6c:92:76:44:4f:9c:d8:e4:9c:bd:16:27:c9:69: 42:9f:e6:b6:72:cb:93:62:5f:85:d1:41:db:71:c7: 72:6b:68:4c:ca:27:e0:a8:a8:7c:c9:4f:8d:62:6f: aa:6d:84:99:e2:16:d4:61:a0:95:4b:4d:f2:57:7a: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:FD:03:92:74:CD:26:06:B8:28:E4:1B:F4:94:88:EA:A8:74:70 X509v3 Authority Key Identifier: keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4e:54:7f:57:c6:bd:84:39:6b:64:e8:5d:9c:75:46:90:fb: d2:02:21:6d:98:86:4b:11:ce:e2:cb:89:4f:40:91:1e:9e:51: 8a:5f:36:e5:ac:33:25:57:00:49:6c:d9:67:d8:11:91:cb:02: ce:b6:03:84:14:d5:ed:e5:3a:b6:b9:b7:f4:71:ad:3d:18:80: 20:1f:dc:80:3e:4a:b3:44:bd:0e:77:8e:3c:5b:bd:1f:56:16: 77:99:a2:2a:ce:ad:cf:92:f8:f2:ec:0d:87:cf:94:9f:e9:8d: 26:4a:da:04:10:00:a2:34:98:28:10:b8:8e:c5:c6:21:ea:ed: 49:a1:5d:83:9a:75:8c:c3:8a:d5:71:bf:98:ec:1a:3d:34:ee: 76:56:98:19:62:be:48:7a:9f:59:ec:e6:ba:c5:df:89:4e:6f: 82:6b:34:17:47:5b:83:21:d3:7b:20:62:41:d6:18:a2:88:43: b1:39:a6:b4:30:c9:11:0e:d4:30:0d:f6:98:c9:56:b9:77:e6: 8c:5d:64:ee:95:4d:36:38:5f:a9:2d:99:87:dc:9f:5b:71:3a: b7:53:ea:94:f5:d0:21:db:06:36:96:c5:d4:10:ae:9b:11:3d: 6f:e9:24:9c:98:d8:11:f9:74:12:1b:69:08:b6:78:d6:6c:84: 0e:af:d1:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZGbz46pVoesJ0OMfJ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWU1NjExNzg4MTQyYjMxNTQyOGFlNTFmNjdjYmJhY2Y4 MGI3ZTgwHhcNMjYwMTI1MjIwMTU3WhcNMjYwMTI2MjIwMTU3WjAzMTEwLwYDVQQD EygyNDZkZmQwMzkyNzRjZDI2MDZiODI4ZTQxYmY0OTQ4OGVhYTg3NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EjenZRoBTEjqvQSyzlK7OdiNk97 RBVashHBhyv9Z4WLlByPCp4G3uFPFKm4CNJTJ8y13c2LWhHMtYWL4Cow8Nnc7epP QmRaMxHHAMnFD1Yv4kAY8fbJym/3RSYMYMFOnXxWfcHHo/QODIfvbD5QPmC4afi/ NAE0RYPEK0jrkLbJmPbzHC4e03c5Uh+d1J6E85F3OZHgorwhGSfMRnbHkN0LJ7bk 4/vOEMHy7wLx51lmxSYQziSFiiRUATTTrK6f4Y0LbJJ2RE+c2OScvRYnyWlCn+a2 csuTYl+F0UHbccdya2hMyifgqKh8yU+NYm+qbYSZ4hbUYaCVS03yV3qGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRt/QOSdM0mBrgo5Bv0lIjqqHRwMB8GA1UdIwQY MBaAFNVeVhF4gUKzFUKK5R9ny7rPgLfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQt ODNjN2RiNzU5NmZlLzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQtODNjN2RiNzU5NmZl LzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYU5Uf1fG vYQ5a2ToXZx1RpD70gIhbZiGSxHO4suJT0CRHp5Ril825awzJVcASWzZZ9gRkcsC zrYDhBTV7eU6trm39HGtPRiAIB/cgD5Ks0S9DneOPFu9H1YWd5miKs6tz5L48uwN h8+Un+mNJkraBBAAojSYKBC4jsXGIertSaFdg5p1jMOK1XG/mOwaPTTudlaYGWK+ SHqfWezmusXfiU5vgms0F0dbgyHTeyBiQdYYoohDsTmmtDDJEQ7UMA32mMlWuXfm jF1k7pVNNjhfqS2Zh9yfW3E6t1PqlPXQIdsGNpbF1BCumxE9b+kknJjYEfl0Ehtp CLZ41myEDq/RtQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client