This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json) Hash identifier: /0Ssexb3VskuJqUu9PxaMA+GHJ4zxRvLGnU/8iMp044= Subject key identifier: 31:9A:E0:D9:6E:A0:AF:8F:D8:26:D2:1F:2F:A4:C9:C4:26:31:08:F2 Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806 Certificate serial: 019BF6511D88D4F05D8C9EE270D07D0FBB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft Manifest number: 1B Signing time: Sun 25 Jan 2026 18:01:09 +0000 Manifest this update: Sun 25 Jan 2026 18:01:09 +0000 Manifest next update: Mon 26 Jan 2026 18:01:09 +0000 Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=) 2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: tqqEthDEO1RGsgZl1utBxbg2HfiGYMru1QnPg+YjCEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:1d:88:d4:f0:5d:8c:9e:e2:70:d0:7d:0f:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806 Validity Not Before: Jan 25 18:01:09 2026 GMT Not After : Jan 26 18:01:09 2026 GMT Subject: CN=319ae0d96ea0af8fd826d21f2fa4c9c4263108f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:08:28:6f:e5:d1:e8:82:49:9b:02:db:a4: 24:76:4d:9b:19:1f:8b:1a:3f:5b:99:17:d7:10:4c: 28:33:02:b2:e2:71:7c:4a:cb:7c:be:44:03:d1:95: 51:6b:d0:8b:50:e5:ed:c9:76:2f:93:ee:f7:aa:73: c5:ab:04:2e:79:a9:3c:17:1a:76:2c:61:fd:db:40: e9:8c:d5:f7:f0:db:1f:4d:29:23:9e:6d:6e:7f:fa: 3e:14:ac:7a:07:db:00:60:5f:cf:60:be:2f:44:bd: b4:7d:a5:f5:be:12:92:b0:18:79:ee:01:59:11:5e: 5b:0d:84:32:bf:fd:2e:91:77:22:02:7e:27:e3:fb: 6f:71:84:5c:4a:26:3e:51:f6:93:09:75:da:4f:2b: ad:8b:57:49:62:fc:f0:65:a9:94:06:32:2c:ed:b3: e4:86:69:6f:c8:7d:78:31:3e:9b:a5:3d:05:4f:c2: f1:a3:aa:59:4a:65:28:5d:e8:10:a4:34:db:d7:60: 18:70:54:4b:f3:1f:e1:bb:81:f9:c6:e9:9e:74:e8: 47:ab:22:d8:6f:0e:4f:9c:b5:ad:6c:36:eb:8e:90: 6b:ef:cd:24:13:b5:96:10:4f:6f:c9:2f:6f:a6:12: 74:dd:13:3e:b4:5e:2d:92:e7:18:b1:50:40:f2:97: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:E0:D9:6E:A0:AF:8F:D8:26:D2:1F:2F:A4:C9:C4:26:31:08:F2 X509v3 Authority Key Identifier: keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:84:9b:8f:1b:3e:b1:52:91:ef:b0:a8:dd:50:46:e4:37:f8: 01:b3:d0:5d:ad:22:e9:17:74:3a:1a:54:e7:92:34:d5:1b:15: 7c:0a:e9:45:fb:fa:60:26:9e:25:2b:ce:a4:34:c6:e4:eb:ae: bb:b5:3e:b4:99:82:34:a5:06:72:96:d8:7d:04:92:6d:4e:59: ba:b5:a5:7b:fa:0a:f3:a4:57:99:a2:cb:62:dc:72:b7:ab:02: c0:10:6c:61:db:4d:7b:6e:88:aa:da:d0:43:9f:0b:d1:ba:5f: f4:96:71:a6:97:1e:c9:40:93:2c:14:85:5e:ea:27:9e:7b:44: 74:ce:5c:86:9a:48:3b:5d:70:e7:12:1f:c7:9f:62:84:f5:f2: 03:f9:d4:92:9c:9a:af:2a:34:93:9a:9c:ba:40:9f:b6:ee:f4: 85:ff:f5:28:3c:05:28:af:d3:73:37:05:71:83:11:64:69:13: be:b9:d9:09:fb:9f:42:92:66:bd:cb:f4:3c:08:b7:76:0f:98: 8a:43:2b:c3:59:90:7a:6a:02:33:73:cb:e3:68:12:4b:eb:88: b5:be:09:03:14:44:51:bc:ce:f8:c8:70:fe:6b:c2:77:80:ba: 2d:8f:57:eb:24:da:ae:39:77:d9:18:54:ec:e5:b0:11:80:e5: cf:6d:3f:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UR2I1PBdjJ7icNB9D7uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTRkNWRmMjMzODk4ZTA0ZmFlM2Q4M2U4NTgyMmQ5ODgw ZTA4MDYwHhcNMjYwMTI1MTgwMTA5WhcNMjYwMTI2MTgwMTA5WjAzMTEwLwYDVQQD EygzMTlhZTBkOTZlYTBhZjhmZDgyNmQyMWYyZmE0YzljNDI2MzEwOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUIKG/l0eiCSZsC26Qkdk2bGR+L Gj9bmRfXEEwoMwKy4nF8Sst8vkQD0ZVRa9CLUOXtyXYvk+73qnPFqwQueak8Fxp2 LGH920DpjNX38NsfTSkjnm1uf/o+FKx6B9sAYF/PYL4vRL20faX1vhKSsBh57gFZ EV5bDYQyv/0ukXciAn4n4/tvcYRcSiY+UfaTCXXaTyuti1dJYvzwZamUBjIs7bPk hmlvyH14MT6bpT0FT8Lxo6pZSmUoXegQpDTb12AYcFRL8x/hu4H5xumedOhHqyLY bw5PnLWtbDbrjpBr780kE7WWEE9vyS9vphJ03RM+tF4tkucYsVBA8pd/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGa4NluoK+P2CbSHy+kycQmMQjyMB8GA1UdIwQY MBaAFOak1d8jOJjgT649g+hYItmIDggGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTIt MWY5ZGZkODE0YWI2LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTItMWY5ZGZkODE0YWI2 LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4Sbjxs+ sVKR77Co3VBG5Df4AbPQXa0i6Rd0OhpU55I01RsVfArpRfv6YCaeJSvOpDTG5Ouu u7U+tJmCNKUGcpbYfQSSbU5ZurWle/oK86RXmaLLYtxyt6sCwBBsYdtNe26IqtrQ Q58L0bpf9JZxppceyUCTLBSFXuonnntEdM5chppIO11w5xIfx59ihPXyA/nUkpya ryo0k5qcukCftu70hf/1KDwFKK/TczcFcYMRZGkTvrnZCfufQpJmvcv0PAi3dg+Y ikMrw1mQemoCM3PL42gSS+uItb4JAxREUbzO+Mhw/mvCd4C6LY9X6yTarjl32RhU 7OWwEYDlz20/jg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:15 2026 by rpki-client