This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json) Hash identifier: VLnTz22unIto5nZCfL/lxg5fosQYoDcuVIgMhBTPKsQ= Subject key identifier: D4:53:B4:8D:0C:A9:A2:95:62:91:4A:B5:0F:5F:2D:55:19:74:5F:6E Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Certificate serial: 019BF6F55B7939BB54BA549D949FF1C52326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:00:33 +0000 Manifest this update: Sun 25 Jan 2026 21:00:33 +0000 Manifest next update: Mon 26 Jan 2026 21:00:33 +0000 Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: iBuLo1HLKQQYt9HfNhzoUJhCsHv17s4lyebG5AuBR9Q=) 2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:5b:79:39:bb:54:ba:54:9d:94:9f:f1:c5:23:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Validity Not Before: Jan 25 21:00:33 2026 GMT Not After : Jan 26 21:00:33 2026 GMT Subject: CN=d453b48d0ca9a29562914ab50f5f2d5519745f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:fc:63:fd:75:87:28:d0:20:48:2b:4e:03: 6d:00:0e:eb:4a:5a:c7:00:14:0b:7e:14:84:85:b5: 62:1c:58:d4:4f:ed:ee:c4:1d:11:eb:e3:b3:4c:2f: ef:a3:42:10:3d:cb:f6:f2:3a:3a:92:7e:7a:cc:72: 29:5e:c1:3b:34:84:d0:31:2a:e9:f2:f1:be:0d:d3: 16:9f:67:bc:1f:44:22:7d:78:42:b3:ac:b9:06:ed: 85:a3:ba:e1:e6:87:81:9b:6c:06:d6:c7:38:a3:b6: 4a:68:52:3c:64:cb:2e:d5:df:b9:ae:53:56:ae:d1: 06:e1:1a:33:d4:2c:a9:bb:fe:c2:0b:20:5e:1f:0a: 74:5a:04:44:75:6a:fa:c9:5f:1a:0d:a2:9c:1c:1b: b3:5d:4a:dd:28:5a:fc:c8:11:0e:9a:d4:ff:88:9f: 43:88:43:93:e1:38:b5:31:eb:ab:f9:76:07:7b:13: 79:80:fc:f8:00:46:3e:74:1f:08:bf:59:74:80:b7: 9f:79:0f:76:ce:4d:50:72:f3:85:5a:13:89:5c:f0: 0b:c3:73:29:36:fb:dc:3a:59:9b:1a:ea:2e:b4:33: c0:28:9d:9d:e9:b7:51:de:5c:ae:e7:2a:05:27:37: ec:35:e7:a6:61:b9:26:26:48:58:4c:62:e2:d0:e1: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:53:B4:8D:0C:A9:A2:95:62:91:4A:B5:0F:5F:2D:55:19:74:5F:6E X509v3 Authority Key Identifier: keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:28:68:67:f3:1c:b9:03:04:77:d8:8f:e6:27:27:ca:c5: 94:87:0d:4c:71:a7:4b:5f:82:66:01:7d:b7:a7:43:94:a0:21: c1:e7:66:68:6b:a6:04:cd:ea:62:f8:c2:14:5e:73:a4:6e:6a: dd:c8:03:ee:95:c7:63:c1:08:60:ec:25:55:35:f0:c2:ff:1a: fd:1f:d6:8e:24:51:4a:f7:0e:1b:ce:7d:0e:ea:a4:99:14:c9: 2b:af:25:a0:2f:07:93:ce:19:3c:16:0d:93:56:c8:79:67:33: 8a:9a:9b:10:22:7b:19:63:f7:f8:27:c5:12:4f:69:a9:1d:db: 05:b5:5c:7e:79:6c:7f:1d:f0:dc:7b:9a:83:ec:24:c5:77:7b: 7e:19:66:12:c8:86:09:60:2f:63:83:2d:78:c0:e4:e2:fe:b7: 66:cf:25:8e:41:b7:2d:b1:95:49:ff:92:fa:d9:b2:49:56:03: 17:a9:c8:c5:ef:8a:c9:ab:2e:38:c3:58:e8:c4:6c:81:9d:7d: fa:1f:8f:84:85:08:af:65:b6:34:36:cf:a0:39:92:96:fe:9d: 23:51:9e:20:82:29:f1:39:e1:bf:7d:39:2d:bd:02:3e:b5:f4: 64:bb:64:d1:9f:1d:3f:ae:66:55:66:9e:1e:bd:1d:be:db:0c: d5:19:21:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Vt5ObtUulSdlJ/xxSMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy MzRmNzAwHhcNMjYwMTI1MjEwMDMzWhcNMjYwMTI2MjEwMDMzWjAzMTEwLwYDVQQD EyhkNDUzYjQ4ZDBjYTlhMjk1NjI5MTRhYjUwZjVmMmQ1NTE5NzQ1ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH78Y/11hyjQIEgrTgNtAA7rSlrH ABQLfhSEhbViHFjUT+3uxB0R6+OzTC/vo0IQPcv28jo6kn56zHIpXsE7NITQMSrp 8vG+DdMWn2e8H0QifXhCs6y5Bu2Fo7rh5oeBm2wG1sc4o7ZKaFI8ZMsu1d+5rlNW rtEG4Roz1Cypu/7CCyBeHwp0WgREdWr6yV8aDaKcHBuzXUrdKFr8yBEOmtT/iJ9D iEOT4Ti1Meur+XYHexN5gPz4AEY+dB8Iv1l0gLefeQ92zk1QcvOFWhOJXPALw3Mp NvvcOlmbGuoutDPAKJ2d6bdR3lyu5yoFJzfsNeemYbkmJkhYTGLi0OGaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRTtI0MqaKVYpFKtQ9fLVUZdF9uMB8GA1UdIwQY MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvQoaGfz HLkDBHfYj+YnJ8rFlIcNTHGnS1+CZgF9t6dDlKAhwedmaGumBM3qYvjCFF5zpG5q 3cgD7pXHY8EIYOwlVTXwwv8a/R/WjiRRSvcOG859DuqkmRTJK68loC8Hk84ZPBYN k1bIeWczipqbECJ7GWP3+CfFEk9pqR3bBbVcfnlsfx3w3Huag+wkxXd7fhlmEsiG CWAvY4MteMDk4v63Zs8ljkG3LbGVSf+S+tmySVYDF6nIxe+KyasuOMNY6MRsgZ19 +h+PhIUIr2W2NDbPoDmSlv6dI1GeIIIp8Tnhv305Lb0CPrX0ZLtk0Z8dP65mVWae Hr0dvtsM1RkhEA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:47 2026 by rpki-client