This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json) Hash identifier: GmNwMtN25mNmDC/MnJxNb7hSxmX1AdFocYmnuAT41fU= Subject key identifier: FB:6B:B3:2C:81:28:A6:46:4E:22:E5:D7:3E:26:D6:FF:C7:EE:A8:E5 Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Certificate serial: 019BF318AFF351B5CBA9C8FBFDDD98A01333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft Manifest number: 0E Signing time: Sun 25 Jan 2026 03:00:39 +0000 Manifest this update: Sun 25 Jan 2026 03:00:39 +0000 Manifest next update: Mon 26 Jan 2026 03:00:39 +0000 Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: dYGtFC4lseJ78jnizsxTR7TRi52CjhaYa8mJMSwG4n0=) 2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:af:f3:51:b5:cb:a9:c8:fb:fd:dd:98:a0:13:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Validity Not Before: Jan 25 03:00:39 2026 GMT Not After : Jan 26 03:00:39 2026 GMT Subject: CN=fb6bb32c8128a6464e22e5d73e26d6ffc7eea8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:1d:46:32:a0:4c:ba:e0:12:75:3c:a4:bf: 5b:a7:41:a3:db:fe:e2:d2:7f:e6:88:41:13:2e:02: 42:3a:af:c1:c6:c6:f5:9d:68:fb:99:78:70:40:19: 09:5c:7e:48:54:4d:85:af:55:3b:87:de:73:d7:c0: fa:23:d4:4d:18:ed:bb:39:43:45:39:56:37:e2:8a: c4:a5:ba:1f:2e:af:7f:2d:e4:f2:2e:18:c4:12:57: ca:b3:4c:5c:22:0b:c9:50:cc:dd:cb:35:66:bd:85: bf:b4:09:6b:34:d2:4d:5f:1b:e5:87:99:71:e1:b5: 82:07:14:54:54:7d:1b:7b:d7:91:21:6a:2a:0e:69: a9:31:4f:3d:03:9a:13:23:4a:8c:03:b7:1b:6a:c4: 6a:b1:ba:2e:3c:95:34:b7:fe:a1:35:f3:5c:53:de: ce:2c:0c:15:6e:c3:d0:48:93:88:9b:1d:c7:ab:91: 2f:88:43:78:57:b9:0b:87:bd:1f:76:5a:3d:82:fa: 0d:35:09:aa:00:2d:f3:2b:09:63:0b:c9:c6:e5:83: b5:36:62:0e:00:e6:48:b3:72:ec:09:ae:0d:14:e3: d1:d2:a9:d6:1b:4a:16:04:2d:b6:3c:38:d2:83:f5: 4f:9a:32:8f:c3:57:48:7b:ab:f2:12:3b:71:5d:36: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6B:B3:2C:81:28:A6:46:4E:22:E5:D7:3E:26:D6:FF:C7:EE:A8:E5 X509v3 Authority Key Identifier: keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:27:d9:fb:30:f9:7f:04:52:68:eb:03:0b:91:e1:95:ae:79: df:29:c8:08:aa:02:d7:61:b7:b9:4b:68:62:d3:9e:d1:fd:41: 91:b2:23:23:a5:e9:3c:47:77:a3:11:ce:84:a1:1a:be:5f:63: 1f:27:16:8c:12:fd:02:d9:fa:27:40:c9:0c:c7:a6:36:ec:35: c9:99:c8:31:9e:ed:a4:11:ad:36:49:44:9a:d0:f7:1e:00:ab: 8f:56:a4:6a:6c:cf:9b:03:99:bf:0b:bd:8d:c4:9a:d0:24:88: d5:ee:c8:cb:8c:0c:ca:86:22:d9:ec:79:67:9f:52:b9:c4:27: 54:7c:9a:53:a4:83:8e:1f:87:89:92:80:d9:cd:32:24:35:35: c3:7f:8f:be:7c:9e:88:c5:fe:33:bd:58:2e:c5:ec:c6:38:fa: 0f:f4:02:d7:1d:ff:a3:56:c8:4c:c0:ff:6c:16:b1:f9:9e:62: 7e:6b:2e:fc:aa:8e:df:71:c6:8b:b3:5e:b1:0f:f8:71:a6:b2: 68:31:33:09:6e:22:b2:b3:91:e9:57:23:4f:e2:e1:43:b2:1f: d5:55:3e:40:57:89:cd:bb:7d:8e:2a:e8:2c:59:04:0f:06:4a: 34:cf:14:98:6d:33:88:ef:5f:10:44:13:3b:9d:53:52:8b:19: f2:29:cb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGK/zUbXLqcj7/d2YoBMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YjVkYzk3YjgwMWZhMGZmYjkzMDA1Y2NiZjRkNjcyN2I3 NTE5MmEwHhcNMjYwMTI1MDMwMDM5WhcNMjYwMTI2MDMwMDM5WjAzMTEwLwYDVQQD EyhmYjZiYjMyYzgxMjhhNjQ2NGUyMmU1ZDczZTI2ZDZmZmM3ZWVhOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpIdRjKgTLrgEnU8pL9bp0Gj2/7i 0n/miEETLgJCOq/Bxsb1nWj7mXhwQBkJXH5IVE2Fr1U7h95z18D6I9RNGO27OUNF OVY34orEpbofLq9/LeTyLhjEElfKs0xcIgvJUMzdyzVmvYW/tAlrNNJNXxvlh5lx 4bWCBxRUVH0be9eRIWoqDmmpMU89A5oTI0qMA7cbasRqsbouPJU0t/6hNfNcU97O LAwVbsPQSJOImx3Hq5EviEN4V7kLh70fdlo9gvoNNQmqAC3zKwljC8nG5YO1NmIO AOZIs3LsCa4NFOPR0qnWG0oWBC22PDjSg/VPmjKPw1dIe6vyEjtxXTbVpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtrsyyBKKZGTiLl1z4m1v/H7qjlMB8GA1UdIwQY MBaAFOa13Je4AfoP+5MAXMv01nJ7dRkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUt Njk5NjIxZTAwZjQ2LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUtNjk5NjIxZTAwZjQ2 LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyfZ+zD5 fwRSaOsDC5Hhla553ynICKoC12G3uUtoYtOe0f1BkbIjI6XpPEd3oxHOhKEavl9j HycWjBL9Atn6J0DJDMemNuw1yZnIMZ7tpBGtNklEmtD3HgCrj1akamzPmwOZvwu9 jcSa0CSI1e7Iy4wMyoYi2ex5Z59SucQnVHyaU6SDjh+HiZKA2c0yJDU1w3+Pvnye iMX+M71YLsXsxjj6D/QC1x3/o1bITMD/bBax+Z5ifmsu/KqO33HGi7NesQ/4caay aDEzCW4isrOR6VcjT+LhQ7If1VU+QFeJzbt9jiroLFkEDwZKNM8UmG0ziO9fEEQT O51TUosZ8inLrg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:03 2026 by rpki-client