This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: EXcLGeCTLsGy0fD/WthOS9u5A3dySLalaaX7Ne8Q1A8= Subject key identifier: 8A:59:FE:43:BB:96:36:76:71:F9:D5:D6:32:6D:4C:57:6E:34:18:CD Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019BF5ABF1714B2F2DF13055143D6A6DA6E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 087B Signing time: Sun 25 Jan 2026 15:00:44 +0000 Manifest this update: Sun 25 Jan 2026 15:00:44 +0000 Manifest next update: Mon 26 Jan 2026 15:00:44 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: h6IQ9Fadw/tEOn3bl/rGnptVEfuws1y/UrV71qrnu5w=) 2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=) 3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:f1:71:4b:2f:2d:f1:30:55:14:3d:6a:6d:a6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Jan 25 15:00:44 2026 GMT Not After : Jan 26 15:00:44 2026 GMT Subject: CN=8a59fe43bb96367671f9d5d6326d4c576e3418cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:b4:2b:a2:6f:97:c4:46:ff:4a:20:8e:a8: 00:65:17:93:2e:ec:8a:85:1b:23:69:ec:97:5b:49: c5:52:76:43:44:80:11:1c:ff:9b:bb:e6:b7:fd:61: c4:1a:6a:bd:b5:f5:24:e7:a8:24:04:13:9d:d2:31: 2e:f9:7f:41:5f:06:22:31:d2:f2:e9:ab:a8:69:c1: 7f:b5:4d:3c:fc:15:4a:be:11:fd:6b:86:f0:ee:6b: f8:76:ad:28:91:f3:77:b0:6b:ed:85:23:76:ac:fc: c6:25:4e:e3:da:07:55:9d:48:da:ec:c8:0c:f1:f0: 7e:7b:bc:1b:5d:8c:54:4a:24:45:db:a8:d7:51:d4: 28:ad:96:80:c0:9f:df:25:81:a3:09:a2:2e:0d:0f: c1:df:8e:ae:ea:30:3b:e4:b9:9d:80:d8:39:aa:de: d3:45:21:26:28:b0:9b:d3:eb:a3:f9:07:cf:67:8e: 2e:3c:e5:b6:f7:27:75:9b:b2:77:30:11:e3:8d:22: 10:16:cf:35:71:3a:5f:6f:05:9c:57:cb:6e:a0:54: fa:6d:1a:e0:dc:e0:ad:a9:0e:87:97:c9:2b:2e:e5: 26:a1:b6:fe:c2:ad:8f:5b:47:b6:6b:88:48:27:d0: a4:64:cc:c2:ff:7c:ba:09:1f:e5:6e:06:76:2a:f8: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:FE:43:BB:96:36:76:71:F9:D5:D6:32:6D:4C:57:6E:34:18:CD X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1b:08:43:11:6e:ff:94:9a:09:30:12:64:0a:9b:7f:a7:d6: 28:32:8b:14:c2:f8:70:22:2b:5f:50:c6:92:0c:07:67:c1:e7: e7:97:d9:7d:c3:1b:53:0b:65:d7:76:d4:21:b1:f5:76:f1:32: 71:66:bc:52:f8:33:0a:47:a0:9f:6d:c6:18:ac:59:d2:9a:de: 4b:ca:f1:23:66:7b:1d:3a:64:fe:4d:bc:b5:bb:16:9f:8e:33: e6:0a:af:5b:8d:bf:46:7e:85:d9:1d:b1:73:3a:19:92:ea:4f: 85:2a:35:6d:c7:86:4b:a5:72:a5:0e:08:20:03:80:68:8b:77: d4:23:8f:0b:03:fa:a1:11:02:e2:ac:a6:f5:06:67:63:5a:b8: da:11:ac:4c:cf:38:65:c1:18:08:25:e4:10:4a:5e:fb:c3:9d: 8d:75:4a:75:0b:87:d3:bf:5b:f8:16:bb:56:be:37:ff:cd:dc: 1d:57:cb:d8:fc:59:1b:8d:ab:5a:88:04:68:b6:ec:2a:24:f3: 77:e1:91:81:24:7d:68:52:69:4d:fc:98:62:b4:e1:7e:a9:8e: f9:7b:2d:d9:7d:ae:48:de:7d:20:86:76:40:1b:2e:44:9c:55: 0b:af:29:c5:3d:1e:f1:84:0e:cb:e1:17:b5:79:e4:8f:50:6f: d0:13:d1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/FxSy8t8TBVFD1qbabiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjYwMTI1MTUwMDQ0WhcNMjYwMTI2MTUwMDQ0WjAzMTEwLwYDVQQD Eyg4YTU5ZmU0M2JiOTYzNjc2NzFmOWQ1ZDYzMjZkNGM1NzZlMzQxOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr+0K6Jvl8RG/0ogjqgAZReTLuyK hRsjaeyXW0nFUnZDRIARHP+bu+a3/WHEGmq9tfUk56gkBBOd0jEu+X9BXwYiMdLy 6auoacF/tU08/BVKvhH9a4bw7mv4dq0okfN3sGvthSN2rPzGJU7j2gdVnUja7MgM 8fB+e7wbXYxUSiRF26jXUdQorZaAwJ/fJYGjCaIuDQ/B346u6jA75LmdgNg5qt7T RSEmKLCb0+uj+QfPZ44uPOW29yd1m7J3MBHjjSIQFs81cTpfbwWcV8tuoFT6bRrg 3OCtqQ6Hl8krLuUmobb+wq2PW0e2a4hIJ9CkZMzC/3y6CR/lbgZ2KvjfuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpZ/kO7ljZ2cfnV1jJtTFduNBjNMB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRsIQxFu /5SaCTASZAqbf6fWKDKLFML4cCIrX1DGkgwHZ8Hn55fZfcMbUwtl13bUIbH1dvEy cWa8UvgzCkegn23GGKxZ0preS8rxI2Z7HTpk/k28tbsWn44z5gqvW42/Rn6F2R2x czoZkupPhSo1bceGS6VypQ4IIAOAaIt31COPCwP6oREC4qym9QZnY1q42hGsTM84 ZcEYCCXkEEpe+8OdjXVKdQuH079b+Ba7Vr43/83cHVfL2PxZG42rWogEaLbsKiTz d+GRgSR9aFJpTfyYYrThfqmO+Xst2X2uSN59IIZ2QBsuRJxVC68pxT0e8YQOy+EX tXnkj1Bv0BPReg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:15 2026 by rpki-client