This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: NaaxJ9XDzSNc8mfiwfutUIPZr6zGd9m9Zkdu7y+6gHk= Subject key identifier: 36:D8:E2:4E:68:5D:24:54:59:49:C3:98:1C:2A:36:2C:FA:EC:3B:8A Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019BF3BD8D6ECC0DD28AE72B0C501AC04B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 087A Signing time: Sun 25 Jan 2026 06:00:44 +0000 Manifest this update: Sun 25 Jan 2026 06:00:44 +0000 Manifest next update: Mon 26 Jan 2026 06:00:44 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: IL+92sP13CYk7jav+9hotA3jf2/6fvSeP0O5Kg0wBFM=) 2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=) 3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:8d:6e:cc:0d:d2:8a:e7:2b:0c:50:1a:c0:4b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Jan 25 06:00:44 2026 GMT Not After : Jan 26 06:00:44 2026 GMT Subject: CN=36d8e24e685d24545949c3981c2a362cfaec3b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:d8:13:6b:7c:be:5c:c3:13:59:c0:d9:55: a9:94:bb:d1:78:db:32:d9:87:c4:cc:33:3c:ee:1e: 76:0a:78:67:46:a2:d3:89:2a:f0:a2:2c:00:3c:1a: 65:51:57:90:8c:46:8e:b8:aa:8f:22:0b:66:5f:00: 3a:66:f7:0c:a7:46:a4:4d:51:ca:50:d1:fa:f4:8a: bd:3d:e4:5d:05:f6:4b:1d:24:4e:db:75:07:be:a1: 12:96:4d:4a:b0:83:49:b5:c0:6b:74:41:d7:37:53: a1:91:1b:e2:9c:3f:47:de:b1:68:ba:40:34:33:88: 5f:cb:f6:27:fa:7f:51:9f:60:67:cf:de:bb:1b:d0: 50:38:9a:c1:11:16:89:e1:4c:5e:65:35:64:af:42: e9:a0:aa:96:9f:e2:07:43:8c:43:ff:77:27:9d:8c: b6:82:c7:30:90:4f:21:db:a3:f1:e1:7f:e8:90:9c: d4:f4:be:ce:cd:66:9b:6f:67:13:8c:8d:fc:10:fb: e1:31:52:18:9b:36:e2:d4:43:49:e5:ca:f7:21:e1: 31:7f:5b:60:51:52:96:79:92:c6:16:0d:ee:9d:f1: 6f:37:6c:4a:5a:71:b3:03:5f:b3:3b:77:cb:6d:7c: 05:3c:36:1f:29:82:77:7e:e3:52:c5:bc:d2:8f:63: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:E2:4E:68:5D:24:54:59:49:C3:98:1C:2A:36:2C:FA:EC:3B:8A X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f7:15:c1:2f:0b:24:fd:92:67:d9:60:0f:d2:3a:4b:77:b8: f0:54:25:88:57:aa:19:61:72:f5:51:b2:22:97:2c:d7:e5:23: 07:63:f8:87:d3:74:1d:4a:d7:03:34:48:10:b1:aa:5f:22:cb: 60:60:b0:a7:d1:43:7c:aa:16:4c:e6:fb:29:02:ad:cf:bc:55: ea:ea:9c:66:c2:96:4d:0b:bb:1a:48:4f:da:c3:c1:2b:f8:d9: d8:64:47:76:53:96:df:ab:29:9d:e5:c3:43:dd:11:aa:e8:00: b1:1d:3a:6e:bf:a0:e4:9d:70:94:1e:f2:35:f3:14:a8:88:b3: 39:ab:fa:c6:6d:64:2e:24:ff:55:6d:ad:c6:b1:9d:1c:f9:77: 63:ee:ee:17:3f:4a:ce:cf:93:7e:80:84:5a:a4:57:f8:60:8f: cd:5f:74:bb:f7:fe:1d:cb:60:67:66:f4:0f:21:2a:a3:18:0f: 11:48:07:ab:ad:de:07:ec:ed:76:86:df:89:b4:6a:44:80:81: c4:3b:a4:52:ec:92:93:9f:aa:f5:2b:0a:63:82:07:ea:3d:90: d0:59:8c:ec:33:f1:79:95:d0:fe:6f:ad:e6:89:f9:17:61:bd: 9e:3d:41:e8:23:0c:f4:95:6c:c7:85:5f:9c:b8:af:9b:69:d5: 63:2f:a6:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvY1uzA3SiucrDFAawEtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjYwMTI1MDYwMDQ0WhcNMjYwMTI2MDYwMDQ0WjAzMTEwLwYDVQQD EygzNmQ4ZTI0ZTY4NWQyNDU0NTk0OWMzOTgxYzJhMzYyY2ZhZWMzYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi3YE2t8vlzDE1nA2VWplLvReNsy 2YfEzDM87h52CnhnRqLTiSrwoiwAPBplUVeQjEaOuKqPIgtmXwA6ZvcMp0akTVHK UNH69Iq9PeRdBfZLHSRO23UHvqESlk1KsINJtcBrdEHXN1OhkRvinD9H3rFoukA0 M4hfy/Yn+n9Rn2Bnz967G9BQOJrBERaJ4UxeZTVkr0LpoKqWn+IHQ4xD/3cnnYy2 gscwkE8h26Px4X/okJzU9L7OzWabb2cTjI38EPvhMVIYmzbi1ENJ5cr3IeExf1tg UVKWeZLGFg3unfFvN2xKWnGzA1+zO3fLbXwFPDYfKYJ3fuNSxbzSj2P7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbY4k5oXSRUWUnDmBwqNiz67DuKMB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/cVwS8L JP2SZ9lgD9I6S3e48FQliFeqGWFy9VGyIpcs1+UjB2P4h9N0HUrXAzRIELGqXyLL YGCwp9FDfKoWTOb7KQKtz7xV6uqcZsKWTQu7GkhP2sPBK/jZ2GRHdlOW36spneXD Q90RqugAsR06br+g5J1wlB7yNfMUqIizOav6xm1kLiT/VW2txrGdHPl3Y+7uFz9K zs+TfoCEWqRX+GCPzV90u/f+HctgZ2b0DyEqoxgPEUgHq63eB+ztdobfibRqRICB xDukUuySk5+q9SsKY4IH6j2Q0FmM7DPxeZXQ/m+t5on5F2G9nj1B6CMM9JVsx4Vf nLivm2nVYy+mqA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:39 2026 by rpki-client