This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json) Hash identifier: F+59fro/EbPoYlST7vyM80K+AxwzF4QXSleblkYbuBo= Subject key identifier: BD:76:25:D6:F2:9D:D5:3A:23:44:57:CE:11:47:AB:1D:5B:8C:D8:E5 Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019BF50731205FB19D96400DCAA328ACE320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft Manifest number: A5 Signing time: Sun 25 Jan 2026 12:00:47 +0000 Manifest this update: Sun 25 Jan 2026 12:00:47 +0000 Manifest next update: Mon 26 Jan 2026 12:00:47 +0000 Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: yElO1RnpvT69Zwwnh3Znk++JguMyW+yDOVk0FinjDI0=) 2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:31:20:5f:b1:9d:96:40:0d:ca:a3:28:ac:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Jan 25 12:00:47 2026 GMT Not After : Jan 26 12:00:47 2026 GMT Subject: CN=bd7625d6f29dd53a234457ce1147ab1d5b8cd8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:5e:34:fa:88:8c:ca:61:c5:21:7c:42:95: e8:a6:bf:f8:ed:a3:40:4a:8a:41:b3:11:5e:18:18: fe:19:e3:e5:11:cc:aa:f6:20:b5:9c:f9:bf:c4:d4: 35:ce:e5:43:92:37:28:a3:fe:31:46:ff:44:6d:6c: 0f:df:05:fd:16:0f:5a:37:36:07:e2:2e:ce:f5:6a: 0c:1f:41:2d:87:fd:16:73:9e:d9:0a:d2:e2:43:e9: 40:5d:3c:ff:89:cc:cf:a2:61:61:58:3a:2c:8c:d8: d4:2e:f4:ca:79:2d:97:ca:ba:88:68:f4:fc:ff:ca: da:22:28:1f:78:e8:03:24:76:a2:fc:f8:c7:ed:f9: 42:2d:57:4c:a5:b1:b8:ff:eb:c9:81:a4:58:e7:97: ef:f8:3d:c3:63:bd:e6:3e:e6:04:9a:6b:67:53:33: f4:69:ae:61:5b:8d:c5:56:fe:15:88:ed:14:34:93: 38:a2:98:97:4b:f5:04:d4:73:81:6c:d9:de:58:55: d1:bc:bb:71:a3:df:18:26:34:a4:52:7f:82:8d:6e: 10:8e:40:70:77:e7:ef:da:c2:06:4e:27:c8:4d:0b: ff:c3:7e:fc:7c:fe:61:5c:e5:40:36:05:41:b6:90: ba:c5:b5:40:07:72:91:2a:9a:9f:50:aa:d9:68:f8: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:25:D6:F2:9D:D5:3A:23:44:57:CE:11:47:AB:1D:5B:8C:D8:E5 X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:17:70:a1:26:e4:11:84:69:3d:e2:cd:a1:f0:1d:f9:c2:23: c8:1f:4d:2e:56:50:3e:df:5f:8b:ee:c9:9e:8d:60:aa:ea:46: 1f:cc:aa:f3:7c:ab:30:68:cf:a0:e0:dd:68:f5:f8:0e:9d:eb: 90:a7:91:aa:0d:e5:85:fd:f0:37:63:8c:c1:e1:d1:c2:3c:f3: 75:17:ad:27:f4:8a:c3:82:85:31:ad:f3:d9:ad:60:43:f4:79: ac:40:0e:90:9b:04:db:cc:1d:f4:14:94:99:58:22:60:eb:26: 80:19:32:7a:da:ad:bd:0b:94:a0:d6:c4:47:8f:0f:65:64:2b: 91:99:13:ac:f0:07:03:e8:6f:6e:50:f6:02:6f:67:eb:98:1e: a5:f4:b2:21:97:14:e9:7d:78:fb:d9:73:a4:cd:a0:da:26:b4: 80:e9:a5:37:52:b1:d4:e8:0d:98:91:ca:37:7f:21:1d:90:c5: b6:41:d9:7c:ce:da:a7:ab:1f:5e:1b:72:b3:7a:42:0f:ce:05: da:70:43:e8:e5:83:34:91:e6:37:41:e2:be:5b:33:97:46:d4: 79:03:04:06:e4:fc:5f:3b:63:7c:d6:5c:13:53:81:54:a4:c5: 5b:03:e5:0e:39:f3:d0:44:a6:2c:55:ac:d5:c2:d5:ec:47:3d: bf:8a:95:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzEgX7GdlkANyqMorOMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjYwMTI1MTIwMDQ3WhcNMjYwMTI2MTIwMDQ3WjAzMTEwLwYDVQQD EyhiZDc2MjVkNmYyOWRkNTNhMjM0NDU3Y2UxMTQ3YWIxZDViOGNkOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy89eNPqIjMphxSF8QpXopr/47aNA SopBsxFeGBj+GePlEcyq9iC1nPm/xNQ1zuVDkjcoo/4xRv9EbWwP3wX9Fg9aNzYH 4i7O9WoMH0Eth/0Wc57ZCtLiQ+lAXTz/iczPomFhWDosjNjULvTKeS2XyrqIaPT8 /8raIigfeOgDJHai/PjH7flCLVdMpbG4/+vJgaRY55fv+D3DY73mPuYEmmtnUzP0 aa5hW43FVv4ViO0UNJM4opiXS/UE1HOBbNneWFXRvLtxo98YJjSkUn+CjW4QjkBw d+fv2sIGTifITQv/w378fP5hXOVANgVBtpC6xbVAB3KRKpqfUKrZaPiLhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL12JdbyndU6I0RXzhFHqx1bjNjlMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRdwoSbk EYRpPeLNofAd+cIjyB9NLlZQPt9fi+7Jno1gqupGH8yq83yrMGjPoODdaPX4Dp3r kKeRqg3lhf3wN2OMweHRwjzzdRetJ/SKw4KFMa3z2a1gQ/R5rEAOkJsE28wd9BSU mVgiYOsmgBkyetqtvQuUoNbER48PZWQrkZkTrPAHA+hvblD2Am9n65gepfSyIZcU 6X14+9lzpM2g2ia0gOmlN1Kx1OgNmJHKN38hHZDFtkHZfM7ap6sfXhtys3pCD84F 2nBD6OWDNJHmN0Hivlszl0bUeQMEBuT8XztjfNZcE1OBVKTFWwPlDjnz0ESmLFWs 1cLV7Ec9v4qV5g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:10 2026 by rpki-client