This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json) Hash identifier: eXPVjognYrk4au7Wk9wQ07Ou/MMbI9v9/YrcMrhN3zk= Subject key identifier: FF:0C:9F:78:29:DE:B9:76:BE:64:19:A9:66:A0:23:99:33:E7:45:09 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019BF87619C3B1FE4B6D5D9698141BFA5652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft Manifest number: 17F5 Signing time: Mon 26 Jan 2026 04:00:47 +0000 Manifest this update: Mon 26 Jan 2026 04:00:47 +0000 Manifest next update: Tue 27 Jan 2026 04:00:47 +0000 Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: wlqoXVKKuoUpB0qMFxQhZ0hwyyAjJbXOLfnsyjtP9vQ=) 2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=) 3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=) 4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=) 5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=) 6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=) 7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=) 8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:19:c3:b1:fe:4b:6d:5d:96:98:14:1b:fa:56:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 26 04:00:47 2026 GMT Not After : Jan 27 04:00:47 2026 GMT Subject: CN=ff0c9f7829deb976be6419a966a0239933e74509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:c3:dd:64:78:67:51:a8:4e:06:11:ff:70: 73:6f:b7:12:43:e1:9d:f0:c1:1d:f1:d5:08:6f:b2: 64:49:27:dd:31:94:7d:2a:ac:dc:cc:5c:9d:63:b1: 22:6d:f5:76:8b:b7:05:ec:f3:a9:1a:be:c2:15:bf: 4b:f2:a2:98:a6:c9:66:f5:4f:c8:b6:4f:be:61:75: 57:cf:6f:f9:42:c2:a1:0c:42:f1:6a:48:a4:7a:aa: e7:01:23:e6:95:99:9f:53:77:48:92:22:34:a9:e4: b3:c7:aa:c2:fb:f9:b0:98:12:a4:cd:f7:fc:6a:d5: cc:65:0e:f6:79:65:9d:65:dd:15:d7:6c:81:fb:5c: a1:ed:b1:21:81:d5:c8:e6:bd:df:a5:2f:78:85:43: e2:90:67:a8:7a:bb:57:84:12:5b:de:8d:88:97:0a: d4:f4:51:17:54:70:d0:f4:4a:c8:e3:99:0d:2d:76: ee:12:c8:4f:59:73:a6:69:03:50:2d:95:a5:27:fd: 4a:cc:d1:a0:c1:a4:b7:ad:53:75:86:6a:fe:47:e1: c0:df:fd:98:4a:9e:b0:86:27:dc:15:e1:e4:28:85: b9:06:3a:7e:da:f8:8b:f4:64:92:b6:cc:e0:b0:d1: 67:3e:44:44:fe:bd:85:d4:13:86:3d:fd:7d:42:0d: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0C:9F:78:29:DE:B9:76:BE:64:19:A9:66:A0:23:99:33:E7:45:09 X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:3a:e8:1f:8c:21:b1:65:1a:7f:8d:7a:27:41:f6:e4:19: 61:5e:5c:36:cd:d3:26:4f:c9:25:ba:03:88:c1:1e:43:0e:e9: ee:ee:2c:ca:2f:28:62:4d:da:a1:5d:d1:74:34:42:a2:73:59: 01:af:b5:e6:6c:e5:f0:c9:98:61:66:02:b8:c8:12:2c:61:36: 04:ac:3c:65:a7:78:e1:28:29:1d:19:54:00:90:fc:2a:50:a2: 3b:1d:f4:4c:1c:d4:d5:f1:1f:ba:44:a7:41:84:4a:43:42:fc: 4f:e8:2a:0c:3c:71:86:35:d9:44:1b:16:ed:7b:12:70:c7:eb: 86:b4:b0:65:55:e9:f9:93:c8:b4:60:a7:a4:29:ac:fd:e4:ec: ab:99:87:ee:4d:0b:a5:e4:5b:80:41:c8:5e:b3:bb:0c:55:f7: b6:4a:77:86:4f:30:6f:69:8a:66:52:4e:fd:7d:25:88:83:df: 7b:1b:4c:f7:79:14:37:3b:c8:92:78:58:5a:d3:f6:1b:11:8a: 5b:f6:ef:96:35:ba:eb:af:ce:04:8e:a8:ab:63:45:dc:2d:f9: 38:b4:87:ea:2b:55:e4:0b:a0:74:f9:8a:58:ac:1d:89:40:9f: f7:d3:16:c0:c5:95:ca:cb:8e:d3:08:b0:48:e0:4b:57:9b:b1: ab:35:54:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dhnDsf5LbV2WmBQb+lZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTI2MDQwMDQ3WhcNMjYwMTI3MDQwMDQ3WjAzMTEwLwYDVQQD EyhmZjBjOWY3ODI5ZGViOTc2YmU2NDE5YTk2NmEwMjM5OTMzZTc0NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0DD3WR4Z1GoTgYR/3Bzb7cSQ+Gd 8MEd8dUIb7JkSSfdMZR9KqzczFydY7EibfV2i7cF7POpGr7CFb9L8qKYpslm9U/I tk++YXVXz2/5QsKhDELxakikeqrnASPmlZmfU3dIkiI0qeSzx6rC+/mwmBKkzff8 atXMZQ72eWWdZd0V12yB+1yh7bEhgdXI5r3fpS94hUPikGeoertXhBJb3o2IlwrU 9FEXVHDQ9ErI45kNLXbuEshPWXOmaQNQLZWlJ/1KzNGgwaS3rVN1hmr+R+HA3/2Y Sp6whifcFeHkKIW5Bjp+2viL9GSStszgsNFnPkRE/r2F1BOGPf19Qg3mmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8Mn3gp3rl2vmQZqWagI5kz50UJMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE466B+M IbFlGn+NeidB9uQZYV5cNs3TJk/JJboDiMEeQw7p7u4syi8oYk3aoV3RdDRConNZ Aa+15mzl8MmYYWYCuMgSLGE2BKw8Zad44SgpHRlUAJD8KlCiOx30TBzU1fEfukSn QYRKQ0L8T+gqDDxxhjXZRBsW7XsScMfrhrSwZVXp+ZPItGCnpCms/eTsq5mH7k0L peRbgEHIXrO7DFX3tkp3hk8wb2mKZlJO/X0liIPfextM93kUNzvIknhYWtP2GxGK W/bvljW666/OBI6oq2NF3C35OLSH6itV5AugdPmKWKwdiUCf99MWwMWVysuO0wiw SOBLV5uxqzVUQA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:44 2026 by rpki-client