This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json) Hash identifier: C+gPkrWk5TxA7ncaamXFcaJ1I2Gg8I8oPqx419BNpP0= Subject key identifier: 78:A6:B4:24:6C:FC:C7:B4:DB:AD:D5:3D:DA:D6:B7:49:05:47:9C:19 Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Certificate serial: 019BF72DB0AD666E616500A7F86187D8538C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft Manifest number: 160B Signing time: Sun 25 Jan 2026 22:02:05 +0000 Manifest this update: Sun 25 Jan 2026 22:02:05 +0000 Manifest next update: Mon 26 Jan 2026 22:02:05 +0000 Files and hashes: 1: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: 7QBzaGL34q0/rMVjfBbAhmBv+pe35KE8PtQFUiVJevk=) 2: huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa (hash: yMEbieQN4mmr0B4PHYgIfIopNkBH4Ovpl20WF2oTeLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:b0:ad:66:6e:61:65:00:a7:f8:61:87:d8:53:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Validity Not Before: Jan 25 22:02:05 2026 GMT Not After : Jan 26 22:02:05 2026 GMT Subject: CN=78a6b4246cfcc7b4dbadd53ddad6b74905479c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:bd:f4:75:46:f2:d1:19:f7:f2:ee:aa:e3: ae:c9:6d:06:67:65:e5:77:a4:74:84:ce:bf:9b:fe: cb:6d:94:2c:62:73:96:a2:8d:7f:47:47:fb:df:0d: bc:cf:a4:46:1c:11:50:63:7f:b4:71:49:e3:e9:e5: 6a:dd:01:7b:56:b8:f3:0e:aa:a3:4c:19:b2:d8:54: 74:aa:de:b6:ee:a7:65:ac:a7:d4:06:cc:09:27:65: 0c:14:e2:ab:8f:89:f8:48:4f:89:41:4d:20:95:43: 46:a3:69:41:c3:aa:88:aa:dc:25:9c:8b:f4:a8:3b: 82:56:9f:4a:43:ae:e1:d3:dd:19:5c:c5:84:09:51: c2:54:47:ce:f3:fd:4a:f4:bd:41:64:95:f1:07:4d: 12:b0:39:f4:75:21:48:93:e5:7b:b1:a1:00:eb:e1: 3f:b2:12:6d:97:41:27:ce:f9:86:da:22:db:ec:4f: 84:64:c0:04:af:d4:a8:f6:6b:b3:c9:a0:f4:b7:a5: 65:fc:ec:be:a0:69:d1:ae:cd:1f:7e:17:a5:4e:75: 84:b5:bd:df:67:56:a2:c9:cd:af:b3:e7:04:78:ba: d2:a5:9e:a4:89:63:cb:3e:b7:c8:01:7b:f9:14:a0: e5:cb:e3:1e:fa:79:10:e3:fe:09:17:09:06:9b:09: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A6:B4:24:6C:FC:C7:B4:DB:AD:D5:3D:DA:D6:B7:49:05:47:9C:19 X509v3 Authority Key Identifier: keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d4:94:26:77:81:5f:d5:80:b6:64:f9:33:ad:29:9f:a5:ec: e7:76:d0:41:4c:95:81:80:b9:14:af:70:9a:5a:38:ee:e6:f9: 77:8d:be:6c:b5:ff:e7:5f:62:c5:96:b5:5e:5a:86:b7:3a:5b: 74:6d:bf:f7:39:af:02:68:3d:9e:93:25:e4:b8:8f:dd:ab:73: 5e:a8:c2:72:a0:6e:13:6d:72:05:38:53:4b:de:cc:a1:7c:7b: ae:4b:68:b3:0f:7d:8a:15:ad:28:c5:67:f8:dd:fa:c5:fe:53: 9a:b2:85:42:0d:ca:98:4a:4a:94:44:73:17:dc:34:97:e4:e4: d5:c4:74:61:56:78:f8:31:7b:e6:77:f4:47:cd:d6:47:df:4d: d8:e6:c3:dd:9d:d7:bb:54:0b:a6:ab:ec:a2:96:63:d7:46:b4: 15:93:63:04:dd:11:e5:51:77:68:82:de:9d:e7:00:7f:ad:e0: 70:cb:d5:3c:19:de:5b:33:7a:7c:43:7f:e4:4a:eb:96:12:ff: 31:fa:39:74:e6:d9:a9:9e:df:6c:16:e2:2b:8e:6a:85:08:db: c8:6d:18:a1:68:dd:94:50:da:60:1a:c1:5c:c9:57:6a:5b:fd: a6:b7:7e:06:ae:b4:0e:43:e0:6a:2a:4b:be:74:45:7f:46:06: 94:96:39:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LbCtZm5hZQCn+GGH2FOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh YzNmYTUwHhcNMjYwMTI1MjIwMjA1WhcNMjYwMTI2MjIwMjA1WjAzMTEwLwYDVQQD Eyg3OGE2YjQyNDZjZmNjN2I0ZGJhZGQ1M2RkYWQ2Yjc0OTA1NDc5YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J699HVG8tEZ9/LuquOuyW0GZ2Xl d6R0hM6/m/7LbZQsYnOWoo1/R0f73w28z6RGHBFQY3+0cUnj6eVq3QF7VrjzDqqj TBmy2FR0qt627qdlrKfUBswJJ2UMFOKrj4n4SE+JQU0glUNGo2lBw6qIqtwlnIv0 qDuCVp9KQ67h090ZXMWECVHCVEfO8/1K9L1BZJXxB00SsDn0dSFIk+V7saEA6+E/ shJtl0EnzvmG2iLb7E+EZMAEr9So9muzyaD0t6Vl/Oy+oGnRrs0ffhelTnWEtb3f Z1aiyc2vs+cEeLrSpZ6kiWPLPrfIAXv5FKDly+Me+nkQ4/4JFwkGmwkZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHimtCRs/Me0263VPdrWt0kFR5wZMB8GA1UdIwQY MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt ODQwODgxYTRkMzBkLzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActSUJneB X9WAtmT5M60pn6Xs53bQQUyVgYC5FK9wmlo47ub5d42+bLX/519ixZa1XlqGtzpb dG2/9zmvAmg9npMl5LiP3atzXqjCcqBuE21yBThTS97MoXx7rktosw99ihWtKMVn +N36xf5TmrKFQg3KmEpKlERzF9w0l+Tk1cR0YVZ4+DF75nf0R83WR99N2ObD3Z3X u1QLpqvsopZj10a0FZNjBN0R5VF3aILenecAf63gcMvVPBneWzN6fEN/5ErrlhL/ Mfo5dObZqZ7fbBbiK45qhQjbyG0YoWjdlFDaYBrBXMlXalv9prd+Bq60DkPgaipL vnRFf0YGlJY56Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:49 2026 by rpki-client