This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json) Hash identifier: lfrM0R/qhHioXKIpSw6bjOsco73u9V0IDijI6gkRNJk= Subject key identifier: 5C:E7:AA:8B:D9:4F:29:78:56:31:C2:07:32:E9:34:BE:4D:66:1A:11 Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Certificate serial: 019BF6BF458DE54AAA9ECBC9E285157506AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:01:28 +0000 Manifest this update: Sun 25 Jan 2026 20:01:28 +0000 Manifest next update: Mon 26 Jan 2026 20:01:28 +0000 Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: olJbV1qFXK+T/tJDIzpCZ2QlTxQT5MFtoOf/NCRkYR0=) 2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=) 3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:45:8d:e5:4a:aa:9e:cb:c9:e2:85:15:75:06:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Validity Not Before: Jan 25 20:01:28 2026 GMT Not After : Jan 26 20:01:28 2026 GMT Subject: CN=5ce7aa8bd94f29785631c20732e934be4d661a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:f7:ba:d3:c1:7d:f9:c3:1c:e0:80:06:33: 19:ce:87:2c:95:fe:87:c8:90:09:cd:85:34:94:89: ea:ee:9e:86:a9:f1:f4:03:e4:8c:a7:f1:5f:ef:18: 6a:a5:69:74:50:18:29:58:1f:3f:fc:fe:a1:0f:00: be:2d:d0:d7:a8:0e:99:50:97:65:22:8f:4e:55:c4: aa:3a:22:26:d6:0f:02:5c:c0:0b:a3:13:03:ab:6b: a4:d5:5f:3e:9e:fc:1b:8c:d6:4e:a6:5f:12:86:0e: c0:75:07:ac:08:e8:06:ba:14:a4:74:ad:1e:71:ae: 06:85:17:1d:97:4a:ca:6a:6d:a7:32:64:68:73:0f: 4e:25:b6:ce:8e:65:27:6b:a1:d1:fa:e7:eb:15:a4: 0d:5d:36:26:e2:30:4b:a0:a2:fa:22:68:d9:25:08: a3:99:d3:de:0d:83:cc:2e:19:90:79:28:00:36:98: 83:f6:39:66:9b:80:73:de:72:97:34:74:95:8a:b3: 92:e0:c3:0e:a7:53:d3:89:6c:fa:c5:69:c0:fd:d7: 76:2a:7b:5c:c3:27:b5:53:a7:e7:9c:0b:54:01:f3: 00:ac:3f:c5:2d:34:28:f9:22:d3:3b:5a:40:01:9f: b6:7d:52:e3:19:81:27:0d:b6:94:a8:74:ea:ae:a8: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E7:AA:8B:D9:4F:29:78:56:31:C2:07:32:E9:34:BE:4D:66:1A:11 X509v3 Authority Key Identifier: keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:26:96:b6:da:82:9a:e6:75:71:ca:b9:1a:00:8b:38:c0:d5: 78:29:f5:60:82:b5:3e:71:3c:db:90:2f:d1:8f:76:65:75:26: 5b:c7:b6:c7:3f:41:ae:71:d1:da:76:57:db:cd:5d:67:90:99: 34:19:6a:2e:80:06:a5:99:39:01:03:50:13:92:cb:ca:cd:e0: 9a:16:81:54:f7:bb:94:80:b5:51:b0:dc:b8:3e:94:55:5a:8c: 26:46:47:f0:62:95:2b:0c:1f:70:81:92:d0:7b:eb:99:a6:96: 0c:e6:a3:10:12:a9:c8:cc:f7:48:db:33:c8:86:a1:11:68:16: 31:ed:99:fd:a4:a7:79:31:67:7d:03:7d:d6:5c:25:55:3f:53: 91:63:e2:f8:49:78:57:11:03:22:ae:54:cc:7b:4c:47:5d:1f: f5:8e:45:3a:74:81:25:44:3b:ea:1d:f9:ee:93:18:84:06:eb: 7c:02:93:dd:75:ee:54:6e:e3:0f:95:2c:ff:d3:af:a4:d7:0a: 30:e3:de:6a:be:e1:54:85:60:dd:e1:12:13:cb:26:a7:cf:84: 1e:c8:49:eb:34:27:76:93:e1:b0:a0:c0:0b:a8:18:74:b3:71: da:2b:8d:e6:52:a7:e7:fc:9f:c7:92:6c:e8:17:ed:b0:74:2a: ca:7f:25:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0WN5UqqnsvJ4oUVdQaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5 MzViODgwHhcNMjYwMTI1MjAwMTI4WhcNMjYwMTI2MjAwMTI4WjAzMTEwLwYDVQQD Eyg1Y2U3YWE4YmQ5NGYyOTc4NTYzMWMyMDczMmU5MzRiZTRkNjYxYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6v3utPBffnDHOCABjMZzocslf6H yJAJzYU0lInq7p6GqfH0A+SMp/Ff7xhqpWl0UBgpWB8//P6hDwC+LdDXqA6ZUJdl Io9OVcSqOiIm1g8CXMALoxMDq2uk1V8+nvwbjNZOpl8Shg7AdQesCOgGuhSkdK0e ca4GhRcdl0rKam2nMmRocw9OJbbOjmUna6HR+ufrFaQNXTYm4jBLoKL6ImjZJQij mdPeDYPMLhmQeSgANpiD9jlmm4Bz3nKXNHSVirOS4MMOp1PTiWz6xWnA/dd2Kntc wye1U6fnnAtUAfMArD/FLTQo+SLTO1pAAZ+2fVLjGYEnDbaUqHTqrqh9DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFznqovZTyl4VjHCBzLpNL5NZhoRMB8GA1UdIwQY MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCaWttqC muZ1ccq5GgCLOMDVeCn1YIK1PnE825Av0Y92ZXUmW8e2xz9BrnHR2nZX281dZ5CZ NBlqLoAGpZk5AQNQE5LLys3gmhaBVPe7lIC1UbDcuD6UVVqMJkZH8GKVKwwfcIGS 0HvrmaaWDOajEBKpyMz3SNszyIahEWgWMe2Z/aSneTFnfQN91lwlVT9TkWPi+El4 VxEDIq5UzHtMR10f9Y5FOnSBJUQ76h357pMYhAbrfAKT3XXuVG7jD5Us/9OvpNcK MOPear7hVIVg3eESE8smp8+EHshJ6zQndpPhsKDAC6gYdLNx2iuN5lKn5/yfx5Js 6BftsHQqyn8luw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:16:37 2026 by rpki-client