This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json) Hash identifier: Ne0EucoA/Zy1cYbxlH5WxZYAETNmwsFiGsvYPr6uJWg= Subject key identifier: D8:1E:87:FA:5E:54:48:BD:A2:78:46:EA:0A:EF:C0:94:43:5F:22:A9 Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Certificate serial: 019BF4D0E71675BBDBAADDF35D61FE921EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:01:29 +0000 Manifest this update: Sun 25 Jan 2026 11:01:29 +0000 Manifest next update: Mon 26 Jan 2026 11:01:29 +0000 Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: fyAwCbwlRK/vPytFnEAp7gnMuyIkcbE26lU5tVS0cJU=) 2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=) 3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:e7:16:75:bb:db:aa:dd:f3:5d:61:fe:92:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Validity Not Before: Jan 25 11:01:29 2026 GMT Not After : Jan 26 11:01:29 2026 GMT Subject: CN=d81e87fa5e5448bda27846ea0aefc094435f22a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:1a:60:ae:16:52:f0:a6:c6:5a:90:22:b7: a8:b8:e4:33:53:d2:30:e3:84:7b:50:f8:fa:9b:44: eb:56:68:3c:e0:cd:c6:8a:88:4f:ab:d3:4d:a2:22: db:bc:a9:24:e7:63:d4:45:37:9a:91:85:4d:d4:5a: 27:ca:cd:ca:ed:ff:1d:12:f6:65:c9:d0:ea:74:67: 32:2b:64:bb:87:26:4d:fc:db:8f:cd:7d:49:3d:f7: fd:1b:24:bd:46:b3:72:c4:50:fa:57:98:d3:d7:04: 0b:d1:1a:68:1b:4c:66:dd:35:33:e5:34:e8:88:4e: 78:93:cb:04:e7:93:a7:22:b6:9b:dc:86:2a:7f:3c: 54:07:79:2d:39:ce:76:f5:3c:22:7a:ae:fb:0e:76: 82:9e:4e:dc:74:b1:be:d5:64:70:b5:ef:4f:0d:3e: 0f:06:05:80:10:1a:c0:01:c3:f0:59:0a:3d:86:7e: 24:94:5e:30:74:61:80:71:a8:bb:b0:be:34:cc:a9: 4a:38:20:61:02:37:f5:4b:e2:f0:28:80:e3:b3:32: 33:96:14:56:62:5e:73:c9:83:b2:5e:64:1e:d3:ef: ee:f8:00:78:15:62:0e:1a:0e:4b:cf:db:1f:4a:33: b9:8e:08:b9:64:ae:8f:93:4d:83:be:03:e7:64:07: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1E:87:FA:5E:54:48:BD:A2:78:46:EA:0A:EF:C0:94:43:5F:22:A9 X509v3 Authority Key Identifier: keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f4:0d:66:0c:c4:9c:42:ff:ab:60:52:c5:05:af:4a:a2:78: 0d:af:1c:95:76:ad:e7:fe:67:18:a8:00:56:23:aa:32:a4:c4: 49:cf:b1:27:dc:ea:f2:1c:ea:f9:62:f0:45:f0:29:e2:2e:e4: 46:c2:60:5c:87:6f:9e:b2:81:1b:9f:21:df:4e:46:7e:57:0c: 92:56:83:2d:d7:22:7e:c0:05:15:15:a2:c5:4e:e7:5e:50:1c: be:b4:44:cf:8d:eb:12:c7:20:61:2c:1f:7a:2b:ce:d7:d3:1c: ee:a1:58:e2:aa:17:84:31:09:ff:78:d2:34:54:c4:ea:f0:33: 9a:8c:d4:f0:94:89:7b:1a:00:85:18:6c:ef:e6:aa:b8:5c:13: 38:32:1f:7f:4f:8e:e9:7c:db:0e:fd:37:ef:d2:de:3a:e3:3b: 4d:03:a8:12:69:aa:61:1f:42:fc:52:60:bc:2c:4b:9f:14:70: df:a9:bf:bb:27:81:a6:20:ec:72:73:b3:d6:b0:6e:26:cd:c6: f7:9d:ab:68:06:7a:0e:db:00:ed:f1:24:87:84:48:42:51:4d: ba:69:c9:e1:fb:92:b8:55:f4:5a:7b:d9:37:45:bd:d7:1c:f0: 46:3c:b6:f4:bb:10:cf:50:0f:f2:2c:2a:9d:f3:f0:e8:bc:37: b4:03:9b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00OcWdbvbqt3zXWH+kh7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5 MzViODgwHhcNMjYwMTI1MTEwMTI5WhcNMjYwMTI2MTEwMTI5WjAzMTEwLwYDVQQD EyhkODFlODdmYTVlNTQ0OGJkYTI3ODQ2ZWEwYWVmYzA5NDQzNWYyMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArREaYK4WUvCmxlqQIreouOQzU9Iw 44R7UPj6m0TrVmg84M3GiohPq9NNoiLbvKkk52PURTeakYVN1Fonys3K7f8dEvZl ydDqdGcyK2S7hyZN/NuPzX1JPff9GyS9RrNyxFD6V5jT1wQL0RpoG0xm3TUz5TTo iE54k8sE55OnIrab3IYqfzxUB3ktOc529Twieq77DnaCnk7cdLG+1WRwte9PDT4P BgWAEBrAAcPwWQo9hn4klF4wdGGAcai7sL40zKlKOCBhAjf1S+LwKIDjszIzlhRW Yl5zyYOyXmQe0+/u+AB4FWIOGg5Lz9sfSjO5jgi5ZK6Pk02DvgPnZAd4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgeh/peVEi9onhG6grvwJRDXyKpMB8GA1UdIwQY MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/QNZgzE nEL/q2BSxQWvSqJ4Da8clXat5/5nGKgAViOqMqTESc+xJ9zq8hzq+WLwRfAp4i7k RsJgXIdvnrKBG58h305GflcMklaDLdcifsAFFRWixU7nXlAcvrREz43rEscgYSwf eivO19Mc7qFY4qoXhDEJ/3jSNFTE6vAzmozU8JSJexoAhRhs7+aquFwTODIff0+O 6XzbDv0379LeOuM7TQOoEmmqYR9C/FJgvCxLnxRw36m/uyeBpiDscnOz1rBuJs3G 952raAZ6DtsA7fEkh4RIQlFNumnJ4fuSuFX0WnvZN0W91xzwRjy29LsQz1AP8iwq nfPw6Lw3tAObTA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:17 2026 by rpki-client