This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json) Hash identifier: rXBnqCdC0D1gttOvQOAl0THMytmlKBgoI4j9mPdTR1A= Subject key identifier: ED:09:D5:23:F3:65:2B:7D:47:D4:4F:12:4A:5D:1F:EE:F2:16:41:67 Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Certificate serial: 019BF6BF41C863739D28247CF3C1FFCA0930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 20:01:27 +0000 Manifest this update: Sun 25 Jan 2026 20:01:27 +0000 Manifest next update: Mon 26 Jan 2026 20:01:27 +0000 Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: j9YNkIAHIDSPJxMMl/082fD7UQWypX5EkiuVBQKpvDk=) 2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:41:c8:63:73:9d:28:24:7c:f3:c1:ff:ca:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Validity Not Before: Jan 25 20:01:27 2026 GMT Not After : Jan 26 20:01:27 2026 GMT Subject: CN=ed09d523f3652b7d47d44f124a5d1feef2164167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:6d:37:1e:ab:4c:0b:fe:b3:5b:21:d2:60: 98:9f:06:d0:aa:c7:8d:39:80:b3:ca:40:77:d5:b1: c4:87:5f:ba:52:a4:aa:2a:96:2b:b8:9d:ef:c0:b2: 97:0f:29:b0:62:7a:f0:5e:a1:47:51:84:90:33:9c: 6e:dc:d9:f9:e2:8e:67:54:f4:50:1c:24:f8:18:d7: 04:18:7a:07:5c:83:81:f4:c4:3a:bb:d6:5e:e5:f0: bd:ec:61:01:15:21:08:f2:98:90:77:f2:8e:b3:88: 8c:6f:66:84:12:e6:82:e6:0d:4a:f2:04:d4:f8:81: 6c:43:cb:09:51:47:e4:58:60:a6:71:95:b3:b3:83: c6:7c:1c:b5:4f:09:24:1e:6f:f9:7a:e1:3b:2d:0c: 80:5f:42:9c:49:95:78:5b:ce:71:7f:16:d9:e1:28: 2f:eb:4e:ba:d6:d5:5d:d6:b8:f7:41:49:d1:14:69: bb:0d:fc:a5:11:24:74:67:b1:cf:ae:9f:73:8d:c3: 93:6b:96:cf:aa:f1:e0:fb:fc:de:98:db:dc:ac:59: 36:17:48:28:4c:1b:2f:43:a0:a0:b7:23:db:28:5f: 72:09:46:c4:c0:fc:b9:12:83:34:8f:0c:37:eb:85: 4f:05:4c:4d:42:90:7e:27:c0:c2:ff:da:97:41:51: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:09:D5:23:F3:65:2B:7D:47:D4:4F:12:4A:5D:1F:EE:F2:16:41:67 X509v3 Authority Key Identifier: keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:17:72:51:9c:b3:17:e2:0b:6d:9c:71:56:0e:93:bc:3c: d2:7d:76:59:89:2e:a7:a8:e9:66:7d:3c:03:c3:eb:bc:dd:b5: 79:b8:ea:1a:24:f7:61:59:0f:06:32:03:7a:23:70:73:a3:24: e2:42:f1:ea:57:07:8f:df:d3:7b:86:d0:66:5f:24:c2:57:3b: 12:86:14:cd:84:b0:45:ed:7a:94:9b:05:f8:4f:54:bc:82:33: cf:70:39:ef:2a:a8:5b:bb:5d:13:79:43:16:14:b7:3c:c5:5e: 00:1f:55:e1:6b:4f:a7:5c:6f:35:29:eb:9a:f5:62:39:61:82: 41:89:93:e4:15:1d:29:57:c2:fd:fd:62:fb:9c:48:ca:f8:8d: e5:e7:80:15:3f:99:6d:96:b8:42:39:65:32:49:c4:bd:14:c5: 36:c1:df:72:2e:5f:eb:49:88:3c:d0:1c:5d:27:36:85:68:89: db:b7:13:32:33:3b:e0:b3:f9:f6:5f:b4:9d:87:a7:09:a6:65: b2:1e:7f:b9:a8:66:18:ba:09:38:0f:fe:be:67:48:59:7a:45: 92:2d:0f:fa:c5:97:1d:95:5e:83:29:8d:d8:99:7f:24:0d:4c: f5:de:9e:11:52:4f:7f:b7:dc:bf:47:11:68:6f:22:c3:7a:24: 2f:15:12:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0HIY3OdKCR888H/ygkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2 MzY0YTAwHhcNMjYwMTI1MjAwMTI3WhcNMjYwMTI2MjAwMTI3WjAzMTEwLwYDVQQD EyhlZDA5ZDUyM2YzNjUyYjdkNDdkNDRmMTI0YTVkMWZlZWYyMTY0MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rZtNx6rTAv+s1sh0mCYnwbQqseN OYCzykB31bHEh1+6UqSqKpYruJ3vwLKXDymwYnrwXqFHUYSQM5xu3Nn54o5nVPRQ HCT4GNcEGHoHXIOB9MQ6u9Ze5fC97GEBFSEI8piQd/KOs4iMb2aEEuaC5g1K8gTU +IFsQ8sJUUfkWGCmcZWzs4PGfBy1TwkkHm/5euE7LQyAX0KcSZV4W85xfxbZ4Sgv 60661tVd1rj3QUnRFGm7DfylESR0Z7HPrp9zjcOTa5bPqvHg+/zemNvcrFk2F0go TBsvQ6CgtyPbKF9yCUbEwPy5EoM0jww364VPBUxNQpB+J8DC/9qXQVGVuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0J1SPzZSt9R9RPEkpdH+7yFkFnMB8GA1UdIwQY MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1 LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3cXclGc sxfiC22ccVYOk7w80n12WYkup6jpZn08A8PrvN21ebjqGiT3YVkPBjIDeiNwc6Mk 4kLx6lcHj9/Te4bQZl8kwlc7EoYUzYSwRe16lJsF+E9UvIIzz3A57yqoW7tdE3lD FhS3PMVeAB9V4WtPp1xvNSnrmvViOWGCQYmT5BUdKVfC/f1i+5xIyviN5eeAFT+Z bZa4QjllMknEvRTFNsHfci5f60mIPNAcXSc2hWiJ27cTMjM74LP59l+0nYenCaZl sh5/uahmGLoJOA/+vmdIWXpFki0P+sWXHZVegymN2Jl/JA1M9d6eEVJPf7fcv0cR aG8iw3okLxUSGA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:25 2026 by rpki-client