This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json) Hash identifier: gJ7fpYC9hdhTgTvG69kzLQ1EtAAHRQunM3hJgrd4apc= Subject key identifier: 3E:17:AE:36:DE:62:F5:AF:02:4F:36:FB:63:87:E4:42:75:B8:3D:81 Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77 Certificate serial: 019BF34FAB6333FA772716F86EBDE0BBA348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft Manifest number: 0ACA Signing time: Sun 25 Jan 2026 04:00:43 +0000 Manifest this update: Sun 25 Jan 2026 04:00:43 +0000 Manifest next update: Mon 26 Jan 2026 04:00:43 +0000 Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=) 2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=) 3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: XlfcBPTrdxRs3CUZAPfuJrkC5qL5Ezv3yFv/i3cAVhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ab:63:33:fa:77:27:16:f8:6e:bd:e0:bb:a3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77 Validity Not Before: Jan 25 04:00:43 2026 GMT Not After : Jan 26 04:00:43 2026 GMT Subject: CN=3e17ae36de62f5af024f36fb6387e44275b83d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:81:66:d4:bf:13:43:96:9d:b4:04:b5:45:c4: 96:5b:48:01:35:0d:ce:51:c3:17:4b:06:be:17:f7: 21:d0:a8:2d:50:d3:94:a5:a3:3c:00:7c:a8:0c:ea: 4b:95:9b:54:d2:52:82:af:1a:29:db:fc:05:de:40: bd:46:6d:14:20:8f:80:08:b3:54:85:13:f1:b5:16: 0a:7b:ba:ac:d1:72:d7:10:f5:3b:e6:e4:68:da:84: 03:e4:51:29:fa:2a:7b:03:08:df:df:68:10:60:33: 8a:bd:09:b3:53:45:a7:14:7a:99:30:8b:1b:2e:11: e0:ed:9d:68:ad:7f:c3:7a:8f:76:c6:0d:5e:8d:b9: e4:f5:82:0a:67:71:f5:b3:f8:c1:ee:63:d0:5f:47: 44:5d:ad:8e:d3:11:a4:56:3a:7f:2d:b2:c3:e8:12: 21:cb:26:a8:09:15:75:38:3e:ad:e0:0c:26:59:20: 1d:0c:42:52:c0:1f:af:ba:9a:19:97:d4:01:89:9d: a1:78:ef:1f:d8:b2:7b:5b:2e:23:3c:8c:99:df:c2: e4:83:8e:b6:17:ed:f2:42:8e:41:fc:62:cf:1a:b9: be:62:41:1f:fd:df:fa:b7:7e:3d:0f:13:76:25:f8: 69:dd:7d:42:e6:9b:98:17:a8:e1:23:1b:f6:c4:96: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:AE:36:DE:62:F5:AF:02:4F:36:FB:63:87:E4:42:75:B8:3D:81 X509v3 Authority Key Identifier: keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b9:e2:6f:cb:94:68:60:32:f6:f4:a6:cf:e6:c1:36:b6:c8: eb:d2:aa:37:23:c4:dd:f6:22:b9:10:57:ec:85:b8:32:1d:95: e8:37:1a:93:35:51:8e:bf:f6:38:02:04:f7:8e:84:97:5d:3a: e6:e8:f9:b1:d5:11:63:de:94:3a:a0:09:f1:ce:73:a5:8f:0c: a4:33:6e:5b:1b:7f:05:c3:0b:a8:b7:cc:36:70:16:0d:e0:20: 5c:73:cd:33:75:03:6b:84:7f:a8:99:38:67:d6:69:58:76:b1: f6:fb:16:bc:c7:4d:0b:e8:32:d6:5e:61:00:93:78:db:30:c7: 8f:d0:00:da:da:26:db:d1:e2:3d:29:dd:b0:77:a3:c9:16:b6: 62:fb:0f:96:40:9e:29:d1:4b:af:88:7c:c5:23:7e:96:f5:b9: 01:33:fd:85:4e:26:a3:1b:a9:84:25:02:7f:6e:dc:b7:e2:73: 9a:40:79:fd:a3:cb:96:be:fb:f6:9b:e3:a0:c8:5c:29:c9:04: b1:ee:57:64:ed:61:f0:c0:c2:9a:4b:9c:1f:6e:c3:b4:af:ff: fd:5f:20:eb:64:11:b3:d6:0d:87:11:d8:20:93:6e:13:e7:d1: ce:ca:94:ba:19:4b:c9:2e:ff:bd:2a:81:c5:27:b9:d5:70:dd: b3:17:38:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT6tjM/p3Jxb4br3gu6NIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz YTVhNzcwHhcNMjYwMTI1MDQwMDQzWhcNMjYwMTI2MDQwMDQzWjAzMTEwLwYDVQQD EygzZTE3YWUzNmRlNjJmNWFmMDI0ZjM2ZmI2Mzg3ZTQ0Mjc1YjgzZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oFm1L8TQ5adtAS1RcSWW0gBNQ3O UcMXSwa+F/ch0KgtUNOUpaM8AHyoDOpLlZtU0lKCrxop2/wF3kC9Rm0UII+ACLNU hRPxtRYKe7qs0XLXEPU75uRo2oQD5FEp+ip7Awjf32gQYDOKvQmzU0WnFHqZMIsb LhHg7Z1orX/Deo92xg1ejbnk9YIKZ3H1s/jB7mPQX0dEXa2O0xGkVjp/LbLD6BIh yyaoCRV1OD6t4AwmWSAdDEJSwB+vupoZl9QBiZ2heO8f2LJ7Wy4jPIyZ38Lkg462 F+3yQo5B/GLPGrm+YkEf/d/6t349DxN2Jfhp3X1C5puYF6jhIxv2xJYDoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4XrjbeYvWvAk82+2OH5EJ1uD2BMB8GA1UdIwQY MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLnib8uU aGAy9vSmz+bBNrbI69KqNyPE3fYiuRBX7IW4Mh2V6DcakzVRjr/2OAIE946El106 5uj5sdURY96UOqAJ8c5zpY8MpDNuWxt/BcMLqLfMNnAWDeAgXHPNM3UDa4R/qJk4 Z9ZpWHax9vsWvMdNC+gy1l5hAJN42zDHj9AA2tom29HiPSndsHejyRa2YvsPlkCe KdFLr4h8xSN+lvW5ATP9hU4moxuphCUCf27ct+JzmkB5/aPLlr779pvjoMhcKckE se5XZO1h8MDCmkucH27DtK///V8g62QRs9YNhxHYIJNuE+fRzsqUuhlLyS7/vSqB xSe51XDdsxc4EQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:34:19 2026 by rpki-client