This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json) Hash identifier: 33pbkaWfITUo0zIGGwkAjwWVyWp7KN1UjOgolKC0Sd4= Subject key identifier: 14:F9:E4:5C:1C:B6:E7:B9:03:DB:0A:5B:F7:BD:28:55:10:AA:63:CC Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f Certificate serial: 019BF5AC299DE6AB25186E05E6D43F190575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 15:00:59 +0000 Manifest this update: Sun 25 Jan 2026 15:00:59 +0000 Manifest next update: Mon 26 Jan 2026 15:00:59 +0000 Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=) 2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: ud1ihNVyQs58GJ4C+ClLrysKbsbJ/06+K2U2BB2CZkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:29:9d:e6:ab:25:18:6e:05:e6:d4:3f:19:05:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f Validity Not Before: Jan 25 15:00:59 2026 GMT Not After : Jan 26 15:00:59 2026 GMT Subject: CN=14f9e45c1cb6e7b903db0a5bf7bd285510aa63cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:56:60:1e:2d:b8:bb:f3:1a:48:ee:0b:c5:91: e5:89:bb:4b:65:08:c4:ff:0b:4e:51:52:19:0b:1b: 2b:2a:73:f7:2b:11:e3:0f:f3:21:46:2c:7c:17:e0: c6:3d:b1:db:11:02:a8:ac:64:63:eb:8f:95:f4:41: ea:d3:df:ff:51:27:d2:35:4a:d7:0a:53:38:95:13: 74:7f:01:d3:d6:10:cd:46:3c:b9:5b:ad:68:51:5a: 27:2f:8b:e6:2c:63:8c:01:18:ef:3c:1d:d9:bc:3b: 72:97:3e:52:2f:fc:66:c6:aa:6b:cd:df:92:92:93: 92:80:92:52:91:7a:f8:ca:39:6a:03:6d:84:00:f2: fa:66:d2:02:9b:b4:9c:50:ca:c4:51:5a:58:e4:af: c6:7b:ec:34:22:e3:c8:8a:45:80:77:c7:42:57:5a: 9a:cc:3a:ab:55:8a:da:0f:93:62:1f:97:3d:78:81: 55:90:c8:e5:1d:2d:f2:46:68:7b:95:e0:af:1d:24: 3e:83:f8:30:36:0f:89:bb:15:a2:8c:e1:a3:da:5e: 11:5a:00:cc:1a:0f:1b:44:47:78:6f:16:69:51:9b: 4e:99:0a:b2:d3:6c:84:2f:5b:f4:6c:32:ac:d7:ec: 01:cd:a1:80:d4:a8:b1:e1:3b:b5:00:64:53:72:0c: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:E4:5C:1C:B6:E7:B9:03:DB:0A:5B:F7:BD:28:55:10:AA:63:CC X509v3 Authority Key Identifier: keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:a3:25:ee:29:34:01:5d:05:3f:b3:0e:26:ff:ef:74:6a: 0f:66:86:8f:69:92:ae:ed:0c:f0:79:3f:ef:99:c6:33:9e:b3: 16:4f:1a:9b:9b:95:e7:a3:a7:e1:c1:df:68:e7:bf:52:f7:bc: 85:a5:85:6c:54:8b:58:ca:76:88:35:6a:a4:cc:1b:69:0a:a8: 7b:f7:05:dc:1f:61:41:d0:de:84:19:c3:7b:aa:b3:ae:41:32: 5a:b1:ef:de:b1:7e:b6:f2:26:03:a0:b9:38:e1:62:c4:47:99: 41:d2:65:ca:8e:a1:bf:2c:71:95:7f:ad:93:e6:b1:c1:7b:a8: 14:9c:ad:ba:49:d4:6c:2d:86:8f:18:bf:4f:77:51:89:0b:59: 02:52:f8:e2:1f:68:69:63:f9:af:78:fa:33:0f:90:7d:57:c0: 66:c4:69:62:31:72:f3:6e:ed:8c:98:13:db:ff:73:93:8e:87: 50:e0:30:55:5b:f4:df:5b:77:ad:ea:1f:e0:9f:82:5e:96:98: b6:44:91:99:b4:a2:f3:cc:1b:db:86:d7:a1:54:99:c9:b7:76: ed:bf:4c:be:fc:3a:b0:e3:21:0e:10:1d:9c:72:8c:4d:b9:09: d9:6e:0f:9a:61:1e:de:fb:c8:26:1e:6b:0f:15:e6:1f:97:18: 7f:00:ce:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCmd5qslGG4F5tQ/GQV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl YTUwN2YwHhcNMjYwMTI1MTUwMDU5WhcNMjYwMTI2MTUwMDU5WjAzMTEwLwYDVQQD EygxNGY5ZTQ1YzFjYjZlN2I5MDNkYjBhNWJmN2JkMjg1NTEwYWE2M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lZgHi24u/MaSO4LxZHlibtLZQjE /wtOUVIZCxsrKnP3KxHjD/MhRix8F+DGPbHbEQKorGRj64+V9EHq09//USfSNUrX ClM4lRN0fwHT1hDNRjy5W61oUVonL4vmLGOMARjvPB3ZvDtylz5SL/xmxqprzd+S kpOSgJJSkXr4yjlqA22EAPL6ZtICm7ScUMrEUVpY5K/Ge+w0IuPIikWAd8dCV1qa zDqrVYraD5NiH5c9eIFVkMjlHS3yRmh7leCvHSQ+g/gwNg+JuxWijOGj2l4RWgDM Gg8bREd4bxZpUZtOmQqy02yEL1v0bDKs1+wBzaGA1Kix4Tu1AGRTcgzbxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT55Fwctue5A9sKW/e9KFUQqmPMMB8GA1UdIwQY MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmajJe4p NAFdBT+zDib/73RqD2aGj2mSru0M8Hk/75nGM56zFk8am5uV56On4cHfaOe/Uve8 haWFbFSLWMp2iDVqpMwbaQqoe/cF3B9hQdDehBnDe6qzrkEyWrHv3rF+tvImA6C5 OOFixEeZQdJlyo6hvyxxlX+tk+axwXuoFJytuknUbC2Gjxi/T3dRiQtZAlL44h9o aWP5r3j6Mw+QfVfAZsRpYjFy827tjJgT2/9zk46HUOAwVVv031t3reof4J+CXpaY tkSRmbSi88wb24bXoVSZybd27b9Mvvw6sOMhDhAdnHKMTbkJ2W4PmmEe3vvIJh5r DxXmH5cYfwDOKw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:02 2026 by rpki-client