This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json) Hash identifier: qsCrDv+rNRxaitvWHopSQmQRnkXW0PnEZEBeRdnXUcI= Subject key identifier: 85:2C:27:5E:65:8A:50:C0:18:09:0E:24:14:F2:9A:27:2A:67:36:96 Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Certificate serial: 019BFA2DC4F862E118B44E63D5F63CC5CAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft Manifest number: 15A8 Signing time: Mon 26 Jan 2026 12:01:02 +0000 Manifest this update: Mon 26 Jan 2026 12:01:02 +0000 Manifest next update: Tue 27 Jan 2026 12:01:02 +0000 Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: 69KJlRGXlxLy2cqDLVBrmuXjmGj2CtFSC2jtzDuCYDM=) 2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:c4:f8:62:e1:18:b4:4e:63:d5:f6:3c:c5:ca:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3 Validity Not Before: Jan 26 12:01:02 2026 GMT Not After : Jan 27 12:01:02 2026 GMT Subject: CN=852c275e658a50c018090e2414f29a272a673696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:8f:7b:e5:1e:9e:30:24:e6:df:45:7e:38: 07:6b:99:53:ea:9e:6c:f6:f7:04:53:5e:98:e4:92: d0:01:69:bd:bd:16:8f:7e:36:32:07:63:54:68:db: 30:13:25:56:93:51:42:bc:1b:30:16:d1:c5:be:4b: b6:10:a9:a3:15:96:a2:92:b3:57:d0:4b:f3:77:e2: 81:07:a0:3d:c8:21:75:b5:73:22:9e:2c:19:9d:16: ad:e5:64:53:52:03:ea:4d:c6:57:c5:44:47:66:50: 2a:da:e1:b1:d4:5b:d5:35:03:2a:22:6b:56:4d:b2: 14:80:6c:dd:56:c4:35:51:14:2d:6b:4e:6b:1a:6b: 13:ef:96:7f:3f:1e:8e:97:2c:60:bf:8c:87:ad:bb: 79:e6:03:f5:04:39:dc:41:12:9a:6f:a5:96:1e:e6: 8e:70:45:c7:6d:f1:db:91:46:b0:60:99:db:8e:70: e0:12:60:8b:1b:2f:b5:bd:44:c2:01:2d:7d:d7:ea: 1f:6a:1f:4f:ff:03:42:0c:fd:8c:23:a3:87:39:2c: 6f:a3:be:47:58:a7:d8:01:25:a1:b2:2b:3b:a3:30: 2c:e5:71:b6:7a:d0:b4:08:4e:32:34:50:b3:b4:21: 7c:32:74:bc:53:f3:7f:2b:09:b3:86:c0:0d:d8:37: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:27:5E:65:8A:50:C0:18:09:0E:24:14:F2:9A:27:2A:67:36:96 X509v3 Authority Key Identifier: keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:6c:2e:51:e0:d0:6a:15:d7:c7:6d:9d:5a:15:74:00:ab: 37:60:2f:18:25:f5:a2:e0:53:d1:d7:9c:e6:da:10:53:5e:70: 29:31:bc:c6:9d:e9:0a:27:c2:2b:1f:5d:0a:14:b8:d2:25:54: a8:07:a5:64:7b:62:92:e1:2b:64:12:21:f1:7c:3c:df:0a:d9: 92:9c:20:60:e2:44:65:d4:94:f3:45:44:62:f3:7b:0d:7d:1f: 89:2e:2d:de:55:88:2b:c2:d5:a1:d0:60:3e:0b:ad:c2:59:d3: a6:e0:97:c9:ec:61:a8:99:47:43:26:45:06:be:86:68:e8:b9: f2:ae:f1:9b:a0:e1:b3:54:5c:c9:2c:6e:97:3e:70:b7:8b:2a: 7d:08:3d:03:87:31:0e:e9:3b:8a:f0:72:6c:bf:de:32:fe:5c: 37:06:8e:85:1c:b3:69:01:d2:e4:55:87:0f:d3:86:89:80:78: 1a:67:24:5d:d8:5d:65:9a:5b:38:08:38:36:60:f2:bb:01:cd: 49:38:30:d4:1f:00:9e:f4:a7:bb:b2:ab:03:e9:92:8c:24:74: 93:ad:9f:5b:bb:47:47:95:6a:7e:de:9d:e0:08:68:de:77:94: 8f:e6:d3:23:ca:56:11:f0:e1:e7:78:ac:30:da:b1:c4:58:0f: f5:db:e5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LcT4YuEYtE5j1fY8xcrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw ZTgxZTMwHhcNMjYwMTI2MTIwMTAyWhcNMjYwMTI3MTIwMTAyWjAzMTEwLwYDVQQD Eyg4NTJjMjc1ZTY1OGE1MGMwMTgwOTBlMjQxNGYyOWEyNzJhNjczNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOWPe+UenjAk5t9FfjgHa5lT6p5s 9vcEU16Y5JLQAWm9vRaPfjYyB2NUaNswEyVWk1FCvBswFtHFvku2EKmjFZaikrNX 0Evzd+KBB6A9yCF1tXMiniwZnRat5WRTUgPqTcZXxURHZlAq2uGx1FvVNQMqImtW TbIUgGzdVsQ1URQta05rGmsT75Z/Px6Olyxgv4yHrbt55gP1BDncQRKab6WWHuaO cEXHbfHbkUawYJnbjnDgEmCLGy+1vUTCAS191+ofah9P/wNCDP2MI6OHOSxvo75H WKfYASWhsis7ozAs5XG2etC0CE4yNFCztCF8MnS8U/N/KwmzhsAN2DfwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUsJ15lilDAGAkOJBTymicqZzaWMB8GA1UdIwQY MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2 LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOBsLlHg 0GoV18dtnVoVdACrN2AvGCX1ouBT0dec5toQU15wKTG8xp3pCifCKx9dChS40iVU qAelZHtikuErZBIh8Xw83wrZkpwgYOJEZdSU80VEYvN7DX0fiS4t3lWIK8LVodBg PgutwlnTpuCXyexhqJlHQyZFBr6GaOi58q7xm6Dhs1RcySxulz5wt4sqfQg9A4cx Duk7ivBybL/eMv5cNwaOhRyzaQHS5FWHD9OGiYB4GmckXdhdZZpbOAg4NmDyuwHN STgw1B8AnvSnu7KrA+mSjCR0k62fW7tHR5Vqft6d4Aho3neUj+bTI8pWEfDh53is MNqxxFgP9dvlJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:32 2026 by rpki-client