This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json) Hash identifier: EjisXbY7UI8QEk+hN7Y6moJfF6VJaViu8rHbjKATy4Y= Subject key identifier: BF:53:E0:D3:91:FF:39:65:90:3A:2B:35:18:7A:B8:FD:14:50:49:DC Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Certificate serial: 019BF5AC3B48A3788E6E953EF25C57CAC319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft Manifest number: 6B Signing time: Sun 25 Jan 2026 15:01:03 +0000 Manifest this update: Sun 25 Jan 2026 15:01:03 +0000 Manifest next update: Mon 26 Jan 2026 15:01:03 +0000 Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: FR6hstcLx4ZzAJ9Q0jCxtqje6YQAAraxsrEMPHdAcPI=) 2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=) 3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:3b:48:a3:78:8e:6e:95:3e:f2:5c:57:ca:c3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Validity Not Before: Jan 25 15:01:03 2026 GMT Not After : Jan 26 15:01:03 2026 GMT Subject: CN=bf53e0d391ff3965903a2b35187ab8fd145049dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:52:43:95:fc:cd:99:f4:33:4e:da:c2:42: 78:c0:8c:84:07:a0:28:0d:25:a7:ae:53:eb:75:89: 2e:e5:07:a0:e5:23:1f:d7:f1:63:8d:1f:0b:d0:23: 15:a3:83:b1:ba:08:16:3e:c3:05:dc:ce:f6:27:0f: 1a:b0:66:3a:c5:02:6c:d3:45:e8:b7:d9:3e:cb:91: 0e:5d:3f:c2:45:34:e3:9d:42:c3:db:4e:87:77:d0: b5:a6:f4:24:b8:28:bd:d4:5d:fa:0b:3e:cb:02:1c: c8:17:02:8e:98:48:71:4b:eb:75:f6:e5:73:37:3e: fc:77:02:50:ba:0a:a6:79:27:52:8a:74:36:f9:a3: 5f:5c:11:c8:c0:c6:09:6b:27:5d:a9:13:10:af:03: e8:31:2c:d6:ad:a4:40:bc:d2:e8:a1:f4:d4:1f:b4: 97:21:27:9d:42:4c:1a:ff:23:d9:a3:15:fa:b7:03: 98:13:aa:14:82:c2:f1:a0:62:9b:2d:d7:d6:13:29: ea:22:3b:d6:58:60:5b:e9:92:76:d6:e4:99:e8:7a: 6a:69:c8:09:16:56:bb:d6:bf:e3:54:92:74:8e:84: b8:60:f8:ee:fb:87:0d:67:0c:50:22:2e:6a:26:e2: a5:46:51:27:93:19:fe:e8:08:db:90:06:0b:89:39: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:E0:D3:91:FF:39:65:90:3A:2B:35:18:7A:B8:FD:14:50:49:DC X509v3 Authority Key Identifier: keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:af:85:27:10:18:55:47:20:d3:e1:3a:bc:b6:9a:f8:fc:35: 87:d0:c2:79:8c:1a:63:ab:50:52:b6:96:b6:5a:86:ce:d2:1b: 33:86:a6:f0:6f:37:32:37:50:2d:c2:3e:2a:a8:ca:cc:f3:05: 2a:12:fc:af:cf:d3:e1:70:8d:6e:1b:02:7d:2b:e0:85:ce:5a: 1a:3f:cc:8d:75:8a:f0:45:be:a1:ef:20:91:f8:16:34:f5:c1: 93:7e:ee:f9:c7:31:02:ac:d2:67:91:fb:bc:10:85:a5:75:c9: 29:d8:29:d7:93:ed:7c:a6:e1:1b:8c:bb:b3:98:a2:10:da:22: 69:f8:50:aa:04:54:fb:a1:93:09:93:04:13:16:06:ef:a3:03: 12:7d:28:56:6e:3f:de:42:36:06:61:a8:e3:dd:3c:47:f8:56: 2f:6d:cc:81:48:a7:0d:05:03:82:88:2f:d5:8e:c4:98:1e:04: 7a:53:da:ac:bc:39:22:18:39:90:77:fb:34:a6:7e:7b:a4:4c: 0a:bd:12:b0:25:a0:60:d1:80:f5:ff:b0:12:45:4d:97:02:4a: 40:2d:bd:02:05:72:31:50:cc:cc:ee:ff:48:55:7d:4b:5a:96: 21:8a:6a:b1:4a:be:69:35:48:e5:e6:a8:9b:c1:36:f7:71:12: a0:62:e3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDtIo3iObpU+8lxXysMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky MWI2YzUwHhcNMjYwMTI1MTUwMTAzWhcNMjYwMTI2MTUwMTAzWjAzMTEwLwYDVQQD EyhiZjUzZTBkMzkxZmYzOTY1OTAzYTJiMzUxODdhYjhmZDE0NTA0OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu09SQ5X8zZn0M07awkJ4wIyEB6Ao DSWnrlPrdYku5Qeg5SMf1/FjjR8L0CMVo4OxuggWPsMF3M72Jw8asGY6xQJs00Xo t9k+y5EOXT/CRTTjnULD206Hd9C1pvQkuCi91F36Cz7LAhzIFwKOmEhxS+t19uVz Nz78dwJQugqmeSdSinQ2+aNfXBHIwMYJayddqRMQrwPoMSzWraRAvNLoofTUH7SX ISedQkwa/yPZoxX6twOYE6oUgsLxoGKbLdfWEynqIjvWWGBb6ZJ21uSZ6HpqacgJ Fla71r/jVJJ0joS4YPju+4cNZwxQIi5qJuKlRlEnkxn+6AjbkAYLiTn1gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9T4NOR/zllkDorNRh6uP0UUEncMB8GA1UdIwQY MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct NWFmZTBjNDJjZjc3LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3 LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGK+FJxAY VUcg0+E6vLaa+Pw1h9DCeYwaY6tQUraWtlqGztIbM4am8G83MjdQLcI+KqjKzPMF KhL8r8/T4XCNbhsCfSvghc5aGj/MjXWK8EW+oe8gkfgWNPXBk37u+ccxAqzSZ5H7 vBCFpXXJKdgp15PtfKbhG4y7s5iiENoiafhQqgRU+6GTCZMEExYG76MDEn0oVm4/ 3kI2BmGo4908R/hWL23MgUinDQUDgogv1Y7EmB4EelParLw5Ihg5kHf7NKZ+e6RM Cr0SsCWgYNGA9f+wEkVNlwJKQC29AgVyMVDMzO7/SFV9S1qWIYpqsUq+aTVI5eao m8E293ESoGLjZw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:50 2026 by rpki-client