This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft File: 5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json) Hash identifier: 441VGSrSN10arYuqi37hz3VM6+w41Q+/bVVslFhwDvo= Subject key identifier: C0:89:7E:88:17:5A:93:AA:A5:3A:1F:28:95:14:BD:1D:03:E2:16:39 Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Certificate serial: 019BFA2DC405522A693C1A28C90E97BE59FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 12:01:01 +0000 Manifest this update: Mon 26 Jan 2026 12:01:01 +0000 Manifest next update: Tue 27 Jan 2026 12:01:01 +0000 Files and hashes: 1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: lNIlMUwUlwMcYtkQi6Bs3LUUMt+kJOP0l8YQmgbGows=) 2: y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa (hash: lYKfm5Dp+lf/dj7OuCbcWwuPJCfkOvV2il96b5sLugY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:c4:05:52:2a:69:3c:1a:28:c9:0e:97:be:59:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Validity Not Before: Jan 26 12:01:01 2026 GMT Not After : Jan 27 12:01:01 2026 GMT Subject: CN=c0897e88175a93aaa53a1f289514bd1d03e21639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:a1:9d:37:47:39:07:23:63:20:62:ef:ec: 7c:ef:72:4f:5c:02:9c:4b:40:5d:14:68:2e:89:6f: 4a:d0:d6:98:33:1f:45:32:87:51:c7:2f:6b:3a:08: 65:52:d0:41:71:00:17:19:b5:f1:62:a1:3a:f8:af: a9:3e:0a:61:3c:e5:6c:16:21:e0:52:0d:5a:61:f1: b7:59:32:ec:24:03:2a:9a:56:4d:bb:71:22:62:6d: ad:74:45:f4:61:3b:69:70:60:92:cf:41:ea:a2:74: d8:e2:70:f6:9e:64:6d:b4:d1:05:94:46:81:bd:4d: e0:09:84:8f:34:97:12:4f:23:b6:41:e5:1c:79:f9: 51:1e:64:3b:65:41:63:a9:a4:31:9a:94:d6:b7:b6: 32:ec:a2:87:13:2a:47:01:21:83:9f:90:eb:9c:0f: 9d:2f:48:71:95:6b:47:e9:41:33:4e:1a:ec:ec:77: d2:60:50:6c:ad:b6:c6:c2:78:c5:35:36:c1:76:5c: 09:4c:26:ab:96:94:36:30:a4:26:e3:aa:51:51:73: 1a:c5:4d:0f:31:2d:6e:40:4c:8b:9e:97:c4:25:83: 6a:85:8d:32:be:6a:b7:da:8c:fb:75:62:df:ac:04: ae:0a:0c:15:e8:b5:bd:ac:b7:06:53:cd:e2:25:0d: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:89:7E:88:17:5A:93:AA:A5:3A:1F:28:95:14:BD:1D:03:E2:16:39 X509v3 Authority Key Identifier: keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:aa:18:68:a0:2b:19:92:1e:a6:ca:fd:ea:40:4d:ec:5e:9d: 33:05:81:40:06:93:aa:a5:d7:a0:ff:bb:8b:cb:1d:be:c0:34: 39:29:60:57:65:51:42:e4:1a:16:26:97:3a:a6:f8:6d:c2:72: 62:22:a2:45:05:7f:d0:e9:54:21:9b:84:7f:93:3b:02:40:db: 54:21:3a:d8:b4:33:75:89:08:78:9b:1f:b0:54:2c:73:d1:71: ea:ca:cf:2b:6f:e8:ba:f9:16:ef:f4:52:2b:27:ac:25:2c:44: a2:86:d9:99:bb:bb:71:0b:6b:31:a9:4b:cf:45:77:fd:4e:fd: 17:f7:cd:3c:ac:76:7d:91:5b:40:5f:48:67:aa:fc:b5:85:9b: ff:a9:c7:d6:4a:45:ff:5b:f9:fb:7f:c4:31:b4:19:13:2d:14: 62:6c:04:70:72:83:50:e8:cf:3c:fc:a3:40:d0:dc:79:0d:b5: b5:d7:55:dc:0b:21:53:e2:c3:b0:19:7f:72:43:96:91:c7:ec: 3b:96:a9:ca:53:71:c4:60:bd:ff:4e:9d:99:a9:49:3a:bd:d2: 78:7a:c2:7d:29:63:fc:90:3a:11:35:d6:8c:32:15:e5:39:30: c8:4a:c2:b0:d7:c9:61:70:28:ab:ae:f4:1f:0e:09:42:d4:3d: cd:24:ee:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LcQFUippPBooyQ6Xvln7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZjZjZWQyN2ZjNjBmOTAwZmFjMWI3NTFkYjFlZTRiZjc4 NWFhYjMwHhcNMjYwMTI2MTIwMTAxWhcNMjYwMTI3MTIwMTAxWjAzMTEwLwYDVQQD EyhjMDg5N2U4ODE3NWE5M2FhYTUzYTFmMjg5NTE0YmQxZDAzZTIxNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMyhnTdHOQcjYyBi7+x873JPXAKc S0BdFGguiW9K0NaYMx9FModRxy9rOghlUtBBcQAXGbXxYqE6+K+pPgphPOVsFiHg Ug1aYfG3WTLsJAMqmlZNu3EiYm2tdEX0YTtpcGCSz0HqonTY4nD2nmRttNEFlEaB vU3gCYSPNJcSTyO2QeUceflRHmQ7ZUFjqaQxmpTWt7Yy7KKHEypHASGDn5DrnA+d L0hxlWtH6UEzThrs7HfSYFBsrbbGwnjFNTbBdlwJTCarlpQ2MKQm46pRUXMaxU0P MS1uQEyLnpfEJYNqhY0yvmq32oz7dWLfrASuCgwV6LW9rLcGU83iJQ2PvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCJfogXWpOqpTofKJUUvR0D4hY5MB8GA1UdIwQY MBaAFOX2ztJ/xg+QD6wbdR2x7kv3haqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAt M2VhZDc3OTIwNzNjLzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAtM2VhZDc3OTIwNzNj LzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqoYaKAr GZIepsr96kBN7F6dMwWBQAaTqqXXoP+7i8sdvsA0OSlgV2VRQuQaFiaXOqb4bcJy YiKiRQV/0OlUIZuEf5M7AkDbVCE62LQzdYkIeJsfsFQsc9Fx6srPK2/ouvkW7/RS KyesJSxEoobZmbu7cQtrMalLz0V3/U79F/fNPKx2fZFbQF9IZ6r8tYWb/6nH1kpF /1v5+3/EMbQZEy0UYmwEcHKDUOjPPPyjQNDceQ21tddV3AshU+LDsBl/ckOWkcfs O5apylNxxGC9/06dmalJOr3SeHrCfSlj/JA6ETXWjDIV5TkwyErCsNfJYXAoq670 Hw4JQtQ9zSTuJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:30 2026 by rpki-client