This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft File: 5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json) Hash identifier: cxcLVdIdTZK6sxWwV3rQcPHfPvV+Uus4vzEKnnDm/d8= Subject key identifier: A9:DD:92:38:F0:98:96:67:AF:AA:2C:DD:05:2B:46:BC:04:79:75:A2 Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47 Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347 Certificate serial: 019BF3BDB4B8FF0845B735884478A5BFFCA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft Manifest number: 1343 Signing time: Sun 25 Jan 2026 06:00:54 +0000 Manifest this update: Sun 25 Jan 2026 06:00:54 +0000 Manifest next update: Mon 26 Jan 2026 06:00:54 +0000 Files and hashes: 1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: CPgSaXQ0rh7jSk2dapU3QjpN51NF6uYaVsfcX7R6uK4=) 2: wtbzjzOJZOQ2I2gZUMznpxIw0wQ.roa (hash: poF9+KRBQXPg+TESzwPW5iWNnjNJQEf8sS6oFcn136Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:b4:b8:ff:08:45:b7:35:88:44:78:a5:bf:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347 Validity Not Before: Jan 25 06:00:54 2026 GMT Not After : Jan 26 06:00:54 2026 GMT Subject: CN=a9dd9238f0989667afaa2cdd052b46bc047975a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:88:95:dd:e6:bf:d9:17:4d:ce:09:65:a4: ab:4f:0e:39:ac:40:95:c7:91:3d:40:fa:8e:36:4e: 99:19:a7:e7:24:e9:56:8a:e7:51:c9:b6:02:2d:91: 10:e3:6a:9e:fc:2b:98:0e:6f:27:c5:d2:c2:5b:f2: bc:82:b7:07:a2:18:07:da:ac:e6:93:48:fa:b4:27: 1d:59:03:b5:b1:80:b0:3d:62:0d:e8:a6:c7:74:17: fd:29:35:8d:d3:ed:7e:4a:24:a3:e6:f9:a2:f1:16: c0:43:e8:34:b0:ff:27:f8:e7:05:7a:44:25:93:fd: e1:9f:c8:14:81:96:7f:31:fc:9c:89:f9:5c:86:22: d7:5a:26:0f:67:e3:2d:3b:c8:f9:ed:bf:ad:7a:ea: 49:01:55:ec:85:36:74:2c:2d:a4:5b:4d:90:61:d4: 53:94:0c:15:a1:87:e0:9d:61:bd:58:24:95:b7:9d: 28:28:42:08:1b:94:fe:65:3b:e6:0b:d0:72:0e:bc: a4:5c:e4:c5:89:2a:77:92:31:d9:02:81:40:84:9c: 86:e7:38:33:2c:a4:56:db:eb:49:56:c8:16:65:80: 57:92:9d:b9:68:4e:39:7d:f1:a0:d6:ad:47:49:7d: 72:9b:48:f7:59:b1:79:b8:22:b3:76:f0:ff:f4:f7: a3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DD:92:38:F0:98:96:67:AF:AA:2C:DD:05:2B:46:BC:04:79:75:A2 X509v3 Authority Key Identifier: keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c8:d1:d6:34:5a:f5:d3:c4:ab:19:d4:28:bb:95:70:6d:49: f1:af:c9:b2:b9:04:97:69:ae:cb:88:f3:2c:28:81:d9:e8:c8: 19:ce:2e:d5:28:ca:68:99:9f:e1:f1:14:d9:f7:b1:ac:8d:df: 0d:7e:d5:c3:b1:89:f4:00:63:4a:54:ff:dd:33:5e:fe:fc:c0: 7f:b7:4c:18:3e:0d:7e:bb:88:ed:66:ca:9d:ad:cf:e9:9f:de: c7:e1:27:24:92:35:e7:51:82:dc:ff:e7:a9:bc:6b:66:30:fc: 89:ad:0f:a8:e7:a3:be:9c:6a:6a:ed:69:92:4b:ba:bd:c3:db: f7:54:f0:8f:23:97:d6:a1:5b:f6:d7:16:69:d9:f8:dd:e8:73: a8:12:01:87:5f:ba:92:a7:63:73:64:cd:6e:21:44:3a:04:df: 68:c8:00:6b:4e:5f:6b:69:d4:27:d4:4a:41:64:79:c2:ac:b4: 53:0c:2c:62:00:3a:b6:1e:34:4c:9c:8d:e9:65:ab:99:6b:02: 49:21:30:c4:e5:fd:6a:97:d1:b2:41:cf:ea:c3:3f:c8:47:bc: 7c:d6:22:77:a4:a4:1e:79:09:12:37:6b:4b:f4:10:76:cb:16: a3:fb:31:5c:f1:2e:17:8d:61:b7:0c:2c:cb:62:8c:65:d2:db: 14:b3:f5:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvbS4/whFtzWIRHilv/ygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDg0YWI3NTA5YmNiYmRhMzUxZTIwMDA5MTc0MmQ0MzM2 NmIzNDcwHhcNMjYwMTI1MDYwMDU0WhcNMjYwMTI2MDYwMDU0WjAzMTEwLwYDVQQD EyhhOWRkOTIzOGYwOTg5NjY3YWZhYTJjZGQwNTJiNDZiYzA0Nzk3NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p2Ild3mv9kXTc4JZaSrTw45rECV x5E9QPqONk6ZGafnJOlWiudRybYCLZEQ42qe/CuYDm8nxdLCW/K8grcHohgH2qzm k0j6tCcdWQO1sYCwPWIN6KbHdBf9KTWN0+1+SiSj5vmi8RbAQ+g0sP8n+OcFekQl k/3hn8gUgZZ/MfyciflchiLXWiYPZ+MtO8j57b+teupJAVXshTZ0LC2kW02QYdRT lAwVoYfgnWG9WCSVt50oKEIIG5T+ZTvmC9ByDrykXOTFiSp3kjHZAoFAhJyG5zgz LKRW2+tJVsgWZYBXkp25aE45ffGg1q1HSX1ym0j3WbF5uCKzdvD/9PejSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKndkjjwmJZnr6os3QUrRrwEeXWiMB8GA1UdIwQY MBaAFOVISrdQm8u9o1HiAAkXQtQzZrNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVoS3QxQ2J5NzJqVWVJQUNSZEMxRE5tczBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMt YzE3MGM2NWYwOTM4LzEvNVVoS3QxQ2J5NzJqVWVJQUNSZEMxRE5tczBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMtYzE3MGM2NWYwOTM4 LzEvNVVoS3QxQ2J5NzJqVWVJQUNSZEMxRE5tczBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusjR1jRa 9dPEqxnUKLuVcG1J8a/JsrkEl2muy4jzLCiB2ejIGc4u1SjKaJmf4fEU2fexrI3f DX7Vw7GJ9ABjSlT/3TNe/vzAf7dMGD4NfruI7WbKna3P6Z/ex+EnJJI151GC3P/n qbxrZjD8ia0PqOejvpxqau1pkku6vcPb91TwjyOX1qFb9tcWadn43ehzqBIBh1+6 kqdjc2TNbiFEOgTfaMgAa05fa2nUJ9RKQWR5wqy0UwwsYgA6th40TJyN6WWrmWsC SSEwxOX9apfRskHP6sM/yEe8fNYid6SkHnkJEjdrS/QQdssWo/sxXPEuF41htwws y2KMZdLbFLP10Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:32 2026 by rpki-client