This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json) Hash identifier: JskKJQtQTo/WBlgpd5zQYOKC14xkqGzwx6qu0hFgFwM= Subject key identifier: A1:36:1F:A9:27:1A:10:BA:DE:84:0E:4A:DD:4C:AB:B3:47:25:E3:53 Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Certificate serial: 019BF5AC5AE75A465E21E57801D9755419D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft Manifest number: 0B1B Signing time: Sun 25 Jan 2026 15:01:11 +0000 Manifest this update: Sun 25 Jan 2026 15:01:11 +0000 Manifest next update: Mon 26 Jan 2026 15:01:11 +0000 Files and hashes: 1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: 4zTL8q9zpH558MKf5uHgqzrMtB/S0mCSjnO1DXtWICE=) 2: 9MezlHXAeGWTxOc7UTvV8DR5uWo.roa (hash: n9z8Qm42I0TN2dbDtlo0CkxcfTlhf2U1vO8dzmiyccw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:5a:e7:5a:46:5e:21:e5:78:01:d9:75:54:19:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Validity Not Before: Jan 25 15:01:11 2026 GMT Not After : Jan 26 15:01:11 2026 GMT Subject: CN=a1361fa9271a10bade840e4add4cabb34725e353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:4c:f9:41:95:10:49:05:50:6d:79:fc:d2: b7:59:82:6b:bf:33:d9:28:e7:a2:b1:e8:50:0e:13: 9d:b3:6e:58:44:86:87:a6:8c:56:6f:e4:51:1f:13: d7:e2:3c:ae:a4:ed:16:f9:b7:b5:f5:08:e2:f8:9b: 7f:51:8f:d4:2a:e2:ff:33:dd:28:14:4a:bd:ed:db: 59:2c:d4:5d:90:b2:58:94:33:11:d1:cc:b2:fa:2b: d4:0f:9b:05:dc:98:6d:22:c1:13:23:15:eb:8c:1e: f0:78:20:e6:e8:0c:e5:80:cb:2c:f5:20:4d:44:87: 88:14:d1:9a:e3:c5:e8:2d:f4:4f:c0:5f:5c:55:28: f2:e9:5a:b9:2b:b2:45:3b:f7:62:03:82:28:dd:e8: 0c:90:0d:0f:b4:b5:8e:27:db:9c:ac:e7:a5:86:02: b2:e7:13:df:90:91:77:2b:35:f5:9a:55:0f:28:c1: 3a:d2:f0:b4:8d:ee:6f:84:fb:44:4e:e6:b2:ed:11: db:26:52:03:5a:c9:a1:00:40:ba:95:1f:44:bb:0d: 51:6a:39:1e:bb:40:0b:84:5a:28:52:e9:46:2c:af: 64:77:f9:02:86:fd:25:65:69:5e:0c:66:8b:7b:6a: 53:d2:92:9f:79:2b:46:0c:6e:d0:bf:73:1e:7b:15: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:1F:A9:27:1A:10:BA:DE:84:0E:4A:DD:4C:AB:B3:47:25:E3:53 X509v3 Authority Key Identifier: keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ec:2f:df:9d:8f:a4:2c:cc:e4:1f:72:ae:a3:e3:56:f1:df: 3d:02:61:86:86:8e:a1:29:4e:30:c4:10:d4:fd:ef:46:ba:1b: ae:f7:ee:9c:4b:78:27:58:44:c8:0f:9b:31:4e:82:74:91:0a: 3a:09:ff:5e:8b:c2:04:d6:37:d5:23:21:c0:c1:22:bd:36:5d: da:6e:8e:d3:04:36:e9:af:13:e3:d0:34:2c:c1:8d:d0:c1:bc: 00:3a:fc:8b:6e:11:22:b7:95:ca:34:0e:64:1b:7e:e8:fa:92: 83:48:2e:36:b2:29:6b:c2:ed:a6:30:8f:96:82:ec:10:f1:ed: 56:b9:5d:bb:1e:e0:a2:ed:af:4b:bb:62:29:34:45:8c:87:54: 2c:45:b2:07:18:66:40:c8:0b:9a:a5:10:ed:47:bd:a0:1f:ef: d3:a5:41:14:12:4d:e1:b4:0a:a7:ba:51:05:11:f1:7a:7f:11: 6c:bc:b4:e2:b4:1f:a8:fc:d5:dc:fb:88:14:73:00:3b:cf:13: 99:4a:21:cc:30:88:7d:62:ab:4d:73:da:1e:15:ac:e6:d8:e9: 0f:04:f0:4d:5e:c8:4d:f0:cc:9f:44:9a:10:2c:ee:27:fc:f4: c7:6e:8c:19:90:6f:d5:3c:20:e7:23:48:d6:b3:2c:f7:33:9e: ee:58:5d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFrnWkZeIeV4Adl1VBnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy YjI5MzAwHhcNMjYwMTI1MTUwMTExWhcNMjYwMTI2MTUwMTExWjAzMTEwLwYDVQQD EyhhMTM2MWZhOTI3MWExMGJhZGU4NDBlNGFkZDRjYWJiMzQ3MjVlMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PNM+UGVEEkFUG15/NK3WYJrvzPZ KOeisehQDhOds25YRIaHpoxWb+RRHxPX4jyupO0W+be19Qji+Jt/UY/UKuL/M90o FEq97dtZLNRdkLJYlDMR0cyy+ivUD5sF3JhtIsETIxXrjB7weCDm6AzlgMss9SBN RIeIFNGa48XoLfRPwF9cVSjy6Vq5K7JFO/diA4Io3egMkA0PtLWOJ9ucrOelhgKy 5xPfkJF3KzX1mlUPKME60vC0je5vhPtETuay7RHbJlIDWsmhAEC6lR9Euw1Rajke u0ALhFooUulGLK9kd/kChv0lZWleDGaLe2pT0pKfeStGDG7Qv3MeexVTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE2H6knGhC63oQOSt1Mq7NHJeNTMB8GA1UdIwQY MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt YTc2MjkyZTIwNDU4LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4 LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHewv352P pCzM5B9yrqPjVvHfPQJhhoaOoSlOMMQQ1P3vRrobrvfunEt4J1hEyA+bMU6CdJEK Ogn/XovCBNY31SMhwMEivTZd2m6O0wQ26a8T49A0LMGN0MG8ADr8i24RIreVyjQO ZBt+6PqSg0guNrIpa8LtpjCPloLsEPHtVrldux7gou2vS7tiKTRFjIdULEWyBxhm QMgLmqUQ7Ue9oB/v06VBFBJN4bQKp7pRBRHxen8RbLy04rQfqPzV3PuIFHMAO88T mUohzDCIfWKrTXPaHhWs5tjpDwTwTV7ITfDMn0SaECzuJ/z0x26MGZBv1Twg5yNI 1rMs9zOe7lhdfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:44 2026 by rpki-client