This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json) Hash identifier: LnZXCCVHfd8H+GbCFwxUGPBTdC/GXFkSjLQ6S9FpGFs= Subject key identifier: BB:E2:22:2E:19:8A:D8:90:6D:6E:A3:5F:0E:7E:01:BF:2A:FF:F3:5E Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930 Certificate serial: 019BF6BEE68F9534B3C0EB123464C343419F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft Manifest number: 71 Signing time: Sun 25 Jan 2026 20:01:04 +0000 Manifest this update: Sun 25 Jan 2026 20:01:04 +0000 Manifest next update: Mon 26 Jan 2026 20:01:04 +0000 Files and hashes: 1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: C+R/fT3ORdoq8BC1SntadfiQZbBAtbpuUqJqXnzpKRg=) 2: MHca-Spbwu4KckiWw0Dq8WRDlXI.roa (hash: 1Fh8PbvTtxhEEhmRRroTAZu9epm44Y5y/MNbSvWf+o8=) 3: W-OulN7aXL6vj15fOfBs3i2zgKQ.roa (hash: 7uGKDwrzo+yb6hYVRduodNm3MEz8zOyr/+kvqAyNUtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:e6:8f:95:34:b3:c0:eb:12:34:64:c3:43:41:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930 Validity Not Before: Jan 25 20:01:04 2026 GMT Not After : Jan 26 20:01:04 2026 GMT Subject: CN=bbe2222e198ad8906d6ea35f0e7e01bf2afff35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:3f:31:56:56:19:f1:b8:a0:d8:d9:f1:74: 59:01:30:a9:0f:41:57:f1:23:67:8c:49:59:73:2a: e7:e0:ce:df:45:29:e2:6f:4c:45:7a:b0:25:a8:6c: 67:1f:48:c2:6b:21:6d:a9:d5:a7:a7:1f:7f:23:d3: 10:ac:0a:5e:b9:97:68:93:24:39:ff:c0:c8:2c:f3: 00:4e:9f:de:c0:ef:0d:71:ed:92:bf:da:67:08:9e: af:61:64:47:ed:66:e6:74:16:2c:8d:46:b4:24:90: ad:9e:27:70:ae:d8:80:48:1f:92:25:f1:6d:af:bd: 67:a9:fd:c4:2a:30:0a:7f:5c:a9:36:88:de:6e:45: d0:34:9a:05:44:72:1d:f3:79:6e:8d:02:ba:49:69: b8:80:de:9f:44:19:87:15:0d:3d:9a:a0:fc:95:75: 5d:aa:da:e7:e6:f9:d1:50:30:74:0f:91:1f:1c:96: 93:bc:f8:c9:2d:e9:52:e0:35:22:cb:fc:bf:a7:ea: 68:bb:b5:b6:3b:81:9f:c6:07:ee:fe:65:a6:c4:2a: 09:90:60:2d:64:8b:2f:b9:13:62:f1:79:26:df:c9: 13:24:99:31:ee:6b:1c:85:9d:67:3d:71:60:f2:7e: 72:8e:59:2d:98:b7:e2:92:40:4c:63:8c:82:81:83: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:22:2E:19:8A:D8:90:6D:6E:A3:5F:0E:7E:01:BF:2A:FF:F3:5E X509v3 Authority Key Identifier: keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:23:13:f6:b5:8b:27:a0:21:6e:d0:46:a3:a5:44:15:73:03: 24:08:50:a6:fe:fc:5c:bc:ea:06:c8:ce:5f:79:4a:53:c0:dc: 88:2d:e9:a7:57:62:03:75:35:fe:1e:91:d6:e1:38:17:2b:c8: af:57:50:33:63:11:34:f4:4b:f7:a5:b7:bd:1f:45:c2:74:f8: ab:cc:34:5d:2d:af:bd:9b:36:b6:83:78:6e:f1:2d:2c:18:5b: 4e:64:3e:e6:e5:22:7d:d7:a2:87:eb:e6:d0:9d:0e:f3:20:49: 69:e4:c0:6e:3b:23:72:5b:aa:2c:83:54:2d:77:2f:3f:b5:7f: 9f:cf:a6:b7:c3:bc:21:e2:6b:07:90:d9:08:40:d3:5e:f7:e8: 57:f3:73:04:c4:8f:a7:fe:0d:d2:25:2b:fd:a7:d4:9e:5f:8e: 48:a2:3c:08:5f:b4:30:4d:b2:29:57:e8:42:7c:b0:93:77:d0: b8:40:bf:ff:80:ee:1c:98:0e:ae:7b:f0:61:07:d1:2d:09:9c: f2:ec:de:43:3d:05:bc:16:73:90:f0:b7:ab:c8:55:4b:0d:25: 6d:e4:c0:f1:a2:95:5f:ca:d5:43:3d:a3:ee:1b:4c:93:9d:7b: 13:e7:7a:13:a9:5a:85:59:63:08:f8:30:b1:65:57:98:ba:8b: 6e:51:34:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuaPlTSzwOsSNGTDQ0GfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODY5NjU1MDlhNjQ5YzUwOGFiOGFiNzJmNzI1N2JlZjM1 Zjc5MzAwHhcNMjYwMTI1MjAwMTA0WhcNMjYwMTI2MjAwMTA0WjAzMTEwLwYDVQQD EyhiYmUyMjIyZTE5OGFkODkwNmQ2ZWEzNWYwZTdlMDFiZjJhZmZmMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbc/MVZWGfG4oNjZ8XRZATCpD0FX 8SNnjElZcyrn4M7fRSnib0xFerAlqGxnH0jCayFtqdWnpx9/I9MQrApeuZdokyQ5 /8DILPMATp/ewO8Nce2Sv9pnCJ6vYWRH7WbmdBYsjUa0JJCtnidwrtiASB+SJfFt r71nqf3EKjAKf1ypNojebkXQNJoFRHId83lujQK6SWm4gN6fRBmHFQ09mqD8lXVd qtrn5vnRUDB0D5EfHJaTvPjJLelS4DUiy/y/p+pou7W2O4Gfxgfu/mWmxCoJkGAt ZIsvuRNi8Xkm38kTJJkx7mschZ1nPXFg8n5yjlktmLfikkBMY4yCgYOQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLviIi4ZitiQbW6jXw5+Ab8q//NeMB8GA1UdIwQY MBaAFOaGllUJpknFCKuKty9yV77zX3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYt ZWQxNGFmNmRiODg4LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYtZWQxNGFmNmRiODg4 LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyMT9rWL J6AhbtBGo6VEFXMDJAhQpv78XLzqBsjOX3lKU8DciC3pp1diA3U1/h6R1uE4FyvI r1dQM2MRNPRL96W3vR9FwnT4q8w0XS2vvZs2toN4bvEtLBhbTmQ+5uUifdeih+vm 0J0O8yBJaeTAbjsjcluqLINULXcvP7V/n8+mt8O8IeJrB5DZCEDTXvfoV/NzBMSP p/4N0iUr/afUnl+OSKI8CF+0ME2yKVfoQnywk3fQuEC//4DuHJgOrnvwYQfRLQmc 8uzeQz0FvBZzkPC3q8hVSw0lbeTA8aKVX8rVQz2j7htMk517E+d6E6lahVljCPgw sWVXmLqLblE0sA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:46 2026 by rpki-client