This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json) Hash identifier: 01Hog6Q8PcJn8vYsmQ7zat2XVyWU0XDrE2Zg8fBwWo4= Subject key identifier: 18:BF:3A:35:4E:5F:A3:F3:C1:D8:17:8A:3E:C6:A0:43:D6:19:40:40 Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2 Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2 Certificate serial: 019BF7D24F75C07DB3DA2408E6426DE79F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft Manifest number: 05C4 Signing time: Mon 26 Jan 2026 01:01:53 +0000 Manifest this update: Mon 26 Jan 2026 01:01:53 +0000 Manifest next update: Tue 27 Jan 2026 01:01:53 +0000 Files and hashes: 1: 8YcVP3VklLR5i4GG8rnBQdHA76g.roa (hash: WsvT6kIFgDTr5dW65eaLGj20QeNg4nV6eveWdjaSMx0=) 2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: UlCgqqZapgOSStaLo2c/oyhIbpQDSgsWPr8K0xQTmxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:4f:75:c0:7d:b3:da:24:08:e6:42:6d:e7:9f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2 Validity Not Before: Jan 26 01:01:53 2026 GMT Not After : Jan 27 01:01:53 2026 GMT Subject: CN=18bf3a354e5fa3f3c1d8178a3ec6a043d6194040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:5d:2e:4b:16:00:d2:29:6d:26:fe:ef:21: a3:b0:3e:8b:c1:a9:a3:0e:f1:5b:6e:ba:8c:a4:e8: f3:c6:e0:7c:86:db:f4:c6:2f:66:47:a0:79:cb:bc: 5d:c8:08:8f:e3:6b:81:3c:5a:f6:d0:98:55:86:31: 71:11:c2:d2:7f:aa:84:6f:aa:ca:8a:a9:8d:77:d0: 62:f2:0d:c4:06:56:56:de:b8:45:ed:d3:41:5f:ab: 72:4f:9f:c2:70:23:8f:21:24:be:ba:29:db:db:aa: a0:59:b4:b9:ec:6f:b5:d8:09:66:e3:3a:1d:d7:5d: e9:73:ab:2c:82:86:60:d7:2d:71:c0:2c:e6:b1:53: 12:74:ca:6c:71:2e:77:fd:74:74:e3:f2:89:c8:81: be:a5:04:ac:3d:5e:18:ae:7c:b6:57:08:34:5d:0d: 1e:5b:c7:78:65:94:19:db:39:40:28:aa:98:03:ef: 3b:35:f7:f1:7d:cb:76:71:e3:1d:0d:dc:c7:8c:ce: ba:19:85:9e:fc:2e:85:e2:dd:ca:58:6c:6a:60:60: 1f:3e:97:80:8b:11:95:51:2a:ed:02:c8:77:03:4f: af:86:b3:3e:2d:86:7b:16:e8:54:de:e9:38:4c:8f: 85:49:88:54:ac:4d:51:dc:0d:b1:e1:ea:27:12:73: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:3A:35:4E:5F:A3:F3:C1:D8:17:8A:3E:C6:A0:43:D6:19:40:40 X509v3 Authority Key Identifier: keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:81:9d:7f:b5:63:32:64:71:7a:bb:58:ee:e3:58:9a:5c:51: 2c:a9:05:61:ab:d2:cc:bb:93:4a:5b:51:f0:b4:9a:95:a9:b2: f0:d2:03:c0:47:f1:20:f6:d8:99:47:1e:f3:2c:e0:8b:3d:f8: ce:ed:65:60:0c:28:43:34:03:8f:f7:a1:64:54:34:76:8f:cb: 8b:de:a5:36:36:e5:5c:47:4d:48:e5:39:68:3e:33:77:00:34: 6e:77:6c:94:22:b3:c7:98:f8:cc:68:94:84:fe:f8:8a:e5:80: 43:ea:aa:53:2c:18:3d:0d:a8:36:9a:f4:73:f3:e5:4a:11:3e: 74:7e:51:13:6a:0d:01:94:f6:26:a1:75:41:c4:8d:2e:75:f0: f4:d9:57:bf:b9:7f:bc:0b:9c:0d:fa:d2:bf:36:42:10:5d:b2: f8:d1:ca:74:f8:46:75:57:43:64:98:26:3a:11:a4:e7:73:8a: 62:10:ad:23:66:88:3f:ab:bb:4b:19:73:f6:3e:93:ce:84:32: 13:72:80:0a:47:76:76:11:af:45:e9:48:fb:d5:27:ff:34:a1: 14:a3:4e:8c:4e:29:61:8d:cd:7c:e3:79:c1:2b:11:69:35:63: 13:fb:5b:35:da:d4:fd:8a:69:0d:6e:5a:7c:f9:cc:55:e8:67: fe:cd:ed:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30k91wH2z2iQI5kJt559VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh YjU1ZDIwHhcNMjYwMTI2MDEwMTUzWhcNMjYwMTI3MDEwMTUzWjAzMTEwLwYDVQQD EygxOGJmM2EzNTRlNWZhM2YzYzFkODE3OGEzZWM2YTA0M2Q2MTk0MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ZdLksWANIpbSb+7yGjsD6Lwamj DvFbbrqMpOjzxuB8htv0xi9mR6B5y7xdyAiP42uBPFr20JhVhjFxEcLSf6qEb6rK iqmNd9Bi8g3EBlZW3rhF7dNBX6tyT5/CcCOPISS+uinb26qgWbS57G+12Alm4zod 113pc6ssgoZg1y1xwCzmsVMSdMpscS53/XR04/KJyIG+pQSsPV4Yrny2Vwg0XQ0e W8d4ZZQZ2zlAKKqYA+87Nffxfct2ceMdDdzHjM66GYWe/C6F4t3KWGxqYGAfPpeA ixGVUSrtAsh3A0+vhrM+LYZ7FuhU3uk4TI+FSYhUrE1R3A2x4eonEnNvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi/OjVOX6PzwdgXij7GoEPWGUBAMB8GA1UdIwQY MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoGdf7Vj MmRxertY7uNYmlxRLKkFYavSzLuTSltR8LSalamy8NIDwEfxIPbYmUce8yzgiz34 zu1lYAwoQzQDj/ehZFQ0do/Li96lNjblXEdNSOU5aD4zdwA0bndslCKzx5j4zGiU hP74iuWAQ+qqUywYPQ2oNpr0c/PlShE+dH5RE2oNAZT2JqF1QcSNLnXw9NlXv7l/ vAucDfrSvzZCEF2y+NHKdPhGdVdDZJgmOhGk53OKYhCtI2aIP6u7Sxlz9j6TzoQy E3KACkd2dhGvRelI+9Un/zShFKNOjE4pYY3NfON5wSsRaTVjE/tbNdrU/YppDW5a fPnMVehn/s3tWg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:15 2026 by rpki-client