This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json) Hash identifier: 2/R7cdUFhIZ/NvmDQDLGqSXRumSwQ8ySjSq3WOZh988= Subject key identifier: D9:64:B1:E7:1C:A5:13:7C:4A:64:FE:1F:AC:4C:E6:4A:78:49:69:CE Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1 Certificate serial: 019BF499CCB6897582C475761371C474D66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft Manifest number: 0409 Signing time: Sun 25 Jan 2026 10:01:18 +0000 Manifest this update: Sun 25 Jan 2026 10:01:18 +0000 Manifest next update: Mon 26 Jan 2026 10:01:18 +0000 Files and hashes: 1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: +BDW0UMzZv2AtGirp4cOhIy6yELalcIuorAkV5e4B9Y=) 2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:cc:b6:89:75:82:c4:75:76:13:71:c4:74:d6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1 Validity Not Before: Jan 25 10:01:18 2026 GMT Not After : Jan 26 10:01:18 2026 GMT Subject: CN=d964b1e71ca5137c4a64fe1fac4ce64a784969ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:6c:ce:e0:69:81:31:5f:32:3d:67:96:17: 44:66:1f:2a:22:d1:c5:e7:b3:56:aa:e5:51:53:48: 50:28:2b:9d:16:44:58:89:4e:fd:18:6a:4f:ed:b4: e4:38:54:05:a1:03:bf:24:4c:a6:78:cb:7c:25:d5: 66:18:f2:8f:bb:23:4f:61:54:8f:7b:40:70:16:e5: 47:cc:94:1a:aa:f2:d9:30:79:e0:c0:6f:88:bf:b7: e5:2f:37:fe:a1:a1:de:6e:96:0c:52:44:cd:b9:d3: 1d:58:d1:77:14:13:de:2e:17:f7:1a:14:e5:96:0a: d0:b4:61:88:5e:af:21:f5:e0:83:57:f5:df:13:03: 45:87:29:05:e3:46:21:f8:72:90:4e:d9:57:25:92: 6b:0f:3a:6d:d3:5a:e6:cb:fb:c5:90:84:b9:46:89: 48:bc:73:ae:5b:72:a9:91:3a:27:0c:e0:85:b6:f8: 5d:c0:e6:0a:3e:ab:fd:a5:cd:af:6d:7e:27:84:1e: 4c:e5:5d:7e:93:f6:82:ea:c8:bc:ac:7f:6d:8a:45: dc:3b:df:e6:20:91:ad:66:02:ca:b4:39:6b:b6:4d: 40:7d:5b:06:1b:7c:51:08:ca:61:35:da:2b:c8:62: 9e:6e:97:03:bd:53:d5:fd:88:8f:d6:b8:24:5b:4e: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:64:B1:E7:1C:A5:13:7C:4A:64:FE:1F:AC:4C:E6:4A:78:49:69:CE X509v3 Authority Key Identifier: keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4d:11:c9:a9:f3:cc:7c:54:34:f1:f9:17:3a:e3:54:bd:ce: 3a:38:f3:bf:7f:bf:16:ad:c7:31:ff:34:b6:50:f2:c8:ca:57: 90:fa:45:18:da:bb:85:c7:b3:d3:a1:bc:ce:47:0a:aa:74:ba: 21:1f:ff:62:7c:99:13:01:cc:99:03:d3:5b:14:21:29:48:fb: 1e:ff:5d:64:55:98:f3:8c:2c:5a:59:86:c8:b0:01:a2:0c:b2: 9e:31:b2:b5:01:71:50:be:ca:b3:43:9f:85:28:35:43:b2:e4: fc:a5:64:91:8c:53:4d:53:af:45:97:76:44:9a:00:3e:ca:ad: 14:b4:55:a5:ce:cf:78:5a:d3:6a:c3:73:76:2f:f3:bf:f0:c7: 78:99:ac:59:0c:ad:18:b3:6b:cd:c2:58:ed:a6:96:c2:3b:4f: 04:16:d3:c3:3d:5b:e5:4c:0c:fd:94:56:e5:98:f2:3b:ee:4b: 4a:a5:a9:46:ef:15:75:6f:1d:99:c2:5c:6a:46:ff:bb:18:a0: ca:72:6d:d5:16:cc:19:75:7a:70:53:b3:90:cc:87:a4:f6:18: a5:26:54:0b:a4:6a:47:bf:5c:85:13:d7:1d:42:02:12:e8:6d: 98:00:ce:fe:a1:33:2f:75:76:0a:ce:f4:ed:d9:4f:d5:6a:a6: 50:02:61:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mcy2iXWCxHV2E3HEdNZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Mzk4Yzk2Zjc4NDc4MWIyZWRjMjAzYzc1MWM0ZTg3OTg3 ODVmYTEwHhcNMjYwMTI1MTAwMTE4WhcNMjYwMTI2MTAwMTE4WjAzMTEwLwYDVQQD EyhkOTY0YjFlNzFjYTUxMzdjNGE2NGZlMWZhYzRjZTY0YTc4NDk2OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvldszuBpgTFfMj1nlhdEZh8qItHF 57NWquVRU0hQKCudFkRYiU79GGpP7bTkOFQFoQO/JEymeMt8JdVmGPKPuyNPYVSP e0BwFuVHzJQaqvLZMHngwG+Iv7flLzf+oaHebpYMUkTNudMdWNF3FBPeLhf3GhTl lgrQtGGIXq8h9eCDV/XfEwNFhykF40Yh+HKQTtlXJZJrDzpt01rmy/vFkIS5RolI vHOuW3KpkTonDOCFtvhdwOYKPqv9pc2vbX4nhB5M5V1+k/aC6si8rH9tikXcO9/m IJGtZgLKtDlrtk1AfVsGG3xRCMphNdoryGKebpcDvVPV/YiP1rgkW05FGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlkseccpRN8SmT+H6xM5kp4SWnOMB8GA1UdIwQY MBaAFOU5jJb3hHgbLtwgPHUcToeYeF+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMt ZDFlNDYwNTE4NDgzLzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMtZDFlNDYwNTE4NDgz LzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE0Ryanz zHxUNPH5FzrjVL3OOjjzv3+/Fq3HMf80tlDyyMpXkPpFGNq7hcez06G8zkcKqnS6 IR//YnyZEwHMmQPTWxQhKUj7Hv9dZFWY84wsWlmGyLABogyynjGytQFxUL7Ks0Of hSg1Q7Lk/KVkkYxTTVOvRZd2RJoAPsqtFLRVpc7PeFrTasNzdi/zv/DHeJmsWQyt GLNrzcJY7aaWwjtPBBbTwz1b5UwM/ZRW5ZjyO+5LSqWpRu8VdW8dmcJcakb/uxig ynJt1RbMGXV6cFOzkMyHpPYYpSZUC6RqR79chRPXHUICEuhtmADO/qEzL3V2Cs70 7dlP1WqmUAJheQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:10 2026 by rpki-client