This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json) Hash identifier: Zp1E2AhizsLJOCnGA1KoCqFDWzv+ePmg8FIBBwLk424= Subject key identifier: 60:17:F4:61:B8:F0:68:5D:2B:3F:FD:CE:37:17:3E:2E:D1:CD:B2:6F Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df Certificate serial: 019BF72CFB6E491B80EF7A4BD0671D915E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft Manifest number: 106E Signing time: Sun 25 Jan 2026 22:01:18 +0000 Manifest this update: Sun 25 Jan 2026 22:01:18 +0000 Manifest next update: Mon 26 Jan 2026 22:01:18 +0000 Files and hashes: 1: 0WuWrczZKDyJ7R3F-ygi1tUDprU.roa (hash: I9T3o7zp+QPhUZLHuzT1L2fbLCkg093j0anbvRpSNXk=) 2: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: gYXP90n52a0K7BBaKKAfaj1I95wv10mrGQB7XCu3m1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fb:6e:49:1b:80:ef:7a:4b:d0:67:1d:91:5e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df Validity Not Before: Jan 25 22:01:18 2026 GMT Not After : Jan 26 22:01:18 2026 GMT Subject: CN=6017f461b8f0685d2b3ffdce37173e2ed1cdb26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:fc:ba:76:0c:8f:b4:0c:65:b5:3a:c0:b6: 88:f2:f6:43:73:e9:68:f6:fa:b7:86:a0:3f:29:02: 18:ac:63:26:69:58:a1:85:e8:71:bf:e3:07:f9:f0: 39:1f:2d:15:6b:56:38:f3:e0:4b:8b:08:0c:d1:cb: 34:9f:08:90:ba:1a:2f:ca:e8:36:1d:57:43:54:56: eb:3a:15:dd:4a:34:38:86:39:39:fa:f0:7c:b3:e1: f2:57:ff:7c:01:d2:c0:99:1c:c3:cf:82:e7:93:5e: b0:9a:bb:ef:e6:fe:1f:80:32:ab:1d:f6:a1:48:74: 40:98:e7:1a:ec:14:14:cd:d6:f9:22:d8:96:13:3d: a0:79:63:02:81:f4:c1:76:c1:96:e1:32:a0:98:2c: 21:29:0e:be:d6:d4:9a:9b:81:85:62:4e:85:74:b4: 32:50:a3:32:03:db:92:c0:e8:b2:ec:ff:e5:19:a0: d5:0a:57:66:86:bf:5c:01:36:60:75:2e:b1:3f:a6: 0c:5f:99:66:ec:84:77:16:30:5e:bc:69:e6:f1:02: 86:e1:17:72:21:27:3e:d7:11:c9:a7:12:48:85:ca: 8e:79:df:ce:39:de:13:33:8b:a6:ff:91:b1:40:16: 8c:5e:7b:ce:fe:2c:9d:4c:8a:8c:1f:e9:55:9c:51: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:17:F4:61:B8:F0:68:5D:2B:3F:FD:CE:37:17:3E:2E:D1:CD:B2:6F X509v3 Authority Key Identifier: keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2f:05:7a:b7:39:89:1e:9c:59:06:bc:2d:4e:e0:c5:24:7a: 0b:50:46:bd:60:cb:04:dc:bd:64:64:e0:30:eb:47:07:84:7c: 26:f7:76:b0:7b:f5:ec:89:b7:81:ac:66:8e:6e:3e:f2:94:c9: 39:d3:2f:ed:7e:1c:62:61:a5:a2:88:0f:22:ee:9d:15:ae:ec: 8b:b7:0a:d0:9b:00:83:b3:29:9c:1b:8c:88:c3:0d:42:d5:31: 79:4f:58:ae:23:32:6f:59:26:0c:ae:bf:62:d8:33:31:47:a3: c6:f7:a5:46:9a:9e:f2:26:d7:ba:48:8d:a9:d2:a2:ea:c4:ee: 93:57:07:7b:06:ad:99:20:f8:d2:95:d0:63:b5:d6:c3:ac:9b: 42:54:ea:69:4d:9a:82:33:7c:bc:87:b1:41:c5:a7:08:31:2b: a4:ad:ec:2f:cd:a0:c8:ea:ff:82:7a:97:d3:94:2c:17:f3:cd: c7:b6:3e:4f:f3:28:c6:37:cc:ab:33:b0:f1:ab:90:35:9c:b1: 43:b4:56:6e:3e:21:81:be:c1:b5:b8:f1:da:d2:74:f7:c4:eb: be:72:48:a5:5f:9c:6a:2e:03:38:8f:42:e9:31:8d:35:44:e3: 01:48:9c:d5:34:7a:aa:13:5b:2a:7c:8f:35:35:40:0a:af:12: d8:3f:95:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LPtuSRuA73pL0GcdkV6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi NGU3ZGYwHhcNMjYwMTI1MjIwMTE4WhcNMjYwMTI2MjIwMTE4WjAzMTEwLwYDVQQD Eyg2MDE3ZjQ2MWI4ZjA2ODVkMmIzZmZkY2UzNzE3M2UyZWQxY2RiMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5T8unYMj7QMZbU6wLaI8vZDc+lo 9vq3hqA/KQIYrGMmaVihhehxv+MH+fA5Hy0Va1Y48+BLiwgM0cs0nwiQuhovyug2 HVdDVFbrOhXdSjQ4hjk5+vB8s+HyV/98AdLAmRzDz4Lnk16wmrvv5v4fgDKrHfah SHRAmOca7BQUzdb5ItiWEz2geWMCgfTBdsGW4TKgmCwhKQ6+1tSam4GFYk6FdLQy UKMyA9uSwOiy7P/lGaDVCldmhr9cATZgdS6xP6YMX5lm7IR3FjBevGnm8QKG4Rdy ISc+1xHJpxJIhcqOed/OOd4TM4um/5GxQBaMXnvO/iydTIqMH+lVnFEizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAX9GG48GhdKz/9zjcXPi7RzbJvMB8GA1UdIwQY MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2 LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUi8Ferc5 iR6cWQa8LU7gxSR6C1BGvWDLBNy9ZGTgMOtHB4R8Jvd2sHv17Im3gaxmjm4+8pTJ OdMv7X4cYmGloogPIu6dFa7si7cK0JsAg7MpnBuMiMMNQtUxeU9YriMyb1kmDK6/ YtgzMUejxvelRpqe8ibXukiNqdKi6sTuk1cHewatmSD40pXQY7XWw6ybQlTqaU2a gjN8vIexQcWnCDErpK3sL82gyOr/gnqX05QsF/PNx7Y+T/MoxjfMqzOw8auQNZyx Q7RWbj4hgb7Btbjx2tJ098TrvnJIpV+cai4DOI9C6TGNNUTjAUic1TR6qhNbKnyP NTVACq8S2D+Vsg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:58 2026 by rpki-client