This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json) Hash identifier: MMKU/9S+Lfk37HsEYPI9H2wRxT3PLVPjbvkzrQ/2Ohg= Subject key identifier: 2B:5E:7B:6F:F0:A6:65:77:57:CE:E2:16:1F:5A:1A:42:CB:94:52:C3 Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Certificate serial: 019BF6BF3D22D71C5F5473906BDD4D38BD55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 20:01:26 +0000 Manifest this update: Sun 25 Jan 2026 20:01:26 +0000 Manifest next update: Mon 26 Jan 2026 20:01:26 +0000 Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: FmWbBSAYBQCfMOf57vgTMgXy0Pq5dCzWYNK7/We+E5w=) 2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=) 3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3d:22:d7:1c:5f:54:73:90:6b:dd:4d:38:bd:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Validity Not Before: Jan 25 20:01:26 2026 GMT Not After : Jan 26 20:01:26 2026 GMT Subject: CN=2b5e7b6ff0a6657757cee2161f5a1a42cb9452c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:b3:92:a6:b6:5a:c8:eb:39:c7:1a:67:66: 28:7f:e2:4f:a6:8e:ec:c7:2f:57:25:af:15:03:ac: bb:17:c2:16:21:1f:62:cd:44:b5:b1:6a:58:f8:a5: b6:26:fc:8d:b4:bc:9b:72:c6:08:f9:fb:bc:d1:2c: 89:60:cc:94:14:95:85:21:f6:36:ec:0f:cf:f7:57: 00:6e:b7:ba:69:87:30:c6:b6:1e:21:83:f0:ac:83: db:d6:96:19:a2:c2:7a:f2:64:ad:d2:26:5f:29:6e: 50:5c:4f:9b:96:78:df:fd:8f:25:45:3e:f4:df:bb: 3c:09:b3:4e:e6:55:34:6a:8c:7a:7e:87:b3:6c:78: a9:61:d5:9b:0f:8e:b9:2a:4c:0a:0a:73:07:3f:19: 44:03:e9:ef:3e:ca:38:61:9f:6e:6b:70:fa:99:d8: 10:b3:52:e8:d9:9e:0b:a2:1d:d0:10:6a:28:68:c2: 5b:f8:23:43:94:0a:ac:71:8f:39:cb:0e:1f:a4:a5: 70:52:6f:bd:62:51:92:85:1d:47:b6:4c:e3:c6:98: 3a:20:2e:bd:0a:96:d2:76:4d:c1:59:d3:d2:4e:6e: 90:a1:bb:9e:86:ee:92:d2:a8:64:a8:e6:17:4c:c3: 79:b7:40:5f:51:45:72:c7:6f:ad:46:31:87:4f:7d: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:7B:6F:F0:A6:65:77:57:CE:E2:16:1F:5A:1A:42:CB:94:52:C3 X509v3 Authority Key Identifier: keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0c:f3:d0:a8:70:1d:6c:f0:1a:b5:bc:01:26:85:d6:b3:c2: ad:c4:46:1d:3b:38:c4:c2:4d:9c:a1:4b:97:d8:59:53:fe:b7: c2:7d:83:1b:90:90:d3:a9:16:fb:7c:92:ff:f9:c2:a7:9d:a0: d0:25:b9:e7:91:4f:ad:63:54:16:df:b1:47:c5:92:ef:42:40: 0c:d9:35:26:f1:06:6d:d7:2f:9f:1d:0e:e6:64:94:94:8d:23: 66:02:ed:25:da:d2:d3:06:b1:6d:9e:9d:f8:06:9d:32:e1:c6: ac:97:92:43:05:5d:ac:35:a4:49:18:86:ba:f9:01:8b:bd:0d: fb:5f:f5:2a:e8:c1:70:b1:50:f8:c8:4e:8d:c0:5d:a7:47:61: 00:ac:c2:4d:23:4a:d5:90:b7:9b:fa:51:f2:89:45:77:2d:98: 6b:c1:15:b7:5d:38:19:b8:83:ff:ee:f1:f4:70:84:5f:74:e0: 9f:e8:24:d6:da:da:94:2b:f9:e4:49:4a:43:f8:43:bb:ab:b8: af:ac:40:6d:ee:6c:74:e8:88:4a:79:f5:9c:8a:b9:60:66:db: b6:de:08:b7:50:c9:f3:a2:26:5c:8d:55:b1:8c:31:c4:e6:da: c0:6a:6e:98:0f:d7:35:0f:98:74:e9:db:41:b8:0b:70:b0:78: 26:a8:a4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vz0i1xxfVHOQa91NOL1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4 OTAxNzAwHhcNMjYwMTI1MjAwMTI2WhcNMjYwMTI2MjAwMTI2WjAzMTEwLwYDVQQD EygyYjVlN2I2ZmYwYTY2NTc3NTdjZWUyMTYxZjVhMWE0MmNiOTQ1MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjGzkqa2WsjrOccaZ2Yof+JPpo7s xy9XJa8VA6y7F8IWIR9izUS1sWpY+KW2JvyNtLybcsYI+fu80SyJYMyUFJWFIfY2 7A/P91cAbre6aYcwxrYeIYPwrIPb1pYZosJ68mSt0iZfKW5QXE+blnjf/Y8lRT70 37s8CbNO5lU0aox6foezbHipYdWbD465KkwKCnMHPxlEA+nvPso4YZ9ua3D6mdgQ s1Lo2Z4Loh3QEGooaMJb+CNDlAqscY85yw4fpKVwUm+9YlGShR1Htkzjxpg6IC69 CpbSdk3BWdPSTm6Qobuehu6S0qhkqOYXTMN5t0BfUUVyx2+tRjGHT32d8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtee2/wpmV3V87iFh9aGkLLlFLDMB8GA1UdIwQY MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwzz0Khw HWzwGrW8ASaF1rPCrcRGHTs4xMJNnKFLl9hZU/63wn2DG5CQ06kW+3yS//nCp52g 0CW555FPrWNUFt+xR8WS70JADNk1JvEGbdcvnx0O5mSUlI0jZgLtJdrS0waxbZ6d +AadMuHGrJeSQwVdrDWkSRiGuvkBi70N+1/1KujBcLFQ+MhOjcBdp0dhAKzCTSNK 1ZC3m/pR8olFdy2Ya8EVt104GbiD/+7x9HCEX3Tgn+gk1tralCv55ElKQ/hDu6u4 r6xAbe5sdOiISnn1nIq5YGbbtt4It1DJ86ImXI1VsYwxxObawGpumA/XNQ+YdOnb QbgLcLB4Jqiksw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:01 2026 by rpki-client