This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json) Hash identifier: y5MibWHudTaB/7Hl7xmG7BJolgW+KhQAo96TzJ3ZRaA= Subject key identifier: 0E:81:86:4A:F3:C0:EC:0B:90:25:9B:F2:7C:E5:AF:CB:92:E7:B8:B2 Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Certificate serial: 019BF4D0DF3E34F00CC611FA91B1491EEF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: KRG/a6Qp8JVobz7LLIzwGi26gdKtD4TY/cU6tPdrykU=) 2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=) 3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:df:3e:34:f0:0c:c6:11:fa:91:b1:49:1e:ef:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=0e81864af3c0ec0b90259bf27ce5afcb92e7b8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:4e:12:92:71:eb:ba:8d:d0:0f:72:82:10: 4a:ac:bb:df:bc:60:22:44:53:f3:75:03:fd:9c:02: 59:5b:1b:43:73:3a:07:d3:54:24:33:d0:0e:67:94: da:ef:bd:eb:eb:ae:32:f6:85:50:df:68:9c:51:0f: 7a:97:4c:61:19:3b:29:b4:41:eb:78:e3:ea:c7:6a: 6b:70:96:e8:7b:d6:a4:a4:5f:11:c0:04:4c:0a:74: 79:d1:fd:ed:0f:77:26:f1:df:b3:c4:2b:33:23:d1: fa:6c:82:7f:4e:18:92:e2:69:12:7c:0a:fb:a4:27: 13:fc:6a:3e:c2:3f:15:8a:2a:97:a9:49:c1:12:dc: 8e:a8:81:49:f3:ae:81:01:fe:ce:85:35:4e:76:be: 11:8b:1e:a3:d8:fd:92:e6:97:59:58:f2:ff:ba:24: a1:66:01:20:1f:32:41:bc:04:c1:dc:cf:1e:33:ae: 8b:d5:e3:9f:d1:60:96:24:72:c3:45:ec:cd:db:e1: 9f:23:43:b8:c1:ae:67:f5:af:da:2a:a2:10:d6:fc: ec:6c:05:96:ff:e6:d3:42:92:9c:15:db:76:d7:06: 98:ff:15:57:b5:eb:e4:cc:47:6a:4b:e8:26:30:ce: ae:61:4a:be:87:38:99:1b:1d:22:32:12:16:fc:c2: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:86:4A:F3:C0:EC:0B:90:25:9B:F2:7C:E5:AF:CB:92:E7:B8:B2 X509v3 Authority Key Identifier: keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ad:c0:2d:86:0e:00:47:27:b4:64:38:77:53:4a:8a:f0:61: a1:7e:78:ac:4c:5d:57:ae:29:8a:b9:09:32:27:3f:d6:af:33: 3a:44:5d:fa:ab:cc:17:c5:20:44:62:09:65:2e:0e:9b:67:26: ef:34:d5:9f:ed:70:ee:3a:db:ac:88:52:a7:89:a8:c0:cb:56: 0d:fd:05:2d:12:14:1f:c0:a6:15:1e:a0:01:1e:28:36:99:95: ea:18:77:a2:57:46:00:c9:41:97:f0:7d:67:a8:0f:33:74:5a: db:9f:e0:e4:39:4f:67:02:23:3b:04:f5:e6:bd:8c:4f:ff:b6: 8b:fd:b9:01:1d:c9:c5:db:3b:c0:81:46:79:a4:20:1e:ad:d8: 76:f2:3a:42:3f:00:0a:ca:1c:fc:81:0e:93:e7:f5:04:4e:3b: 46:7b:97:40:9f:90:54:fc:0c:07:4e:9e:24:14:77:c7:89:82: d7:02:98:90:3f:40:43:75:82:f5:55:13:b3:df:ef:a7:a7:56: 22:3a:2e:cb:cf:00:04:34:3c:34:d6:fb:62:6e:9a:35:7b:5e: a2:e5:56:2a:e4:1b:ef:25:61:49:a9:95:e0:93:ed:4c:06:84: 88:eb:87:63:4b:d5:ba:4c:f5:6a:8d:ce:27:f7:9e:10:6c:84: 97:c9:b6:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00N8+NPAMxhH6kbFJHu8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4 OTAxNzAwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD EygwZTgxODY0YWYzYzBlYzBiOTAyNTliZjI3Y2U1YWZjYjkyZTdiOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUZOEpJx67qN0A9yghBKrLvfvGAi RFPzdQP9nAJZWxtDczoH01QkM9AOZ5Ta773r664y9oVQ32icUQ96l0xhGTsptEHr eOPqx2prcJboe9akpF8RwARMCnR50f3tD3cm8d+zxCszI9H6bIJ/ThiS4mkSfAr7 pCcT/Go+wj8ViiqXqUnBEtyOqIFJ866BAf7OhTVOdr4Rix6j2P2S5pdZWPL/uiSh ZgEgHzJBvATB3M8eM66L1eOf0WCWJHLDRezN2+GfI0O4wa5n9a/aKqIQ1vzsbAWW /+bTQpKcFdt21waY/xVXtevkzEdqS+gmMM6uYUq+hziZGx0iMhIW/MKpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6BhkrzwOwLkCWb8nzlr8uS57iyMB8GA1UdIwQY MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq63ALYYO AEcntGQ4d1NKivBhoX54rExdV64pirkJMic/1q8zOkRd+qvMF8UgRGIJZS4Om2cm 7zTVn+1w7jrbrIhSp4mowMtWDf0FLRIUH8CmFR6gAR4oNpmV6hh3oldGAMlBl/B9 Z6gPM3Ra25/g5DlPZwIjOwT15r2MT/+2i/25AR3Jxds7wIFGeaQgHq3YdvI6Qj8A Csoc/IEOk+f1BE47RnuXQJ+QVPwMB06eJBR3x4mC1wKYkD9AQ3WC9VUTs9/vp6dW Ijouy88ABDQ8NNb7Ym6aNXteouVWKuQb7yVhSamV4JPtTAaEiOuHY0vVukz1ao3O J/eeEGyEl8m2og== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:11 2026 by rpki-client