This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json) Hash identifier: LxJW7rKoiYLIDlMaiCSDSq90vdTpetjaJd1PtBlTmI0= Subject key identifier: C5:36:44:19:E5:4D:FA:4F:CE:F8:52:ED:A9:5D:C2:3F:EA:7E:9E:95 Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac Certificate serial: 019BF79A5F7802A7F79D815FBFED97CEC43E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft Manifest number: 0BDB Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=) 2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: MLChIuupcL7bXZcPSuE59D/GoytXF0CePDoDTDhMfOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5f:78:02:a7:f7:9d:81:5f:bf:ed:97:ce:c4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=c5364419e54dfa4fcef852eda95dc23fea7e9e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:59:80:10:a2:02:6f:bf:36:3b:dc:c3:45: 46:ba:2f:8d:ae:6f:65:05:4d:08:a9:0c:a6:6e:a6: 05:62:37:29:ad:78:4e:6b:52:6a:49:a1:e6:e5:40: c7:1b:4a:d0:d7:e3:c2:21:04:d5:5b:35:9e:3a:75: 42:8c:ad:3c:02:ea:e0:25:b3:16:95:9c:de:f1:58: 5d:ec:55:b0:d9:e9:82:84:2b:5f:ce:0f:fd:96:bb: 08:da:b6:6e:ac:87:f7:54:d3:17:ff:e5:3e:03:9e: 21:0e:86:c0:6f:23:9b:c9:29:0e:07:1d:80:59:3f: eb:0f:e0:11:e9:85:a0:64:3c:76:ef:88:4b:a9:a9: 5b:3c:cc:8a:2f:cd:1f:3d:5c:f3:99:1b:b1:5c:cc: d2:d3:b7:76:3f:d8:03:bf:6e:b9:da:4d:59:b5:01: 01:a2:52:d1:a6:44:dd:44:1c:14:aa:bf:f7:81:99: 9a:91:d5:ae:4a:dd:b9:e9:87:6f:ce:95:b3:08:7c: e2:60:d4:b1:c7:55:81:0f:65:10:03:e9:34:97:2b: f1:43:f3:b2:61:8e:e1:67:bf:ba:05:5b:87:d7:ef: 03:3f:62:12:5e:d0:f4:64:e4:44:96:f8:ab:4d:68: 77:5e:0c:df:bb:6c:b3:6e:76:13:5e:e4:ac:12:a5: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:36:44:19:E5:4D:FA:4F:CE:F8:52:ED:A9:5D:C2:3F:EA:7E:9E:95 X509v3 Authority Key Identifier: keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:56:ab:c2:5b:05:eb:0a:d3:a4:44:eb:a8:4c:2f:20:d7:e5: b2:1d:85:c3:72:de:55:b2:37:03:7e:cc:4f:13:7a:c0:f7:33: 2e:d6:b8:dc:4d:ce:20:43:0e:a0:74:97:f9:fe:9b:48:17:10: a1:f5:ac:b4:f4:0d:8b:48:ed:d9:ca:11:4e:ed:ea:72:73:a9: 41:6e:93:84:42:1e:8d:c2:45:2a:84:77:1a:5a:40:4c:05:6d: 57:f8:7a:28:86:db:7e:c2:fa:e1:fc:bc:76:48:09:67:61:1c: f0:65:c5:4c:cf:4c:17:1e:2e:59:66:3d:d6:95:4f:8b:22:e2: 20:45:ac:c9:22:94:00:d2:6d:e2:55:7b:ed:64:b5:1f:6e:d4: 8c:ee:c8:9c:0c:ef:f6:f9:88:aa:55:e4:4c:db:d1:37:1d:3f: 46:d7:49:8d:1f:8f:1b:49:56:c0:cd:18:bd:51:49:8d:03:f5: 84:c6:31:3b:60:bb:00:71:53:e3:ef:49:0f:8a:b4:2a:b7:40: 72:eb:15:81:f4:a7:5e:bf:7f:d3:ea:5e:77:49:1c:19:cc:16: 19:4a:a4:5b:97:ad:6f:bd:36:1b:d8:e1:0e:e2:4b:88:e2:11: 23:f7:37:a6:1c:a2:cf:78:71:38:0a:6b:a6:9d:f6:3f:53:de: 92:a5:4d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml94Aqf3nYFfv+2XzsQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTU2Nzk0YTdiOTg5MTExNWFkM2FmOTQ1NzNlNzk2MWIx NjRiYWMwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD EyhjNTM2NDQxOWU1NGRmYTRmY2VmODUyZWRhOTVkYzIzZmVhN2U5ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MVZgBCiAm+/Njvcw0VGui+Nrm9l BU0IqQymbqYFYjcprXhOa1JqSaHm5UDHG0rQ1+PCIQTVWzWeOnVCjK08AurgJbMW lZze8Vhd7FWw2emChCtfzg/9lrsI2rZurIf3VNMX/+U+A54hDobAbyObySkOBx2A WT/rD+AR6YWgZDx274hLqalbPMyKL80fPVzzmRuxXMzS07d2P9gDv2652k1ZtQEB olLRpkTdRBwUqr/3gZmakdWuSt256YdvzpWzCHziYNSxx1WBD2UQA+k0lyvxQ/Oy YY7hZ7+6BVuH1+8DP2ISXtD0ZORElvirTWh3Xgzfu2yzbnYTXuSsEqVkNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU2RBnlTfpPzvhS7aldwj/qfp6VMB8GA1UdIwQY MBaAFMOVZ5SnuYkRFa06+UVz55YbFkusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYt NTAwNGZiMjg4ODRlLzEvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYtNTAwNGZiMjg4ODRl LzEvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1arwlsF 6wrTpETrqEwvINflsh2Fw3LeVbI3A37MTxN6wPczLta43E3OIEMOoHSX+f6bSBcQ ofWstPQNi0jt2coRTu3qcnOpQW6ThEIejcJFKoR3GlpATAVtV/h6KIbbfsL64fy8 dkgJZ2Ec8GXFTM9MFx4uWWY91pVPiyLiIEWsySKUANJt4lV77WS1H27UjO7InAzv 9vmIqlXkTNvRNx0/RtdJjR+PG0lWwM0YvVFJjQP1hMYxO2C7AHFT4+9JD4q0KrdA cusVgfSnXr9/0+ped0kcGcwWGUqkW5etb702G9jhDuJLiOIRI/c3phyiz3hxOApr pp32P1PekqVNLg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:05 2026 by rpki-client