This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json) Hash identifier: rb7JEfD7KMF2sL2np3aH2Mu926T0INg1QnM8OIxDrXM= Subject key identifier: B9:12:10:6E:41:AC:DE:D9:5D:E1:35:95:82:FA:70:1B:0E:53:D1:BE Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Certificate serial: 019BF53E9C4F7AC0473DB3D69DFCFD608130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft Manifest number: 126D Signing time: Sun 25 Jan 2026 13:01:19 +0000 Manifest this update: Sun 25 Jan 2026 13:01:19 +0000 Manifest next update: Mon 26 Jan 2026 13:01:19 +0000 Files and hashes: 1: LJC-_jw348E9MJkSCHhTzN2qooo.roa (hash: VigKdlIRvlEEvPkwucOqBByNbZoFlk6R1HJNSe1A/8Q=) 2: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: +d9MQuL1RU/4p036ftn7f12pnbZtvWqN08ic/8BBWuI=) 3: blgxhmEw4o96aXjodyt2NGn4utQ.roa (hash: vqwDcQrAKO9xP6DPN2sBqQxoqvxVDwwR5s/VxKcPEw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:9c:4f:7a:c0:47:3d:b3:d6:9d:fc:fd:60:81:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Validity Not Before: Jan 25 13:01:19 2026 GMT Not After : Jan 26 13:01:19 2026 GMT Subject: CN=b912106e41acded95de1359582fa701b0e53d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:06:61:ec:a5:d7:2b:43:2e:54:05:07:be: f5:b0:2f:70:cf:fe:de:a8:5c:68:8a:fb:17:4e:19: 87:25:3a:da:24:ab:57:d8:ce:29:de:ea:c3:20:ac: ed:9e:b0:de:5e:5f:b0:1a:68:ce:3f:93:a7:89:bf: 1b:8b:80:b1:32:25:46:15:f9:c9:ef:3f:67:20:fe: 47:79:02:bd:fc:d5:60:00:21:ed:af:ad:b6:06:4b: f9:1a:14:a6:34:28:55:ed:70:8b:a7:38:74:67:8e: 46:80:3a:3d:58:b0:e4:e7:f9:aa:ce:d3:c4:c4:28: 7d:ca:bd:fa:f2:b9:be:f1:d5:04:96:d1:32:fb:ec: 74:b5:8e:f0:fc:d8:a8:97:7d:b8:e2:49:37:3b:f6: de:18:da:49:43:6e:c5:8f:5a:fd:89:ec:05:cc:a1: 5b:47:7d:f8:db:79:4f:5e:f4:ef:b4:8b:cf:3e:5e: 75:6a:9e:48:26:37:98:1f:3c:eb:93:e8:82:f0:12: 32:57:45:7a:2b:b1:6a:48:c5:c5:92:7a:41:29:ce: 44:c3:d2:1e:65:11:22:92:1c:f5:db:5b:25:e2:f2: 38:d5:48:54:08:96:73:cd:e7:6b:a6:00:1f:69:30: 7f:77:8e:de:a1:52:35:cc:85:aa:02:15:a6:89:ab: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:10:6E:41:AC:DE:D9:5D:E1:35:95:82:FA:70:1B:0E:53:D1:BE X509v3 Authority Key Identifier: keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cb:a7:ab:d4:44:d8:1c:b0:06:5b:e6:91:55:92:c3:54:ea: ca:03:da:1e:32:8b:da:85:f9:81:cb:a3:4b:cf:2b:07:49:c9: d4:fd:18:a0:00:d2:da:a7:9f:2b:3f:e5:3f:6d:e7:8a:79:da: b5:b3:52:35:bc:1f:de:d1:11:95:e3:90:db:93:8c:85:14:ac: c1:42:c3:54:03:fa:1b:4e:f2:87:b4:84:db:e0:bc:6f:74:84: 76:03:98:63:c6:93:ed:09:67:6d:ea:95:00:df:8c:5e:3a:bf: 03:2d:6d:82:bf:17:a7:cd:af:21:dd:33:c1:b3:b2:74:d8:75: bc:67:84:92:00:e3:5c:bf:97:55:fa:aa:55:38:23:61:10:6f: 14:6b:1b:b9:36:13:40:fc:1a:91:4d:eb:84:cf:7a:b1:bb:9c: 38:33:4a:1b:ff:fc:b3:f2:9f:8c:13:1c:a3:9c:50:8f:dd:00: c3:08:6a:69:f0:9b:31:21:92:3b:8c:95:c4:23:b5:73:2e:e3: a7:48:38:a4:32:f2:23:80:9b:96:63:d9:02:0c:10:05:34:39: fd:00:09:c4:1e:09:ea:2d:a3:f4:17:fe:88:0d:9f:5b:5b:e0: 19:fa:c7:e2:9e:1b:a9:36:b0:0d:23:36:f7:73:20:66:d8:6b: 0d:57:31:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PpxPesBHPbPWnfz9YIEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0 NjViOTkwHhcNMjYwMTI1MTMwMTE5WhcNMjYwMTI2MTMwMTE5WjAzMTEwLwYDVQQD EyhiOTEyMTA2ZTQxYWNkZWQ5NWRlMTM1OTU4MmZhNzAxYjBlNTNkMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB4GYeyl1ytDLlQFB771sC9wz/7e qFxoivsXThmHJTraJKtX2M4p3urDIKztnrDeXl+wGmjOP5Onib8bi4CxMiVGFfnJ 7z9nIP5HeQK9/NVgACHtr622Bkv5GhSmNChV7XCLpzh0Z45GgDo9WLDk5/mqztPE xCh9yr368rm+8dUEltEy++x0tY7w/Niol3244kk3O/beGNpJQ27Fj1r9iewFzKFb R33423lPXvTvtIvPPl51ap5IJjeYHzzrk+iC8BIyV0V6K7FqSMXFknpBKc5Ew9Ie ZREikhz121sl4vI41UhUCJZzzedrpgAfaTB/d47eoVI1zIWqAhWmiasKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkSEG5BrN7ZXeE1lYL6cBsOU9G+MB8GA1UdIwQY MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMunq9RE 2BywBlvmkVWSw1TqygPaHjKL2oX5gcujS88rB0nJ1P0YoADS2qefKz/lP23ninna tbNSNbwf3tERleOQ25OMhRSswULDVAP6G07yh7SE2+C8b3SEdgOYY8aT7QlnbeqV AN+MXjq/Ay1tgr8Xp82vId0zwbOydNh1vGeEkgDjXL+XVfqqVTgjYRBvFGsbuTYT QPwakU3rhM96sbucODNKG//8s/KfjBMco5xQj90AwwhqafCbMSGSO4yVxCO1cy7j p0g4pDLyI4CblmPZAgwQBTQ5/QAJxB4J6i2j9Bf+iA2fW1vgGfrH4p4bqTawDSM2 93MgZthrDVcxVA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:47 2026 by rpki-client