This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json) Hash identifier: /SyGf4xVD2d3HdxkwJVe9hS2Q4b/gyHMHCphFzT6Ks4= Subject key identifier: 5D:08:5F:B5:6E:D5:35:D1:CB:4A:33:21:4C:52:DD:C5:02:DB:EE:57 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019BF6BF6EAD4D97674D93CEEFC38F464378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 20:01:39 +0000 Manifest this update: Sun 25 Jan 2026 20:01:39 +0000 Manifest next update: Mon 26 Jan 2026 20:01:39 +0000 Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=) 2: 8yIZTK-CShWBBUUDfghL2_0Azo8.roa (hash: zZSu+xq5lR1eG3HkuY9UlS4mVnZgZc2/qAyNAZnjB0Y=) 3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=) 4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=) 5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=) 6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=) 7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=) 8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: jJ/ZhImgE2Hu+xUG+0tun3+iiutEVo5rXe04WcKgZTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:6e:ad:4d:97:67:4d:93:ce:ef:c3:8f:46:43:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Jan 25 20:01:39 2026 GMT Not After : Jan 26 20:01:39 2026 GMT Subject: CN=5d085fb56ed535d1cb4a33214c52ddc502dbee57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:9e:3f:ab:a6:93:38:aa:c6:86:e9:bf:1a: 28:84:e6:bd:ab:cb:ad:f5:51:ca:d5:f1:c6:fe:ee: 57:cc:4c:18:d7:68:b3:73:a2:fe:c3:ea:43:36:ab: f5:af:ef:8c:38:3a:dd:d9:b4:32:7d:22:80:1a:31: cb:45:a0:84:8a:9d:1c:92:79:45:63:08:67:b4:51: b3:8c:1e:f4:dc:c0:27:1c:26:2b:60:4b:a7:51:be: da:e9:38:72:2e:25:b6:a2:09:e7:1a:ad:15:aa:f0: 1a:91:75:28:3c:d9:09:7b:26:cd:79:04:c9:b6:5d: ab:69:52:bd:01:24:00:f5:53:bf:70:a6:f0:af:c8: 6b:d2:d5:43:2a:19:c3:d9:2b:4f:2a:8c:9f:34:a4: 46:b9:ac:63:f4:41:ed:8e:47:af:c2:01:d5:e1:b1: a4:8e:ca:c4:b0:27:e4:9a:7c:f5:8d:2b:59:62:c0: a0:4a:1d:85:b0:c2:65:45:18:ff:ab:e0:c9:ca:ea: 00:99:39:d6:88:a3:70:f8:99:0d:3f:e1:1a:ec:ab: 27:e3:ba:c5:4c:e6:82:b7:47:ba:c6:09:a4:45:d2: 9f:15:be:13:e7:4a:5f:50:4f:5c:bd:45:24:45:96: 2c:1a:86:71:e5:9b:24:88:00:46:84:28:12:ae:cb: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:5F:B5:6E:D5:35:D1:CB:4A:33:21:4C:52:DD:C5:02:DB:EE:57 X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:28:2f:63:f6:9b:19:47:84:54:85:21:c0:48:0e:55:46:86: 3e:05:c0:90:0a:07:49:fc:c6:75:6f:ee:60:27:d6:68:17:55: c3:ea:1b:68:3c:27:2a:8b:62:7d:da:b5:47:96:79:2c:5b:a0: 0d:e9:0b:03:4a:0b:96:d0:93:48:47:7e:d2:83:61:17:64:ec: 99:4a:9c:b8:1c:e4:cc:47:ce:dd:65:7c:67:86:43:6d:0a:ec: 9d:2a:d2:a2:ee:8e:5b:c0:82:4d:d5:f1:fd:b5:ff:95:01:f2: 88:f9:74:46:51:89:e5:19:4c:b5:a6:70:cc:1e:44:ff:c4:13: c0:ab:c0:8e:9c:b2:46:df:ea:3a:4d:08:82:52:51:4f:d8:6d: 81:7d:42:49:29:a1:9d:82:50:c7:22:83:81:5d:40:53:a0:d8: 54:c4:ff:af:fa:7e:8a:0a:38:06:0d:da:57:e7:7b:0b:17:ff: fb:da:9e:c3:ad:08:9b:40:af:9a:a9:69:c4:b0:d8:57:5d:5d: bd:9c:88:e7:d6:a1:94:dc:2f:dd:e3:4c:57:ac:c3:28:ac:ed: 89:77:d5:ab:46:bd:90:e0:60:b1:72:ba:82:55:b6:13:9f:62: fc:26:7b:7a:68:f6:2d:06:7a:74:d6:a8:19:5d:52:b2:4b:1a: e8:a0:a2:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v26tTZdnTZPO78OPRkN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjYwMTI1MjAwMTM5WhcNMjYwMTI2MjAwMTM5WjAzMTEwLwYDVQQD Eyg1ZDA4NWZiNTZlZDUzNWQxY2I0YTMzMjE0YzUyZGRjNTAyZGJlZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49GeP6umkziqxobpvxoohOa9q8ut 9VHK1fHG/u5XzEwY12izc6L+w+pDNqv1r++MODrd2bQyfSKAGjHLRaCEip0cknlF YwhntFGzjB703MAnHCYrYEunUb7a6ThyLiW2ognnGq0VqvAakXUoPNkJeybNeQTJ tl2raVK9ASQA9VO/cKbwr8hr0tVDKhnD2StPKoyfNKRGuaxj9EHtjkevwgHV4bGk jsrEsCfkmnz1jStZYsCgSh2FsMJlRRj/q+DJyuoAmTnWiKNw+JkNP+Ea7Ksn47rF TOaCt0e6xgmkRdKfFb4T50pfUE9cvUUkRZYsGoZx5ZskiABGhCgSrsvbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0IX7Vu1TXRy0ozIUxS3cUC2+5XMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOygvY/ab GUeEVIUhwEgOVUaGPgXAkAoHSfzGdW/uYCfWaBdVw+obaDwnKotifdq1R5Z5LFug DekLA0oLltCTSEd+0oNhF2TsmUqcuBzkzEfO3WV8Z4ZDbQrsnSrSou6OW8CCTdXx /bX/lQHyiPl0RlGJ5RlMtaZwzB5E/8QTwKvAjpyyRt/qOk0IglJRT9htgX1CSSmh nYJQxyKDgV1AU6DYVMT/r/p+igo4Bg3aV+d7Cxf/+9qew60Im0CvmqlpxLDYV11d vZyI59ahlNwv3eNMV6zDKKztiXfVq0a9kOBgsXK6glW2E59i/CZ7emj2LQZ6dNao GV1Ssksa6KCipA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:11 2026 by rpki-client