This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json) Hash identifier: uC62DyjqzCVCbdNnBYjv+ht5V76hlLTs80zDkfjTKAs= Subject key identifier: CD:3D:39:22:24:E6:64:B2:C5:26:B8:8C:78:7B:9D:3D:70:A6:C5:D0 Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Certificate serial: 019BF8761791BFFE97C169D308764DD0CC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft Manifest number: 177C Signing time: Mon 26 Jan 2026 04:00:47 +0000 Manifest this update: Mon 26 Jan 2026 04:00:47 +0000 Manifest next update: Tue 27 Jan 2026 04:00:47 +0000 Files and hashes: 1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: u+bJ17J2woU9ayvlSchQQgNWNyBnm7re+ZU0VZxEzJ0=) 2: FXyAhkD-8Q5q4GQ3avZeolFCnH8.roa (hash: ZUZeRBd+6uQSjPBdIWYrxSWAHVlOiQl5Z7Q0BZoi1ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:17:91:bf:fe:97:c1:69:d3:08:76:4d:d0:cc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Validity Not Before: Jan 26 04:00:47 2026 GMT Not After : Jan 27 04:00:47 2026 GMT Subject: CN=cd3d392224e664b2c526b88c787b9d3d70a6c5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:1f:cc:8f:56:13:d7:d3:df:c6:1a:3b:6d: c0:19:79:6d:54:65:2d:5e:15:dd:b9:84:91:6b:f2: 9b:85:ff:d7:65:ba:6e:08:d0:39:41:a0:1d:3c:15: de:69:61:6f:3c:73:ce:2a:bc:e0:3b:aa:4b:3b:cb: 76:a5:22:56:cf:87:aa:ec:bf:55:58:de:07:ef:e1: d6:f2:ec:14:1a:55:fa:a0:3a:d0:be:4a:48:66:7f: 01:3f:e5:22:10:f4:3d:3e:80:6a:be:bc:f4:b5:ec: 66:bc:57:20:cd:54:55:4f:52:d2:1c:8b:63:11:bf: 23:a1:97:5a:f5:80:aa:7c:04:75:44:99:d6:be:11: e9:57:d5:4c:1c:53:09:8f:7f:f2:f7:0a:c6:7d:a0: 68:28:c1:b1:a8:dc:59:82:fa:01:14:c2:3f:84:94: e8:2a:9a:0c:6d:10:c8:cb:f3:1d:9c:57:6b:54:ff: a2:ad:4a:80:0f:fa:63:50:10:d2:9b:9a:8b:44:f1: 84:22:ba:df:05:0b:33:06:d7:5f:10:5a:ce:8f:5c: 7f:1a:e3:8c:5c:49:4a:c3:47:04:80:1c:fb:a0:07: a9:ed:38:d7:99:6e:1d:4d:06:51:9e:1e:1d:c0:60: 2e:3f:1b:47:01:cc:4b:01:e4:7e:36:f5:32:a2:01: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3D:39:22:24:E6:64:B2:C5:26:B8:8C:78:7B:9D:3D:70:A6:C5:D0 X509v3 Authority Key Identifier: keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:32:c3:7c:13:98:9e:4d:83:c1:2d:e8:7d:a3:c0:76:2a: c5:43:7b:bd:2e:f0:77:33:22:2a:32:90:b2:21:b9:bd:c0:12: 9c:d5:51:38:85:46:f7:50:c3:1c:e9:65:2b:8c:e3:93:c1:e6: 0b:4c:e0:9e:68:ac:e8:b3:e6:79:c6:f4:cf:b9:d5:96:51:88: 1d:ba:4f:70:f2:c7:7e:3a:ae:8e:5e:e4:fe:f9:22:27:9b:d9: 35:aa:00:b0:f3:fb:91:03:e9:fe:79:52:1e:20:41:8b:98:ed: 52:f8:d9:47:cb:1e:fd:f5:95:98:d0:4f:e8:5e:36:d6:ce:a8: 01:a9:b1:f1:bd:8b:78:31:dd:7d:b3:ae:03:52:78:dc:84:b9: 41:d7:16:4e:d7:e8:cf:fb:f5:38:96:3d:35:8a:65:3d:e2:53: 9e:b7:f0:7a:79:d4:c6:9d:be:1c:92:fd:95:75:88:0d:2f:1a: 0c:ab:4a:ae:51:2d:28:d7:71:10:b2:fe:6f:29:ba:48:30:72: 1f:b5:b6:db:7d:06:8c:3b:5d:48:c3:26:6c:54:21:70:81:fd: 84:4d:4a:90:ae:46:05:02:3a:15:a8:b2:e7:6d:8b:91:00:3e: 7c:b0:4b:c2:48:a0:11:a4:a3:18:fa:00:cf:4d:9d:d2:35:7c: f3:a8:bd:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dheRv/6XwWnTCHZN0MxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl ZWI0MTAwHhcNMjYwMTI2MDQwMDQ3WhcNMjYwMTI3MDQwMDQ3WjAzMTEwLwYDVQQD EyhjZDNkMzkyMjI0ZTY2NGIyYzUyNmI4OGM3ODdiOWQzZDcwYTZjNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRkfzI9WE9fT38YaO23AGXltVGUt XhXduYSRa/Kbhf/XZbpuCNA5QaAdPBXeaWFvPHPOKrzgO6pLO8t2pSJWz4eq7L9V WN4H7+HW8uwUGlX6oDrQvkpIZn8BP+UiEPQ9PoBqvrz0texmvFcgzVRVT1LSHItj Eb8joZda9YCqfAR1RJnWvhHpV9VMHFMJj3/y9wrGfaBoKMGxqNxZgvoBFMI/hJTo KpoMbRDIy/MdnFdrVP+irUqAD/pjUBDSm5qLRPGEIrrfBQszBtdfEFrOj1x/GuOM XElKw0cEgBz7oAep7TjXmW4dTQZRnh4dwGAuPxtHAcxLAeR+NvUyogGhUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM09OSIk5mSyxSa4jHh7nT1wpsXQMB8GA1UdIwQY MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt Y2ZjNGE2NzZkNmUwLzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIsyw3wT mJ5Ng8Et6H2jwHYqxUN7vS7wdzMiKjKQsiG5vcASnNVROIVG91DDHOllK4zjk8Hm C0zgnmis6LPmecb0z7nVllGIHbpPcPLHfjqujl7k/vkiJ5vZNaoAsPP7kQPp/nlS HiBBi5jtUvjZR8se/fWVmNBP6F421s6oAamx8b2LeDHdfbOuA1J43IS5QdcWTtfo z/v1OJY9NYplPeJTnrfwennUxp2+HJL9lXWIDS8aDKtKrlEtKNdxELL+bym6SDBy H7W2230GjDtdSMMmbFQhcIH9hE1KkK5GBQI6Faiy522LkQA+fLBLwkigEaSjGPoA z02d0jV886i9Ig== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:43 2026 by rpki-client