This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json) Hash identifier: FAhcmJPAVv1WXpyUnNp/Mu4NJyyyEW72TgXmb6FnNe8= Subject key identifier: 78:CC:30:D5:CB:10:09:6C:87:3B:D7:8E:AC:B1:CC:6F:87:39:53:7F Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019BFAD239C6254E237AEF82E8F478A545D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft Manifest number: 0E42 Signing time: Mon 26 Jan 2026 15:00:39 +0000 Manifest this update: Mon 26 Jan 2026 15:00:39 +0000 Manifest next update: Tue 27 Jan 2026 15:00:39 +0000 Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: K2Oh76z7Z/HFINnX6nueGa2+4U54o879LDL4s75gD7o=) 2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:39:c6:25:4e:23:7a:ef:82:e8:f4:78:a5:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Jan 26 15:00:39 2026 GMT Not After : Jan 27 15:00:39 2026 GMT Subject: CN=78cc30d5cb10096c873bd78eacb1cc6f8739537f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:e0:d2:c8:d0:d0:8e:fa:41:5c:17:72:04: 03:56:2d:66:69:f5:54:4a:68:db:e1:e7:83:cc:a6: b3:ba:4b:fd:00:4a:43:38:6e:e6:62:79:c8:49:fd: c7:b1:c9:3e:17:f2:80:b7:1c:f2:41:4e:ad:e2:e4: e1:5d:4c:b7:7d:e8:f4:93:c9:63:0d:c1:96:d0:6e: 3b:85:4c:e4:aa:12:ad:a6:1e:b0:ef:91:18:49:5d: 6a:b7:5f:3e:98:60:42:51:d7:10:8c:88:32:cd:6c: b4:8b:66:06:c4:5a:9b:4e:60:b1:16:5e:68:b7:0c: 6c:c1:66:81:25:28:d4:24:b6:97:8e:22:7c:49:df: 0d:61:14:2a:71:36:75:b0:5e:42:ce:6b:25:15:c2: 49:c5:78:5a:c4:8d:9c:87:ad:2d:79:6f:aa:bc:74: aa:51:a3:eb:fd:fd:2d:7e:9b:d3:ca:69:31:89:29: 05:a9:6c:57:38:c2:88:d4:e0:f0:29:8a:6a:38:a0: a8:83:3a:d5:30:62:e7:e9:9f:a3:4a:a2:8a:c4:fb: b9:de:6f:ce:d7:f7:87:87:de:fc:e7:e8:ba:89:ea: 30:d3:62:d3:bb:da:51:b6:75:4e:c7:c7:37:4b:ab: 87:de:db:34:52:f8:a6:80:13:77:08:9b:d0:47:35: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CC:30:D5:CB:10:09:6C:87:3B:D7:8E:AC:B1:CC:6F:87:39:53:7F X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:63:c7:df:30:ec:7c:7b:92:02:1e:ff:41:c9:1d:db:e6:6a: f9:2d:00:50:4c:96:19:0b:3f:1e:65:b8:b5:c4:b2:98:1a:37: e2:53:a0:63:d5:c0:21:b7:5e:ae:8a:b5:28:10:18:6a:f5:41: eb:d1:11:e5:87:43:d6:bc:6c:8c:33:cf:5f:31:71:38:7b:ef: db:9f:c4:ba:44:5f:a4:3d:7d:2f:01:69:d8:7b:77:a8:4f:23: 6e:f5:e0:f0:91:81:7c:96:d5:fe:44:37:0c:0a:ae:67:d1:63: 2f:c7:b1:e7:1b:87:54:55:89:ff:2d:a7:56:82:a9:10:d3:2d: 1a:fc:a2:bf:5f:fd:5e:2d:26:5c:49:43:30:c9:06:a9:34:dc: b6:90:df:0f:75:fb:18:7f:50:0d:e6:86:4b:e1:aa:7b:1d:29: 80:21:d7:c9:f0:ac:9c:70:49:1f:77:e1:1b:70:d9:d9:b4:18: c2:ae:97:8b:c1:71:c8:c6:d5:5d:51:3d:20:5d:a4:79:b4:ba: f3:d8:02:a7:1a:ef:c6:c4:31:20:d6:ee:ac:7d:b5:18:4f:0a: aa:41:37:44:09:17:c7:30:84:c6:09:dd:67:82:8a:16:a4:d7: d9:b7:fd:8c:52:65:37:b2:cf:98:77:7b:66:91:ab:81:09:2d: 3a:7a:2d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60jnGJU4jeu+C6PR4pUXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjYwMTI2MTUwMDM5WhcNMjYwMTI3MTUwMDM5WjAzMTEwLwYDVQQD Eyg3OGNjMzBkNWNiMTAwOTZjODczYmQ3OGVhY2IxY2M2Zjg3Mzk1MzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb/g0sjQ0I76QVwXcgQDVi1mafVU Smjb4eeDzKazukv9AEpDOG7mYnnISf3Hsck+F/KAtxzyQU6t4uThXUy3fej0k8lj DcGW0G47hUzkqhKtph6w75EYSV1qt18+mGBCUdcQjIgyzWy0i2YGxFqbTmCxFl5o twxswWaBJSjUJLaXjiJ8Sd8NYRQqcTZ1sF5CzmslFcJJxXhaxI2ch60teW+qvHSq UaPr/f0tfpvTymkxiSkFqWxXOMKI1ODwKYpqOKCogzrVMGLn6Z+jSqKKxPu53m/O 1/eHh9785+i6ieow02LTu9pRtnVOx8c3S6uH3ts0UvimgBN3CJvQRzVxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjMMNXLEAlshzvXjqyxzG+HOVN/MB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2PH3zDs fHuSAh7/Qckd2+Zq+S0AUEyWGQs/HmW4tcSymBo34lOgY9XAIbderoq1KBAYavVB 69ER5YdD1rxsjDPPXzFxOHvv25/EukRfpD19LwFp2Ht3qE8jbvXg8JGBfJbV/kQ3 DAquZ9FjL8ex5xuHVFWJ/y2nVoKpENMtGvyiv1/9Xi0mXElDMMkGqTTctpDfD3X7 GH9QDeaGS+Gqex0pgCHXyfCsnHBJH3fhG3DZ2bQYwq6Xi8FxyMbVXVE9IF2kebS6 89gCpxrvxsQxINburH21GE8KqkE3RAkXxzCExgndZ4KKFqTX2bf9jFJlN7LPmHd7 ZpGrgQktOnotug== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:14 2026 by rpki-client