This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json) Hash identifier: r20EMySM1usmn1duxOK29Ekfitcxzf6w8BM/vgDvNBU= Subject key identifier: D1:B7:07:54:AA:B6:2A:C4:1D:69:58:4A:52:E5:2A:94:32:8F:96:9B Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019BFC89D0130C2A84B602A6E750E57166BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 23:00:48 +0000 Manifest this update: Mon 26 Jan 2026 23:00:48 +0000 Manifest next update: Tue 27 Jan 2026 23:00:48 +0000 Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=) 2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: xvBJay5aDpz+xtCZ+mEn2THyHKuv4/j9F+Z6L+FF5UU=) 3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=) 4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:d0:13:0c:2a:84:b6:02:a6:e7:50:e5:71:66:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Jan 26 23:00:48 2026 GMT Not After : Jan 27 23:00:48 2026 GMT Subject: CN=d1b70754aab62ac41d69584a52e52a94328f969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:56:85:b0:30:9f:df:0a:98:ff:f4:c3:05: 27:b9:5a:6a:69:a1:fd:bd:32:19:44:ce:03:64:62: 75:37:c5:40:34:f7:54:14:75:d9:02:b4:85:05:ce: 48:31:82:da:25:e4:9c:d9:4b:9c:3d:24:27:91:69: ad:2e:3f:c9:37:0f:f4:63:8a:69:1f:2c:3b:98:85: 81:01:97:81:23:18:46:2b:d8:9f:0e:4a:06:2e:2f: f0:ec:30:8d:81:3b:57:f3:3d:68:51:ea:c6:ec:8a: 94:5b:3f:21:45:7b:95:e4:40:c4:7d:7c:22:d7:62: c8:63:30:f3:5d:79:ba:4f:55:ea:db:2c:6a:3b:3d: 1a:0c:47:3b:fa:d6:74:77:21:68:2e:cb:46:e3:75: 84:14:b3:ac:1d:5f:78:2c:04:ea:11:00:3e:91:b9: 9a:41:b1:25:1a:2b:28:e2:02:f1:81:6e:ce:df:30: d4:de:62:45:08:1d:a5:95:73:47:26:e4:74:34:2b: 17:b8:ab:2f:fb:f9:29:76:0d:b9:ba:1b:db:86:80: da:5c:50:6b:3e:2e:e8:ad:db:59:9d:96:7a:34:81: e6:4a:df:8f:07:7c:81:0e:80:47:08:c0:e7:c4:92: a3:98:2f:12:e4:23:33:f7:d3:33:59:bd:73:5b:d5: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:07:54:AA:B6:2A:C4:1D:69:58:4A:52:E5:2A:94:32:8F:96:9B X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:b2:74:8c:c4:ce:61:4d:b4:05:16:45:0e:2f:a4:24:d6: 95:8e:24:1a:03:d5:1b:44:71:e6:8d:cd:8a:1c:81:58:3c:4e: 75:dd:38:4d:63:13:20:8d:2b:af:51:d5:54:69:5b:2b:28:bc: 4f:0e:07:04:01:45:9b:22:fd:85:bb:11:2d:33:39:1c:bb:a2: 3c:dd:a4:4f:61:b5:63:dd:c5:14:b5:23:c1:52:60:1e:11:1c: 81:e7:1a:08:a4:d3:6b:40:b6:ff:fa:02:28:e4:f5:d1:04:a9: 74:ca:40:4e:04:fc:3c:a7:5f:48:f2:26:a6:c7:17:78:d3:42: b6:7f:2a:9e:4b:ca:31:53:2e:a2:c8:da:12:24:05:12:50:6f: 09:68:0b:20:5f:db:01:de:b6:dd:b6:4a:ef:89:7a:35:13:57: a6:80:c5:d8:cd:56:d5:1b:f6:ff:3d:bf:57:4a:4b:d2:03:e3: ba:09:4e:d6:0d:1b:08:2d:a9:39:6a:4d:f3:97:4a:a9:7f:0a: d2:54:53:fc:5f:2c:86:d1:6c:da:3d:7a:67:d8:5c:c0:e9:78: 31:ac:56:4b:4c:cd:ba:41:01:4c:ae:b0:5c:e2:83:04:23:02: 8d:4c:0a:ac:f1:2c:98:26:d2:02:bb:f3:7e:24:db:04:e4:66: b0:ec:a1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8idATDCqEtgKm51DlcWa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjYwMTI2MjMwMDQ4WhcNMjYwMTI3MjMwMDQ4WjAzMTEwLwYDVQQD EyhkMWI3MDc1NGFhYjYyYWM0MWQ2OTU4NGE1MmU1MmE5NDMyOGY5NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uFWhbAwn98KmP/0wwUnuVpqaaH9 vTIZRM4DZGJ1N8VANPdUFHXZArSFBc5IMYLaJeSc2UucPSQnkWmtLj/JNw/0Y4pp Hyw7mIWBAZeBIxhGK9ifDkoGLi/w7DCNgTtX8z1oUerG7IqUWz8hRXuV5EDEfXwi 12LIYzDzXXm6T1Xq2yxqOz0aDEc7+tZ0dyFoLstG43WEFLOsHV94LATqEQA+kbma QbElGiso4gLxgW7O3zDU3mJFCB2llXNHJuR0NCsXuKsv+/kpdg25uhvbhoDaXFBr Pi7ordtZnZZ6NIHmSt+PB3yBDoBHCMDnxJKjmC8S5CMz99MzWb1zW9XIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG3B1SqtirEHWlYSlLlKpQyj5abMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu+ydIzE zmFNtAUWRQ4vpCTWlY4kGgPVG0Rx5o3NihyBWDxOdd04TWMTII0rr1HVVGlbKyi8 Tw4HBAFFmyL9hbsRLTM5HLuiPN2kT2G1Y93FFLUjwVJgHhEcgecaCKTTa0C2//oC KOT10QSpdMpATgT8PKdfSPImpscXeNNCtn8qnkvKMVMuosjaEiQFElBvCWgLIF/b Ad623bZK74l6NRNXpoDF2M1W1Rv2/z2/V0pL0gPjuglO1g0bCC2pOWpN85dKqX8K 0lRT/F8shtFs2j16Z9hcwOl4MaxWS0zNukEBTK6wXOKDBCMCjUwKrPEsmCbSArvz fiTbBORmsOyhhA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:34 2026 by rpki-client