This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft File: 5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json) Hash identifier: WwbjxiY0WfIAKXDrDPx8pQlLgADLp+8x4+OG5XSXy8o= Subject key identifier: 53:47:93:5D:4E:32:6A:C2:7B:41:0F:C6:59:AA:A0:B0:0A:AF:D5:F5 Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35 Certificate issuer: /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35 Certificate serial: 019BF4629E4ACD324B534BB84E7AE29550A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft Manifest number: 022E Signing time: Sun 25 Jan 2026 09:01:02 +0000 Manifest this update: Sun 25 Jan 2026 09:01:02 +0000 Manifest next update: Mon 26 Jan 2026 09:01:02 +0000 Files and hashes: 1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: PozRAqKTHl58xvY/YQN2gOxTYvcczLWGXNEjq2d+IZc=) 2: v2rVsh0dCI0ULQlOGc8HMoLg5uo.roa (hash: 6uedt+3d7jJXVdMAyo0QQWrH7s27rp7WpYCrWtYVZzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9e:4a:cd:32:4b:53:4b:b8:4e:7a:e2:95:50:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35 Validity Not Before: Jan 25 09:01:02 2026 GMT Not After : Jan 26 09:01:02 2026 GMT Subject: CN=5347935d4e326ac27b410fc659aaa0b00aafd5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:8b:ac:41:55:5c:5d:a5:db:1c:ed:82:8b: 74:58:8f:e6:6e:5e:04:31:3a:39:88:2c:bd:d7:2d: 36:33:81:50:06:ac:6a:d9:24:8a:78:41:5c:6c:30: 40:dd:fe:ab:3c:9a:29:a2:52:a7:2d:6f:02:bf:86: ba:45:cf:1d:fe:c4:40:c8:32:fd:58:c8:55:1b:78: 4b:ad:0d:d4:09:b0:66:47:c2:b2:f7:ed:64:b4:dd: 42:53:c1:d0:51:de:93:7c:bb:c2:32:8e:cd:ba:d2: 30:cb:f8:74:c3:8a:93:9d:a5:35:09:86:72:df:27: 8f:6b:3a:5c:f8:69:97:d0:8b:9c:a9:ef:75:2f:31: 06:d5:1a:bb:ba:20:42:ef:88:fa:5f:31:0e:c3:de: f0:56:41:6b:9f:40:6b:35:06:c2:5c:ae:6d:b2:3c: 8b:04:7b:09:df:5b:dd:09:e6:ce:d1:94:b4:62:bb: fb:ca:c7:b6:97:31:fa:6b:2a:4f:8c:5b:4c:4c:f2: 28:5d:ab:cc:d4:70:e0:e4:0f:52:47:61:ed:e1:65: a1:71:2c:a1:38:89:e8:99:27:0d:8a:f0:dc:8e:12: 5d:94:3f:d7:04:5e:1c:80:fc:ad:34:04:5e:ec:d9: 1a:f1:c8:b8:7a:4d:c1:e6:8a:0b:d2:a9:bd:9f:bc: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:93:5D:4E:32:6A:C2:7B:41:0F:C6:59:AA:A0:B0:0A:AF:D5:F5 X509v3 Authority Key Identifier: keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:95:28:d0:ff:8c:28:9c:02:1e:df:c2:b1:a4:25:bb:48:b8: 09:5c:55:e8:e1:76:f5:55:7a:e1:a2:41:86:f3:ff:37:b1:2c: 8c:d9:11:f6:6e:99:a4:28:55:40:79:b4:e1:bf:4b:57:1b:93: ee:fc:c2:de:75:fb:3c:49:7e:ca:24:f9:cd:2b:e5:10:83:60: 15:c7:c7:8f:81:91:9b:24:43:e2:63:fe:65:ce:a5:9d:08:a6: da:b8:68:ad:10:ef:b8:1e:f4:63:a0:a3:7c:42:53:e2:84:f8: a0:2a:60:24:9e:2f:d2:42:67:9b:d9:69:e7:e1:7a:9e:44:ec: 88:4f:03:10:ee:cf:15:80:bb:0f:f3:a5:4d:d7:81:37:e3:16: be:e5:f9:03:c2:a4:e2:f3:74:65:3a:3c:f3:ba:0d:1e:ea:a6: 81:07:11:f9:89:10:1a:c6:73:a1:dd:fe:c0:15:1f:ac:47:cd: dd:7b:85:1a:80:30:2b:8f:cf:4a:4b:ca:cf:94:0b:53:e4:e4: 1d:28:02:6e:42:74:eb:79:18:ba:c9:c7:6e:0d:c8:9c:b0:eb: 44:80:be:51:c0:47:8b:b8:6b:a9:87:02:37:e0:cb:05:cf:b8: 58:08:18:22:11:87:f6:53:5f:f6:c3:39:90:e2:a6:5e:aa:fa: 03:b9:08:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yp5KzTJLU0u4TnrilVCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTU0ZTQyYjZiNzg4ZDhlNDhiNDg4NDQyZGQ5MThiMjQ4 NWFjMzUwHhcNMjYwMTI1MDkwMTAyWhcNMjYwMTI2MDkwMTAyWjAzMTEwLwYDVQQD Eyg1MzQ3OTM1ZDRlMzI2YWMyN2I0MTBmYzY1OWFhYTBiMDBhYWZkNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCCLrEFVXF2l2xztgot0WI/mbl4E MTo5iCy91y02M4FQBqxq2SSKeEFcbDBA3f6rPJopolKnLW8Cv4a6Rc8d/sRAyDL9 WMhVG3hLrQ3UCbBmR8Ky9+1ktN1CU8HQUd6TfLvCMo7NutIwy/h0w4qTnaU1CYZy 3yePazpc+GmX0Iucqe91LzEG1Rq7uiBC74j6XzEOw97wVkFrn0BrNQbCXK5tsjyL BHsJ31vdCebO0ZS0Yrv7yse2lzH6aypPjFtMTPIoXavM1HDg5A9SR2Ht4WWhcSyh OInomScNivDcjhJdlD/XBF4cgPytNARe7Nka8ci4ek3B5ooL0qm9n7xGhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNHk11OMmrCe0EPxlmqoLAKr9X1MB8GA1UdIwQY MBaAFOSlTkK2t4jY5ItIhELdkYskhaw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAt ZGNmYmMyOGY0NzMxLzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAtZGNmYmMyOGY0NzMx LzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJUo0P+M KJwCHt/CsaQlu0i4CVxV6OF29VV64aJBhvP/N7EsjNkR9m6ZpChVQHm04b9LVxuT 7vzC3nX7PEl+yiT5zSvlEINgFcfHj4GRmyRD4mP+Zc6lnQim2rhorRDvuB70Y6Cj fEJT4oT4oCpgJJ4v0kJnm9lp5+F6nkTsiE8DEO7PFYC7D/OlTdeBN+MWvuX5A8Kk 4vN0ZTo887oNHuqmgQcR+YkQGsZzod3+wBUfrEfN3XuFGoAwK4/PSkvKz5QLU+Tk HSgCbkJ063kYusnHbg3InLDrRIC+UcBHi7hrqYcCN+DLBc+4WAgYIhGH9lNf9sM5 kOKmXqr6A7kITA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:04 2026 by rpki-client