This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json) Hash identifier: suLubc2Xx9ys/PJoXFc7zcNizkok/cLXvY5V0377D+U= Subject key identifier: 1B:2E:A8:20:B8:48:3D:66:A0:3E:BC:9B:52:A1:B5:2D:7E:A0:12:2D Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Certificate serial: 019BF4D076200E65E16F8A4495E20170BBA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 11:01:00 +0000 Manifest this update: Sun 25 Jan 2026 11:01:00 +0000 Manifest next update: Mon 26 Jan 2026 11:01:00 +0000 Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: CqgUIX5WE/PcRc2Lbj0coME7T/810olpp+NQ5KRC4J4=) 2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:76:20:0e:65:e1:6f:8a:44:95:e2:01:70:bb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Validity Not Before: Jan 25 11:01:00 2026 GMT Not After : Jan 26 11:01:00 2026 GMT Subject: CN=1b2ea820b8483d66a03ebc9b52a1b52d7ea0122d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:bd:a4:09:70:22:23:62:2c:df:f4:44:67: e6:87:c1:1b:25:78:cd:4f:75:00:d3:ae:90:f9:ea: d6:68:6e:4b:ff:74:1e:c6:2e:a6:57:52:39:c7:4e: 0e:94:ee:4a:67:5b:49:ab:8b:a6:76:50:44:a8:e3: f1:f4:75:99:dc:b7:78:14:fd:02:51:c2:45:f5:77: 4e:3b:b1:13:25:77:30:e0:b1:25:a7:47:78:67:63: be:03:a3:4f:e1:57:3b:5e:47:60:91:00:67:22:cf: 25:d7:2d:6e:57:aa:c3:ab:d6:b9:80:70:9d:cf:37: 1f:58:ae:e0:06:7d:9e:4e:d6:16:97:bf:ea:71:82: f5:91:1b:85:d9:19:aa:6d:5a:95:47:76:dd:bb:44: 5b:ba:15:c7:66:3a:e3:60:f6:be:0d:37:43:d2:b3: 92:5d:ab:c8:e0:05:c3:4b:4a:a8:26:47:c3:2a:20: 8c:f1:1c:c4:2c:12:6d:a5:0f:fd:6a:dc:cb:e9:b7: f8:0b:c8:f3:2a:c9:18:3f:28:6c:da:6b:27:be:46: 36:31:05:be:41:f6:ca:b0:c6:33:80:f3:bd:5c:cb: 1a:eb:f2:a9:97:60:c4:1a:f2:5b:aa:b1:4f:1c:f0: 83:8b:46:7e:0b:cc:19:97:19:c1:0f:96:9a:a2:43: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:A8:20:B8:48:3D:66:A0:3E:BC:9B:52:A1:B5:2D:7E:A0:12:2D X509v3 Authority Key Identifier: keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:57:ee:bf:7b:44:25:34:84:d8:7a:4e:91:11:39:d6:ea:31: 6e:1c:24:f7:04:b7:9f:9b:74:b3:47:c6:63:86:c6:b8:97:23: 8b:39:08:91:4f:a4:82:79:5b:f0:5e:da:ae:e5:a3:32:c6:6c: 76:b6:c4:58:57:da:9a:3e:97:10:a5:8d:b1:da:79:b7:38:6f: 85:6f:f7:78:09:84:c4:0a:c2:74:c4:d0:56:fa:e9:b7:b7:86: a0:50:ab:1e:68:49:1a:7e:a6:19:94:da:61:5b:c7:0d:df:16: 1c:47:13:ce:57:e0:f1:e8:59:53:9b:ad:51:a8:3f:52:82:cf: 9b:e9:c2:5f:0f:f3:b2:b1:56:a6:4c:c5:1a:e2:61:f4:8e:be: 18:7d:bc:88:e2:9e:3d:bd:04:e3:e3:52:d3:2f:c4:56:e8:f5: 70:88:89:d3:4b:df:8f:b8:4d:12:fa:92:ac:1c:b4:4a:ee:c9: 11:c1:e4:1b:2f:3b:a4:49:be:58:f8:5c:f9:7f:15:40:79:d6: e6:d3:9e:84:9a:f2:14:e4:19:e6:40:f6:d3:9f:a0:2e:fe:05: a8:24:e3:85:e8:09:c1:d0:a0:8a:7d:f9:76:f1:55:da:e3:2c: 5d:a8:4c:f1:04:bb:33:4c:87:fa:16:70:4a:e1:49:e8:09:31: fe:a8:c8:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00HYgDmXhb4pEleIBcLuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl Mjc3ZTUwHhcNMjYwMTI1MTEwMTAwWhcNMjYwMTI2MTEwMTAwWjAzMTEwLwYDVQQD EygxYjJlYTgyMGI4NDgzZDY2YTAzZWJjOWI1MmExYjUyZDdlYTAxMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcm9pAlwIiNiLN/0RGfmh8EbJXjN T3UA066Q+erWaG5L/3Qexi6mV1I5x04OlO5KZ1tJq4umdlBEqOPx9HWZ3Ld4FP0C UcJF9XdOO7ETJXcw4LElp0d4Z2O+A6NP4Vc7XkdgkQBnIs8l1y1uV6rDq9a5gHCd zzcfWK7gBn2eTtYWl7/qcYL1kRuF2RmqbVqVR3bdu0RbuhXHZjrjYPa+DTdD0rOS XavI4AXDS0qoJkfDKiCM8RzELBJtpQ/9atzL6bf4C8jzKskYPyhs2msnvkY2MQW+ QfbKsMYzgPO9XMsa6/Kpl2DEGvJbqrFPHPCDi0Z+C8wZlxnBD5aaokOAqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsuqCC4SD1moD68m1KhtS1+oBItMB8GA1UdIwQY MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4 LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVfuv3tE JTSE2HpOkRE51uoxbhwk9wS3n5t0s0fGY4bGuJcjizkIkU+kgnlb8F7aruWjMsZs drbEWFfamj6XEKWNsdp5tzhvhW/3eAmExArCdMTQVvrpt7eGoFCrHmhJGn6mGZTa YVvHDd8WHEcTzlfg8ehZU5utUag/UoLPm+nCXw/zsrFWpkzFGuJh9I6+GH28iOKe Pb0E4+NS0y/EVuj1cIiJ00vfj7hNEvqSrBy0Su7JEcHkGy87pEm+WPhc+X8VQHnW 5tOehJryFOQZ5kD205+gLv4FqCTjhegJwdCgin35dvFV2uMsXahM8QS7M0yH+hZw SuFJ6Akx/qjIvA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:03 2026 by rpki-client