This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json) Hash identifier: Sraw8Fo/NDFN7VDhbBNI04KL5DsA9IgMIuFj/Vr9EhY= Subject key identifier: 14:0E:5D:C4:9F:F3:2F:CF:6A:CD:68:34:09:5C:BD:67:F2:19:FA:8A Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019BF53E1FFC16068F1D2E7993DF21BEEC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft Manifest number: 10EB Signing time: Sun 25 Jan 2026 13:00:47 +0000 Manifest this update: Sun 25 Jan 2026 13:00:47 +0000 Manifest next update: Mon 26 Jan 2026 13:00:47 +0000 Files and hashes: 1: 10snHBnMf0Kuhe7miu2KWZf7QKU.roa (hash: cMY4zBuFGSixWKDTcCmGLnVnrvMgI5u/opvWitB7358=) 2: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=) 3: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=) 4: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: S6KC2rAgibAG5YJMv9GQYsvxFmNWyZmP3CT1gVIv8kk=) 5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=) 6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=) 7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:1f:fc:16:06:8f:1d:2e:79:93:df:21:be:ec:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 25 13:00:47 2026 GMT Not After : Jan 26 13:00:47 2026 GMT Subject: CN=140e5dc49ff32fcf6acd6834095cbd67f219fa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:c1:81:2a:b7:30:24:38:6d:14:dd:48:ef: d3:bc:3d:5d:46:2d:83:3d:90:96:bf:f9:7a:2f:a5: d6:f6:7b:f3:75:cc:98:90:9e:d1:d4:c0:6c:49:9d: 1d:f5:f2:05:7e:4a:89:5a:9d:07:59:09:5e:ae:08: dd:0e:d4:08:cd:ca:37:30:85:8c:28:22:87:a5:15: 55:b0:7c:bb:2e:8c:e5:9a:0a:cd:e9:e3:8b:d5:09: 35:11:06:88:94:d5:9f:28:26:b3:72:e5:a3:23:ff: 68:66:00:d8:88:32:a5:8c:d4:02:ee:02:41:2c:1c: cf:75:8b:e1:ef:00:4e:53:a3:b9:79:6b:55:69:70: f3:03:e3:c5:f5:a1:c3:ee:fe:70:da:62:ad:df:3e: 10:ff:19:15:04:86:c6:d7:89:3b:de:5e:74:c1:ff: 22:41:e5:73:7b:ce:7f:58:05:2a:83:5a:ba:7a:99: bd:16:db:93:99:53:cc:f4:52:c9:40:a6:51:39:2a: de:9a:ec:d0:1b:ee:e3:01:02:1d:de:53:33:b7:60: 90:dc:6f:a7:e0:8e:69:ca:b7:ab:4a:82:4d:55:ef: 3e:41:1d:a6:e8:c3:c8:5a:4e:8c:fd:7b:38:2e:61: 04:50:6c:c1:df:a0:c1:7c:95:c1:3a:4e:11:fe:8f: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0E:5D:C4:9F:F3:2F:CF:6A:CD:68:34:09:5C:BD:67:F2:19:FA:8A X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c1:47:62:97:33:e7:53:b3:ed:21:f0:3b:fd:e9:ef:53:9f: cf:20:02:a9:09:60:47:2d:46:28:5a:48:32:8f:79:31:1f:50: dd:72:3c:e8:36:fa:9e:c6:09:91:69:1a:bd:26:eb:56:d0:89: 77:0d:22:84:67:6e:f4:6e:62:37:99:77:b1:78:1f:64:f5:49: 81:ce:7f:f7:d5:6c:c1:8e:05:f5:8d:b0:35:17:60:0b:c6:58: 1c:15:c4:b0:aa:f8:43:e2:4e:57:ee:78:a9:03:a3:87:4e:ab: e6:91:09:32:2f:16:9c:4f:3f:87:aa:05:24:f6:73:ec:d0:8d: f0:6e:83:86:99:b6:6f:fb:13:bb:99:cc:5a:c4:13:ce:b4:e3: 50:38:d3:dc:60:8c:31:b2:17:e8:97:63:37:60:15:1e:f9:a5: 22:61:6c:da:57:44:43:9f:8f:f1:93:a1:a2:2a:75:af:08:06: 87:0f:e1:b2:46:55:f4:0f:76:40:56:ce:dd:05:1c:27:26:4b: 8e:1f:01:2b:e5:3c:25:22:85:dc:12:8d:f2:d8:43:25:c6:a3: 86:3d:cb:90:2e:73:9c:74:76:db:dc:0e:ea:57:aa:05:e4:98: 6c:5d:d9:3a:01:ab:8d:0c:ae:98:95:84:bc:be:d9:b4:74:5b: e2:bd:46:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Ph/8FgaPHS55k98hvuyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTI1MTMwMDQ3WhcNMjYwMTI2MTMwMDQ3WjAzMTEwLwYDVQQD EygxNDBlNWRjNDlmZjMyZmNmNmFjZDY4MzQwOTVjYmQ2N2YyMTlmYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1zBgSq3MCQ4bRTdSO/TvD1dRi2D PZCWv/l6L6XW9nvzdcyYkJ7R1MBsSZ0d9fIFfkqJWp0HWQlergjdDtQIzco3MIWM KCKHpRVVsHy7LozlmgrN6eOL1Qk1EQaIlNWfKCazcuWjI/9oZgDYiDKljNQC7gJB LBzPdYvh7wBOU6O5eWtVaXDzA+PF9aHD7v5w2mKt3z4Q/xkVBIbG14k73l50wf8i QeVze85/WAUqg1q6epm9FtuTmVPM9FLJQKZROSremuzQG+7jAQId3lMzt2CQ3G+n 4I5pyrerSoJNVe8+QR2m6MPIWk6M/Xs4LmEEUGzB36DBfJXBOk4R/o8f4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQOXcSf8y/Pas1oNAlcvWfyGfqKMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMFHYpcz 51Oz7SHwO/3p71OfzyACqQlgRy1GKFpIMo95MR9Q3XI86Db6nsYJkWkavSbrVtCJ dw0ihGdu9G5iN5l3sXgfZPVJgc5/99VswY4F9Y2wNRdgC8ZYHBXEsKr4Q+JOV+54 qQOjh06r5pEJMi8WnE8/h6oFJPZz7NCN8G6Dhpm2b/sTu5nMWsQTzrTjUDjT3GCM MbIX6JdjN2AVHvmlImFs2ldEQ5+P8ZOhoip1rwgGhw/hskZV9A92QFbO3QUcJyZL jh8BK+U8JSKF3BKN8thDJcajhj3LkC5znHR229wO6leqBeSYbF3ZOgGrjQyumJWE vL7ZtHRb4r1G1w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:20 2026 by rpki-client