This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json) Hash identifier: ZG9oRiakNdN0EbxP25zVwcapM+aI6rK2TAQ3X3IZcYU= Subject key identifier: 44:20:D4:BD:5B:28:D1:76:B0:16:7A:64:88:FE:BC:6C:92:12:93:AC Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019BF72CC6D6AFD1C4E82B4C63A0A05C4415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft Manifest number: 10EC Signing time: Sun 25 Jan 2026 22:01:05 +0000 Manifest this update: Sun 25 Jan 2026 22:01:05 +0000 Manifest next update: Mon 26 Jan 2026 22:01:05 +0000 Files and hashes: 1: 10snHBnMf0Kuhe7miu2KWZf7QKU.roa (hash: cMY4zBuFGSixWKDTcCmGLnVnrvMgI5u/opvWitB7358=) 2: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=) 3: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=) 4: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: RRZz/BRDYEDA/YOoAF/veuK1IPqKpnqXji66Q1k9R88=) 5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=) 6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=) 7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c6:d6:af:d1:c4:e8:2b:4c:63:a0:a0:5c:44:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 25 22:01:05 2026 GMT Not After : Jan 26 22:01:05 2026 GMT Subject: CN=4420d4bd5b28d176b0167a6488febc6c921293ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:cc:8a:68:ab:1d:f2:5b:21:5f:9a:b1:e4: 86:e3:e4:d8:83:66:93:c0:82:4a:32:d6:07:4f:5d: 01:7d:e8:8a:43:38:2d:7c:68:09:41:f1:c0:f3:c6: 9e:2e:0b:a2:25:30:86:d1:28:e8:d9:66:ab:f8:41: aa:cc:4a:00:2a:bd:f2:1a:05:a7:cf:b6:6c:b1:14: 73:a5:63:29:ae:1e:2e:3a:20:8a:c6:f0:c6:eb:12: 52:24:df:60:75:25:df:83:5c:46:3c:0a:3f:01:49: 30:56:da:fc:82:10:58:fc:e6:e3:2f:23:e4:3e:1b: fb:b5:46:e7:3e:74:d0:64:a8:8a:a1:dc:9e:ad:44: ca:e8:72:7b:00:45:93:39:e4:76:20:56:78:df:bd: 0a:ab:68:ca:5c:3d:6b:52:5e:a6:b7:b5:d9:98:18: 79:70:2e:d6:f0:07:f4:86:c7:25:64:36:98:e4:50: a1:4c:43:e8:1f:df:c5:db:9e:ff:6e:c9:cf:42:5b: f4:a1:72:2c:2a:ed:c5:0a:c8:33:81:44:c5:f7:da: c0:5c:cc:44:eb:4f:cd:2f:49:a7:2f:9d:28:55:c4: f5:16:21:76:f3:17:db:d0:8e:f2:19:6a:30:65:c7: cd:b4:df:f3:13:3c:04:80:31:f3:18:de:41:87:78: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:D4:BD:5B:28:D1:76:B0:16:7A:64:88:FE:BC:6C:92:12:93:AC X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:23:3f:7a:8a:85:d0:fb:79:81:d0:a3:dd:9e:5a:a8:5f:c5: 43:16:3e:7d:fd:58:86:f7:44:d4:e5:9b:99:c7:6a:0f:b6:75: 81:c3:4c:39:25:79:9c:48:c8:a8:b4:12:57:81:fe:52:56:bc: c4:15:13:d2:8a:9f:30:37:15:7c:83:65:4e:05:a3:ca:5e:d8: 75:cb:e0:be:d5:27:33:4b:e0:7a:66:a3:b8:75:a6:00:d3:69: 56:7b:35:63:9a:e5:e3:10:18:34:aa:36:c7:5a:3e:a1:43:d3: 33:e1:9c:3d:d2:f7:f6:75:d7:53:64:e0:4c:e2:07:79:ae:a2: 13:d6:9b:b8:d5:f5:63:76:5d:e4:15:73:2a:23:c5:29:fa:9d: ca:bf:41:8a:a8:e0:09:25:60:a9:41:07:9e:81:49:b0:39:ce: 53:29:44:b4:1a:04:18:dc:c1:5f:d2:cc:71:34:bf:d0:7d:ee: 61:42:29:0e:51:ee:10:ff:6b:cd:3a:c0:35:3f:4f:39:01:7c: 26:50:c1:fd:b8:6f:df:73:72:45:a9:a0:0b:78:94:70:74:c9: f0:f3:c1:3a:f5:27:01:71:ed:19:52:cd:09:e0:1b:7e:eb:84: 18:dd:8e:20:a4:92:61:6b:68:7f:6e:24:4e:e8:58:49:ce:db: 5b:c3:9c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMbWr9HE6CtMY6CgXEQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTI1MjIwMTA1WhcNMjYwMTI2MjIwMTA1WjAzMTEwLwYDVQQD Eyg0NDIwZDRiZDViMjhkMTc2YjAxNjdhNjQ4OGZlYmM2YzkyMTI5M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t/MimirHfJbIV+aseSG4+TYg2aT wIJKMtYHT10BfeiKQzgtfGgJQfHA88aeLguiJTCG0Sjo2War+EGqzEoAKr3yGgWn z7ZssRRzpWMprh4uOiCKxvDG6xJSJN9gdSXfg1xGPAo/AUkwVtr8ghBY/ObjLyPk Phv7tUbnPnTQZKiKodyerUTK6HJ7AEWTOeR2IFZ4370Kq2jKXD1rUl6mt7XZmBh5 cC7W8Af0hsclZDaY5FChTEPoH9/F257/bsnPQlv0oXIsKu3FCsgzgUTF99rAXMxE 60/NL0mnL50oVcT1FiF28xfb0I7yGWowZcfNtN/zEzwEgDHzGN5Bh3iiZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQg1L1bKNF2sBZ6ZIj+vGySEpOsMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSM/eoqF 0Pt5gdCj3Z5aqF/FQxY+ff1YhvdE1OWbmcdqD7Z1gcNMOSV5nEjIqLQSV4H+Ula8 xBUT0oqfMDcVfINlTgWjyl7YdcvgvtUnM0vgemajuHWmANNpVns1Y5rl4xAYNKo2 x1o+oUPTM+GcPdL39nXXU2TgTOIHea6iE9abuNX1Y3Zd5BVzKiPFKfqdyr9Biqjg CSVgqUEHnoFJsDnOUylEtBoEGNzBX9LMcTS/0H3uYUIpDlHuEP9rzTrANT9POQF8 JlDB/bhv33NyRamgC3iUcHTJ8PPBOvUnAXHtGVLNCeAbfuuEGN2OIKSSYWtof24k TuhYSc7bW8OcVw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:23 2026 by rpki-client