This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json) Hash identifier: MlBaxMKcNDTzq7bMe74cxzmZF8fANOk0Ktwfv7ekMxM= Subject key identifier: 3F:87:D8:DD:42:8F:61:2D:B4:6E:81:A1:1B:38:DD:5E:5E:B1:D6:11 Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Certificate serial: 019BF6879313B1C16EF76B96096FE95385FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft Manifest number: 0506 Signing time: Sun 25 Jan 2026 19:00:38 +0000 Manifest this update: Sun 25 Jan 2026 19:00:38 +0000 Manifest next update: Mon 26 Jan 2026 19:00:38 +0000 Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: uKRy0a3ycBuG7OANkkyEEv9Zx9YalbTdI6B9LCBymPw=) 2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:93:13:b1:c1:6e:f7:6b:96:09:6f:e9:53:85:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Validity Not Before: Jan 25 19:00:38 2026 GMT Not After : Jan 26 19:00:38 2026 GMT Subject: CN=3f87d8dd428f612db46e81a11b38dd5e5eb1d611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:55:33:b4:b7:a2:57:71:0a:da:69:1d:2c: 4c:25:81:21:6f:f6:c0:70:e5:ff:d3:69:4a:d5:61: 4e:2f:7c:7e:db:f6:3f:d3:19:ab:8f:75:cd:fd:9a: 0b:bc:35:2c:19:1e:d9:23:e2:07:de:09:eb:8e:6f: d8:47:8e:df:91:ae:c0:94:0c:ad:ba:6a:5b:3f:5d: 46:ea:57:a9:e2:9c:53:42:d1:4d:1d:43:75:e7:dc: 3c:da:76:96:b7:d2:10:f5:ce:2f:03:93:0e:97:ff: 16:03:4b:c5:92:64:74:ef:65:71:21:88:5c:d5:3d: aa:5a:99:15:d0:24:db:f8:97:9a:51:6a:06:72:66: d4:07:a1:0e:bd:20:8f:af:de:ac:0a:8b:5f:40:5a: d4:b0:36:15:3c:c1:0b:68:d4:00:4f:9d:bd:eb:5b: 98:4a:1a:b0:c6:3c:5b:f5:3f:43:7f:35:17:6d:03: 04:15:b5:65:f5:fc:ff:58:69:ce:f4:67:36:7c:00: 90:3d:d9:f6:24:b3:dc:e5:cc:7d:75:59:8d:8d:c9: 59:cb:6f:9a:16:a9:f4:fc:8f:35:fe:22:d6:8c:52: 39:c0:aa:5a:20:4e:9b:61:59:39:15:e8:95:a1:88: e5:6c:a0:95:bb:13:08:c6:9d:b4:7f:1d:0e:87:a0: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:87:D8:DD:42:8F:61:2D:B4:6E:81:A1:1B:38:DD:5E:5E:B1:D6:11 X509v3 Authority Key Identifier: keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:36:a4:e5:fe:76:4e:5d:ab:f2:b3:30:16:71:d9:74:10:b7: da:6c:ed:bf:4b:6c:d0:7b:5a:fc:3b:c0:83:59:28:b2:1e:29: 39:a7:70:1c:d7:89:b1:90:a1:e2:54:90:29:a4:ca:81:72:ab: e8:55:82:0c:f9:97:c3:0f:cc:d5:2a:b4:a3:a7:09:46:9d:ea: e7:4e:e2:27:84:5e:13:66:2d:c4:12:9d:f3:6d:c5:66:42:c1: 77:ca:aa:2b:a1:e5:65:87:48:ec:11:16:0c:dd:75:89:02:ea: 8e:f8:37:be:05:47:da:91:ee:c3:1c:e6:39:50:e7:fc:ab:c8: c1:d5:d2:98:cb:77:2d:4f:2a:92:cb:78:9b:dd:8c:58:b6:88: 35:2f:29:3a:9d:8d:8f:d5:0c:ea:a5:a4:fd:15:0b:9e:84:1e: 0f:f7:e6:e0:c3:40:77:a2:1a:9f:ba:ff:9b:7b:46:27:72:ba: 94:51:9e:93:19:c8:cd:58:a6:59:bc:4c:ad:94:98:96:7e:90: 1d:01:e7:84:36:7b:31:86:1d:e2:1c:15:05:17:59:7d:2d:b7: 2b:6f:41:fc:09:e9:f4:12:06:b9:98:9a:98:da:19:6a:58:c4: c0:d9:5a:d1:d6:ff:eb:3a:82:aa:be:93:69:e2:54:97:eb:1a: 78:5f:53:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5MTscFu92uWCW/pU4X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw N2EwZTIwHhcNMjYwMTI1MTkwMDM4WhcNMjYwMTI2MTkwMDM4WjAzMTEwLwYDVQQD EygzZjg3ZDhkZDQyOGY2MTJkYjQ2ZTgxYTExYjM4ZGQ1ZTVlYjFkNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MpVM7S3oldxCtppHSxMJYEhb/bA cOX/02lK1WFOL3x+2/Y/0xmrj3XN/ZoLvDUsGR7ZI+IH3gnrjm/YR47fka7AlAyt umpbP11G6lep4pxTQtFNHUN159w82naWt9IQ9c4vA5MOl/8WA0vFkmR072VxIYhc 1T2qWpkV0CTb+JeaUWoGcmbUB6EOvSCPr96sCotfQFrUsDYVPMELaNQAT52961uY Shqwxjxb9T9DfzUXbQMEFbVl9fz/WGnO9Gc2fACQPdn2JLPc5cx9dVmNjclZy2+a Fqn0/I81/iLWjFI5wKpaIE6bYVk5FeiVoYjlbKCVuxMIxp20fx0Oh6Br5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+H2N1Cj2EttG6BoRs43V5esdYRMB8GA1UdIwQY MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDak5f52 Tl2r8rMwFnHZdBC32mztv0ts0Hta/DvAg1kosh4pOadwHNeJsZCh4lSQKaTKgXKr 6FWCDPmXww/M1Sq0o6cJRp3q507iJ4ReE2YtxBKd823FZkLBd8qqK6HlZYdI7BEW DN11iQLqjvg3vgVH2pHuwxzmOVDn/KvIwdXSmMt3LU8qkst4m92MWLaINS8pOp2N j9UM6qWk/RULnoQeD/fm4MNAd6Ian7r/m3tGJ3K6lFGekxnIzVimWbxMrZSYln6Q HQHnhDZ7MYYd4hwVBRdZfS23K29B/Anp9BIGuZiamNoZaljEwNla0db/6zqCqr6T aeJUl+saeF9TXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:16 2026 by rpki-client