This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json) Hash identifier: V/QFQM86KkD/RGK61Z2P4BhVgBEKrmYxlsRZ9tyWuUQ= Subject key identifier: 42:C5:4A:A3:1F:5D:86:03:B6:C3:42:96:28:64:82:84:BD:CD:75:14 Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627 Certificate serial: 019BF72CA874BBEDDB220A6569678F0C9319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft Manifest number: 0B15 Signing time: Sun 25 Jan 2026 22:00:57 +0000 Manifest this update: Sun 25 Jan 2026 22:00:57 +0000 Manifest next update: Mon 26 Jan 2026 22:00:57 +0000 Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: hJBMp2n5mtZUDpapOd5rhkbEKNV7W/If+dA/C5FXBm8=) 2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:a8:74:bb:ed:db:22:0a:65:69:67:8f:0c:93:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627 Validity Not Before: Jan 25 22:00:57 2026 GMT Not After : Jan 26 22:00:57 2026 GMT Subject: CN=42c54aa31f5d8603b6c3429628648284bdcd7514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:c4:f0:73:cc:27:75:f0:0f:8b:55:74:29: 3c:c0:8b:de:0e:e7:31:76:dd:49:92:75:8c:2e:42: 55:8f:9a:a9:a3:72:df:a4:33:19:bf:ca:7d:be:84: 70:48:cb:35:60:cc:6c:b9:84:13:a2:23:c4:d0:4e: 3c:47:a9:fe:6b:bf:9a:f5:c7:a6:5f:58:5c:4f:b0: b3:3e:ed:c0:b1:fd:fe:2c:56:89:b8:b7:92:ff:85: 42:87:c2:ac:00:4d:9a:2d:29:0f:26:5e:0e:b8:98: 66:1f:eb:9d:e4:03:36:8f:0f:1b:5d:3b:de:3f:b2: 36:0f:f1:92:cb:a8:ab:77:b4:c6:36:d3:a1:ad:fe: 6e:88:4f:2a:fe:1b:ad:16:47:6b:37:4c:b8:48:25: 6f:09:17:20:43:7d:18:9b:2a:a6:c4:0e:64:d6:64: cf:7d:1c:c0:63:5c:bf:c1:e2:c5:3b:df:ee:b6:c7: 23:1e:14:ca:bc:e2:57:a9:ba:cb:1e:45:0c:57:cc: 67:6f:83:e6:97:17:d4:1e:ee:a9:e7:80:be:85:a6: 8d:ac:db:9c:4f:d8:e8:68:41:8b:67:fd:b5:a3:92: 5d:a1:54:70:58:dc:d9:0d:5a:09:1d:3b:93:f7:e0: 8e:1f:92:5f:4c:71:2b:12:8e:40:b1:3a:21:bc:b5: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:4A:A3:1F:5D:86:03:B6:C3:42:96:28:64:82:84:BD:CD:75:14 X509v3 Authority Key Identifier: keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8b:98:b1:3a:57:91:5b:62:ae:6e:df:e8:75:82:e3:6d:1b: 83:3e:f7:bd:a9:c4:a4:11:4f:38:65:1b:66:14:07:9f:46:94: df:8f:b4:81:64:cd:c2:a2:41:0a:e9:ec:cb:30:0f:cd:b6:aa: ac:e0:d8:4f:59:a7:b5:72:ab:a5:1e:73:ca:94:36:ab:d2:2d: 9c:39:30:ea:89:5a:b2:a7:90:46:e2:0f:de:2a:bd:57:b6:87: 4c:d5:79:37:6f:5d:8d:cf:7a:7c:5f:38:e0:29:25:31:8c:a3: c2:dd:5a:7b:1a:a7:52:d8:7b:ad:29:4e:ef:55:d9:be:43:b8: d1:09:f7:13:f3:7a:77:3c:57:cc:07:5d:1e:8a:eb:d9:bf:0c: a5:f5:c3:a9:e7:46:fe:a5:73:46:d7:2c:a4:58:77:bd:3c:bc: f7:4e:ef:5c:30:1d:ba:45:e4:51:82:84:e7:c2:35:b3:14:54: 06:ea:28:6d:85:3c:9b:e3:43:eb:54:12:81:25:39:1a:4c:2f: 84:6d:d8:d4:35:bb:0e:e0:4e:45:a4:a4:dc:15:61:9e:d9:f3: 17:30:98:b2:2a:10:f5:94:d1:33:c3:9f:ee:5b:87:48:cd:1d: cd:53:10:2c:4f:33:98:ed:90:4a:84:7e:cd:cd:89:9e:b1:1f: 43:c9:25:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKh0u+3bIgplaWePDJMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5 OGY2MjcwHhcNMjYwMTI1MjIwMDU3WhcNMjYwMTI2MjIwMDU3WjAzMTEwLwYDVQQD Eyg0MmM1NGFhMzFmNWQ4NjAzYjZjMzQyOTYyODY0ODI4NGJkY2Q3NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktvE8HPMJ3XwD4tVdCk8wIveDucx dt1JknWMLkJVj5qpo3LfpDMZv8p9voRwSMs1YMxsuYQToiPE0E48R6n+a7+a9cem X1hcT7CzPu3Asf3+LFaJuLeS/4VCh8KsAE2aLSkPJl4OuJhmH+ud5AM2jw8bXTve P7I2D/GSy6ird7TGNtOhrf5uiE8q/hutFkdrN0y4SCVvCRcgQ30YmyqmxA5k1mTP fRzAY1y/weLFO9/utscjHhTKvOJXqbrLHkUMV8xnb4PmlxfUHu6p54C+haaNrNuc T9joaEGLZ/21o5JdoVRwWNzZDVoJHTuT9+COH5JfTHErEo5AsTohvLXk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELFSqMfXYYDtsNClihkgoS9zXUUMB8GA1UdIwQY MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4 LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbouYsTpX kVtirm7f6HWC420bgz73vanEpBFPOGUbZhQHn0aU34+0gWTNwqJBCunsyzAPzbaq rODYT1mntXKrpR5zypQ2q9ItnDkw6olasqeQRuIP3iq9V7aHTNV5N29djc96fF84 4CklMYyjwt1aexqnUth7rSlO71XZvkO40Qn3E/N6dzxXzAddHorr2b8MpfXDqedG /qVzRtcspFh3vTy8907vXDAdukXkUYKE58I1sxRUBuoobYU8m+ND61QSgSU5Gkwv hG3Y1DW7DuBORaSk3BVhntnzFzCYsioQ9ZTRM8Of7luHSM0dzVMQLE8zmO2QSoR+ zc2JnrEfQ8klWw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:18:29 2026 by rpki-client