This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: BCOJiMpj4YjWXngsRecCHfEdA6dYdOPwew/uQBSKcD0= Subject key identifier: 77:76:97:F4:C3:94:82:1D:72:FB:3A:65:C0:38:66:AA:E9:6B:0F:E3 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019BF7D1B07825B3728DCC23A240078716B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 067A Signing time: Mon 26 Jan 2026 01:01:13 +0000 Manifest this update: Mon 26 Jan 2026 01:01:13 +0000 Manifest next update: Tue 27 Jan 2026 01:01:13 +0000 Files and hashes: 1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: kYvHEYiQU9xgNui4i2NWsgBwsJBM/062oHI3s9KcrMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:b0:78:25:b3:72:8d:cc:23:a2:40:07:87:16:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Jan 26 01:01:13 2026 GMT Not After : Jan 27 01:01:13 2026 GMT Subject: CN=777697f4c394821d72fb3a65c03866aae96b0fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:ca:c3:1f:61:40:aa:14:0e:b3:f0:a4:3f: ed:0f:e7:b9:11:5c:3c:91:9a:d3:39:1d:08:40:bf: 9c:b9:3e:e2:2c:6d:76:e0:b1:85:76:f8:29:33:0e: ee:29:b9:25:f5:b1:3d:27:20:c6:c7:00:2e:7e:da: 4c:79:00:92:45:08:06:99:2e:28:f2:b9:1e:9a:ab: f8:b3:56:9a:65:18:ca:11:d7:a6:b2:76:1e:9c:52: 17:52:4a:bb:b6:59:44:ac:2f:b5:50:90:3c:75:c1: 83:f1:26:fb:0e:e7:af:2d:f6:8f:ba:14:3b:74:c8: 03:80:4d:96:34:95:b3:80:67:43:e2:02:f7:1b:3c: ac:0f:85:7a:e2:68:4c:9a:b0:52:9e:a5:8f:91:da: 8c:dc:12:40:7c:43:c8:5f:19:ba:18:d7:ee:b0:88: 2a:32:87:98:39:78:7c:4d:fe:c8:a6:46:8c:34:2c: 59:6b:1e:40:7e:93:f6:e8:48:0c:30:58:39:a0:3f: e6:61:35:ca:4e:83:42:6e:4f:5a:45:73:a2:ce:7b: 06:fb:1e:f0:e9:3d:49:6c:d4:0c:6c:65:ea:78:49: bb:d4:aa:8a:de:c3:a7:17:a9:e4:51:8b:47:25:63: 2e:0b:34:d6:4f:a9:70:e5:9b:a5:78:d0:fe:f3:ce: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:76:97:F4:C3:94:82:1D:72:FB:3A:65:C0:38:66:AA:E9:6B:0F:E3 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:55:a5:49:08:f0:85:0d:56:58:33:63:2c:24:30:f4:7a: 53:ae:91:fa:4f:df:82:f9:6b:02:a2:e5:ff:db:a1:cd:c5:85: 9f:4e:0d:72:d6:96:a8:5e:8b:10:45:2c:fb:67:1e:3a:26:51: bd:6f:a6:28:6e:8b:5d:61:e3:3d:ea:67:2e:4a:4e:69:80:d8: b2:89:7e:04:4c:be:d4:16:89:04:b1:01:b0:5e:3c:5b:be:0c: 44:1a:32:48:fb:ac:6b:eb:b5:5e:e9:dd:0d:8f:63:74:b6:d7: 25:41:82:6f:1e:62:ff:41:19:1b:6f:68:c1:b9:20:77:b5:69: b7:9a:d7:da:0c:fa:5c:31:6c:28:fe:d6:da:30:f4:cf:0b:cf: 73:bb:b8:3c:5e:71:d4:f0:ba:7c:6e:95:79:b5:7d:fd:c3:66: a0:52:ca:52:ba:f6:9b:e8:b5:d7:82:f7:5b:de:5f:44:2f:1b: d8:ef:61:35:bc:38:0c:61:1b:ed:76:80:a9:24:0e:f7:5c:65: 5b:47:21:78:f2:e4:db:4c:e0:62:f3:89:6a:ac:82:81:1f:ac: bf:8e:b0:b7:9c:cf:84:c7:49:be:7c:4a:f2:72:34:78:34:1f: 63:e5:b5:69:47:b2:c1:76:8e:ad:c6:41:d2:a4:23:d0:1a:0a: 1d:f9:df:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30bB4JbNyjcwjokAHhxa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjYwMTI2MDEwMTEzWhcNMjYwMTI3MDEwMTEzWjAzMTEwLwYDVQQD Eyg3Nzc2OTdmNGMzOTQ4MjFkNzJmYjNhNjVjMDM4NjZhYWU5NmIwZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVfKwx9hQKoUDrPwpD/tD+e5EVw8 kZrTOR0IQL+cuT7iLG124LGFdvgpMw7uKbkl9bE9JyDGxwAuftpMeQCSRQgGmS4o 8rkemqv4s1aaZRjKEdemsnYenFIXUkq7tllErC+1UJA8dcGD8Sb7DuevLfaPuhQ7 dMgDgE2WNJWzgGdD4gL3GzysD4V64mhMmrBSnqWPkdqM3BJAfEPIXxm6GNfusIgq MoeYOXh8Tf7IpkaMNCxZax5AfpP26EgMMFg5oD/mYTXKToNCbk9aRXOiznsG+x7w 6T1JbNQMbGXqeEm71KqK3sOnF6nkUYtHJWMuCzTWT6lw5ZuleND+88653QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd2l/TDlIIdcvs6ZcA4Zqrpaw/jMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKVVpUkI 8IUNVlgzYywkMPR6U66R+k/fgvlrAqLl/9uhzcWFn04NctaWqF6LEEUs+2ceOiZR vW+mKG6LXWHjPepnLkpOaYDYsol+BEy+1BaJBLEBsF48W74MRBoySPusa+u1Xund DY9jdLbXJUGCbx5i/0EZG29owbkgd7Vpt5rX2gz6XDFsKP7W2jD0zwvPc7u4PF5x 1PC6fG6VebV9/cNmoFLKUrr2m+i114L3W95fRC8b2O9hNbw4DGEb7XaAqSQO91xl W0chePLk20zgYvOJaqyCgR+sv46wt5zPhMdJvnxK8nI0eDQfY+W1aUeywXaOrcZB 0qQj0BoKHfnfzg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:24 2026 by rpki-client