This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json) Hash identifier: yfIDC0fePX/7PEnNNMLjNzteNtQHye1DxWZChpij824= Subject key identifier: 2F:F0:DF:49:1A:78:5C:AD:1B:21:7C:0C:06:CC:B1:C8:94:AB:60:E9 Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Certificate serial: 019BF6BE6F142B76713E9BE0C866F32CE42F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft Manifest number: 0920 Signing time: Sun 25 Jan 2026 20:00:33 +0000 Manifest this update: Sun 25 Jan 2026 20:00:33 +0000 Manifest next update: Mon 26 Jan 2026 20:00:33 +0000 Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: g/6G9qmzcWllZCZRmLK8HVAKy8VvihIiLzGn0dgJiwA=) 2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:6f:14:2b:76:71:3e:9b:e0:c8:66:f3:2c:e4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Validity Not Before: Jan 25 20:00:33 2026 GMT Not After : Jan 26 20:00:33 2026 GMT Subject: CN=2ff0df491a785cad1b217c0c06ccb1c894ab60e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:70:e6:0c:2c:85:86:8c:8f:e9:f6:8b:40: 00:ca:2e:df:e4:32:9d:0e:e5:82:9b:1a:78:88:d3: f9:f4:ae:ed:c8:f5:0c:0b:f2:85:e4:c3:cb:f1:85: ec:95:ed:8e:93:32:51:67:1f:91:75:56:1d:49:a0: 7e:5c:54:f4:3c:d1:7b:6d:09:58:5c:f7:06:64:1c: a5:65:16:2a:77:10:1a:52:cb:19:46:e3:35:5b:0e: 34:2c:66:7b:76:bb:1b:c3:6d:06:6d:80:2c:2c:46: 02:3b:36:9c:4b:3a:2d:db:28:a9:3a:52:b7:3f:63: e6:71:57:98:25:41:52:b1:a8:a8:67:e9:56:d1:db: 84:d8:8e:6e:c2:73:76:a8:aa:ac:ec:93:46:64:fe: 5b:d4:a2:a6:f1:64:86:b2:5f:77:81:a4:14:61:69: a7:fa:ba:36:07:b8:04:00:04:d1:cc:bc:af:79:59: 81:14:7c:88:6f:03:f4:c0:c9:98:d0:b1:e5:dc:45: ec:3f:9e:70:52:9e:f6:b4:50:77:92:b6:fb:23:94: a2:5f:ac:5a:23:77:61:ad:03:1d:7e:36:2d:b9:ca: 3d:45:57:8e:8d:e4:15:9e:4f:c7:bd:b2:b1:46:fb: 4b:6e:25:ca:5f:48:8f:19:70:6e:36:f0:ad:3a:a9: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F0:DF:49:1A:78:5C:AD:1B:21:7C:0C:06:CC:B1:C8:94:AB:60:E9 X509v3 Authority Key Identifier: keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d5:ab:df:18:03:99:f0:4c:67:cb:0f:ee:f3:eb:bc:74:b6: 37:47:47:87:35:0e:a2:37:c1:c9:de:6c:19:bc:ad:ca:f2:3f: 10:05:ed:01:05:27:0c:1b:83:fc:92:f9:4c:3d:4f:2c:ba:64: 23:e0:16:9f:66:40:04:9f:64:85:db:af:e2:e4:18:54:63:52: b7:f1:eb:3f:7f:49:ea:f5:ad:f0:bd:0d:6c:dc:35:84:8f:61: 44:83:6a:a7:9b:de:5a:9c:f8:d0:f5:7d:e1:4d:d4:99:69:f8: 2c:8a:eb:23:52:11:6f:07:c3:ca:27:5d:e7:c6:96:95:9a:08: 31:82:22:9f:b1:44:e5:65:78:61:5d:7e:d7:04:98:0f:b5:f4: 5d:cb:00:04:cf:a5:5b:8f:0b:05:2c:67:9d:e6:6d:f7:5b:13: a6:4a:b9:c0:1d:f5:cb:6e:0e:e4:00:c2:2c:25:d0:25:fd:33: e0:c9:c9:1c:e8:2b:0e:44:8e:bc:82:3f:cf:d0:e6:5c:b5:a6: 1a:7d:71:de:64:74:41:aa:48:df:94:b3:1e:4b:24:a4:ea:e1: ae:20:e3:e0:81:e2:7d:3d:14:09:9b:00:af:e2:0c:04:86:e4: 49:03:2d:cb:dd:e4:6c:bb:27:4f:bf:c7:f3:8d:07:17:9e:85: 1e:16:dd:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vm8UK3ZxPpvgyGbzLOQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0 YjVjZTQwHhcNMjYwMTI1MjAwMDMzWhcNMjYwMTI2MjAwMDMzWjAzMTEwLwYDVQQD EygyZmYwZGY0OTFhNzg1Y2FkMWIyMTdjMGMwNmNjYjFjODk0YWI2MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlARw5gwshYaMj+n2i0AAyi7f5DKd DuWCmxp4iNP59K7tyPUMC/KF5MPL8YXsle2OkzJRZx+RdVYdSaB+XFT0PNF7bQlY XPcGZBylZRYqdxAaUssZRuM1Ww40LGZ7drsbw20GbYAsLEYCOzacSzot2yipOlK3 P2PmcVeYJUFSsaioZ+lW0duE2I5uwnN2qKqs7JNGZP5b1KKm8WSGsl93gaQUYWmn +ro2B7gEAATRzLyveVmBFHyIbwP0wMmY0LHl3EXsP55wUp72tFB3krb7I5SiX6xa I3dhrQMdfjYtuco9RVeOjeQVnk/HvbKxRvtLbiXKX0iPGXBuNvCtOqnatwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/w30kaeFytGyF8DAbMsciUq2DpMB8GA1UdIwQY MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdWr3xgD mfBMZ8sP7vPrvHS2N0dHhzUOojfByd5sGbytyvI/EAXtAQUnDBuD/JL5TD1PLLpk I+AWn2ZABJ9khduv4uQYVGNSt/HrP39J6vWt8L0NbNw1hI9hRINqp5veWpz40PV9 4U3UmWn4LIrrI1IRbwfDyidd58aWlZoIMYIin7FE5WV4YV1+1wSYD7X0XcsABM+l W48LBSxnneZt91sTpkq5wB31y24O5ADCLCXQJf0z4MnJHOgrDkSOvII/z9DmXLWm Gn1x3mR0QapI35SzHkskpOrhriDj4IHifT0UCZsAr+IMBIbkSQMty93kbLsnT7/H 840HF56FHhbdmA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:21 2026 by rpki-client