This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: N/jS6GjgUbDGw/tDowRR7oiGye6YKkG4HCsl5zBBVaA= Subject key identifier: 94:D5:29:80:BB:1D:67:11:35:17:45:87:F6:66:93:EA:B4:21:EE:DF Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019BF3F52AEC593972AF333F2567E611CB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 1141 Signing time: Sun 25 Jan 2026 07:01:29 +0000 Manifest this update: Sun 25 Jan 2026 07:01:29 +0000 Manifest next update: Mon 26 Jan 2026 07:01:29 +0000 Files and hashes: 1: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: lRPkD9Ru2HzG/h1VOj1NOD02ZJcuyzg1KbCwUPGQ4/w=) 2: OqFYhVg1Efiv3mat7wl-y0IWh0M.roa (hash: oKWk1mz8YCchnuM+fj+VOQNacesKLKH9rOD1QPPd9Pk=) 3: SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa (hash: rPpkOjYvnM4DCXuhdrHJgLwjmOB3eXAXFBoPZ/CIvH8=) 4: Ug9ynSBXJvbacZUCymyFegFwsdc.roa (hash: gneEDKy7z65cw82gMUszrjpGrKuBIM6nLytArcluJiI=) 5: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (hash: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY=) 6: bv3dWtZZY2LxTtEYmYudDoB39G0.roa (hash: tzxAb1/SE90OUDmzgetWaOiWEjy0yrEkp9StYURk0/Y=) 7: cgUyX51ni1S68djJwifB7g8e6Kw.roa (hash: 3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=) 8: haTrs_5tpUyACklPcJ9fH1LslHE.roa (hash: PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=) 9: iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa (hash: btcDN1EO2IkvpjFNTIzzJGr341Fzj5AkaE+wKJ7Jt0o=) 10: uzdBbBS3T-chT93z9aFklFPXceQ.roa (hash: 2HStjG1X7LnSDu/XK+LCJICQndfda0I58UATYz414mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:2a:ec:59:39:72:af:33:3f:25:67:e6:11:cb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Jan 25 07:01:29 2026 GMT Not After : Jan 26 07:01:29 2026 GMT Subject: CN=94d52980bb1d671135174587f66693eab421eedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:d2:84:d2:01:35:78:ab:f7:07:b6:28:d9: c6:af:45:cf:88:33:03:83:7d:0e:cd:02:db:ec:d9: fe:a3:67:cb:3a:f2:f3:07:94:11:c8:fc:5f:f4:05: a3:87:72:b0:d6:da:5a:42:ee:5f:85:18:c0:27:22: 90:78:36:3b:fd:65:43:a4:03:e1:42:a3:53:84:87: fb:87:9f:11:e4:ea:c0:05:59:c9:2f:cd:51:0c:ee: eb:68:94:26:7c:16:2b:ab:6a:9f:d4:58:61:8f:37: eb:f3:e3:b2:b5:26:16:e0:f8:2c:7f:82:40:42:95: ed:d4:c0:bf:b6:28:9c:08:c0:f6:39:df:0c:8b:53: 16:37:0c:f0:27:bd:fe:55:dd:cf:0b:2f:39:ba:3b: 71:3f:2c:5a:9c:89:fd:5e:d3:6b:ed:25:83:5c:a3: c8:7a:9c:84:2c:22:77:16:22:38:33:88:a8:4c:fd: 11:67:a3:9e:47:6e:87:0b:d6:7a:49:ef:72:7b:a7: 19:4e:b1:fe:45:2d:92:0b:1f:bd:47:d8:93:96:6f: 12:08:ce:21:e5:17:3a:42:bb:11:88:49:a2:f6:59: 4d:f6:22:70:2f:fa:11:b1:3e:3b:9d:3c:83:dc:70: 32:fb:20:b0:79:bd:fb:c5:f3:23:ed:41:1f:bf:88: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:29:80:BB:1D:67:11:35:17:45:87:F6:66:93:EA:B4:21:EE:DF X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:09:60:c4:1b:74:9f:e9:02:ab:cd:8a:39:b0:07:c7:b5:4e: 1a:ff:f6:4f:c8:8f:97:d2:52:cb:f8:18:06:97:de:31:30:a6: b1:e7:46:da:77:14:fe:d7:7e:e5:45:bd:c8:7d:f4:bb:04:98: 6c:e9:32:ff:e4:53:f2:94:b8:43:02:53:58:d1:f4:df:99:4f: 7c:0c:3d:c6:f8:44:4e:9b:9a:07:37:66:a0:dc:b4:90:f5:58: b0:b5:b2:fa:5c:ce:70:36:50:39:f2:07:b8:85:bf:d2:8f:91: 88:f9:3c:c6:0b:80:50:ba:6e:3a:93:19:51:45:8f:d2:52:ee: 25:1e:80:78:06:7c:98:10:f2:21:2b:b3:d3:48:40:01:eb:fa: 32:56:4c:72:ea:34:e2:be:0f:66:71:7c:67:7b:dd:2c:13:06: 55:7b:dd:71:7e:d8:d7:20:f1:3e:24:84:59:e5:3e:b6:94:aa: 6d:f2:c9:bb:fe:d8:25:e1:82:72:34:c9:ac:bf:22:b1:37:27: ce:09:c5:6c:fa:19:a9:8f:79:7c:2f:5b:cd:44:78:86:17:5d: 1d:4e:d2:ca:88:4c:bf:6c:df:fb:c6:5b:4e:cf:02:7b:86:f0: 31:50:90:59:16:4d:96:1c:2c:b5:0b:c0:86:67:2c:7e:19:c2: d9:d9:04:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9SrsWTlyrzM/JWfmEcuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwMTI1MDcwMTI5WhcNMjYwMTI2MDcwMTI5WjAzMTEwLwYDVQQD Eyg5NGQ1Mjk4MGJiMWQ2NzExMzUxNzQ1ODdmNjY2OTNlYWI0MjFlZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyzShNIBNXir9we2KNnGr0XPiDMD g30OzQLb7Nn+o2fLOvLzB5QRyPxf9AWjh3Kw1tpaQu5fhRjAJyKQeDY7/WVDpAPh QqNThIf7h58R5OrABVnJL81RDO7raJQmfBYrq2qf1Fhhjzfr8+OytSYW4Pgsf4JA QpXt1MC/tiicCMD2Od8Mi1MWNwzwJ73+Vd3PCy85ujtxPyxanIn9XtNr7SWDXKPI epyELCJ3FiI4M4ioTP0RZ6OeR26HC9Z6Se9ye6cZTrH+RS2SCx+9R9iTlm8SCM4h 5Rc6QrsRiEmi9llN9iJwL/oRsT47nTyD3HAy+yCweb37xfMj7UEfv4hZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTVKYC7HWcRNRdFh/Zmk+q0Ie7fMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQlgxBt0 n+kCq82KObAHx7VOGv/2T8iPl9JSy/gYBpfeMTCmsedG2ncU/td+5UW9yH30uwSY bOky/+RT8pS4QwJTWNH035lPfAw9xvhETpuaBzdmoNy0kPVYsLWy+lzOcDZQOfIH uIW/0o+RiPk8xguAULpuOpMZUUWP0lLuJR6AeAZ8mBDyISuz00hAAev6MlZMcuo0 4r4PZnF8Z3vdLBMGVXvdcX7Y1yDxPiSEWeU+tpSqbfLJu/7YJeGCcjTJrL8isTcn zgnFbPoZqY95fC9bzUR4hhddHU7SyohMv2zf+8ZbTs8Ce4bwMVCQWRZNlhwstQvA hmcsfhnC2dkEIA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:04 2026 by rpki-client