This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft File: 5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json) Hash identifier: KzhrJFVQb13S6tT0uMUWPS59dhcnjVOtUIml4piO71s= Subject key identifier: 2A:19:72:EC:C3:A8:19:E0:42:9B:0B:1C:89:55:7C:89:7F:74:0B:21 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019BF4D05BBF74172365686C916FA5F8A647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft Manifest number: 12C4 Signing time: Sun 25 Jan 2026 11:00:54 +0000 Manifest this update: Sun 25 Jan 2026 11:00:54 +0000 Manifest next update: Mon 26 Jan 2026 11:00:54 +0000 Files and hashes: 1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=) 2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: ZFSPceSVRNbKrynKLpLKVTOYgkVIN4KHaSGaZXqit+I=) 3: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=) 4: Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa (hash: jLiOckt+vrx8TOSEJT6TLvtJFvKCadRGVP5+VbDfoXE=) 5: XNcWMVyK-AaHJ7nzMwrq6f81Q2c.roa (hash: S/O1AiJNehkfXGq3UwqQVRSapGWwctUVrQ8+mxLuPW0=) 6: dyKVgNsjZxg_ms1n2E7Bfw10stc.roa (hash: BqmZyOOtyNCSkSJ7x/mGSb0glowMzHs3l/S8+cc3Vzw=) 7: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=) 8: krebELS6FLfilnA__hBq0uhvWyo.roa (hash: XGJZqlWxpa74go/FmTdiLNyWAGB5hXKCDhTD8hHKfr0=) 9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:5b:bf:74:17:23:65:68:6c:91:6f:a5:f8:a6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Jan 25 11:00:54 2026 GMT Not After : Jan 26 11:00:54 2026 GMT Subject: CN=2a1972ecc3a819e0429b0b1c89557c897f740b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:a1:9e:44:0d:17:9a:37:e4:7f:75:e3:58: 72:9c:47:2f:ed:47:39:ee:f7:5c:2c:53:a1:e1:99: 34:ce:0d:a0:55:e7:48:e7:d5:2c:9e:a6:2b:f8:94: 64:1a:e8:ef:11:71:73:89:c6:a0:91:f8:70:57:b3: 7e:c0:2f:c4:bc:9a:c7:d1:8e:f3:43:04:f4:95:31: 11:c5:a6:46:81:b0:aa:11:d2:fc:df:e7:da:d7:4a: ec:1d:71:7c:0b:0a:e0:f4:31:32:0d:e6:58:81:92: 4c:b8:68:07:50:96:6a:87:b1:b1:a5:82:09:82:4c: 6f:ab:83:f4:10:05:82:b7:65:0a:41:3c:39:fe:34: 22:41:4e:d0:98:5c:20:8a:38:a1:15:f0:8e:24:40: f5:d4:89:3a:e0:3c:2d:51:39:fd:4d:68:95:55:e4: 7e:ef:22:e7:de:40:6e:2a:dc:7c:95:58:9b:72:4b: 0d:f4:e4:ab:2a:62:13:8c:87:74:c6:28:24:07:6a: 75:da:d6:5c:be:64:8e:a4:1c:c1:b1:78:3d:52:cd: 61:7c:df:74:40:02:84:0e:b6:1a:85:0d:4c:f2:b0: d3:d1:27:36:78:1f:f8:18:30:a8:3c:cc:35:5b:db: 71:b9:8b:7b:89:3d:8e:35:00:1d:4c:3f:1d:0d:5a: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:72:EC:C3:A8:19:E0:42:9B:0B:1C:89:55:7C:89:7F:74:0B:21 X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c4:2c:6b:40:22:37:3e:f1:91:a0:8c:2e:a8:06:e5:35:8b: b3:e5:29:29:a8:09:3f:8f:60:b5:0d:b6:c1:fa:6d:a8:f2:c8: a5:79:38:2b:07:87:60:41:bc:7b:3c:ed:21:18:13:0e:9b:1d: 31:b6:94:d6:e9:50:74:e2:f5:32:1b:fa:5b:29:17:48:e7:60: be:ce:6d:19:2c:a3:0a:b6:f3:6d:6d:cf:f5:e0:57:18:1e:dc: 9a:9a:45:03:5d:56:ce:93:a8:52:fa:1a:7e:70:d2:80:60:f4: 24:61:2c:25:15:d7:71:29:8c:3c:51:23:f0:c3:f8:14:20:2d: a0:f6:48:f7:6e:e3:25:0a:c5:a1:89:1c:d8:a8:01:29:49:c7: 26:fa:25:2f:a0:a0:4e:8c:0e:68:8d:4a:ad:bb:93:35:7f:8c: 01:cf:47:6b:da:17:75:de:56:ad:73:da:e3:d0:9c:13:81:12: e2:bc:35:c2:52:bc:71:a2:39:2b:d8:d5:37:19:71:17:2e:e9: 2f:fa:f7:c0:bb:cd:ce:d1:19:c6:1e:a8:c8:68:02:8d:18:c5: 21:f0:cd:71:65:ae:f1:dc:3f:72:1b:22:83:2c:19:88:aa:36: c7:c8:45:b2:31:2d:68:4b:6e:8d:80:ff:70:23:68:48:1d:c3: 4d:f7:37:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Fu/dBcjZWhskW+l+KZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjYwMTI1MTEwMDU0WhcNMjYwMTI2MTEwMDU0WjAzMTEwLwYDVQQD EygyYTE5NzJlY2MzYTgxOWUwNDI5YjBiMWM4OTU1N2M4OTdmNzQwYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dmhnkQNF5o35H9141hynEcv7Uc5 7vdcLFOh4Zk0zg2gVedI59UsnqYr+JRkGujvEXFzicagkfhwV7N+wC/EvJrH0Y7z QwT0lTERxaZGgbCqEdL83+fa10rsHXF8Cwrg9DEyDeZYgZJMuGgHUJZqh7GxpYIJ gkxvq4P0EAWCt2UKQTw5/jQiQU7QmFwgijihFfCOJED11Ik64DwtUTn9TWiVVeR+ 7yLn3kBuKtx8lVibcksN9OSrKmITjId0xigkB2p12tZcvmSOpBzBsXg9Us1hfN90 QAKEDrYahQ1M8rDT0Sc2eB/4GDCoPMw1W9txuYt7iT2ONQAdTD8dDVqPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoZcuzDqBngQpsLHIlVfIl/dAshMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8Qsa0Ai Nz7xkaCMLqgG5TWLs+UpKagJP49gtQ22wfptqPLIpXk4KweHYEG8ezztIRgTDpsd MbaU1ulQdOL1Mhv6WykXSOdgvs5tGSyjCrbzbW3P9eBXGB7cmppFA11WzpOoUvoa fnDSgGD0JGEsJRXXcSmMPFEj8MP4FCAtoPZI927jJQrFoYkc2KgBKUnHJvolL6Cg TowOaI1KrbuTNX+MAc9Ha9oXdd5WrXPa49CcE4ES4rw1wlK8caI5K9jVNxlxFy7p L/r3wLvNztEZxh6oyGgCjRjFIfDNcWWu8dw/chsigywZiKo2x8hFsjEtaEtujYD/ cCNoSB3DTfc33Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:11 2026 by rpki-client