This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: xaPXQqa51O7vcSsRn2C9lH7639L6dRQ/yeqEkyM++94= Subject key identifier: 8E:CA:BE:E4:B0:CD:5B:25:49:7E:BD:68:91:D3:C1:95:90:AB:68:8F Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019BF91B54250B91E8FC66803C448E7F8A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 04CE Signing time: Mon 26 Jan 2026 07:01:16 +0000 Manifest this update: Mon 26 Jan 2026 07:01:16 +0000 Manifest next update: Tue 27 Jan 2026 07:01:16 +0000 Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: 8XyevqfW1HEim3OHt9O7sCCdzUmkUJvtC8ROiqWy6us=) 2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:54:25:0b:91:e8:fc:66:80:3c:44:8e:7f:8a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Jan 26 07:01:16 2026 GMT Not After : Jan 27 07:01:16 2026 GMT Subject: CN=8ecabee4b0cd5b25497ebd6891d3c19590ab688f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:11:be:ca:45:2c:6a:72:7c:89:08:67:a6: 6e:d2:91:82:5d:65:8a:d7:35:57:b5:92:04:06:30: c5:88:2a:21:d7:0f:27:68:d8:ac:b0:d1:26:c0:58: 5a:49:5f:65:9e:e7:62:e7:61:8a:b5:e7:4d:ef:0c: 9f:67:86:e9:1f:7a:f0:61:da:66:ea:b8:1b:c4:57: 8a:72:f4:e0:89:ee:35:b1:95:d5:89:01:50:6b:e8: 66:12:ae:da:0b:7e:d0:47:29:9e:1d:62:a8:94:89: 15:3e:41:e9:0f:54:bf:f4:21:e2:1b:52:fd:13:5b: 86:dd:46:1d:50:93:5d:70:58:57:f5:ca:0d:1f:14: 12:4b:85:67:ff:9f:92:05:fc:ff:b9:5d:8b:ab:ea: ce:32:cb:b9:09:32:6a:c8:62:c3:ed:d3:86:53:73: c5:73:91:24:0f:eb:96:91:e5:bb:43:2c:41:82:e9: df:b6:cc:62:d7:5a:49:81:f8:91:bd:b6:77:f2:0b: b6:0a:a1:55:e3:6a:3c:ed:67:cd:d6:7c:2e:0b:b1: f7:3e:42:43:dd:03:14:c4:5f:b3:fc:15:f6:a5:ff: 7b:83:00:f9:ce:13:7f:8e:65:64:c0:7e:5a:8f:b7: 55:51:f5:07:f3:94:82:32:2d:89:76:1f:1e:fd:5a: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:BE:E4:B0:CD:5B:25:49:7E:BD:68:91:D3:C1:95:90:AB:68:8F X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:95:ac:7f:fe:e6:21:f6:96:c5:0c:62:7a:3a:be:fe:4c:00: 84:fe:51:22:79:99:47:d5:03:97:bc:21:00:c6:a1:36:4d:78: 86:03:ba:dc:62:cd:52:65:34:2d:3d:f7:e4:7e:67:6f:27:d8: 79:39:20:ee:50:80:81:79:75:16:0d:ce:42:9a:e2:07:be:a7: 83:43:44:bd:d0:39:5e:40:5b:86:6c:f8:aa:40:4b:fe:7e:ae: 6d:d9:ec:d8:84:74:18:5f:a9:ea:e2:16:15:9f:ae:6c:8d:b1: 56:0f:e7:42:e0:90:b9:38:19:d4:07:a7:4a:b0:d8:05:2d:e8: 85:fd:b0:22:c2:46:c7:02:36:05:4d:0c:12:f5:b7:1f:ea:f4: c4:a2:7d:d5:98:c0:1a:78:c0:54:4b:3d:eb:ed:9e:8a:1d:f3: 36:56:13:52:0f:50:60:3e:d9:9b:11:7e:90:bd:37:62:d6:4a: 5e:2b:0a:47:cb:37:dd:2f:5f:d6:f6:55:d5:1c:cf:70:38:4c: 5a:8e:96:72:e9:4b:ee:3b:7f:7f:a7:df:3d:57:bc:a2:df:eb: a9:f0:cc:70:dd:bb:39:11:71:be:84:02:7c:00:1d:d5:e0:7a: ee:ea:84:2a:f0:29:dd:3c:1f:f0:00:8c:ca:c1:1e:0a:e0:21: c0:b6:b0:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G1QlC5Ho/GaAPESOf4qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjYwMTI2MDcwMTE2WhcNMjYwMTI3MDcwMTE2WjAzMTEwLwYDVQQD Eyg4ZWNhYmVlNGIwY2Q1YjI1NDk3ZWJkNjg5MWQzYzE5NTkwYWI2ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIcRvspFLGpyfIkIZ6Zu0pGCXWWK 1zVXtZIEBjDFiCoh1w8naNissNEmwFhaSV9lnudi52GKtedN7wyfZ4bpH3rwYdpm 6rgbxFeKcvTgie41sZXViQFQa+hmEq7aC37QRymeHWKolIkVPkHpD1S/9CHiG1L9 E1uG3UYdUJNdcFhX9coNHxQSS4Vn/5+SBfz/uV2Lq+rOMsu5CTJqyGLD7dOGU3PF c5EkD+uWkeW7QyxBgunftsxi11pJgfiRvbZ38gu2CqFV42o87WfN1nwuC7H3PkJD 3QMUxF+z/BX2pf97gwD5zhN/jmVkwH5aj7dVUfUH85SCMi2Jdh8e/VqcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7KvuSwzVslSX69aJHTwZWQq2iPMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapWsf/7m IfaWxQxiejq+/kwAhP5RInmZR9UDl7whAMahNk14hgO63GLNUmU0LT335H5nbyfY eTkg7lCAgXl1Fg3OQpriB76ng0NEvdA5XkBbhmz4qkBL/n6ubdns2IR0GF+p6uIW FZ+ubI2xVg/nQuCQuTgZ1AenSrDYBS3ohf2wIsJGxwI2BU0MEvW3H+r0xKJ91ZjA GnjAVEs96+2eih3zNlYTUg9QYD7ZmxF+kL03YtZKXisKR8s33S9f1vZV1RzPcDhM Wo6WculL7jt/f6ffPVe8ot/rqfDMcN27ORFxvoQCfAAd1eB67uqEKvAp3Twf8ACM ysEeCuAhwLawPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:37 2026 by rpki-client