This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json) Hash identifier: k6SfGIUtmwDTqa1Rkvz1eRv/s+KYafBe0BNeSQ8B0Iw= Subject key identifier: 9B:0A:19:1C:C6:68:7D:3D:B6:5B:6C:C3:61:55:D6:B5:24:FC:36:8C Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019BF5E3ADFD9FB2BC17D274B05221931870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 16:01:37 +0000 Manifest this update: Sun 25 Jan 2026 16:01:37 +0000 Manifest next update: Mon 26 Jan 2026 16:01:37 +0000 Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: spgmtBXibnikt1Dhm59qf3Qg4zs4FjaFZbGLgF1XysU=) 2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=) 3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=) 4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:ad:fd:9f:b2:bc:17:d2:74:b0:52:21:93:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Jan 25 16:01:37 2026 GMT Not After : Jan 26 16:01:37 2026 GMT Subject: CN=9b0a191cc6687d3db65b6cc36155d6b524fc368c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:b0:22:b4:a7:b0:38:b4:8e:d5:d2:74:14: eb:ef:83:65:f6:b2:e9:fa:ed:68:14:c8:cc:8b:c4: 72:58:af:4e:8b:96:33:aa:41:07:8e:cf:89:0d:ab: c7:15:e0:05:61:b9:21:37:a7:b0:51:ec:da:6f:1a: e7:d0:c7:39:f6:35:19:0b:6d:d8:3f:42:27:33:43: 07:06:c6:cd:fb:48:83:a5:41:a2:27:f9:1c:5a:68: 35:c7:e9:57:ce:7a:69:b3:16:b4:7b:a5:6b:bd:96: 40:52:d7:70:81:a3:e8:af:b6:57:e5:28:51:83:f0: 35:87:11:bf:6f:b1:ce:11:7a:0e:f0:99:36:43:9d: 32:bc:70:26:cc:c3:3b:f2:7d:ad:f1:ba:09:68:6c: 1e:54:b5:b9:ec:1a:41:85:6b:5a:73:3c:19:e6:96: 9c:c7:34:21:70:61:39:60:73:f8:c9:ac:8d:a5:d0: e4:45:7c:91:1b:b3:1e:81:08:32:c4:3f:44:84:b0: 0a:93:54:1c:b4:2b:c8:3d:8a:cb:ba:af:db:c3:6a: f8:9c:e8:51:85:b1:c2:67:83:03:90:92:65:28:14: d0:3e:d1:16:a4:5d:c5:0a:48:ae:ac:94:62:0a:a8: 7d:ec:d1:3e:24:00:26:3f:8b:a2:54:e6:06:03:02: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0A:19:1C:C6:68:7D:3D:B6:5B:6C:C3:61:55:D6:B5:24:FC:36:8C X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c6:b7:21:27:3d:71:6c:7e:f7:00:e6:a6:4d:72:e4:e8:9a: cd:35:6b:ef:d8:6c:2a:a2:fa:ac:b6:d7:5a:6d:63:25:47:90: e1:ea:b6:91:50:57:d7:e2:49:7b:a0:37:9e:a8:9e:13:2e:04: 6b:26:71:29:e2:fc:97:9a:57:05:c8:96:80:6c:10:be:2e:54: 3f:c9:f0:66:8b:4b:9e:34:15:57:06:61:d3:0e:9b:76:bf:61: 7a:8a:d3:5e:c3:2b:b8:0d:09:50:78:d7:cb:9e:5b:51:c7:49: ee:73:ad:ea:51:d8:f1:9a:cc:2b:b2:84:30:ea:c0:6e:88:23: f6:4e:d7:d0:3f:75:cf:d6:66:db:7f:36:bc:74:b3:94:8a:d9: d4:75:14:d3:52:e7:85:e7:86:78:5e:8c:9a:2d:bf:bc:25:b9: 83:72:63:0d:a1:cc:0f:8d:3b:35:61:d4:58:a4:a8:e4:6e:c2: f5:77:51:b6:73:82:cb:af:90:8b:b7:53:2d:06:73:0d:89:45: 61:35:b8:d6:1b:d8:fb:58:c6:63:ef:fc:cf:b9:36:b7:35:eb: c1:4d:1a:2a:91:11:d5:14:8f:5e:1c:23:f0:3d:a6:bb:3a:03: ce:15:f4:fd:8f:ba:54:56:a9:69:87:17:2b:89:d5:a6:95:c8: df:1d:f7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14639n7K8F9J0sFIhkxhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjYwMTI1MTYwMTM3WhcNMjYwMTI2MTYwMTM3WjAzMTEwLwYDVQQD Eyg5YjBhMTkxY2M2Njg3ZDNkYjY1YjZjYzM2MTU1ZDZiNTI0ZmMzNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xiwIrSnsDi0jtXSdBTr74Nl9rLp +u1oFMjMi8RyWK9Oi5YzqkEHjs+JDavHFeAFYbkhN6ewUezabxrn0Mc59jUZC23Y P0InM0MHBsbN+0iDpUGiJ/kcWmg1x+lXznppsxa0e6VrvZZAUtdwgaPor7ZX5ShR g/A1hxG/b7HOEXoO8Jk2Q50yvHAmzMM78n2t8boJaGweVLW57BpBhWtaczwZ5pac xzQhcGE5YHP4yayNpdDkRXyRG7MegQgyxD9EhLAKk1QctCvIPYrLuq/bw2r4nOhR hbHCZ4MDkJJlKBTQPtEWpF3FCkiurJRiCqh97NE+JAAmP4uiVOYGAwJjYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsKGRzGaH09tltsw2FV1rUk/DaMMB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWca3ISc9 cWx+9wDmpk1y5OiazTVr79hsKqL6rLbXWm1jJUeQ4eq2kVBX1+JJe6A3nqieEy4E ayZxKeL8l5pXBciWgGwQvi5UP8nwZotLnjQVVwZh0w6bdr9heorTXsMruA0JUHjX y55bUcdJ7nOt6lHY8ZrMK7KEMOrAbogj9k7X0D91z9Zm2382vHSzlIrZ1HUU01Ln heeGeF6Mmi2/vCW5g3JjDaHMD407NWHUWKSo5G7C9XdRtnOCy6+Qi7dTLQZzDYlF YTW41hvY+1jGY+/8z7k2tzXrwU0aKpER1RSPXhwj8D2muzoDzhX0/Y+6VFapaYcX K4nVppXI3x33+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:41 2026 by rpki-client