This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json) Hash identifier: ejSLI0MvahCIIBlDDAXXESW7BR1xM0i2jMq5TrDX/Ww= Subject key identifier: B8:E0:4A:51:D6:9E:AC:D1:FF:77:CA:8A:61:B6:3E:46:A7:4A:78:6D Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda Certificate serial: 019BF462B896903820B8DC1A4B5893228A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft Manifest number: 03C9 Signing time: Sun 25 Jan 2026 09:01:08 +0000 Manifest this update: Sun 25 Jan 2026 09:01:08 +0000 Manifest next update: Mon 26 Jan 2026 09:01:08 +0000 Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: 6yn3rH9x6Z+/b/wOfv7HLc+LMXxErXiIIBz2Jp4lmZs=) 2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b8:96:90:38:20:b8:dc:1a:4b:58:93:22:8a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda Validity Not Before: Jan 25 09:01:08 2026 GMT Not After : Jan 26 09:01:08 2026 GMT Subject: CN=b8e04a51d69eacd1ff77ca8a61b63e46a74a786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7c:7c:d9:09:bd:ea:36:ed:5d:da:64:2f:02: 02:d6:1c:f7:c0:d1:bc:2b:8f:4b:15:9c:72:43:74: 05:fb:2a:db:3e:5d:aa:d5:fa:70:50:a8:28:55:69: 48:c4:55:03:94:0b:e9:ea:29:83:62:46:95:72:52: a4:4e:2f:a4:8c:bb:dd:f2:ad:9f:53:9d:20:6d:78: 9f:d1:68:21:d7:b2:fb:61:ce:c6:3f:8f:cd:59:6e: f4:e5:aa:e5:23:89:ce:f9:5b:fb:16:cf:0d:24:d7: 58:4c:e8:15:e2:a3:a1:dd:8f:8b:1d:05:a4:2e:25: a4:ed:c5:1d:35:09:15:f9:c6:e9:d5:df:6a:99:6d: 71:f1:30:73:ac:2a:37:ea:e3:1a:8c:05:a6:d8:4f: dc:ae:40:46:37:dc:80:bc:ae:6b:d3:04:68:be:e0: 97:75:bf:bc:89:9c:b3:bd:09:1b:c3:1a:0b:b9:ac: d7:44:4c:c0:50:28:86:17:6b:32:8e:54:17:89:8d: 4f:ba:f7:c0:c0:78:cf:b9:64:26:17:31:c6:73:6a: e8:92:6e:0c:b2:cc:6b:91:8b:a7:42:22:b2:33:23: 3c:54:af:12:59:9d:d8:86:98:f8:90:14:30:1d:b4: 24:08:b2:12:7a:23:5a:6c:89:62:53:43:5a:b5:18: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:4A:51:D6:9E:AC:D1:FF:77:CA:8A:61:B6:3E:46:A7:4A:78:6D X509v3 Authority Key Identifier: keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:76:50:ef:74:9d:73:af:17:59:1a:4e:4a:59:03:60:e2: c7:db:62:80:2f:e3:91:8e:3b:c4:b8:99:3e:1f:79:62:b3:41: 6e:89:eb:d8:25:62:e5:c6:12:7a:17:1a:5f:98:09:e9:76:bb: 67:f4:72:f5:69:46:e8:87:8c:12:ea:21:69:a9:93:0b:41:c1: f8:58:c7:d6:57:e1:a7:09:10:3f:c3:b0:dc:b9:fc:e6:6c:28: 75:68:a0:6e:5f:5d:77:19:07:aa:de:87:95:f5:15:15:e4:88: 41:89:27:e3:38:d2:a2:81:e5:66:40:d6:39:ca:9b:84:1f:86: 3a:63:bb:03:42:3e:66:ee:5b:08:73:9f:d3:43:56:1a:e4:39: 6b:ed:78:b4:9e:a8:82:37:3d:a5:f8:59:5e:77:7d:8e:9b:0a: 5f:94:1b:6c:10:99:66:4f:1d:73:2a:54:bb:6e:15:6e:92:08: 8e:66:c8:99:f9:21:c8:4a:20:6c:c9:8f:b7:ba:e4:08:68:90: ae:4d:a2:4a:c0:33:cc:b0:83:5a:df:96:91:62:a8:1e:59:43: 7c:7b:d5:44:33:f0:ac:1b:b7:41:60:79:f3:4a:69:52:cc:fd: 32:78:1a:a8:ac:14:af:c8:cb:be:bd:ae:b0:9a:bf:49:6f:b3: 1b:64:37:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YriWkDgguNwaS1iTIop8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjFkMGVhNjgzY2M2NzU5NDJjMDk4ZjU5YzQxMWM4NjBl OGFlZGEwHhcNMjYwMTI1MDkwMTA4WhcNMjYwMTI2MDkwMTA4WjAzMTEwLwYDVQQD EyhiOGUwNGE1MWQ2OWVhY2QxZmY3N2NhOGE2MWI2M2U0NmE3NGE3ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nx82Qm96jbtXdpkLwIC1hz3wNG8 K49LFZxyQ3QF+yrbPl2q1fpwUKgoVWlIxFUDlAvp6imDYkaVclKkTi+kjLvd8q2f U50gbXif0Wgh17L7Yc7GP4/NWW705arlI4nO+Vv7Fs8NJNdYTOgV4qOh3Y+LHQWk LiWk7cUdNQkV+cbp1d9qmW1x8TBzrCo36uMajAWm2E/crkBGN9yAvK5r0wRovuCX db+8iZyzvQkbwxoLuazXREzAUCiGF2syjlQXiY1PuvfAwHjPuWQmFzHGc2rokm4M ssxrkYunQiKyMyM8VK8SWZ3Yhpj4kBQwHbQkCLISeiNabIliU0NatRjR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjgSlHWnqzR/3fKimG2PkanSnhtMB8GA1UdIwQY MBaAFOch0OpoPMZ1lCwJj1nEEchg6K7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUt NzJjYTEzZGZhZDJiLzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUtNzJjYTEzZGZhZDJi LzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaZ2UO90 nXOvF1kaTkpZA2Dix9tigC/jkY47xLiZPh95YrNBbonr2CVi5cYSehcaX5gJ6Xa7 Z/Ry9WlG6IeMEuohaamTC0HB+FjH1lfhpwkQP8Ow3Ln85mwodWigbl9ddxkHqt6H lfUVFeSIQYkn4zjSooHlZkDWOcqbhB+GOmO7A0I+Zu5bCHOf00NWGuQ5a+14tJ6o gjc9pfhZXnd9jpsKX5QbbBCZZk8dcypUu24VbpIIjmbImfkhyEogbMmPt7rkCGiQ rk2iSsAzzLCDWt+WkWKoHllDfHvVRDPwrBu3QWB580ppUsz9MngaqKwUr8jLvr2u sJq/SW+zG2Q3nQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:52 2026 by rpki-client