This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json) Hash identifier: LheUcjeufidjHMw6/CtEUXVQjmmRTiUNuja/xX6/gIc= Subject key identifier: B1:A7:21:AD:65:F9:20:D4:81:B0:75:08:F7:7F:67:DC:A1:C5:61:1D Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094 Certificate serial: 019BF650BDEF27BF05FE51D9ECD8677AAAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft Manifest number: 12CE Signing time: Sun 25 Jan 2026 18:00:45 +0000 Manifest this update: Sun 25 Jan 2026 18:00:45 +0000 Manifest next update: Mon 26 Jan 2026 18:00:45 +0000 Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: NI520ffxUiR699aiAxkbBfWa3s33OFBBXrMrlilWghk=) 2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=) 3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=) 4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=) 5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:bd:ef:27:bf:05:fe:51:d9:ec:d8:67:7a:aa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094 Validity Not Before: Jan 25 18:00:45 2026 GMT Not After : Jan 26 18:00:45 2026 GMT Subject: CN=b1a721ad65f920d481b07508f77f67dca1c5611d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:14:17:74:75:46:03:7a:db:45:e2:0b:34: d6:85:c3:7f:95:40:bb:42:5c:db:e9:de:38:1b:ad: f9:0d:6f:9a:4b:3b:bb:ce:ba:98:05:ff:2f:35:b5: 80:f5:ca:4d:e1:c8:8e:a2:8c:2b:69:83:ba:57:53: 11:2e:59:64:f9:c7:db:58:7f:ac:24:20:af:30:c1: d6:32:fb:6b:eb:1b:fc:1f:b2:9a:66:6b:ef:fd:e6: 58:41:f6:83:f2:d2:a9:6a:f8:bd:60:90:cd:f1:fa: 81:58:0f:6b:7d:a6:6e:8e:4c:e3:5a:65:4b:b9:11: c4:ad:66:50:c6:65:ca:b9:f5:55:ff:d8:9b:42:e2: cf:96:4b:f7:bc:bd:56:65:ef:51:c5:db:1a:a5:08: 80:f3:21:54:db:97:f6:4a:6f:5e:f6:7f:42:77:c7: 87:85:60:55:5f:d8:63:d2:08:fc:33:04:5e:88:d8: 14:28:30:ab:d4:7e:7e:68:6a:c7:cc:a8:81:56:58: 02:15:65:4e:0e:46:26:5d:ea:2f:e8:23:af:b8:50: a2:f9:48:4e:ac:30:66:d7:cf:5d:6b:5d:6d:b1:2f: 56:d3:d1:26:e3:86:d1:b6:a7:4e:4f:49:48:51:c9: e0:fc:b4:9a:4e:06:c9:e6:d2:09:74:16:a2:e8:32: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:21:AD:65:F9:20:D4:81:B0:75:08:F7:7F:67:DC:A1:C5:61:1D X509v3 Authority Key Identifier: keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:28:98:d1:1c:b2:2a:79:ce:ed:21:8b:03:3a:a6:c9:f2:bb: 74:0d:ab:03:7b:65:1f:80:9c:bb:79:ba:a8:54:c9:56:3a:d3: 52:00:e8:86:29:f1:25:7c:f2:90:ab:96:bc:fc:10:59:47:6b: 9a:7a:1e:a7:eb:23:7f:50:5a:80:f2:c9:d1:d7:28:c6:95:56: 5f:bd:be:37:a1:73:15:6d:f2:56:cd:87:58:9e:f4:9b:06:cd: 5a:c3:ad:37:c1:51:10:17:e1:d3:46:32:5f:3b:37:f2:5a:ed: 7f:1b:a6:c1:ec:9c:ec:57:03:e5:4d:81:18:db:94:41:02:4d: 21:44:8c:13:a9:a0:16:80:9a:32:a2:1f:fe:5a:ae:08:6b:c2: dc:48:72:27:51:19:08:2f:6c:31:c2:95:a8:65:d9:22:6c:fa: d2:fb:42:be:3f:b8:3c:b1:4a:c0:dd:1d:19:6c:c0:de:55:4f: fb:6b:62:71:dd:1a:79:44:de:79:fd:1f:d3:4c:a3:8e:9f:16: 02:c9:19:90:bf:4c:2f:05:26:29:14:0a:2c:c9:60:09:67:dc: d2:c3:8a:5d:2c:4f:71:81:bd:96:fa:16:58:35:0e:9c:63:f1: 5b:04:e6:79:32:d5:93:8f:70:54:a9:28:39:e3:c5:7e:0c:52: 1f:26:4b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UL3vJ78F/lHZ7NhneqrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw ZGUwOTQwHhcNMjYwMTI1MTgwMDQ1WhcNMjYwMTI2MTgwMDQ1WjAzMTEwLwYDVQQD EyhiMWE3MjFhZDY1ZjkyMGQ0ODFiMDc1MDhmNzdmNjdkY2ExYzU2MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokUF3R1RgN620XiCzTWhcN/lUC7 Qlzb6d44G635DW+aSzu7zrqYBf8vNbWA9cpN4ciOoowraYO6V1MRLllk+cfbWH+s JCCvMMHWMvtr6xv8H7KaZmvv/eZYQfaD8tKpavi9YJDN8fqBWA9rfaZujkzjWmVL uRHErWZQxmXKufVV/9ibQuLPlkv3vL1WZe9RxdsapQiA8yFU25f2Sm9e9n9Cd8eH hWBVX9hj0gj8MwReiNgUKDCr1H5+aGrHzKiBVlgCFWVODkYmXeov6COvuFCi+UhO rDBm189da11tsS9W09Em44bRtqdOT0lIUcng/LSaTgbJ5tIJdBai6DJZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGnIa1l+SDUgbB1CPd/Z9yhxWEdMB8GA1UdIwQY MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4 LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSiY0Ryy KnnO7SGLAzqmyfK7dA2rA3tlH4Ccu3m6qFTJVjrTUgDohinxJXzykKuWvPwQWUdr mnoep+sjf1BagPLJ0dcoxpVWX72+N6FzFW3yVs2HWJ70mwbNWsOtN8FREBfh00Yy Xzs38lrtfxumweyc7FcD5U2BGNuUQQJNIUSME6mgFoCaMqIf/lquCGvC3EhyJ1EZ CC9sMcKVqGXZImz60vtCvj+4PLFKwN0dGWzA3lVP+2ticd0aeUTeef0f00yjjp8W AskZkL9MLwUmKRQKLMlgCWfc0sOKXSxPcYG9lvoWWDUOnGPxWwTmeTLVk49wVKko OePFfgxSHyZL7g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:34 2026 by rpki-client