This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json) Hash identifier: 6ScTHXKXXEptkTyhWQwBSXXZ0EZ9unwcQrl8YMpXrK8= Subject key identifier: 5C:D0:F5:63:AD:AD:D7:15:00:46:33:10:3F:1D:8F:BB:38:F8:25:F3 Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68 Certificate serial: 019BF687F4239A7C34CB3F419A21F8546542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft Manifest number: 0154 Signing time: Sun 25 Jan 2026 19:01:03 +0000 Manifest this update: Sun 25 Jan 2026 19:01:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=) 2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=) 3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: DkaTpxaB1YQE8EAH02MRGgxSsv6GZcctvCwA6boirMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f4:23:9a:7c:34:cb:3f:41:9a:21:f8:54:65:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68 Validity Not Before: Jan 25 19:01:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=5cd0f563adadd715004633103f1d8fbb38f825f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:88:37:1e:20:51:32:3c:b9:01:61:e4:0d: 6b:89:56:59:1d:24:78:54:f2:66:77:df:08:33:a3: ea:f5:1e:27:98:bc:45:7b:e7:77:e0:23:20:4d:63: cd:e2:4f:f3:4d:3a:b3:83:ae:1a:6a:b6:9d:d5:15: 38:f3:17:a9:04:51:fe:cc:7a:fd:76:d7:d5:33:ce: 66:8f:64:f3:2a:13:ad:12:fd:b7:c1:09:e1:bc:6c: 5b:8c:0f:9e:19:33:9d:bd:ff:b5:f3:5e:df:72:c2: 60:0e:74:26:92:0f:ea:1d:c9:29:c5:9c:e0:5d:a4: c6:a0:17:08:d4:ea:05:f9:0e:8c:3f:91:1f:c2:72: 50:b5:0c:49:ee:f3:77:49:8b:7a:26:b7:ad:a3:81: 81:ed:14:86:fa:28:09:7d:18:f3:ad:68:c5:08:6a: 21:2a:cb:6b:4a:5a:24:1d:7b:0b:8c:99:d4:a3:da: c9:02:67:c6:b6:84:fa:16:52:41:03:4c:de:76:0a: 5d:9e:1a:77:9f:22:b2:50:b0:94:7f:3d:cb:b9:be: ad:14:2e:23:1d:53:7b:3a:94:9a:80:46:79:25:62: c0:e6:2a:25:6d:80:56:33:c2:82:39:e7:d8:db:10: f5:0b:70:e2:fc:d8:c0:75:5a:1e:f5:cf:12:fc:d8: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:F5:63:AD:AD:D7:15:00:46:33:10:3F:1D:8F:BB:38:F8:25:F3 X509v3 Authority Key Identifier: keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ed:c0:c0:22:de:8a:ca:15:41:77:94:63:f0:22:4d:13:69: 3f:af:e8:fa:d0:e9:96:cf:1a:82:78:05:92:10:57:5f:46:82: 96:98:b7:57:13:7e:f5:99:82:1d:d0:34:66:e3:75:e6:1e:eb: 93:b0:a6:35:ec:ec:8f:67:1d:88:04:b1:47:30:54:87:cc:59: 80:cd:86:2a:a7:7b:ba:37:10:5d:9d:b7:10:39:31:3d:37:af: 5d:b7:18:22:5f:3d:a9:d9:5e:29:e9:73:70:2f:0e:a1:92:0c: 36:2a:1e:f8:5d:db:5e:cb:13:58:42:ea:e8:0c:01:50:bf:f7: 65:f9:25:2e:d5:15:5c:48:fd:b4:fb:0e:1c:25:a7:5c:b9:ef: 40:c1:2a:ed:0e:a8:fa:4a:2c:98:50:8f:4f:68:bd:0f:ca:97: 94:72:6d:32:3d:70:1d:12:7a:10:89:38:59:c9:a4:22:53:17: 29:69:e6:d3:f0:4f:9c:a1:1f:e2:e4:b3:60:55:13:1e:c9:b2: db:24:fb:ab:dd:f8:1e:8c:de:a7:42:55:7a:2a:b5:55:fc:4b: 67:cf:bb:98:48:16:51:23:34:22:18:1c:d3:b7:3d:75:10:07: 33:09:cd:64:eb:c2:f5:95:2e:e7:57:69:09:de:45:cc:7f:f1: ba:25:d2:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/Qjmnw0yz9BmiH4VGVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTIzOTFlMGFkMmU2NDRjZmUyZGFkNzYyMTExZDc1N2Y1 ODVmNjgwHhcNMjYwMTI1MTkwMTAzWhcNMjYwMTI2MTkwMTAzWjAzMTEwLwYDVQQD Eyg1Y2QwZjU2M2FkYWRkNzE1MDA0NjMzMTAzZjFkOGZiYjM4ZjgyNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlguINx4gUTI8uQFh5A1riVZZHSR4 VPJmd98IM6Pq9R4nmLxFe+d34CMgTWPN4k/zTTqzg64aarad1RU48xepBFH+zHr9 dtfVM85mj2TzKhOtEv23wQnhvGxbjA+eGTOdvf+1817fcsJgDnQmkg/qHckpxZzg XaTGoBcI1OoF+Q6MP5EfwnJQtQxJ7vN3SYt6Jreto4GB7RSG+igJfRjzrWjFCGoh KstrSlokHXsLjJnUo9rJAmfGtoT6FlJBA0zedgpdnhp3nyKyULCUfz3Lub6tFC4j HVN7OpSagEZ5JWLA5iolbYBWM8KCOefY2xD1C3Di/NjAdVoe9c8S/Nj2TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzQ9WOtrdcVAEYzED8dj7s4+CXzMB8GA1UdIwQY MBaAFBdSOR4K0uZEz+La12IRHXV/WF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzkt MzlkYTY2MDJjNDMwLzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzktMzlkYTY2MDJjNDMw LzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVO3AwCLe isoVQXeUY/AiTRNpP6/o+tDpls8agngFkhBXX0aClpi3VxN+9ZmCHdA0ZuN15h7r k7CmNezsj2cdiASxRzBUh8xZgM2GKqd7ujcQXZ23EDkxPTevXbcYIl89qdleKelz cC8OoZIMNioe+F3bXssTWELq6AwBUL/3ZfklLtUVXEj9tPsOHCWnXLnvQMEq7Q6o +kosmFCPT2i9D8qXlHJtMj1wHRJ6EIk4WcmkIlMXKWnm0/BPnKEf4uSzYFUTHsmy 2yT7q934Hozep0JVeiq1VfxLZ8+7mEgWUSM0Ihgc07c9dRAHMwnNZOvC9ZUu51dp Cd5FzH/xuiXSzg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:26 2026 by rpki-client