This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json) Hash identifier: QnN2Q8gkGiAfqF15QV2lJ4PuW0vUImi4FreEIEq4VfU= Subject key identifier: F0:9C:95:EC:5B:06:6B:CD:6D:41:B5:1D:80:0F:29:B0:B7:84:11:1B Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Certificate serial: 019BF76344EB7034D379F2052F2889C9B2E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft Manifest number: 029F Signing time: Sun 25 Jan 2026 23:00:36 +0000 Manifest this update: Sun 25 Jan 2026 23:00:36 +0000 Manifest next update: Mon 26 Jan 2026 23:00:36 +0000 Files and hashes: 1: 1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa (hash: 9hRMwF9OzYcY4aoj5DqpON+f2xbb5moy11vfbRHpWD8=) 2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: NxV/DRp2l6WEIsdEt9wOUUtAFi9gK22Iy942FCK5ris=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:44:eb:70:34:d3:79:f2:05:2f:28:89:c9:b2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Validity Not Before: Jan 25 23:00:36 2026 GMT Not After : Jan 26 23:00:36 2026 GMT Subject: CN=f09c95ec5b066bcd6d41b51d800f29b0b784111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:47:49:0f:e6:eb:f9:d5:61:64:90:13:40: 73:ce:44:93:1e:d7:48:23:ad:ec:e8:e2:b0:6f:70: dd:15:f3:b2:ba:34:55:ef:c1:2b:b0:7d:9f:59:78: 18:bd:dc:80:d8:56:d7:41:9e:4d:f9:ed:50:06:7b: 37:9d:5d:f3:18:58:db:a6:dc:c4:05:2d:d9:a7:36: 9a:4e:51:ad:33:6f:d1:61:3c:13:6b:ba:ce:4f:95: 15:66:b5:b0:4a:81:3d:78:ff:a0:1c:f7:56:f2:53: de:48:b2:1d:ad:0f:55:5d:68:00:1d:ec:1a:cb:e9: 60:a4:57:d4:d0:78:33:a4:b4:69:8a:f2:f0:86:0c: a1:9b:e9:ff:a2:ba:f6:19:92:92:83:49:2d:cd:4f: a0:19:b2:80:06:6e:20:fa:f1:91:a3:7e:db:aa:8c: 56:59:40:0c:01:a2:63:02:0c:0f:14:78:ec:e4:50: 7c:ff:01:4c:fd:59:69:74:ae:51:4d:97:bb:5f:42: a9:5e:ae:e4:ce:7e:5f:4b:2b:67:eb:c3:71:09:f9: ba:a7:9e:c2:c3:4a:de:f0:f2:0f:17:e4:73:0b:20: 13:1a:33:a7:20:b8:7b:6a:fe:43:8f:88:4a:67:08: a8:00:b5:18:09:12:59:9b:be:0d:6a:0a:5a:47:66: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:95:EC:5B:06:6B:CD:6D:41:B5:1D:80:0F:29:B0:B7:84:11:1B X509v3 Authority Key Identifier: keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3c:12:59:72:5a:ca:d6:c9:77:06:ba:42:0e:17:61:1b:48: 5f:eb:df:f7:fc:3e:88:96:6b:da:48:c9:80:21:0b:db:b7:bb: a6:cd:d1:a4:8a:ed:19:fc:d7:e3:68:e0:e9:79:ff:3c:27:f9: 47:bb:97:ef:f6:0b:84:88:1a:f8:d6:ab:05:cd:ec:6d:cd:12: 46:cf:0c:f7:ff:f1:4a:ec:1e:fa:aa:44:b8:ab:79:fa:a7:42: b8:fe:60:bd:f9:97:c2:cc:d3:1f:7c:27:5b:02:fc:79:e8:e0: 51:d1:7f:95:a6:11:44:4e:40:8f:e6:3c:d2:a8:1a:9d:f3:1f: ed:29:81:5a:b0:17:f5:c5:06:3f:a3:10:96:09:82:62:41:2c: aa:4b:d9:ec:a5:a8:e1:53:fd:75:87:63:74:1e:fb:5b:78:27: 6a:0c:4e:46:69:4d:26:2a:83:83:08:28:fa:f2:bb:f8:38:b1: 81:ee:67:d8:5b:c9:17:24:13:ab:32:de:3a:53:6b:77:f7:9d: 60:7c:49:c4:13:61:61:69:d3:a6:26:98:ce:58:34:d1:9b:05: 11:83:fa:42:ab:32:fe:e8:e0:d2:3d:90:78:71:33:d0:b2:2f: 07:67:49:2f:b2:a2:58:41:32:74:e1:fd:cf:40:80:57:0f:04: 8e:53:f1:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0TrcDTTefIFLyiJybLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWE0YTQyOTVjNjM4ZmRlNzYwZjNjZGE0NzZkOGJmYzI3 MTEyYjIwHhcNMjYwMTI1MjMwMDM2WhcNMjYwMTI2MjMwMDM2WjAzMTEwLwYDVQQD EyhmMDljOTVlYzViMDY2YmNkNmQ0MWI1MWQ4MDBmMjliMGI3ODQxMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VVHSQ/m6/nVYWSQE0BzzkSTHtdI I63s6OKwb3DdFfOyujRV78ErsH2fWXgYvdyA2FbXQZ5N+e1QBns3nV3zGFjbptzE BS3ZpzaaTlGtM2/RYTwTa7rOT5UVZrWwSoE9eP+gHPdW8lPeSLIdrQ9VXWgAHewa y+lgpFfU0HgzpLRpivLwhgyhm+n/orr2GZKSg0ktzU+gGbKABm4g+vGRo37bqoxW WUAMAaJjAgwPFHjs5FB8/wFM/VlpdK5RTZe7X0KpXq7kzn5fSytn68NxCfm6p57C w0re8PIPF+RzCyATGjOnILh7av5Dj4hKZwioALUYCRJZm74NagpaR2Y+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCclexbBmvNbUG1HYAPKbC3hBEbMB8GA1UdIwQY MBaAFHeaSkKVxjj952DzzaR22L/CcRKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2Qt NjJjNjdkNGJjNTQ2LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2QtNjJjNjdkNGJjNTQ2 LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzwSWXJa ytbJdwa6Qg4XYRtIX+vf9/w+iJZr2kjJgCEL27e7ps3RpIrtGfzX42jg6Xn/PCf5 R7uX7/YLhIga+NarBc3sbc0SRs8M9//xSuwe+qpEuKt5+qdCuP5gvfmXwszTH3wn WwL8eejgUdF/laYRRE5Aj+Y80qganfMf7SmBWrAX9cUGP6MQlgmCYkEsqkvZ7KWo 4VP9dYdjdB77W3gnagxORmlNJiqDgwgo+vK7+Dixge5n2FvJFyQTqzLeOlNrd/ed YHxJxBNhYWnTpiaYzlg00ZsFEYP6Qqsy/ujg0j2QeHEz0LIvB2dJL7KiWEEydOH9 z0CAVw8EjlPxqw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:01 2026 by rpki-client