This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json) Hash identifier: JpOTOMFIzqVFn8Tmu27K7i5HfHDbbXY7ma+/mVUlpTI= Subject key identifier: 60:C2:FD:69:1B:91:42:E0:F0:55:FB:AE:22:C9:C3:39:40:56:58:5E Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Certificate serial: 019BF8E410120E33A5659DE9871A33C7CC7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft Manifest number: 133F Signing time: Mon 26 Jan 2026 06:00:54 +0000 Manifest this update: Mon 26 Jan 2026 06:00:54 +0000 Manifest next update: Tue 27 Jan 2026 06:00:54 +0000 Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: AoJVltaTnjtBYlGmZnZtXc5UDOxV5oVA4PEOnCcsZIo=) 2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:10:12:0e:33:a5:65:9d:e9:87:1a:33:c7:cc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Validity Not Before: Jan 26 06:00:54 2026 GMT Not After : Jan 27 06:00:54 2026 GMT Subject: CN=60c2fd691b9142e0f055fbae22c9c3394056585e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:5a:cd:19:79:96:b8:b4:33:d2:62:0e:3d: 45:6c:9b:64:89:ac:1a:75:3e:21:84:10:30:c7:73: ed:00:64:68:ba:c5:c9:57:07:86:d2:e6:db:f8:b3: a0:4e:d4:5d:d6:67:08:2e:cc:cb:ec:3f:bc:2d:78: 8e:44:5b:53:96:e9:70:61:3b:82:23:54:e8:81:be: c2:31:11:40:22:9f:2f:22:88:28:29:35:f0:c6:6a: 87:a9:a9:27:c6:c6:77:85:e0:a0:eb:a6:e2:be:21: 34:7b:1d:37:f4:89:51:44:10:9e:4c:38:1e:89:90: 01:ec:0e:a2:b8:48:f0:b0:c8:c0:2d:a8:80:38:99: 2d:04:20:24:06:1f:40:9e:9e:41:c1:bb:e6:09:be: 88:27:00:9d:07:0b:72:f5:12:49:b6:1e:53:53:98: 1f:87:b9:f1:71:95:46:c6:1d:b7:ae:bb:ab:55:21: 84:08:1d:53:fb:94:6e:86:61:ee:39:30:e1:43:10: 7b:37:17:ed:5a:94:7e:c1:ad:cb:f1:c4:d6:22:bc: 7c:15:40:76:f8:3d:39:ae:90:fa:bc:a2:da:db:b7: 16:44:47:65:dd:8c:97:5d:f0:ca:ae:c2:e3:1b:36: 22:be:63:4d:18:b0:9b:08:fa:99:d1:ef:92:8a:37: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C2:FD:69:1B:91:42:E0:F0:55:FB:AE:22:C9:C3:39:40:56:58:5E X509v3 Authority Key Identifier: keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f8:23:91:71:aa:9b:02:e0:b9:db:a0:e9:ad:e9:05:94:c2: a9:0c:1c:60:86:15:fb:b5:36:a8:5b:c5:63:d5:12:b2:c4:9a: 5e:15:2e:30:4a:ca:5a:b2:3c:de:f3:7e:f8:3f:e9:de:90:17: 02:35:3b:de:73:71:b8:7d:47:a0:a8:ff:8b:fe:5b:80:06:8d: 28:2a:be:e4:1d:c3:6e:b1:f7:02:19:ea:ce:ee:c3:8c:58:5a: cb:46:16:dc:cb:69:81:a2:c6:a4:87:41:51:e0:67:55:7d:ca: be:58:ee:29:71:f1:ba:9d:d2:41:72:6e:83:af:87:91:ac:1d: 66:a9:db:24:29:db:80:74:67:99:71:d6:0b:33:93:a9:18:a0: 72:70:42:ce:f4:e7:83:36:b2:f6:2d:3d:57:c0:c6:d8:8e:da: d0:cc:f8:a2:e2:1c:07:31:d8:c2:91:0e:e1:27:6f:c1:e5:86: 35:14:f0:20:fc:d3:0d:51:02:bf:cb:8b:06:2a:9c:9d:7f:a2: 69:10:28:6f:39:4e:e7:3b:7c:c1:60:c2:8b:e7:c9:b7:a9:7e: 83:68:1e:d3:07:97:01:4c:9d:0d:62:07:78:77:cb:91:b0:95: 75:1f:f8:d7:13:2e:ad:17:ee:91:e7:83:07:e8:22:eb:bb:32: 17:44:c6:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BASDjOlZZ3phxozx8x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4 ZjhmMzgwHhcNMjYwMTI2MDYwMDU0WhcNMjYwMTI3MDYwMDU0WjAzMTEwLwYDVQQD Eyg2MGMyZmQ2OTFiOTE0MmUwZjA1NWZiYWUyMmM5YzMzOTQwNTY1ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqlazRl5lri0M9JiDj1FbJtkiawa dT4hhBAwx3PtAGRousXJVweG0ubb+LOgTtRd1mcILszL7D+8LXiORFtTlulwYTuC I1Togb7CMRFAIp8vIogoKTXwxmqHqaknxsZ3heCg66biviE0ex039IlRRBCeTDge iZAB7A6iuEjwsMjALaiAOJktBCAkBh9Anp5BwbvmCb6IJwCdBwty9RJJth5TU5gf h7nxcZVGxh23rrurVSGECB1T+5RuhmHuOTDhQxB7NxftWpR+wa3L8cTWIrx8FUB2 +D05rpD6vKLa27cWREdl3YyXXfDKrsLjGzYivmNNGLCbCPqZ0e+SijfMYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDC/WkbkULg8FX7riLJwzlAVlheMB8GA1UdIwQY MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvgjkXGq mwLgudug6a3pBZTCqQwcYIYV+7U2qFvFY9USssSaXhUuMErKWrI83vN++D/p3pAX AjU73nNxuH1HoKj/i/5bgAaNKCq+5B3DbrH3Ahnqzu7DjFhay0YW3MtpgaLGpIdB UeBnVX3KvljuKXHxup3SQXJug6+HkawdZqnbJCnbgHRnmXHWCzOTqRigcnBCzvTn gzay9i09V8DG2I7a0Mz4ouIcBzHYwpEO4SdvweWGNRTwIPzTDVECv8uLBiqcnX+i aRAobzlO5zt8wWDCi+fJt6l+g2ge0weXAUydDWIHeHfLkbCVdR/41xMurRfukeeD B+gi67syF0TG8w== -----END CERTIFICATE-----Generated at Mon Jan 26 13:12:42 2026 by rpki-client