This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json) Hash identifier: 8UDi1+AbIgBWecm4WedUjcEXMwY1hWa5FOUnpjVTbys= Subject key identifier: A2:17:63:22:AA:DC:98:6C:C0:A8:3B:FD:03:F3:F3:11:A6:AE:5E:EB Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Certificate serial: 019BF6BEC418C72FE51D6B1360BDE7AEE44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 20:00:55 +0000 Manifest this update: Sun 25 Jan 2026 20:00:55 +0000 Manifest next update: Mon 26 Jan 2026 20:00:55 +0000 Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: /qOh5Iiii+5EDgRihyxITyGNuuhLcH3gKcBDS8eBrLQ=) 2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=) 3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=) 4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c4:18:c7:2f:e5:1d:6b:13:60:bd:e7:ae:e4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Validity Not Before: Jan 25 20:00:55 2026 GMT Not After : Jan 26 20:00:55 2026 GMT Subject: CN=a2176322aadc986cc0a83bfd03f3f311a6ae5eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:36:41:7d:b7:44:6e:a8:69:16:e0:b0:36: 5e:3e:be:83:09:39:ae:b8:1e:a5:bc:f4:a0:c0:77: cb:97:51:ae:8e:0c:47:8f:1f:94:9e:58:de:e5:06: 93:e4:a1:ef:78:f1:51:0e:b1:96:e1:bc:16:48:0d: 49:02:26:ea:bf:7c:39:05:c2:d1:1a:e9:b1:fb:d7: 84:37:9a:f5:37:1b:dd:07:f3:42:3f:cc:46:46:93: b9:2b:a8:1c:cf:60:63:f5:9a:1a:32:0b:34:e8:a7: 5b:5f:88:f6:e5:52:3c:24:0c:68:f5:85:c4:1b:7d: 66:bc:8f:c9:09:6c:23:bc:26:1c:2d:61:4f:9b:fa: 1f:ed:a8:4c:a5:8c:d7:d3:5f:18:bb:17:11:c6:12: b0:e0:91:6b:6b:38:fe:f0:0e:b7:7f:29:8d:ac:10: c9:99:e1:0b:f8:0c:0d:4d:90:59:a7:ac:0b:20:19: d8:29:c4:b4:72:77:32:5e:43:31:b8:dc:78:93:24: 0a:e7:ff:5d:33:0c:be:75:fd:8d:f3:89:38:d9:1f: 43:cd:45:9f:df:56:43:f2:c9:e1:bd:94:88:af:f9: 18:f3:4f:8f:53:48:72:51:d6:2d:eb:20:db:94:68: a1:e5:44:c3:93:fd:1b:48:7c:02:16:8f:ba:90:53: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:63:22:AA:DC:98:6C:C0:A8:3B:FD:03:F3:F3:11:A6:AE:5E:EB X509v3 Authority Key Identifier: keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bc:1e:c2:36:af:46:09:f5:9a:a9:e1:6f:20:34:8b:24:f7: 71:68:b3:da:d6:81:2a:dd:9b:3d:78:c1:01:44:e5:6d:17:e3: a5:df:aa:56:5c:78:8f:a7:9a:76:66:08:f4:2c:8c:2d:d4:2f: e4:15:33:bb:16:0d:ff:99:4f:ab:c9:01:30:c7:bc:86:82:f5: 40:d3:f2:bd:98:54:54:bf:1f:47:7c:a2:c0:8d:6c:93:01:93: 6c:4a:88:10:24:8f:61:21:e9:02:a1:f1:d7:00:fc:c8:aa:40: af:30:44:a5:57:ec:62:dc:2e:a5:4a:35:11:a0:7e:c9:69:ff: 8c:df:7b:16:cf:64:ac:83:42:6e:9b:b2:fb:dd:f6:15:65:12: 11:af:66:89:0c:f0:c7:6f:5b:b9:43:42:2a:46:d9:45:ce:77: 7c:13:c0:17:bc:51:dc:9a:e5:b5:15:61:ff:00:18:98:67:94: 61:cf:07:2f:dd:8c:f3:5e:08:95:2a:d1:65:a9:dc:d5:54:e6: b2:35:e9:d5:65:07:eb:fe:cf:20:fd:97:1c:f0:32:cf:c3:f3: 4d:69:96:c3:c6:5f:57:86:5d:81:e0:8a:0a:84:5c:10:78:02: d5:73:21:aa:e2:3a:9b:cc:6f:2d:14:42:2e:9b:12:6e:15:3b: 7d:ac:6d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsQYxy/lHWsTYL3nruRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4 MDhiYTAwHhcNMjYwMTI1MjAwMDU1WhcNMjYwMTI2MjAwMDU1WjAzMTEwLwYDVQQD EyhhMjE3NjMyMmFhZGM5ODZjYzBhODNiZmQwM2YzZjMxMWE2YWU1ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQM2QX23RG6oaRbgsDZePr6DCTmu uB6lvPSgwHfLl1GujgxHjx+Unlje5QaT5KHvePFRDrGW4bwWSA1JAibqv3w5BcLR Gumx+9eEN5r1NxvdB/NCP8xGRpO5K6gcz2Bj9ZoaMgs06KdbX4j25VI8JAxo9YXE G31mvI/JCWwjvCYcLWFPm/of7ahMpYzX018YuxcRxhKw4JFrazj+8A63fymNrBDJ meEL+AwNTZBZp6wLIBnYKcS0cncyXkMxuNx4kyQK5/9dMwy+df2N84k42R9DzUWf 31ZD8snhvZSIr/kY80+PU0hyUdYt6yDblGih5UTDk/0bSHwCFo+6kFO5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIXYyKq3JhswKg7/QPz8xGmrl7rMB8GA1UdIwQY MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7wewjav Rgn1mqnhbyA0iyT3cWiz2taBKt2bPXjBAUTlbRfjpd+qVlx4j6eadmYI9CyMLdQv 5BUzuxYN/5lPq8kBMMe8hoL1QNPyvZhUVL8fR3yiwI1skwGTbEqIECSPYSHpAqHx 1wD8yKpArzBEpVfsYtwupUo1EaB+yWn/jN97Fs9krINCbpuy+932FWUSEa9miQzw x29buUNCKkbZRc53fBPAF7xR3JrltRVh/wAYmGeUYc8HL92M814IlSrRZanc1VTm sjXp1WUH6/7PIP2XHPAyz8PzTWmWw8ZfV4ZdgeCKCoRcEHgC1XMhquI6m8xvLRRC LpsSbhU7faxtPw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:12 2026 by rpki-client