This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json) Hash identifier: r1OWk93A/HC9y3pCG8iP3FzRTNRypozCWKAaYJ2F8D8= Subject key identifier: 21:EB:0C:8B:42:4B:1A:AC:0F:C8:C9:EC:8F:7C:8C:E9:7A:36:58:25 Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689 Certificate serial: 019BF23D75C1893DEEE0D9EF112E03973E58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft Manifest number: 0FDF Signing time: Sat 24 Jan 2026 23:01:12 +0000 Manifest this update: Sat 24 Jan 2026 23:01:12 +0000 Manifest next update: Sun 25 Jan 2026 23:01:12 +0000 Files and hashes: 1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=) 2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=) 3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=) 4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: G8aru4hevbWwAYM+EhrkmoZDrZ3gzuMlPcRuEcTG4tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:75:c1:89:3d:ee:e0:d9:ef:11:2e:03:97:3e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af935603e52e831537716d458b360192f99a3689 Validity Not Before: Jan 24 23:01:12 2026 GMT Not After : Jan 25 23:01:12 2026 GMT Subject: CN=21eb0c8b424b1aac0fc8c9ec8f7c8ce97a365825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:4c:f1:55:52:de:ab:23:b2:b3:9e:8d:3d: a4:ad:c8:c0:80:a9:6f:9d:e6:83:ee:5a:7f:85:91: d2:e4:60:12:5e:e9:4e:b2:03:bb:9d:a3:0b:e3:c5: f8:0a:26:ea:39:01:62:19:15:37:07:ec:cf:3c:7a: de:7d:72:4c:98:ee:83:68:82:ec:4f:f7:8b:5a:73: 06:97:f0:2d:b4:c8:b9:9e:b4:37:41:2e:fe:cd:ca: 01:45:8b:13:e9:bf:d0:85:86:52:03:ec:be:f0:17: 5e:5d:f3:50:2f:8a:16:06:16:72:4e:f1:46:33:0a: 2d:4b:0d:94:11:46:0c:56:a7:e6:40:91:d8:16:74: b5:8a:19:d9:96:8a:f0:53:75:2d:e9:77:05:71:02: e1:44:bf:11:8b:6a:a5:06:1e:e7:97:5e:96:00:5e: b1:c7:07:56:e2:38:9c:60:5e:a9:2c:8c:7c:87:82: 9e:dc:73:0b:f4:c9:8e:8a:f1:91:2d:8a:07:2e:08: ac:53:ca:4c:54:f9:cf:f2:d5:9c:e9:5e:59:9f:bb: fe:0d:2a:d8:c8:a3:48:03:28:b4:4a:39:43:86:6c: 0e:e5:22:15:8a:16:76:6d:f2:1f:c5:07:63:36:ed: 30:52:3d:1e:e7:89:b8:8c:67:95:4b:60:c3:b6:2e: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EB:0C:8B:42:4B:1A:AC:0F:C8:C9:EC:8F:7C:8C:E9:7A:36:58:25 X509v3 Authority Key Identifier: keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f7:58:5e:77:88:63:4b:77:2d:31:79:7b:38:66:26:77:cb: ff:7b:95:7b:01:51:2c:9e:9b:fe:39:64:af:26:49:32:7f:7c: 76:36:95:68:cc:4b:d7:ac:9a:0b:68:17:ca:05:aa:2a:cc:53: 64:f6:8b:04:0e:63:55:b6:a4:c3:5a:cb:73:e1:18:29:09:ab: 76:ad:fc:15:f2:65:d5:68:f7:2c:2a:a8:e3:ad:ab:b2:f6:4a: 81:5d:76:38:ee:0e:04:43:4a:a5:4d:96:a3:fe:26:f1:99:6e: 6a:27:3f:9d:32:aa:89:16:eb:45:4a:14:99:af:10:c7:e9:17: 42:d8:55:e0:2a:24:99:06:73:42:ed:03:78:b7:6d:0c:18:ff: 5b:3d:55:6b:f0:61:6f:1b:d5:18:d5:fc:a1:ca:6a:e2:6d:d8: c8:a1:23:91:2e:02:b6:0f:87:72:47:85:5a:75:72:ed:68:46: 18:e4:a5:d8:52:3c:d4:f5:07:33:95:01:a1:c4:74:4c:18:07: 20:b7:19:9f:1d:ff:97:ad:0d:c0:24:64:a7:00:e6:d4:b8:9d: 13:d0:b7:6a:79:37:47:73:4e:99:1b:03:bc:7e:15:2e:a0:63: 73:18:51:f6:c0:ea:a7:0c:46:a9:c9:1e:96:c1:94:dd:74:67: 5d:a6:97:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPXXBiT3u4NnvES4Dlz5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5 YTM2ODkwHhcNMjYwMTI0MjMwMTEyWhcNMjYwMTI1MjMwMTEyWjAzMTEwLwYDVQQD EygyMWViMGM4YjQyNGIxYWFjMGZjOGM5ZWM4ZjdjOGNlOTdhMzY1ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipdM8VVS3qsjsrOejT2krcjAgKlv neaD7lp/hZHS5GASXulOsgO7naML48X4CibqOQFiGRU3B+zPPHrefXJMmO6DaILs T/eLWnMGl/AttMi5nrQ3QS7+zcoBRYsT6b/QhYZSA+y+8BdeXfNQL4oWBhZyTvFG MwotSw2UEUYMVqfmQJHYFnS1ihnZlorwU3Ut6XcFcQLhRL8Ri2qlBh7nl16WAF6x xwdW4jicYF6pLIx8h4Ke3HML9MmOivGRLYoHLgisU8pMVPnP8tWc6V5Zn7v+DSrY yKNIAyi0SjlDhmwO5SIVihZ2bfIfxQdjNu0wUj0e54m4jGeVS2DDti6WCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHrDItCSxqsD8jJ7I98jOl6NlglMB8GA1UdIwQY MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt MGEwZDA1ZWQwYzZiLzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfdYXneI Y0t3LTF5ezhmJnfL/3uVewFRLJ6b/jlkryZJMn98djaVaMxL16yaC2gXygWqKsxT ZPaLBA5jVbakw1rLc+EYKQmrdq38FfJl1Wj3LCqo462rsvZKgV12OO4OBENKpU2W o/4m8Zluaic/nTKqiRbrRUoUma8Qx+kXQthV4CokmQZzQu0DeLdtDBj/Wz1Va/Bh bxvVGNX8ocpq4m3YyKEjkS4Ctg+HckeFWnVy7WhGGOSl2FI81PUHM5UBocR0TBgH ILcZnx3/l60NwCRkpwDm1LidE9C3ank3R3NOmRsDvH4VLqBjcxhR9sDqpwxGqcke lsGU3XRnXaaXIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:41 2026 by rpki-client