This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json) Hash identifier: 6sGpFWAb+ONE9Y2arf15uITpN/0N7O2+cxIQIcNMCsI= Subject key identifier: 5B:27:01:53:F1:35:46:56:F4:DB:92:51:99:E0:8B:B2:3F:A6:E6:A8 Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c Certificate serial: 019BF7D1E6B1F8C9520B1A591368DAD41453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 01:01:26 +0000 Manifest this update: Mon 26 Jan 2026 01:01:26 +0000 Manifest next update: Tue 27 Jan 2026 01:01:26 +0000 Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: C9TGc1H/dn/dYAEMO70YRAV3CxbCPSqzd4d+jy3gKfo=) 2: RIs-nSioAAbMhCjr-lXmyd0YJWg.roa (hash: YGgwfg43vefqS27L4n5VYMskXBrg120mmT6klPAXXfE=) 3: ip63DkXgFCFiwceDsaeHFkqGyCM.roa (hash: 9H4aCvtl/Rl6eRKsd1C2NcQpB4gu/QorYFrMFaHoU6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:e6:b1:f8:c9:52:0b:1a:59:13:68:da:d4:14:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c Validity Not Before: Jan 26 01:01:26 2026 GMT Not After : Jan 27 01:01:26 2026 GMT Subject: CN=5b270153f1354656f4db925199e08bb23fa6e6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:b4:ce:d7:c6:af:f4:af:aa:47:32:2b:0a: b0:59:c3:44:34:e7:0e:62:d4:c1:b8:db:9e:aa:f0: 84:15:5d:69:22:8c:6e:97:29:29:5d:11:ff:a5:50: 69:b0:6c:b7:d1:70:d7:41:cb:06:25:3f:46:1e:ac: 38:7a:ce:f7:7a:3e:5d:c1:b3:e8:2d:e2:91:05:31: 5a:76:bb:c8:f6:5d:2a:bb:9c:50:9f:75:de:b4:6a: 93:52:d3:96:65:01:69:54:31:01:04:f1:3d:db:6e: 15:fe:fb:0c:aa:e9:98:d6:41:e2:cc:45:c1:73:e6: 9c:43:ba:16:80:e9:b8:ec:fe:76:47:96:56:dc:93: cb:64:6c:bb:b1:86:6a:d3:50:ed:e0:9e:7f:fb:c6: 31:58:35:c3:ae:40:70:d4:7f:4f:da:bc:c8:b3:be: 15:ab:d3:89:c2:b7:f7:48:a9:2d:3e:2f:4f:e3:c9: 8b:1e:5a:15:b3:4d:8f:e3:4f:63:b5:8c:77:06:5f: 65:ef:5f:4c:1f:53:c0:e3:71:dc:39:80:7d:89:fd: 6d:fc:bb:00:b8:db:98:14:fe:65:e4:6e:36:34:a1: 15:90:12:f3:9d:56:9f:f3:6e:ae:d7:84:89:fe:3f: 20:78:be:d4:f7:a4:bf:04:2b:d0:a6:f7:ad:6d:0a: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:01:53:F1:35:46:56:F4:DB:92:51:99:E0:8B:B2:3F:A6:E6:A8 X509v3 Authority Key Identifier: keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a2:e6:f9:2b:d4:ac:4b:83:de:25:31:7b:a9:69:5b:31:ec: 77:9f:2f:fd:32:f9:dd:53:eb:01:cf:6a:e7:50:11:09:e7:af: 41:6f:1c:4b:d0:d3:ec:cc:b2:8e:4b:b7:84:c0:09:c8:7c:bb: ba:6a:0f:53:7c:43:09:97:a3:ea:5c:88:22:5e:94:1f:97:b6: a0:89:23:ee:61:77:77:5d:a3:81:82:13:45:36:48:73:df:3d: 79:72:dd:63:15:e9:a7:f3:67:5e:ab:44:05:70:d2:b2:ed:98: f0:b7:da:ae:33:85:4c:05:0d:6b:4c:09:4f:bd:41:a2:1d:46: 0b:e3:3c:80:7f:e2:f7:4d:61:99:a0:a9:b8:96:0e:1b:05:ca: a7:f8:a9:e5:3a:41:55:67:25:4b:d9:0c:e8:ca:cf:6e:dc:07: 53:ff:01:96:d2:40:f9:98:f2:fe:ef:0d:29:d6:40:c6:63:dc: cf:27:c7:42:c9:e4:17:54:85:0d:cc:d0:38:01:0d:b7:05:36: 69:6d:57:b2:23:1d:12:76:56:12:87:7a:e9:47:3a:d5:4a:fc: 1e:7d:b1:ed:4a:3b:3d:20:c3:73:11:e0:e1:5d:16:d4:74:16: 6d:62:1e:f6:2e:aa:d4:c7:04:2b:3e:ec:42:c1:90:0c:dc:8e: 0b:21:a6:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30eax+MlSCxpZE2ja1BRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl ZTdhOWMwHhcNMjYwMTI2MDEwMTI2WhcNMjYwMTI3MDEwMTI2WjAzMTEwLwYDVQQD Eyg1YjI3MDE1M2YxMzU0NjU2ZjRkYjkyNTE5OWUwOGJiMjNmYTZlNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRO0ztfGr/SvqkcyKwqwWcNENOcO YtTBuNueqvCEFV1pIoxulykpXRH/pVBpsGy30XDXQcsGJT9GHqw4es73ej5dwbPo LeKRBTFadrvI9l0qu5xQn3XetGqTUtOWZQFpVDEBBPE9224V/vsMqumY1kHizEXB c+acQ7oWgOm47P52R5ZW3JPLZGy7sYZq01Dt4J5/+8YxWDXDrkBw1H9P2rzIs74V q9OJwrf3SKktPi9P48mLHloVs02P409jtYx3Bl9l719MH1PA43HcOYB9if1t/LsA uNuYFP5l5G42NKEVkBLznVaf826u14SJ/j8geL7U96S/BCvQpvetbQpVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsnAVPxNUZW9NuSUZngi7I/puaoMB8GA1UdIwQY MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKLm+SvU rEuD3iUxe6lpWzHsd58v/TL53VPrAc9q51ARCeevQW8cS9DT7Myyjku3hMAJyHy7 umoPU3xDCZej6lyIIl6UH5e2oIkj7mF3d12jgYITRTZIc989eXLdYxXpp/NnXqtE BXDSsu2Y8LfarjOFTAUNa0wJT71Boh1GC+M8gH/i901hmaCpuJYOGwXKp/ip5TpB VWclS9kM6MrPbtwHU/8BltJA+Zjy/u8NKdZAxmPczyfHQsnkF1SFDczQOAENtwU2 aW1XsiMdEnZWEod66Uc61Ur8Hn2x7Uo7PSDDcxHg4V0W1HQWbWIe9i6q1McEKz7s QsGQDNyOCyGmwg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:36 2026 by rpki-client