This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json) Hash identifier: WHbkVgsOn18tC+NMnSLQySMf4YTe7/bTktI70mfPA9Q= Subject key identifier: C6:A5:DE:38:64:25:46:E3:D8:C9:FA:6F:F8:44:97:6F:C4:BF:0F:D9 Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Certificate serial: 019BFD2E90B49EBDB2E86E2F4B0FCC854095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft Manifest number: 0196 Signing time: Tue 27 Jan 2026 02:00:45 +0000 Manifest this update: Tue 27 Jan 2026 02:00:45 +0000 Manifest next update: Wed 28 Jan 2026 02:00:45 +0000 Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: SHVGx7NgL/kBuniGX9r5PvZyHWgddjZ8L5BB7E8FmdE=) 2: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:90:b4:9e:bd:b2:e8:6e:2f:4b:0f:cc:85:40:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb Validity Not Before: Jan 27 02:00:45 2026 GMT Not After : Jan 28 02:00:45 2026 GMT Subject: CN=c6a5de38642546e3d8c9fa6ff844976fc4bf0fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:2f:6e:e2:c6:37:dd:31:f5:e6:2a:ec:07: c1:52:92:38:86:b2:b1:a8:cf:09:98:92:5a:e0:09: 1f:a2:76:3b:73:50:e2:ac:42:95:f6:22:7f:d0:e3: 58:17:8f:c9:4b:c8:c4:79:20:be:73:08:34:89:a1: 7f:0c:96:db:74:9d:42:39:75:59:72:36:0e:56:a2: d4:8d:20:ed:ae:37:75:ea:74:8f:f3:ac:02:0f:33: bf:f9:36:71:78:bb:bc:8f:8f:14:81:82:7a:d5:e9: 3e:4c:bf:48:ca:06:2d:ef:76:36:a7:28:c8:6e:4c: e9:12:02:e6:87:57:52:b8:05:18:b0:c3:a1:27:d5: 58:8c:6d:7e:9f:9f:84:d4:2b:0f:a9:c0:07:7c:3c: 8a:4b:d0:9a:bd:87:01:ca:91:42:d6:55:35:21:c0: 2a:97:5c:e7:aa:c4:47:4e:a0:67:0e:fd:67:76:94: b0:f7:7f:05:65:dd:89:33:51:3c:72:9a:dc:fe:98: 70:ab:7d:12:42:fc:53:e1:b8:8e:08:e6:d0:13:6d: 49:98:83:5b:c0:13:98:8e:70:ea:d6:04:05:2a:86: 7b:a5:41:78:a7:c8:1d:95:97:74:82:63:cc:51:a4: 61:d7:f1:24:63:9e:36:35:49:37:c9:7b:91:db:0b: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:DE:38:64:25:46:E3:D8:C9:FA:6F:F8:44:97:6F:C4:BF:0F:D9 X509v3 Authority Key Identifier: keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:63:38:3b:67:d6:bb:48:2a:9c:82:41:5f:3b:3f:db:5e:1e: 04:5c:b2:c4:e5:a8:78:eb:54:39:c2:65:ea:a5:21:8a:cb:11: e7:a7:fc:30:ee:8f:d2:9a:35:5d:84:6c:f0:18:a2:d5:78:f9: db:f8:d3:1d:9b:fe:79:de:07:43:6b:c8:35:8b:b4:ca:c8:47: 99:f2:e7:fe:5c:5a:ba:2d:c3:72:7c:11:97:10:e6:ab:64:5a: 8e:7a:e9:72:94:a6:46:c2:9a:56:46:59:29:18:09:64:5a:a6: 61:cb:a3:18:4d:57:09:f5:44:8c:36:ba:b3:2b:bd:75:a3:af: 68:a9:73:36:d0:fa:68:ee:f7:f1:c2:1b:6f:a5:78:0d:08:27: 9f:ff:20:aa:77:a6:76:5f:f9:39:64:7d:aa:00:66:0c:bd:18: 88:3c:6f:fe:43:bb:18:41:20:8f:96:4a:50:b6:a5:f1:87:32: 87:f8:ec:4f:39:7a:e6:25:4d:03:9a:95:89:8c:c4:4a:8c:2a: 76:b6:89:ae:da:50:d1:be:b3:78:19:2d:35:ac:3c:49:87:7c: 6c:77:a1:ea:cf:a3:b5:f7:97:29:8a:d6:65:a0:e0:81:bf:75: 42:c2:4b:67:12:68:65:0f:65:30:3e:b5:de:fc:06:88:8b:48: 68:be:fb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LpC0nr2y6G4vSw/MhUCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDUzYzQ3ZjIxZGQ2NjUyYjY3ZmVmNDk1Yzk0ZmRmZDE1 MjhjZWIwHhcNMjYwMTI3MDIwMDQ1WhcNMjYwMTI4MDIwMDQ1WjAzMTEwLwYDVQQD EyhjNmE1ZGUzODY0MjU0NmUzZDhjOWZhNmZmODQ0OTc2ZmM0YmYwZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshwvbuLGN90x9eYq7AfBUpI4hrKx qM8JmJJa4AkfonY7c1DirEKV9iJ/0ONYF4/JS8jEeSC+cwg0iaF/DJbbdJ1COXVZ cjYOVqLUjSDtrjd16nSP86wCDzO/+TZxeLu8j48UgYJ61ek+TL9IygYt73Y2pyjI bkzpEgLmh1dSuAUYsMOhJ9VYjG1+n5+E1CsPqcAHfDyKS9CavYcBypFC1lU1IcAq l1znqsRHTqBnDv1ndpSw938FZd2JM1E8cprc/phwq30SQvxT4biOCObQE21JmINb wBOYjnDq1gQFKoZ7pUF4p8gdlZd0gmPMUaRh1/EkY542NUk3yXuR2wt4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMal3jhkJUbj2Mn6b/hEl2/Evw/ZMB8GA1UdIwQY MBaAFOTVPEfyHdZlK2f+9JXJT9/RUozrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEt OTVkNTNiNTMxNTQ1LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEtOTVkNTNiNTMxNTQ1 LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2M4O2fW u0gqnIJBXzs/214eBFyyxOWoeOtUOcJl6qUhissR56f8MO6P0po1XYRs8Bii1Xj5 2/jTHZv+ed4HQ2vINYu0yshHmfLn/lxaui3DcnwRlxDmq2RajnrpcpSmRsKaVkZZ KRgJZFqmYcujGE1XCfVEjDa6syu9daOvaKlzNtD6aO738cIbb6V4DQgnn/8gqnem dl/5OWR9qgBmDL0YiDxv/kO7GEEgj5ZKULal8Ycyh/jsTzl65iVNA5qViYzESowq draJrtpQ0b6zeBktNaw8SYd8bHeh6s+jtfeXKYrWZaDggb91QsJLZxJoZQ9lMD61 3vwGiItIaL773w== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:28 2026 by rpki-client