This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json) Hash identifier: ty7/Hu5S3n4XoQvfYQRoQ3quj2KsB4DJNF7aPEfFLMY= Subject key identifier: 9E:DE:A8:33:6A:51:AE:25:DC:79:38:B3:A0:8D:8D:8F:D8:CE:C9:F7 Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Certificate serial: 019BFFF95D1FF835C33750F023B497342550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft Manifest number: 0879 Signing time: Tue 27 Jan 2026 15:01:30 +0000 Manifest this update: Tue 27 Jan 2026 15:01:30 +0000 Manifest next update: Wed 28 Jan 2026 15:01:30 +0000 Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: C1M9rmAUvIplZyp70VKCeD7kfq6KhT8pajP5bivkG/A=) 2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:f9:5d:1f:f8:35:c3:37:50:f0:23:b4:97:34:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf Validity Not Before: Jan 27 15:01:30 2026 GMT Not After : Jan 28 15:01:30 2026 GMT Subject: CN=9edea8336a51ae25dc7938b3a08d8d8fd8cec9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:d6:58:af:3d:b1:2b:c8:f8:c5:9a:3d:21: 33:c9:4f:bb:f6:5a:82:c9:d8:c0:ad:44:89:36:ff: 0e:76:fe:5b:7d:dd:78:c3:72:1d:2a:0b:b0:2a:d7: ea:a7:b1:90:7d:30:42:5f:84:01:9f:e5:ff:f3:25: 63:b1:ad:06:1d:e7:25:2f:9f:81:f0:8d:b4:bc:90: 09:97:d6:00:7a:ee:85:4e:66:29:f3:84:20:4a:31: 45:63:49:8f:eb:70:60:7d:f8:29:a5:3d:cc:bf:e2: 48:27:5a:f4:7b:6a:ca:b5:54:20:b7:ba:79:ea:f2: 84:68:6e:9e:78:49:aa:31:86:7b:06:b3:31:a3:d7: a6:81:87:b6:54:e3:b4:6e:12:a8:e8:e1:a5:e4:ac: 66:65:a0:8d:4e:7b:03:e8:67:ab:fe:bf:d3:67:82: da:31:80:57:e2:83:49:57:f9:e2:bc:ee:d2:39:79: df:0c:8f:85:26:4a:a9:24:97:44:be:e0:4c:8f:ff: cd:fd:4e:f3:69:22:bf:fc:d6:f6:b4:80:2e:72:29: d6:8d:98:8f:fc:d0:ae:08:21:d4:76:0c:91:14:3f: 5b:7c:8d:67:81:77:c4:77:d2:03:80:65:f0:62:f7: b2:7c:1a:e1:9f:b9:d8:e6:47:64:b1:13:ea:5c:d4: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:A8:33:6A:51:AE:25:DC:79:38:B3:A0:8D:8D:8F:D8:CE:C9:F7 X509v3 Authority Key Identifier: keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:d8:46:43:10:2d:d0:36:32:37:29:63:3c:cb:cf:1d:0b: 17:34:68:dd:b9:c3:67:75:ab:31:5e:28:be:b1:ae:82:0c:c9: ab:61:9a:36:d9:6e:16:db:09:f6:b1:62:35:8f:0f:d4:a7:2f: b9:65:f7:f5:4a:77:d1:91:c8:37:4a:b6:b6:a7:15:ed:0d:a0: e9:b7:1d:6c:47:e5:54:c5:a9:71:84:97:cf:1a:dd:65:e3:67: 80:96:f8:ff:ba:79:7c:2e:83:fd:2e:d2:78:c1:09:23:06:70: 85:de:40:64:65:31:d8:e9:7e:35:20:41:f8:40:cb:b2:10:9b: 9a:d2:60:ed:b0:22:73:aa:a4:01:7f:62:eb:24:cd:f9:b6:24: ae:79:a8:a2:73:82:d5:5c:09:2f:62:77:7e:60:ab:b0:b5:d5: e6:0a:aa:c6:d5:4b:cf:25:80:0f:46:ef:e0:21:ad:87:ee:78: 8f:ab:2d:f1:01:68:90:1c:b3:5c:ce:55:72:b3:38:15:3f:13: 7b:f3:ab:8f:49:7a:96:43:ce:c9:6a:6c:71:fb:b7:a6:be:d1: 0f:94:13:31:2a:53:e2:6d:65:dd:90:d0:50:67:7d:c1:0b:b7: 6d:6f:2d:9b:d5:1a:d1:93:8c:19:b1:5b:86:a5:9d:41:ea:d6: c2:e6:b3:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/+V0f+DXDN1DwI7SXNCVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw ZGU2YmYwHhcNMjYwMTI3MTUwMTMwWhcNMjYwMTI4MTUwMTMwWjAzMTEwLwYDVQQD Eyg5ZWRlYTgzMzZhNTFhZTI1ZGM3OTM4YjNhMDhkOGQ4ZmQ4Y2VjOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7jWWK89sSvI+MWaPSEzyU+79lqC ydjArUSJNv8Odv5bfd14w3IdKguwKtfqp7GQfTBCX4QBn+X/8yVjsa0GHeclL5+B 8I20vJAJl9YAeu6FTmYp84QgSjFFY0mP63BgffgppT3Mv+JIJ1r0e2rKtVQgt7p5 6vKEaG6eeEmqMYZ7BrMxo9emgYe2VOO0bhKo6OGl5KxmZaCNTnsD6Ger/r/TZ4La MYBX4oNJV/nivO7SOXnfDI+FJkqpJJdEvuBMj//N/U7zaSK//Nb2tIAucinWjZiP /NCuCCHUdgyRFD9bfI1ngXfEd9IDgGXwYveyfBrhn7nY5kdksRPqXNR8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7eqDNqUa4l3Hk4s6CNjY/Yzsn3MB8GA1UdIwQY MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqLYRkMQ LdA2MjcpYzzLzx0LFzRo3bnDZ3WrMV4ovrGuggzJq2GaNtluFtsJ9rFiNY8P1Kcv uWX39Up30ZHIN0q2tqcV7Q2g6bcdbEflVMWpcYSXzxrdZeNngJb4/7p5fC6D/S7S eMEJIwZwhd5AZGUx2Ol+NSBB+EDLshCbmtJg7bAic6qkAX9i6yTN+bYkrnmoonOC 1VwJL2J3fmCrsLXV5gqqxtVLzyWAD0bv4CGth+54j6st8QFokByzXM5VcrM4FT8T e/Orj0l6lkPOyWpscfu3pr7RD5QTMSpT4m1l3ZDQUGd9wQu3bW8tm9Ua0ZOMGbFb hqWdQerWwuazDQ== -----END CERTIFICATE-----Generated at Tue Jan 27 17:11:36 2026 by rpki-client