This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json) Hash identifier: lXjS9SUPI0iLG5gIF30GCJYgowWbPhRF6d572MLuyIU= Subject key identifier: 83:A3:B2:E2:D0:02:43:5E:F0:05:55:ED:89:E3:69:BE:90:84:87:45 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B7D144D2560A47FD8834CA4AF9C80103D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft Manifest number: 128A Signing time: Fri 02 Jan 2026 05:00:40 +0000 Manifest this update: Fri 02 Jan 2026 05:00:40 +0000 Manifest next update: Sat 03 Jan 2026 05:00:40 +0000 Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: QTyA3pXkspFBSnLrHkx9YxOdfyUE85VCbomyKRwf4h8=) 2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=) 3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=) 4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:14:4d:25:60:a4:7f:d8:83:4c:a4:af:9c:80:10:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Jan 2 05:00:40 2026 GMT Not After : Jan 3 05:00:40 2026 GMT Subject: CN=83a3b2e2d002435ef00555ed89e369be90848745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:81:3e:53:fc:ad:28:94:ec:71:10:af:a7: df:48:ef:25:6c:8a:d0:ad:39:c0:88:dd:de:72:ce: 78:22:96:54:83:92:f3:bb:a1:2e:e6:b8:be:e7:83: f5:ad:c9:39:7a:20:c3:8e:9b:1b:c2:af:ed:fc:54: be:67:e7:6b:e2:fe:1b:99:43:51:46:16:28:4d:cf: 9e:b5:16:2f:d7:35:98:39:79:ed:60:2a:9e:6c:ec: 9a:3b:73:20:da:e6:72:07:82:80:49:7e:91:f6:54: 79:f3:41:d3:29:4a:53:31:fc:49:b6:8c:47:f4:0a: 7c:c2:3e:66:de:f5:38:f1:24:aa:38:07:ac:a2:e2: 73:c4:6c:10:ad:e5:db:6d:34:80:1e:4e:e5:fc:dd: 29:b5:31:59:ba:63:6a:4e:49:9f:ef:fb:fa:83:5a: c0:32:47:77:8c:4d:33:0c:4f:a3:50:dd:97:e2:20: 1c:c2:79:4b:f7:9a:fa:15:ef:b4:6d:1f:b2:be:3b: 6d:75:70:d5:4a:e8:68:e5:b6:e1:09:da:44:6c:cd: 7a:c5:a5:f7:02:e8:c1:0e:c4:91:2e:de:3c:3c:8e: 90:89:1e:f0:80:76:60:f2:5f:a6:c9:4a:ba:45:e8: 4d:a5:ef:34:af:1d:04:4a:74:02:f2:54:cf:1b:90: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A3:B2:E2:D0:02:43:5E:F0:05:55:ED:89:E3:69:BE:90:84:87:45 X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a2:5d:ba:13:b0:c7:f4:2e:57:d0:ce:49:59:02:b9:52:78: a0:e7:78:0a:b4:04:39:19:d5:f5:bd:f9:89:17:65:0f:c0:42: f6:1e:d1:9e:02:95:f4:5a:53:ba:74:98:48:6f:3c:ee:a5:67: 6a:e0:dc:5d:14:52:13:7f:9e:98:f9:b0:53:40:13:59:8d:0c: 14:1a:d2:93:cb:8e:7c:98:ac:66:72:ec:f9:e0:cf:0b:9a:43: 28:4d:3c:b9:3c:dc:0b:22:9b:df:e4:03:5d:15:9f:19:6b:c9: de:85:a9:5e:78:ce:ee:25:f7:81:9c:c0:1a:bd:3f:96:1c:83: c5:20:5b:98:e3:d7:97:7a:cc:9d:69:7e:0d:93:72:98:88:4b: 7b:f5:42:ab:a1:68:32:82:65:83:63:92:05:f5:67:c8:c5:02: f6:f4:43:8a:a8:43:2c:f9:a2:80:ac:6b:a0:62:2b:0a:47:40: 19:85:c5:ee:f3:8f:94:f3:49:b6:45:2c:12:fd:e7:14:3c:33: 33:12:f8:b0:64:d1:a8:50:dc:8b:f3:e0:19:18:77:0f:c0:ae: 5c:25:92:7e:56:de:a2:99:ef:0a:d4:68:8e:ed:09:fb:23:e0: ec:99:ae:c0:78:19:b3:be:1d:35:b0:38:7b:c3:9d:f0:0d:2a: 81:56:d8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9FE0lYKR/2INMpK+cgBA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjYwMTAyMDUwMDQwWhcNMjYwMTAzMDUwMDQwWjAzMTEwLwYDVQQD Eyg4M2EzYjJlMmQwMDI0MzVlZjAwNTU1ZWQ4OWUzNjliZTkwODQ4NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu+BPlP8rSiU7HEQr6ffSO8lbIrQ rTnAiN3ecs54IpZUg5Lzu6Eu5ri+54P1rck5eiDDjpsbwq/t/FS+Z+dr4v4bmUNR RhYoTc+etRYv1zWYOXntYCqebOyaO3Mg2uZyB4KASX6R9lR580HTKUpTMfxJtoxH 9Ap8wj5m3vU48SSqOAesouJzxGwQreXbbTSAHk7l/N0ptTFZumNqTkmf7/v6g1rA Mkd3jE0zDE+jUN2X4iAcwnlL95r6Fe+0bR+yvjttdXDVSuho5bbhCdpEbM16xaX3 AujBDsSRLt48PI6QiR7wgHZg8l+myUq6RehNpe80rx0ESnQC8lTPG5DssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOjsuLQAkNe8AVV7Ynjab6QhIdFMB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaJduhOw x/QuV9DOSVkCuVJ4oOd4CrQEORnV9b35iRdlD8BC9h7RngKV9FpTunSYSG887qVn auDcXRRSE3+emPmwU0ATWY0MFBrSk8uOfJisZnLs+eDPC5pDKE08uTzcCyKb3+QD XRWfGWvJ3oWpXnjO7iX3gZzAGr0/lhyDxSBbmOPXl3rMnWl+DZNymIhLe/VCq6Fo MoJlg2OSBfVnyMUC9vRDiqhDLPmigKxroGIrCkdAGYXF7vOPlPNJtkUsEv3nFDwz MxL4sGTRqFDci/PgGRh3D8CuXCWSflbeopnvCtRoju0J+yPg7JmuwHgZs74dNbA4 e8Od8A0qgVbYkA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:51:56 2026 by rpki-client