This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft File: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json) Hash identifier: LL6lWmhlseTXCyyJ32XM2jEwJn10o1GzDCZsYL7BE6Y= Subject key identifier: 41:3E:64:29:FA:8E:CA:4F:B8:BD:91:04:D7:E6:A2:39:BE:26:1E:74 Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC Certificate issuer: /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc Certificate serial: 019BFC1C5CF989FE28E2A3C2E3D97401FE7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft Manifest number: 10DA Signing time: Mon 26 Jan 2026 21:01:15 +0000 Manifest this update: Mon 26 Jan 2026 21:01:15 +0000 Manifest next update: Tue 27 Jan 2026 21:01:15 +0000 Files and hashes: 1: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (hash: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ=) 2: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: IVBtw7UDd89DAo5ASvlBYu6IDtR3Fa6tGWjBgh2fELs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:5c:f9:89:fe:28:e2:a3:c2:e3:d9:74:01:fe:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc Validity Not Before: Jan 26 21:01:15 2026 GMT Not After : Jan 27 21:01:15 2026 GMT Subject: CN=413e6429fa8eca4fb8bd9104d7e6a239be261e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:1e:bf:77:52:66:13:6b:f2:89:d6:1f:40: c1:8d:9b:06:f4:fb:45:52:4b:77:d8:fd:0c:52:87: 2c:94:59:d6:a2:a8:fa:89:9d:75:a8:e4:63:36:85: 2a:e5:72:1f:1a:48:23:64:5b:47:f8:50:13:1a:c7: be:01:4a:98:8b:4b:36:f1:9a:e4:f4:42:12:73:e6: 65:d2:5b:bf:1b:b1:d7:2a:df:e7:09:f7:16:27:a9: 6e:9f:ae:1b:29:3d:82:f7:5a:ac:3f:c7:77:5e:21: 73:bc:7a:84:70:0e:aa:00:02:df:f5:7b:84:d1:1e: b9:fc:65:8b:04:7f:67:87:db:da:13:ae:e8:f2:93: e0:14:15:0e:52:0a:d1:6d:ad:87:14:13:06:13:8d: f1:50:50:95:7d:ac:ea:31:9e:13:42:2b:89:71:90: 21:33:a9:fd:57:a7:68:25:95:b2:05:83:7b:ee:be: b6:88:df:ac:8b:8b:d8:98:a1:57:47:9b:b2:72:2c: 68:62:fd:8e:54:4a:f5:54:2d:51:21:ab:36:1f:cf: 5b:42:7d:14:49:b6:0e:2c:28:e9:db:36:d5:63:99: b0:de:ca:42:31:c7:58:bd:40:28:f3:11:ec:ad:d4: e1:3c:a2:09:ce:04:ce:e3:73:57:ed:3b:08:de:da: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:64:29:FA:8E:CA:4F:B8:BD:91:04:D7:E6:A2:39:BE:26:1E:74 X509v3 Authority Key Identifier: keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e3:c8:b9:5c:71:a3:f0:6a:c7:aa:1a:1c:5a:6e:7b:08:d6: 7a:11:1f:16:9b:c0:46:34:ba:53:c5:6d:77:ca:04:65:8b:8c: e8:f2:b9:b5:28:80:61:f9:77:24:52:cf:f9:e1:70:d1:99:69: 91:c7:41:04:fb:00:98:e0:34:43:9f:26:36:ec:81:f9:f9:99: cf:5d:d8:df:6f:96:75:49:a9:23:9e:7e:0a:d1:1d:e8:20:a3: 31:8d:81:5a:c1:83:7d:a8:52:27:5e:bd:1a:09:84:37:b9:61: 80:2c:d8:f4:a5:fb:bd:3e:cb:1d:f5:39:5a:d8:37:bb:b8:b5: d1:03:16:20:f3:e6:f2:ac:6b:c5:78:02:53:8a:f2:a0:03:b3: e8:ce:71:03:20:7a:4f:c7:33:a3:b7:d1:b1:35:76:9d:83:cf: c6:84:2f:85:15:64:ed:96:06:46:3c:80:de:cb:65:72:f3:b8: a1:8b:a1:f2:a1:35:a7:59:cf:9b:68:ee:ea:dc:eb:3e:7d:8e: 89:9a:19:c8:66:4e:4e:cd:ca:60:f2:18:2e:01:12:c6:9d:01: e6:23:66:9d:0a:bc:34:31:4e:a0:86:c2:89:db:10:f3:12:89: 2d:ed:e6:3d:59:08:ff:2c:68:d3:2f:0d:c2:ce:2b:36:0f:49: 89:cd:2d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HFz5if4o4qPC49l0Af5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzNmZjEwZDdhNTU0ZmM1MWE3Zjk5YzFmNjFlMWNlZWY5 OTg1YmMwHhcNMjYwMTI2MjEwMTE1WhcNMjYwMTI3MjEwMTE1WjAzMTEwLwYDVQQD Eyg0MTNlNjQyOWZhOGVjYTRmYjhiZDkxMDRkN2U2YTIzOWJlMjYxZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYIev3dSZhNr8onWH0DBjZsG9PtF Ukt32P0MUocslFnWoqj6iZ11qORjNoUq5XIfGkgjZFtH+FATGse+AUqYi0s28Zrk 9EISc+Zl0lu/G7HXKt/nCfcWJ6lun64bKT2C91qsP8d3XiFzvHqEcA6qAALf9XuE 0R65/GWLBH9nh9vaE67o8pPgFBUOUgrRba2HFBMGE43xUFCVfazqMZ4TQiuJcZAh M6n9V6doJZWyBYN77r62iN+si4vYmKFXR5uycixoYv2OVEr1VC1RIas2H89bQn0U SbYOLCjp2zbVY5mw3spCMcdYvUAo8xHsrdThPKIJzgTO43NX7TsI3tqKoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE+ZCn6jspPuL2RBNfmojm+Jh50MB8GA1UdIwQY MBaAFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2Qt NDhjYTMzNjc1YTUwLzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2QtNDhjYTMzNjc1YTUw LzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuPIuVxx o/Bqx6oaHFpuewjWehEfFpvARjS6U8Vtd8oEZYuM6PK5tSiAYfl3JFLP+eFw0Zlp kcdBBPsAmOA0Q58mNuyB+fmZz13Y32+WdUmpI55+CtEd6CCjMY2BWsGDfahSJ169 GgmEN7lhgCzY9KX7vT7LHfU5Wtg3u7i10QMWIPPm8qxrxXgCU4ryoAOz6M5xAyB6 T8czo7fRsTV2nYPPxoQvhRVk7ZYGRjyA3stlcvO4oYuh8qE1p1nPm2ju6tzrPn2O iZoZyGZOTs3KYPIYLgESxp0B5iNmnQq8NDFOoIbCidsQ8xKJLe3mPVkI/yxo0y8N ws4rNg9Jic0tmA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:33 2026 by rpki-client