This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json) Hash identifier: MuD3y6a38pUcHBbUUDwfhee2Sln0plhAhoc8VitYKB0= Subject key identifier: 5E:B8:C5:93:23:C1:96:AC:8B:94:98:B5:26:63:63:3F:FA:79:75:1A Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Certificate serial: 019BFA9C3DEC269605CC9C1F9F1523816CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft Manifest number: 177E Signing time: Mon 26 Jan 2026 14:01:42 +0000 Manifest this update: Mon 26 Jan 2026 14:01:42 +0000 Manifest next update: Tue 27 Jan 2026 14:01:42 +0000 Files and hashes: 1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=) 2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: Knt9b0nFTc3Rr0nuFVL0XNaKh3KL1WftyHUMR9f8c9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:3d:ec:26:96:05:cc:9c:1f:9f:15:23:81:6c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Validity Not Before: Jan 26 14:01:42 2026 GMT Not After : Jan 27 14:01:42 2026 GMT Subject: CN=5eb8c59323c196ac8b9498b52663633ffa79751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:4d:66:09:27:e2:a3:00:80:91:f7:3f:79: c8:9d:62:3e:f8:45:70:d2:f0:90:27:d7:41:a3:b4: 7b:c1:4c:47:3a:ea:49:2f:76:1a:32:aa:73:36:3c: 55:c1:78:6b:87:11:ce:e6:aa:bf:d9:2f:6e:f8:8e: a7:ee:69:33:25:37:9a:2d:94:c0:82:3c:a9:e6:7b: 0e:ea:65:76:19:22:b8:65:b8:ec:6b:4f:81:9c:7a: 8b:d7:14:b2:6a:03:54:4d:47:e6:56:b9:f6:ad:1a: 77:76:36:6f:3e:2f:d5:8f:70:33:c3:7c:af:52:a2: 42:fe:36:b8:66:96:e6:1d:b9:74:4c:5e:00:d8:a8: dd:90:2c:d8:4e:4f:ee:12:49:75:84:10:a0:4a:94: f2:ef:c1:0c:6c:7a:33:67:d7:e1:ec:d9:db:50:4e: 3a:e9:7b:19:d7:43:0d:fa:a9:3a:00:d8:2f:df:d2: 65:d1:ff:cb:ca:82:7e:65:15:43:1e:43:0f:14:12: 02:b0:38:e0:b3:16:7d:07:3e:88:d4:40:92:4e:bf: 5d:1e:e2:66:f0:77:a2:3c:5f:28:82:b6:d8:5a:cf: e2:d5:21:21:8e:bf:1c:7b:ab:50:36:40:87:b9:47: 13:f2:70:39:7a:50:f9:1f:3e:2f:25:be:b1:19:a1: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:C5:93:23:C1:96:AC:8B:94:98:B5:26:63:63:3F:FA:79:75:1A X509v3 Authority Key Identifier: keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:e6:c9:30:15:0d:3c:7d:ec:41:01:11:56:02:a7:f9:d4: e2:4a:9d:fb:a6:6f:92:7d:69:e0:c0:d2:2d:c7:6e:11:67:67: dd:b4:55:97:a4:93:df:f7:29:2a:99:9e:3a:48:1f:a0:17:83: 1a:36:36:57:50:b4:b5:16:9b:c1:97:44:cb:a7:da:09:46:27: ae:d8:a9:18:16:5f:16:f7:12:ea:f5:d9:c7:23:fb:49:3b:71: 3d:1e:7e:68:3c:6d:5b:20:3b:12:c3:84:57:87:68:32:3f:6a: 63:4b:48:3b:67:d2:34:f9:3a:a2:52:d3:b1:8f:2d:29:f3:43: 08:ff:59:43:34:d1:86:eb:2b:4d:79:22:5d:89:2a:b0:de:c7: 97:b3:1a:42:b0:7c:b2:4c:38:dc:71:47:9d:ed:76:9d:5f:07: 3c:6b:cb:a0:d4:bd:02:62:b0:d5:8f:d3:c0:0a:96:fe:16:9d: fe:8b:5d:1d:0e:c4:f2:b0:fe:19:52:4a:2c:ac:6c:b4:73:2a: 2b:bd:8c:76:5e:b5:2b:2b:78:9b:62:8e:ef:47:77:24:ab:6c: e1:56:0f:44:d9:fb:41:dd:a1:12:8a:2b:fa:e1:cb:e8:3b:b9: 90:ad:fa:be:66:f2:64:95:9d:bc:bf:07:91:0d:9c:59:be:f9: e9:38:94:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nD3sJpYFzJwfnxUjgWz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3 ZWYwZTIwHhcNMjYwMTI2MTQwMTQyWhcNMjYwMTI3MTQwMTQyWjAzMTEwLwYDVQQD Eyg1ZWI4YzU5MzIzYzE5NmFjOGI5NDk4YjUyNjYzNjMzZmZhNzk3NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u9NZgkn4qMAgJH3P3nInWI++EVw 0vCQJ9dBo7R7wUxHOupJL3YaMqpzNjxVwXhrhxHO5qq/2S9u+I6n7mkzJTeaLZTA gjyp5nsO6mV2GSK4Zbjsa0+BnHqL1xSyagNUTUfmVrn2rRp3djZvPi/Vj3Azw3yv UqJC/ja4ZpbmHbl0TF4A2KjdkCzYTk/uEkl1hBCgSpTy78EMbHozZ9fh7NnbUE46 6XsZ10MN+qk6ANgv39Jl0f/LyoJ+ZRVDHkMPFBICsDjgsxZ9Bz6I1ECSTr9dHuJm 8HeiPF8ogrbYWs/i1SEhjr8ce6tQNkCHuUcT8nA5elD5Hz4vJb6xGaFaewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF64xZMjwZasi5SYtSZjYz/6eXUaMB8GA1UdIwQY MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLPmyTAV DTx97EEBEVYCp/nU4kqd+6Zvkn1p4MDSLcduEWdn3bRVl6ST3/cpKpmeOkgfoBeD GjY2V1C0tRabwZdEy6faCUYnrtipGBZfFvcS6vXZxyP7STtxPR5+aDxtWyA7EsOE V4doMj9qY0tIO2fSNPk6olLTsY8tKfNDCP9ZQzTRhusrTXkiXYkqsN7Hl7MaQrB8 skw43HFHne12nV8HPGvLoNS9AmKw1Y/TwAqW/had/otdHQ7E8rD+GVJKLKxstHMq K72Mdl61Kyt4m2KO70d3JKts4VYPRNn7Qd2hEoor+uHL6Du5kK36vmbyZJWdvL8H kQ2cWb756TiU0Q== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:03 2026 by rpki-client