This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json) Hash identifier: SaBKh9sQTplVS92hfVvMkwpNqPXGOdiL/ALsPwyU7bc= Subject key identifier: 7B:EB:BA:DC:76:B3:62:47:B6:A2:3F:33:C1:97:DB:F8:95:06:C6:FD Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Certificate serial: 019BAC49CE32ABBEF105CE713584C07A0FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft Manifest number: 0C33 Signing time: Sun 11 Jan 2026 09:01:16 +0000 Manifest this update: Sun 11 Jan 2026 09:01:16 +0000 Manifest next update: Mon 12 Jan 2026 09:01:16 +0000 Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: xoEFq6L6c5GxPjz01EFhHg/phHUU/fFZgcfCPAeKaAE=) 2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=) 3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:49:ce:32:ab:be:f1:05:ce:71:35:84:c0:7a:0f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Validity Not Before: Jan 11 09:01:16 2026 GMT Not After : Jan 12 09:01:16 2026 GMT Subject: CN=7bebbadc76b36247b6a23f33c197dbf89506c6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:6d:5c:49:4f:2e:81:13:69:09:4c:9b:dd: 9d:16:49:82:b1:3b:0d:88:22:f3:ff:b3:ad:c1:28: f6:89:75:7e:a8:5c:91:c7:1c:51:9d:ab:e7:e2:14: c7:78:0f:72:a9:61:e7:68:f1:8d:fe:0e:8f:9d:82: 05:d0:37:a6:1a:b6:4a:a6:01:f5:82:54:af:26:12: 79:3d:f9:fd:57:48:a3:65:48:f9:b3:5a:d4:ab:50: 5d:41:31:48:30:ce:79:24:c9:0f:e4:a5:b4:42:df: 65:2f:11:8c:db:23:0e:01:13:b0:39:ae:aa:93:e4: 78:3d:43:b6:68:00:eb:f7:56:c3:24:63:1c:a9:c3: b2:6e:bf:1e:f5:9e:16:ec:49:2c:75:a2:a2:fd:a9: 00:ad:89:4f:b5:03:e4:fd:d1:80:18:73:c4:49:39: 3e:27:4e:3a:3d:fa:31:25:09:6f:03:d8:59:b5:f8: bf:b3:c1:a9:c9:58:30:15:48:2b:5f:12:4f:7b:a5: 35:72:f1:49:98:71:2f:03:53:d0:d7:c6:53:80:9e: b4:ba:d6:d5:1f:3c:d5:95:32:04:39:3b:aa:65:85: fb:17:ec:89:57:5b:be:29:b3:8f:cd:7c:82:df:23: 75:95:08:29:58:67:cd:6d:42:09:7f:e3:cf:98:a4: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:BA:DC:76:B3:62:47:B6:A2:3F:33:C1:97:DB:F8:95:06:C6:FD X509v3 Authority Key Identifier: keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fa:53:b2:3e:22:84:37:16:27:85:33:71:a8:2a:1b:00:4b: e5:cf:35:d0:5e:8b:9b:31:87:6e:be:5d:97:ca:75:c7:be:a7: 1e:2a:52:a4:9b:e1:17:62:2c:49:f5:35:7f:de:3c:de:82:be: 82:3d:c2:ec:f2:99:84:46:99:74:c0:d5:44:5e:7e:51:5d:75: 9d:ae:15:98:9c:23:8a:92:bf:aa:e6:e8:b1:85:51:4b:7a:b2: 95:e0:19:a1:17:15:8c:48:63:52:d9:6a:a8:8a:48:cd:e6:fd: 09:c8:fa:4a:96:2e:25:ed:8e:ca:bb:a5:0d:0f:37:46:f4:2d: 4b:ab:0f:80:7f:e9:ae:5a:6d:06:91:ff:95:6e:8d:0e:cb:6f: bb:28:e6:bf:67:40:99:74:b2:9b:c4:ac:bf:d8:9d:5b:36:8a: df:26:94:c8:89:8d:72:77:62:8f:fb:6e:b3:85:c5:27:ac:39: 65:6e:8a:2a:d7:d1:4f:bf:66:bb:5f:a6:b9:72:1a:b3:51:ba: c7:db:ba:84:66:bf:a2:36:61:83:6b:08:6f:61:2b:63:19:0a: 3e:7c:53:60:3f:04:fd:1d:88:aa:ce:ae:cf:25:2e:9b:d7:d8: 9e:e5:d5:76:53:34:b6:28:ab:4c:8a:54:74:b4:c4:4d:19:0f: 76:10:96:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusSc4yq77xBc5xNYTAeg/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4 NmIxMGYwHhcNMjYwMTExMDkwMTE2WhcNMjYwMTEyMDkwMTE2WjAzMTEwLwYDVQQD Eyg3YmViYmFkYzc2YjM2MjQ3YjZhMjNmMzNjMTk3ZGJmODk1MDZjNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtxtXElPLoETaQlMm92dFkmCsTsN iCLz/7OtwSj2iXV+qFyRxxxRnavn4hTHeA9yqWHnaPGN/g6PnYIF0DemGrZKpgH1 glSvJhJ5Pfn9V0ijZUj5s1rUq1BdQTFIMM55JMkP5KW0Qt9lLxGM2yMOAROwOa6q k+R4PUO2aADr91bDJGMcqcOybr8e9Z4W7EksdaKi/akArYlPtQPk/dGAGHPESTk+ J046PfoxJQlvA9hZtfi/s8GpyVgwFUgrXxJPe6U1cvFJmHEvA1PQ18ZTgJ60utbV HzzVlTIEOTuqZYX7F+yJV1u+KbOPzXyC3yN1lQgpWGfNbUIJf+PPmKT79QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvrutx2s2JHtqI/M8GX2/iVBsb9MB8GA1UdIwQY MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffpTsj4i hDcWJ4UzcagqGwBL5c810F6LmzGHbr5dl8p1x76nHipSpJvhF2IsSfU1f9483oK+ gj3C7PKZhEaZdMDVRF5+UV11na4VmJwjipK/qubosYVRS3qyleAZoRcVjEhjUtlq qIpIzeb9Ccj6SpYuJe2OyrulDQ83RvQtS6sPgH/prlptBpH/lW6NDstvuyjmv2dA mXSym8Ssv9idWzaK3yaUyImNcndij/tus4XFJ6w5ZW6KKtfRT79mu1+muXIas1G6 x9u6hGa/ojZhg2sIb2ErYxkKPnxTYD8E/R2Iqs6uzyUum9fYnuXVdlM0tiirTIpU dLTETRkPdhCWnA== -----END CERTIFICATE-----Generated at Sun Jan 11 18:17:30 2026 by rpki-client