This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json) Hash identifier: o10myK+I5usVAsho6ho4F9Cb6vlPBtHLXHKN2B47EAs= Subject key identifier: 6D:0A:AD:CF:13:39:14:C6:E9:0D:A5:AF:CB:88:1C:3A:59:4B:DD:3D Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Certificate serial: 019BFEAF20D1606DF44313A9B2F70C6001D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 09:00:48 +0000 Manifest this update: Tue 27 Jan 2026 09:00:48 +0000 Manifest next update: Wed 28 Jan 2026 09:00:48 +0000 Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: vqSgh2mk9sS2a/ehC4iuwCB9ar66D4Vv/STT08wOAJY=) 2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:20:d1:60:6d:f4:43:13:a9:b2:f7:0c:60:01:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Validity Not Before: Jan 27 09:00:48 2026 GMT Not After : Jan 28 09:00:48 2026 GMT Subject: CN=6d0aadcf133914c6e90da5afcb881c3a594bdd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:45:c0:33:48:1a:85:a0:f7:3b:0a:77:24: cb:df:b3:bd:f6:8a:e8:19:56:9d:b6:6f:06:67:41: a8:b3:c1:42:23:55:ab:a5:31:8a:b3:d2:0e:6d:7f: dd:9f:c0:4e:2b:57:9a:61:31:76:1d:4a:da:e4:bc: cf:26:9c:50:b7:ee:86:a1:96:5b:d7:9d:b6:ce:b9: 8f:d2:a4:78:aa:f0:90:66:7c:de:aa:02:01:8c:a0: ba:73:6b:b7:fc:17:5d:25:12:d2:2d:2e:d7:be:6d: 43:36:55:8e:38:80:b3:07:93:ff:99:ed:c2:b0:34: 1c:a9:f1:22:6f:56:b4:59:7c:a0:d5:97:1d:36:aa: 87:82:d9:ad:9a:a1:d0:eb:f2:05:66:68:d3:24:d0: 3e:c4:c3:d8:2d:f8:70:54:cb:dc:c9:f9:67:cf:fa: 5b:22:8b:c5:7b:7d:49:12:85:3e:7a:a9:70:88:42: 76:db:7d:0c:c5:f0:88:ad:99:e0:b6:a0:ff:2a:24: 5b:03:2e:dc:79:3c:c4:e8:a7:ce:61:4c:c8:b1:aa: 98:da:66:92:1a:fd:4e:34:06:c0:94:c4:13:4f:a7: 90:c1:36:11:1b:5f:9d:63:a1:20:23:40:e3:40:f7: 98:51:45:5f:4f:1c:a1:2f:10:20:a6:1e:ff:91:1c: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:AD:CF:13:39:14:C6:E9:0D:A5:AF:CB:88:1C:3A:59:4B:DD:3D X509v3 Authority Key Identifier: keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:11:a8:c3:4a:bd:22:e1:4c:e3:80:06:59:8f:60:0c:1d: 69:bc:a4:f7:7c:16:79:0d:98:9b:a9:2a:db:b5:a4:b3:01:6d: 18:57:50:4c:50:2c:5f:2a:95:4f:43:e9:9e:48:45:86:8a:8d: d0:f7:3e:2a:c1:ae:7f:04:a9:4c:4a:47:2a:de:ce:95:ce:87: 1d:c5:4c:bc:21:ab:16:bb:87:a0:bf:91:05:20:78:ae:3f:23: d1:3c:22:d5:13:eb:82:f2:5c:13:c8:11:63:9a:0b:54:64:97: 74:83:bb:fa:12:08:33:1b:58:b6:4d:26:7e:66:33:2f:c9:cd: 37:1d:cb:15:28:7b:a6:99:d1:73:58:6f:ff:9a:86:fe:46:cc: 99:00:1c:08:db:cd:36:76:5b:b9:2b:28:17:17:9e:e7:ec:75: 0d:b7:e4:f6:2d:1e:a1:98:a1:7e:50:43:a2:29:07:f1:6e:bc: 42:50:f3:00:68:a4:0b:83:25:a7:a4:c8:80:8c:33:4b:0c:34: 9d:fc:e1:5e:10:6d:5c:2b:be:72:03:c3:67:7e:6f:64:36:75: 4c:62:05:0a:e0:5e:b3:9e:6c:95:96:c3:6e:68:38:5b:53:3d: 1d:1c:c3:12:ec:30:ee:3f:f7:ea:e9:f1:3d:d2:93:8f:03:71: de:db:20:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ryDRYG30QxOpsvcMYAHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy MzRmNzAwHhcNMjYwMTI3MDkwMDQ4WhcNMjYwMTI4MDkwMDQ4WjAzMTEwLwYDVQQD Eyg2ZDBhYWRjZjEzMzkxNGM2ZTkwZGE1YWZjYjg4MWMzYTU5NGJkZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRRFwDNIGoWg9zsKdyTL37O99oro GVadtm8GZ0Gos8FCI1WrpTGKs9IObX/dn8BOK1eaYTF2HUra5LzPJpxQt+6GoZZb 1522zrmP0qR4qvCQZnzeqgIBjKC6c2u3/BddJRLSLS7Xvm1DNlWOOICzB5P/me3C sDQcqfEib1a0WXyg1ZcdNqqHgtmtmqHQ6/IFZmjTJNA+xMPYLfhwVMvcyflnz/pb IovFe31JEoU+eqlwiEJ2230MxfCIrZngtqD/KiRbAy7ceTzE6KfOYUzIsaqY2maS Gv1ONAbAlMQTT6eQwTYRG1+dY6EgI0DjQPeYUUVfTxyhLxAgph7/kRw+rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0Krc8TORTG6Q2lr8uIHDpZS909MB8GA1UdIwQY MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5URqMNK vSLhTOOABlmPYAwdabyk93wWeQ2Ym6kq27WkswFtGFdQTFAsXyqVT0PpnkhFhoqN 0Pc+KsGufwSpTEpHKt7Olc6HHcVMvCGrFruHoL+RBSB4rj8j0Twi1RPrgvJcE8gR Y5oLVGSXdIO7+hIIMxtYtk0mfmYzL8nNNx3LFSh7ppnRc1hv/5qG/kbMmQAcCNvN NnZbuSsoFxee5+x1Dbfk9i0eoZihflBDoikH8W68QlDzAGikC4Mlp6TIgIwzSww0 nfzhXhBtXCu+cgPDZ35vZDZ1TGIFCuBes55slZbDbmg4W1M9HRzDEuww7j/36unx PdKTjwNx3tsgLg== -----END CERTIFICATE-----Generated at Tue Jan 27 16:22:27 2026 by rpki-client