This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft File: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json) Hash identifier: kqBUA3wYjoMVtxokzvcfUdJhD6rOXLUUIKEiuxDXN1A= Subject key identifier: DE:B1:E3:20:7D:64:1F:72:FD:0D:D2:27:A4:C5:5F:C5:5C:A7:3B:9D Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Certificate serial: 019B7F394F52EA2068BD98B6EFBBB7F5EBB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft Manifest number: 17F7 Signing time: Fri 02 Jan 2026 15:00:20 +0000 Manifest this update: Fri 02 Jan 2026 15:00:20 +0000 Manifest next update: Sat 03 Jan 2026 15:00:20 +0000 Files and hashes: 1: 1-4dal57WR6ls7BMACKzFcgjhv3g.roa (hash: Iuk1gor1s1o0UCRUaCvOHIjD84uzBXZDS8aTaGrj89k=) 2: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=) 3: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: cCBMMm63kFUksKRgq4/Y7tQ8ceFPbzGZZip0rfBOJik=) 4: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=) 5: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=) 6: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:39:4f:52:ea:20:68:bd:98:b6:ef:bb:b7:f5:eb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Validity Not Before: Jan 2 15:00:20 2026 GMT Not After : Jan 3 15:00:20 2026 GMT Subject: CN=deb1e3207d641f72fd0dd227a4c55fc55ca73b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:4d:fc:8e:ad:ac:d3:33:56:5c:8c:07:78: f8:a2:74:d6:f8:29:ee:bd:68:b9:e8:9a:a7:2e:6b: 70:67:0d:80:51:9d:b0:61:ff:47:19:e3:03:00:ba: 12:9e:cb:53:8a:79:48:5b:06:6d:9b:bc:79:dc:e7: 4f:24:4d:06:6b:3c:82:ea:30:cc:e8:67:49:49:63: 9f:04:9b:8d:72:ab:f7:b9:09:c7:40:2b:5a:e3:70: ba:0a:a8:a4:46:a0:ec:42:81:8c:dd:24:67:56:de: 6c:d8:01:ab:a1:15:3e:6a:0b:e0:b2:04:94:3b:2e: 91:66:fa:29:bf:51:7c:0b:53:d1:29:76:c4:94:1b: 88:8b:4c:47:db:83:a0:76:44:4f:b5:ab:93:6e:ad: bb:8d:c0:3c:d7:6e:ae:d1:a1:f0:d3:f2:24:3f:d6: 3c:fb:ac:09:91:aa:2a:23:48:83:d6:41:0a:7c:87: 2d:2e:23:43:6f:95:35:63:6c:dd:ea:4f:59:3b:8d: 48:24:b4:9b:bd:d9:53:85:14:15:91:4b:df:8e:d5: d0:3c:99:41:02:de:5e:0c:35:04:8f:db:44:80:c0: eb:69:9e:f4:d4:6e:c3:a7:d8:d0:8a:f0:91:2b:b3: 5f:fa:19:12:d7:b2:15:76:17:1b:55:2b:31:5e:96: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:E3:20:7D:64:1F:72:FD:0D:D2:27:A4:C5:5F:C5:5C:A7:3B:9D X509v3 Authority Key Identifier: keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:10:36:a1:f4:e1:65:8b:33:ab:10:a2:80:29:99:b0:65:f5: 79:41:3e:37:f1:7e:fb:e2:9d:65:94:2c:95:7b:4f:40:a6:ef: 35:d5:5a:36:b0:c6:96:74:10:2b:52:44:19:a4:58:fe:13:9c: cf:72:1c:69:e5:f0:b7:74:45:71:be:18:56:41:c0:10:58:35: d6:12:e7:39:3f:05:6c:82:2a:cf:10:58:5c:77:fc:83:3c:be: 2c:cb:04:e3:23:5e:ac:a2:b1:ac:45:89:6f:53:fc:0f:64:4f: e0:47:57:9a:fc:4f:25:e3:47:60:80:05:17:81:42:e1:ef:f4: fd:de:29:63:93:d7:6e:b8:c2:f2:b8:e1:ef:cd:0d:76:7e:c9: 2e:6d:f6:41:89:db:88:09:8c:43:38:92:0e:ed:d8:d8:6f:0f: 20:c2:af:db:bb:9d:12:05:e2:37:33:e4:16:89:a8:29:09:bd: 0f:b2:a7:22:17:56:f6:8c:fd:8a:6e:0a:d3:88:51:da:73:50: 4a:24:7e:59:4f:bc:5b:ca:bb:37:ee:bb:5f:de:a4:04:7f:53: 2a:6e:b4:09:48:bd:3e:73:36:34:5f:73:72:a5:4c:13:2b:28: 9f:40:ed:9d:74:30:c6:97:53:d5:6d:a6:a8:27:0a:10:3a:50: 62:12:60:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/OU9S6iBovZi277u39eu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTMzZGNhZjJiMWViZjVkYWRlNWEzM2FhMWIyZmI5OWQy Njg5YmEwHhcNMjYwMTAyMTUwMDIwWhcNMjYwMTAzMTUwMDIwWjAzMTEwLwYDVQQD EyhkZWIxZTMyMDdkNjQxZjcyZmQwZGQyMjdhNGM1NWZjNTVjYTczYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtBN/I6trNMzVlyMB3j4onTW+Cnu vWi56JqnLmtwZw2AUZ2wYf9HGeMDALoSnstTinlIWwZtm7x53OdPJE0GazyC6jDM 6GdJSWOfBJuNcqv3uQnHQCta43C6CqikRqDsQoGM3SRnVt5s2AGroRU+agvgsgSU Oy6RZvopv1F8C1PRKXbElBuIi0xH24OgdkRPtauTbq27jcA8126u0aHw0/IkP9Y8 +6wJkaoqI0iD1kEKfIctLiNDb5U1Y2zd6k9ZO41IJLSbvdlThRQVkUvfjtXQPJlB At5eDDUEj9tEgMDraZ701G7Dp9jQivCRK7Nf+hkS17IVdhcbVSsxXpaxRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6x4yB9ZB9y/Q3SJ6TFX8VcpzudMB8GA1UdIwQY MBaAFOcTPcrysev12t5aM6obL7mdJom6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUt MTljZTQ2YTQyZmE0LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUtMTljZTQ2YTQyZmE0 LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhA2ofTh ZYszqxCigCmZsGX1eUE+N/F+++KdZZQslXtPQKbvNdVaNrDGlnQQK1JEGaRY/hOc z3IcaeXwt3RFcb4YVkHAEFg11hLnOT8FbIIqzxBYXHf8gzy+LMsE4yNerKKxrEWJ b1P8D2RP4EdXmvxPJeNHYIAFF4FC4e/0/d4pY5PXbrjC8rjh780Ndn7JLm32QYnb iAmMQziSDu3Y2G8PIMKv27udEgXiNzPkFomoKQm9D7KnIhdW9oz9im4K04hR2nNQ SiR+WU+8W8q7N+67X96kBH9TKm60CUi9PnM2NF9zcqVMEyson0DtnXQwxpdT1W2m qCcKEDpQYhJgOg== -----END CERTIFICATE-----Generated at Fri Jan 2 19:30:52 2026 by rpki-client