This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: p8LBHIzGI5q7W7Opm9Pfp6N1r5BPNhLozJ1xbtI0PDU= Subject key identifier: 4A:A2:27:12:FE:6E:4B:1E:9D:2B:2C:CE:38:75:1A:01:9E:3C:F9:B4 Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019BFB77743066BF10FBE02E9FBF73FD7E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 087E Signing time: Mon 26 Jan 2026 18:01:08 +0000 Manifest this update: Mon 26 Jan 2026 18:01:08 +0000 Manifest next update: Tue 27 Jan 2026 18:01:08 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: LX1qcIh8TgGTbLurHoJ8B9y5pgL2/PlSwiKJzidKTXI=) 2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=) 3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:74:30:66:bf:10:fb:e0:2e:9f:bf:73:fd:7e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Jan 26 18:01:08 2026 GMT Not After : Jan 27 18:01:08 2026 GMT Subject: CN=4aa22712fe6e4b1e9d2b2cce38751a019e3cf9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:3c:7d:bd:d6:64:e2:a9:fc:4c:b3:cc:df: 26:2c:33:48:30:65:6c:20:90:02:1e:d3:74:59:40: 4e:5a:0b:9a:76:9c:e9:9b:b1:40:32:66:a3:08:93: 36:51:71:1f:8c:75:ec:d9:1d:42:be:e9:f0:3c:91: 5c:7d:3e:de:00:fd:3b:ed:e2:e7:5e:76:f4:7e:39: 55:e6:af:4b:7c:28:33:0b:69:c0:7b:e3:ce:72:b1: b3:ea:a4:7b:29:3e:98:5d:f5:9c:f0:aa:2a:56:f9: 0e:5a:f2:a1:3f:0f:be:67:80:13:ee:8a:e6:8f:fe: 26:33:97:ad:ca:a8:d7:77:7c:cc:a0:68:9c:a0:7f: 96:4d:a3:5f:2c:e3:60:6d:f2:b9:c9:f3:4b:e1:bf: 98:29:b5:1d:93:52:be:30:31:e7:e6:1f:20:01:b3: 6b:d7:11:09:38:69:9a:44:b5:e8:b7:4c:de:43:df: 68:da:b3:80:38:04:fe:3b:33:a0:e5:a1:b4:80:92: 8f:23:c2:04:2d:7c:6f:a2:9a:83:52:aa:db:37:be: 8f:ca:16:fd:79:3e:7c:97:9d:5d:0b:81:8e:54:31: 7f:27:52:76:fe:5e:e4:23:e0:94:3d:df:4d:b4:db: b1:cf:bf:f2:e5:0e:93:06:3d:e4:f8:26:31:f8:68: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:27:12:FE:6E:4B:1E:9D:2B:2C:CE:38:75:1A:01:9E:3C:F9:B4 X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7a:a6:61:b7:c1:fd:ba:b5:4e:fb:8c:25:78:e4:bd:0e:cd: b1:4b:57:36:df:a1:29:18:95:7d:60:71:fc:d4:5b:be:b2:b0: 13:d7:dd:8d:67:54:9c:23:92:f0:d3:3d:6c:ea:60:c2:fb:f5: ef:d1:b3:5e:33:60:a1:f0:bc:b5:aa:3b:41:a5:03:31:f0:63: 31:f6:b1:8c:a3:48:99:59:c4:12:71:d1:a7:36:d5:6d:2a:2c: 74:2e:86:e8:07:c1:7d:a6:3b:fa:38:6e:da:0c:0f:29:51:86: 11:d2:f9:41:78:a5:25:4e:d6:fc:6d:0a:73:4e:ab:1b:69:a0: 47:cf:55:3a:89:e1:94:a4:08:06:a9:f5:17:e3:83:64:1a:93: 49:1d:ba:a1:a5:be:50:65:9e:aa:27:d6:cc:5e:3e:09:25:e1: c5:83:78:55:8d:59:42:d7:e4:cf:ea:2e:bb:a9:b1:0e:12:84: 5a:2a:af:77:ff:f4:26:8c:bb:84:3d:10:0b:2e:b9:ff:57:37: 38:27:96:48:ad:b8:9e:b3:9d:49:51:78:e0:2b:d0:f5:9c:1f: 2b:72:73:de:07:3c:00:f7:c9:09:eb:a4:f5:8c:a1:9b:93:32: e7:a6:ca:9c:b6:b1:a3:ba:63:f7:5d:1f:0f:06:9c:d9:57:55: 55:db:27:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d3QwZr8Q++Aun79z/X4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjYwMTI2MTgwMTA4WhcNMjYwMTI3MTgwMTA4WjAzMTEwLwYDVQQD Eyg0YWEyMjcxMmZlNmU0YjFlOWQyYjJjY2UzODc1MWEwMTllM2NmOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW88fb3WZOKp/EyzzN8mLDNIMGVs IJACHtN0WUBOWguadpzpm7FAMmajCJM2UXEfjHXs2R1CvunwPJFcfT7eAP077eLn Xnb0fjlV5q9LfCgzC2nAe+POcrGz6qR7KT6YXfWc8KoqVvkOWvKhPw++Z4AT7orm j/4mM5etyqjXd3zMoGicoH+WTaNfLONgbfK5yfNL4b+YKbUdk1K+MDHn5h8gAbNr 1xEJOGmaRLXot0zeQ99o2rOAOAT+OzOg5aG0gJKPI8IELXxvopqDUqrbN76Pyhb9 eT58l51dC4GOVDF/J1J2/l7kI+CUPd9NtNuxz7/y5Q6TBj3k+CYx+GhLZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqiJxL+bksenSsszjh1GgGePPm0MB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHqmYbfB /bq1TvuMJXjkvQ7NsUtXNt+hKRiVfWBx/NRbvrKwE9fdjWdUnCOS8NM9bOpgwvv1 79GzXjNgofC8tao7QaUDMfBjMfaxjKNImVnEEnHRpzbVbSosdC6G6AfBfaY7+jhu 2gwPKVGGEdL5QXilJU7W/G0Kc06rG2mgR89VOonhlKQIBqn1F+ODZBqTSR26oaW+ UGWeqifWzF4+CSXhxYN4VY1ZQtfkz+ouu6mxDhKEWiqvd//0Joy7hD0QCy65/1c3 OCeWSK24nrOdSVF44CvQ9ZwfK3Jz3gc8APfJCeuk9Yyhm5My56bKnLaxo7pj910f Dwac2VdVVdsnUA== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:34 2026 by rpki-client