This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json) Hash identifier: Ic2+lR3sdxlg3dkC/hElgDfvWe230BwwuYHvcdp0b0Y= Subject key identifier: 2F:77:A4:39:F8:20:F1:C8:5A:1F:FE:02:E2:FA:50:37:33:A0:76:72 Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Certificate serial: 019BFEAF28F63F4B9D8A7D08E5D4E46BB0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft Manifest number: 029D Signing time: Tue 27 Jan 2026 09:00:50 +0000 Manifest this update: Tue 27 Jan 2026 09:00:50 +0000 Manifest next update: Wed 28 Jan 2026 09:00:50 +0000 Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: WT5ThW5X7Df6C62HW/heyquOIhobc17R1T8WC7pNitc=) 2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:28:f6:3f:4b:9d:8a:7d:08:e5:d4:e4:6b:b0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Validity Not Before: Jan 27 09:00:50 2026 GMT Not After : Jan 28 09:00:50 2026 GMT Subject: CN=2f77a439f820f1c85a1ffe02e2fa503733a07672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:b5:6b:21:00:92:59:4e:96:85:15:a0:af: d5:c0:1f:da:eb:fc:ab:df:62:c2:05:5f:60:3e:84: 28:6c:19:3b:c4:f0:c6:56:ca:a4:9d:f8:8e:e4:d9: b4:46:56:6b:c2:f3:65:4f:f0:a3:d4:ca:e7:46:cf: 27:97:5a:c8:2e:a8:e2:6b:2a:75:81:5f:c0:f6:8b: a1:45:9d:de:e2:28:4f:ca:38:52:99:4d:a5:1b:4a: 00:a2:94:43:c7:9c:f4:5d:19:25:92:da:b4:86:2f: 6d:81:9a:27:4f:7c:c4:29:93:d6:32:c6:90:cc:61: 17:39:18:58:01:46:8e:78:84:77:80:f9:32:96:00: 52:0d:8d:df:18:e9:61:d7:a5:f3:3d:76:22:82:37: b3:0b:94:fd:f9:90:49:96:d7:5a:f8:61:ca:21:72: 03:a2:85:ad:fe:c6:17:8b:a3:96:a0:f2:86:d2:09: 35:85:22:28:e2:81:ff:bf:35:c3:be:6c:c7:96:f7: 30:af:96:36:9b:22:64:82:d7:bb:7d:b8:bf:be:f2: a3:15:3c:f5:4d:3e:1e:e3:dc:e3:fa:7e:c1:53:e0: 9b:5b:9a:a7:df:9a:3f:fb:c8:df:33:1c:75:2a:d0: eb:55:6e:9e:2d:c5:38:99:7b:c4:0b:3d:77:4e:39: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:77:A4:39:F8:20:F1:C8:5A:1F:FE:02:E2:FA:50:37:33:A0:76:72 X509v3 Authority Key Identifier: keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:83:ff:42:42:21:90:a4:69:88:75:89:a1:c8:3e:e2:45: 63:41:17:dc:90:b1:22:bc:cc:d4:0c:f2:65:9b:af:7b:a6:68: c4:ef:0a:96:64:1d:0a:5f:58:ff:34:fb:aa:05:e9:3e:33:e6: 8a:ea:7d:42:41:0e:e0:dc:88:23:56:50:32:ef:a3:b4:b2:94: cb:8d:33:97:a9:c2:22:d0:e6:2e:e7:24:0e:5d:84:76:bb:c1: 2e:97:f8:af:74:e9:79:46:9b:52:9d:fe:54:43:39:d5:88:df: ed:a9:25:b2:51:83:d2:7e:b1:09:03:a1:12:c2:29:18:5c:37: d2:21:b7:f7:db:c2:79:f3:c3:79:4c:bb:02:51:3a:0c:d5:79: e2:90:96:eb:a3:46:55:a5:3a:9e:04:3e:d8:64:a4:e4:39:8c: 25:57:1b:c1:76:c9:90:d0:54:ff:cf:2f:39:98:b1:6d:79:f9: 28:37:a1:cf:6a:26:5f:ce:6a:d8:77:ef:54:02:f6:b4:b5:bd: e8:f0:95:af:6e:ae:9b:5b:96:4b:38:8d:4b:1b:a2:4c:23:a8: 16:e7:1b:6d:c6:7c:b7:ce:03:9b:49:62:af:ea:e4:27:df:3b: 98:a3:ba:4c:3a:54:a2:5c:97:b4:0b:4a:bf:c3:20:c4:5c:05: 83:e1:d5:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ryj2P0udin0I5dTka7CyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1 YmNjZWMwHhcNMjYwMTI3MDkwMDUwWhcNMjYwMTI4MDkwMDUwWjAzMTEwLwYDVQQD EygyZjc3YTQzOWY4MjBmMWM4NWExZmZlMDJlMmZhNTAzNzMzYTA3NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X21ayEAkllOloUVoK/VwB/a6/yr 32LCBV9gPoQobBk7xPDGVsqknfiO5Nm0RlZrwvNlT/Cj1MrnRs8nl1rILqjiayp1 gV/A9ouhRZ3e4ihPyjhSmU2lG0oAopRDx5z0XRklktq0hi9tgZonT3zEKZPWMsaQ zGEXORhYAUaOeIR3gPkylgBSDY3fGOlh16XzPXYigjezC5T9+ZBJltda+GHKIXID ooWt/sYXi6OWoPKG0gk1hSIo4oH/vzXDvmzHlvcwr5Y2myJkgte7fbi/vvKjFTz1 TT4e49zj+n7BU+CbW5qn35o/+8jfMxx1KtDrVW6eLcU4mXvECz13TjlcnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC93pDn4IPHIWh/+AuL6UDczoHZyMB8GA1UdIwQY MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPKD/0JC IZCkaYh1iaHIPuJFY0EX3JCxIrzM1AzyZZuve6ZoxO8KlmQdCl9Y/zT7qgXpPjPm iup9QkEO4NyII1ZQMu+jtLKUy40zl6nCItDmLuckDl2EdrvBLpf4r3TpeUabUp3+ VEM51Yjf7aklslGD0n6xCQOhEsIpGFw30iG399vCefPDeUy7AlE6DNV54pCW66NG VaU6ngQ+2GSk5DmMJVcbwXbJkNBU/88vOZixbXn5KDehz2omX85q2HfvVAL2tLW9 6PCVr26um1uWSziNSxuiTCOoFucbbcZ8t84Dm0lir+rkJ987mKO6TDpUolyXtAtK v8MgxFwFg+HVlA== -----END CERTIFICATE-----Generated at Tue Jan 27 19:20:47 2026 by rpki-client