This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft File: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json) Hash identifier: AoJ0E8HWq7Acilb2uhJrM7FqFC7TjZ7fXYhD3nE5MB0= Subject key identifier: 68:64:86:D9:3D:D7:A5:59:F9:51:A0:3E:B7:B3:63:B8:2D:6D:B2:37 Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 Certificate issuer: /CN=e6157528a9cce92518f36bf0a81b7901a650ae94 Certificate serial: 019BFA64BB6B4A3521D7C1C10D49F71AB9DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft Manifest number: 1779 Signing time: Mon 26 Jan 2026 13:01:04 +0000 Manifest this update: Mon 26 Jan 2026 13:01:04 +0000 Manifest next update: Tue 27 Jan 2026 13:01:04 +0000 Files and hashes: 1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: d78Zz7jxQjQyS55yHZdAChmhxnO0try4olgkxLcf2mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:bb:6b:4a:35:21:d7:c1:c1:0d:49:f7:1a:b9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94 Validity Not Before: Jan 26 13:01:04 2026 GMT Not After : Jan 27 13:01:04 2026 GMT Subject: CN=686486d93dd7a559f951a03eb7b363b82d6db237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:37:7f:3b:88:d4:90:70:78:6e:ab:9c:d2: 4c:0e:8e:17:08:7c:76:84:62:7f:7d:47:f5:64:7a: 2e:3b:6b:cb:2f:1e:7c:5b:3c:82:ff:f0:16:cd:fd: 2b:df:8f:53:03:66:7e:47:a3:30:bf:a2:d5:37:c9: 8b:d7:de:e0:27:93:25:39:89:9c:92:77:70:7a:bb: a1:70:5e:9f:09:6a:3e:f7:f3:10:75:a6:56:f4:a1: b6:95:eb:39:3c:a8:cc:24:06:e4:48:89:51:bb:4d: 52:3e:75:71:1b:1d:d5:74:96:ff:b9:09:24:b1:71: 8f:ef:20:2d:5e:65:14:b5:ec:67:df:dd:2e:9f:7d: 65:c1:fe:8e:70:f6:82:bd:02:b0:8c:f9:91:cf:3e: b1:18:36:50:84:fd:9a:ce:a8:d6:71:34:9c:0c:b9: 4f:9f:ac:a7:c0:63:b9:50:6c:f2:9d:23:b8:f3:c2: 0f:4c:d8:a3:21:b0:6b:66:2c:25:7e:02:e7:2b:b4: 46:a0:49:e1:86:98:5a:74:2a:16:fc:d5:f6:17:b8: 44:32:b0:e2:56:42:65:4d:73:aa:73:16:a9:1c:48: 9e:fc:42:50:2c:6a:91:33:4d:e0:68:62:f7:ea:69: 29:30:f6:cb:27:9e:d6:17:4f:15:d7:03:7b:35:22: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:86:D9:3D:D7:A5:59:F9:51:A0:3E:B7:B3:63:B8:2D:6D:B2:37 X509v3 Authority Key Identifier: keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ff:b7:33:e8:36:97:ba:8c:e2:93:24:d0:41:15:0a:23:cf: 5a:3b:b5:7d:ca:b3:dd:f9:97:a4:2f:a1:ee:eb:47:96:41:ed: 8b:3a:b6:64:5a:4c:ed:24:ed:0d:b0:0c:59:0c:9e:36:99:0b: bc:18:45:4d:5b:3d:28:26:e6:bc:e7:a0:9a:e1:19:f1:1a:d7: a2:d9:dc:06:8f:54:5d:21:13:5f:59:08:99:1d:89:f1:02:99: d8:93:57:79:d1:47:91:6f:a2:eb:34:41:5e:2a:dd:8b:e5:fe: f8:8b:06:1d:09:9d:57:ca:bf:da:31:19:00:f5:b7:4f:db:b8: e6:6a:d2:a9:1a:76:81:67:9d:ed:82:b0:87:b2:b2:8d:65:28: fa:be:26:4a:2d:90:24:7a:4c:5c:12:47:c6:e7:49:66:02:a2: c2:f9:7b:18:4f:06:97:eb:d5:3a:74:d3:31:71:c0:85:5c:a3: 28:28:a7:2d:2e:5f:12:f5:1c:5d:96:c2:19:da:f2:83:af:fc: 1f:df:a4:ff:97:69:8e:4a:e0:1f:2f:a7:6c:eb:5e:80:bb:d3: a2:a3:c1:8a:8a:3b:91:38:af:71:b2:e5:3e:57:f1:25:46:e4: 4b:19:b1:bc:ae:0e:80:40:d5:12:c5:9b:5a:a8:66:dc:59:3f: bf:a9:86:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZLtrSjUh18HBDUn3GrneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTU3NTI4YTljY2U5MjUxOGYzNmJmMGE4MWI3OTAxYTY1 MGFlOTQwHhcNMjYwMTI2MTMwMTA0WhcNMjYwMTI3MTMwMTA0WjAzMTEwLwYDVQQD Eyg2ODY0ODZkOTNkZDdhNTU5Zjk1MWEwM2ViN2IzNjNiODJkNmRiMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIg3fzuI1JBweG6rnNJMDo4XCHx2 hGJ/fUf1ZHouO2vLLx58WzyC//AWzf0r349TA2Z+R6Mwv6LVN8mL197gJ5MlOYmc kndweruhcF6fCWo+9/MQdaZW9KG2les5PKjMJAbkSIlRu01SPnVxGx3VdJb/uQkk sXGP7yAtXmUUtexn390un31lwf6OcPaCvQKwjPmRzz6xGDZQhP2azqjWcTScDLlP n6ynwGO5UGzynSO488IPTNijIbBrZiwlfgLnK7RGoEnhhphadCoW/NX2F7hEMrDi VkJlTXOqcxapHEie/EJQLGqRM03gaGL36mkpMPbLJ57WF08V1wN7NSJmCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhkhtk916VZ+VGgPrezY7gtbbI3MB8GA1UdIwQY MBaAFOYVdSipzOklGPNr8KgbeQGmUK6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEt N2QxYjJkOWEyNDA1LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEtN2QxYjJkOWEyNDA1 LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv+3M+g2 l7qM4pMk0EEVCiPPWju1fcqz3fmXpC+h7utHlkHtizq2ZFpM7STtDbAMWQyeNpkL vBhFTVs9KCbmvOegmuEZ8RrXotncBo9UXSETX1kImR2J8QKZ2JNXedFHkW+i6zRB Xirdi+X++IsGHQmdV8q/2jEZAPW3T9u45mrSqRp2gWed7YKwh7KyjWUo+r4mSi2Q JHpMXBJHxudJZgKiwvl7GE8Gl+vVOnTTMXHAhVyjKCinLS5fEvUcXZbCGdryg6/8 H9+k/5dpjkrgHy+nbOtegLvToqPBioo7kTivcbLlPlfxJUbkSxmxvK4OgEDVEsWb Wqhm3Fk/v6mGaw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:53 2026 by rpki-client