This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft File: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json) Hash identifier: 2OqHS5cnJ+MN09bjikKhZtTDq3BjLsJfQQS3na1ybfM= Subject key identifier: 31:A2:8D:21:79:F5:7E:EC:8E:37:92:15:4A:60:13:BD:16:55:43:41 Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9 Certificate issuer: /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9 Certificate serial: 019BFB76FE568C01A1DFB52B4629F2FCFE4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft Manifest number: 0C81 Signing time: Mon 26 Jan 2026 18:00:37 +0000 Manifest this update: Mon 26 Jan 2026 18:00:37 +0000 Manifest next update: Tue 27 Jan 2026 18:00:37 +0000 Files and hashes: 1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: 0+uTWvWfRNrLqP+pia5D4k3leN9/aBxHrwylZEMM2O4=) 2: P14uHlGf2lrMoUspqcAN6H9BcUc.roa (hash: qn6hIwu5/DuOQPvMM2Oe2W+KkeROqHy0+cq0AjAaLwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:76:fe:56:8c:01:a1:df:b5:2b:46:29:f2:fc:fe:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9 Validity Not Before: Jan 26 18:00:37 2026 GMT Not After : Jan 27 18:00:37 2026 GMT Subject: CN=31a28d2179f57eec8e3792154a6013bd16554341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:14:d3:73:73:88:7e:8a:19:88:54:2f:ee: 40:f3:22:8d:3a:9c:81:05:51:3e:2e:37:4c:b3:7b: d3:54:cd:96:4d:c9:3c:2e:76:f4:54:ed:1e:6d:f5: 11:85:79:1f:dd:bc:8d:51:3d:64:15:57:66:33:8e: 77:eb:36:69:93:9b:da:f9:f0:e1:bd:ae:38:a2:f8: ae:7e:5e:ce:0c:c9:c7:5f:aa:20:fb:54:3f:25:d9: f8:cd:46:d8:45:f4:6d:6a:ea:4c:ae:47:70:84:f7: 7c:9a:a8:13:84:aa:26:ed:58:ee:83:a2:a9:a6:43: c0:19:a4:a4:57:7b:e7:36:0d:9f:e0:7d:94:1f:5c: bd:4e:fc:40:3b:19:45:81:21:cd:7c:4f:16:22:54: 9a:2c:c9:91:8d:4d:1a:a3:01:3d:76:92:4a:3d:30: 0a:e7:49:d3:55:b9:8e:e2:52:b6:74:ec:02:73:4d: f4:b4:8e:e1:74:10:a1:fb:97:97:81:eb:17:fc:ca: 9f:3a:f5:3f:46:4e:56:43:39:d4:b3:a9:91:40:c4: 8d:2b:98:d5:cc:d7:61:12:42:b4:ed:fe:7d:ec:0a: ef:c8:69:e9:18:9d:03:5c:c3:4e:ff:05:99:05:9a: 9e:d0:ad:4b:2e:a6:c6:80:34:a4:e4:a1:41:04:2a: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:8D:21:79:F5:7E:EC:8E:37:92:15:4A:60:13:BD:16:55:43:41 X509v3 Authority Key Identifier: keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ab:45:7c:18:f7:60:76:99:20:21:9e:24:9e:f7:44:1e:cf: 5f:0a:1e:fc:f3:76:55:1f:9f:c6:bb:62:1c:3e:32:5d:db:70: c4:02:78:ad:0b:3a:34:b7:13:f9:af:ae:54:b6:43:16:6a:48: 31:c1:03:fb:36:fc:ee:71:bf:62:cb:98:df:ba:97:ae:41:7e: fd:2d:01:f7:ac:11:48:5c:af:a0:81:d7:d1:ac:a6:75:06:59: b1:96:d5:de:bb:3f:4b:07:f7:6d:bf:e4:9c:8c:d2:17:f2:9b: 8a:2b:2b:ec:98:11:93:40:51:d0:ba:a8:79:3d:89:9d:f3:21: 17:2b:cf:88:f5:93:71:10:7a:12:e8:5b:31:13:06:49:09:2f: d5:63:1f:c4:91:3c:36:38:5f:83:0d:53:6c:74:fb:06:df:c8: 6d:25:12:a2:f0:77:37:3a:d1:0c:82:e1:39:eb:d8:da:16:a5: 00:02:18:2b:0b:d1:87:ca:80:7d:48:60:20:97:65:d1:67:53: 61:91:2a:4e:87:1e:b1:64:74:be:fb:11:33:4b:24:84:b8:d1: d6:12:3d:03:bd:82:47:1c:22:22:c0:3a:4b:aa:02:cb:83:71: 05:29:bc:bf:e4:ab:ce:7d:e5:e9:52:54:9d:83:a7:59:cb:eb: ac:23:78:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dv5WjAGh37UrRiny/P5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZmI2NDA5NDZkOGNmYWVmZTU2NDg5NDg3MDJhZDYwMzRh MGU4YjkwHhcNMjYwMTI2MTgwMDM3WhcNMjYwMTI3MTgwMDM3WjAzMTEwLwYDVQQD EygzMWEyOGQyMTc5ZjU3ZWVjOGUzNzkyMTU0YTYwMTNiZDE2NTU0MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpoU03NziH6KGYhUL+5A8yKNOpyB BVE+LjdMs3vTVM2WTck8Lnb0VO0ebfURhXkf3byNUT1kFVdmM4536zZpk5va+fDh va44oviufl7ODMnHX6og+1Q/Jdn4zUbYRfRtaupMrkdwhPd8mqgThKom7Vjug6Kp pkPAGaSkV3vnNg2f4H2UH1y9TvxAOxlFgSHNfE8WIlSaLMmRjU0aowE9dpJKPTAK 50nTVbmO4lK2dOwCc030tI7hdBCh+5eXgesX/MqfOvU/Rk5WQznUs6mRQMSNK5jV zNdhEkK07f597ArvyGnpGJ0DXMNO/wWZBZqe0K1LLqbGgDSk5KFBBCqI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGijSF59X7sjjeSFUpgE70WVUNBMB8GA1UdIwQY MBaAFOT7ZAlG2M+u/lZIlIcCrWA0oOi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAt MDc2ZGQ2YmQxMjRhLzEvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAtMDc2ZGQ2YmQxMjRh LzEvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKtFfBj3 YHaZICGeJJ73RB7PXwoe/PN2VR+fxrtiHD4yXdtwxAJ4rQs6NLcT+a+uVLZDFmpI McED+zb87nG/YsuY37qXrkF+/S0B96wRSFyvoIHX0aymdQZZsZbV3rs/Swf3bb/k nIzSF/Kbiisr7JgRk0BR0LqoeT2JnfMhFyvPiPWTcRB6EuhbMRMGSQkv1WMfxJE8 Njhfgw1TbHT7Bt/IbSUSovB3NzrRDILhOevY2halAAIYKwvRh8qAfUhgIJdl0WdT YZEqTocesWR0vvsRM0skhLjR1hI9A72CRxwiIsA6S6oCy4NxBSm8v+Srzn3l6VJU nYOnWcvrrCN4HA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:43 2026 by rpki-client