This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File: S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier: 09ttvIgaFd8QvDtB3FSadq6Obgdz4FNjhNRZl6b9+oE=
Subject key identifier: 95:33:C8:5B:F8:A0:21:15:39:96:3B:16:F1:37:07:7F:D3:8D:9A:63
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019BFCF76A0262E89E0D18B01AB586FDF2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number: 05B2
Signing time: Tue 27 Jan 2026 01:00:31 +0000
Manifest this update: Tue 27 Jan 2026 01:00:31 +0000
Manifest next update: Wed 28 Jan 2026 01:00:31 +0000
Files and hashes: 1: 9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa (hash: jkRYU37RE8ZKYId1y2rgWa5Ij1FGdMuhHsJM5SV9bJo=)
2: CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa (hash: 9Hs9+9hllW24VkNsrEOAjRUnft2CZTNY/e59yHFhQNg=)
3: HJo3CRIyATBS7g-UDXuzQV1nuKg.roa (hash: EQakd71H1sWHiuQgGDjS23hEg0bJr+KP+TwWXG16xS8=)
4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: BN9mht0MgS+UtWysMQGp0ODmddBhZJkL8Kp6o9FxRK0=)
5: VsFQPt4uWCua0n1HDigGa7MZykI.roa (hash: aO7sXpE7LufWLa9ldjPsDpWQqb+o3sWR/YPv+p5OWvM=)
6: dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa (hash: 22Pf0XjeESbjL/t+0AIAcsw4G9pn5ax3ko7GmRs5HKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:f7:6a:02:62:e8:9e:0d:18:b0:1a:b5:86:fd:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 27 01:00:31 2026 GMT
Not After : Jan 28 01:00:31 2026 GMT
Subject: CN=9533c85bf8a0211539963b16f137077fd38d9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:b3:03:06:bb:62:46:f1:db:6a:23:ff:57:
7a:ac:75:fe:3e:f7:a1:4f:03:da:42:ae:fd:80:4f:
8c:cf:18:0f:da:80:d7:c7:f0:af:6f:fd:4e:d2:d6:
3c:1e:ed:db:d2:de:f1:15:15:68:dd:39:d2:41:78:
b6:4a:29:f5:10:f5:a7:06:7b:e9:29:f7:8a:e6:25:
5f:ee:79:12:88:db:05:0b:ac:fa:7a:0f:6b:bd:28:
56:37:64:2b:55:31:6a:09:92:6b:72:2c:51:c5:ed:
2a:17:08:4f:81:39:0e:e3:f5:b1:5d:a2:46:a8:f2:
97:28:fe:d0:61:d3:16:ff:85:ae:6c:a0:af:2b:e0:
93:7a:d2:f2:72:34:f3:65:94:0a:2a:bf:e4:b6:2b:
24:0b:25:dc:6a:09:d5:1e:93:46:53:d4:b1:bd:7f:
9c:10:7d:16:3e:9e:4d:84:ed:4c:da:21:8d:a6:8f:
ff:b8:67:c4:2b:4c:cf:2a:02:16:1a:f0:04:44:ae:
58:9e:a8:b4:3d:05:88:ae:c7:bc:a3:22:0f:72:88:
ad:5d:72:14:a6:9f:eb:ee:29:c5:45:86:83:45:da:
a9:02:25:fd:fd:4d:ea:dd:0a:d0:2b:a7:f7:fc:f1:
06:d4:03:9d:a8:56:35:bb:e6:96:f6:a9:54:06:ba:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:33:C8:5B:F8:A0:21:15:39:96:3B:16:F1:37:07:7F:D3:8D:9A:63
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:ea:ae:17:f2:7f:f0:19:85:ee:a6:93:5f:cf:03:96:91:
c4:1c:55:fd:f3:3a:b2:0a:cc:ca:48:c8:74:5b:0f:50:82:cb:
37:0f:24:83:28:2f:f5:c8:2c:6d:89:8b:5f:11:0d:fc:e0:b1:
c2:16:4f:39:62:54:51:a5:24:77:e0:c8:c1:97:f2:dd:5a:12:
58:f4:0b:96:00:ce:3c:c9:71:1d:3e:49:55:4b:b1:2e:1f:15:
67:d5:5a:56:6b:b3:e3:49:f6:1a:37:07:68:60:da:a8:1a:49:
70:fd:6f:0e:6f:a4:13:fd:d3:a9:2a:2c:03:c7:1b:65:aa:67:
8d:5a:77:9b:93:1d:24:aa:d7:5a:d9:ef:67:87:2b:ac:7e:48:
b5:7d:a5:5f:21:71:80:9e:c6:fb:99:e0:4b:56:29:0f:06:75:
09:b3:c6:d2:85:dd:86:b2:aa:89:5a:62:ae:15:06:ed:67:a8:
45:5c:0a:0f:53:52:d4:51:07:99:4b:06:68:16:0a:e3:a8:8e:
4a:ac:ca:70:1e:eb:ca:84:b3:c1:3d:31:dc:3a:a9:7e:9a:e1:
e9:d4:7d:ad:c8:be:bb:56:80:e8:b9:34:1c:8d:78:d0:4d:a0:
f5:83:38:91:80:d3:81:8c:7e:64:35:25:4f:c9:29:3a:ab:62:
69:a2:9f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv892oCYuieDRiwGrWG/fLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjYwMTI3MDEwMDMxWhcNMjYwMTI4MDEwMDMxWjAzMTEwLwYDVQQD
Eyg5NTMzYzg1YmY4YTAyMTE1Mzk5NjNiMTZmMTM3MDc3ZmQzOGQ5YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzomzAwa7Ykbx22oj/1d6rHX+Pveh
TwPaQq79gE+MzxgP2oDXx/Cvb/1O0tY8Hu3b0t7xFRVo3TnSQXi2Sin1EPWnBnvp
KfeK5iVf7nkSiNsFC6z6eg9rvShWN2QrVTFqCZJrcixRxe0qFwhPgTkO4/WxXaJG
qPKXKP7QYdMW/4WubKCvK+CTetLycjTzZZQKKr/ktiskCyXcagnVHpNGU9SxvX+c
EH0WPp5NhO1M2iGNpo//uGfEK0zPKgIWGvAERK5Ynqi0PQWIrse8oyIPcoitXXIU
pp/r7inFRYaDRdqpAiX9/U3q3QrQK6f3/PEG1AOdqFY1u+aW9qlUBrqjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUzyFv4oCEVOZY7FvE3B3/TjZpjMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbrqrhfy
f/AZhe6mk1/PA5aRxBxV/fM6sgrMykjIdFsPUILLNw8kgygv9cgsbYmLXxEN/OCx
whZPOWJUUaUkd+DIwZfy3VoSWPQLlgDOPMlxHT5JVUuxLh8VZ9VaVmuz40n2GjcH
aGDaqBpJcP1vDm+kE/3TqSosA8cbZapnjVp3m5MdJKrXWtnvZ4crrH5ItX2lXyFx
gJ7G+5ngS1YpDwZ1CbPG0oXdhrKqiVpirhUG7WeoRVwKD1NS1FEHmUsGaBYK46iO
SqzKcB7ryoSzwT0x3Dqpfprh6dR9rci+u1aA6Lk0HI140E2g9YM4kYDTgYx+ZDUl
T8kpOqtiaaKfOQ==
-----END CERTIFICATE-----
Generated at Tue Jan 27 11:52:27 2026 by rpki-client