This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json) Hash identifier: HlwYnw1vxBnIq63PTLGJsGPGOJTrmIHkepBkaOOOKXw= Subject key identifier: 89:87:17:A2:99:62:2E:6A:CD:8F:82:D4:0A:19:2C:50:29:72:94:F2 Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Certificate serial: 019BFC8A7A65FDC4CB25029B628A1F23402F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 23:01:32 +0000 Manifest this update: Mon 26 Jan 2026 23:01:32 +0000 Manifest next update: Tue 27 Jan 2026 23:01:32 +0000 Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: chzFv89xOvsYQbM3B4VTXSa5yeTVpgK1Ekg2X2nP4rQ=) 2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=) 3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:7a:65:fd:c4:cb:25:02:9b:62:8a:1f:23:40:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170 Validity Not Before: Jan 26 23:01:32 2026 GMT Not After : Jan 27 23:01:32 2026 GMT Subject: CN=898717a299622e6acd8f82d40a192c50297294f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:1c:e9:61:d9:e2:9b:13:2c:da:9d:4a:16: 10:61:85:ec:41:8c:ad:de:60:07:fa:51:8d:e6:05: 52:f2:af:7a:63:15:53:c4:5d:fc:4c:46:44:a3:2e: c5:24:7b:36:23:da:4d:d8:fc:34:de:0a:a3:05:e5: 66:f9:5c:73:a2:bd:35:91:b2:7b:8b:61:3a:e4:79: cd:13:77:bc:6d:ca:7b:2d:6f:40:11:82:8e:3d:a9: 33:35:65:2b:5c:24:7e:cd:be:87:fa:73:bb:69:37: e0:9d:32:3b:d7:86:81:f9:a1:f8:74:8a:8e:ab:33: 11:05:ce:89:34:4d:c4:39:a5:d3:7a:5d:6f:db:72: 53:77:a1:31:b6:ee:62:ad:74:b4:34:73:1c:8b:d7: 5c:14:85:30:fa:c5:85:19:93:1e:9b:28:82:19:73: 91:0b:fe:07:58:c8:62:2d:bf:8a:74:1f:df:f9:ee: 08:ef:93:45:f8:00:ee:38:e5:45:d1:4f:93:ed:62: 51:72:f7:37:1f:b7:2d:b9:82:1b:71:2f:e8:66:05: ad:8c:7d:d7:fc:e9:ab:b7:71:dd:5f:8b:06:71:4c: 6f:e6:26:36:9a:d5:ca:a0:ea:82:ea:aa:2c:38:c7: 4c:95:91:23:e2:f9:39:a1:a9:ae:3c:93:46:0c:3f: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:17:A2:99:62:2E:6A:CD:8F:82:D4:0A:19:2C:50:29:72:94:F2 X509v3 Authority Key Identifier: keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f3:a3:75:cf:e3:10:b2:be:1d:ea:3c:d9:53:d5:95:23:20: 0e:c3:f5:80:61:e6:72:f2:f1:d9:b9:fe:97:82:83:da:e8:44: 87:ec:9c:96:97:6f:28:31:95:1b:a6:38:b5:b8:29:42:47:f5: 90:09:b3:04:2c:cc:57:6c:f7:ca:83:78:38:9c:b8:d9:11:42: 8e:4e:51:b2:c4:36:89:5a:0e:5e:50:fb:26:62:cd:9a:18:87: 73:cd:b3:a1:ea:57:bc:9e:de:0e:12:e5:87:4d:79:27:ac:08: 8e:0a:d3:7a:a6:36:4a:ed:47:b8:61:9d:16:2d:e8:7a:99:3e: 9c:af:62:cd:83:81:6f:62:45:da:a4:58:93:fb:0a:23:6b:0b: 1c:41:07:19:51:38:0d:bf:30:f0:70:99:75:d2:29:ac:f1:dc: 94:d8:9f:67:31:72:6b:ed:3b:6e:11:5d:3c:54:9a:05:24:87: 25:89:1e:ab:53:7a:ae:7f:3a:54:a5:8c:bb:3b:95:ac:82:d7: 82:3e:9d:b8:ee:c5:36:7d:ba:2b:4b:05:37:00:6b:9e:63:1c: 9d:61:bb:81:a8:1c:4f:8f:98:71:47:d0:da:d4:a2:50:a4:52: 0c:82:4e:33:01:ea:a5:4e:d9:c7:88:de:7c:fa:80:4d:df:ec: 79:63:04:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8inpl/cTLJQKbYoofI0AvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4 OTAxNzAwHhcNMjYwMTI2MjMwMTMyWhcNMjYwMTI3MjMwMTMyWjAzMTEwLwYDVQQD Eyg4OTg3MTdhMjk5NjIyZTZhY2Q4ZjgyZDQwYTE5MmM1MDI5NzI5NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzkc6WHZ4psTLNqdShYQYYXsQYyt 3mAH+lGN5gVS8q96YxVTxF38TEZEoy7FJHs2I9pN2Pw03gqjBeVm+Vxzor01kbJ7 i2E65HnNE3e8bcp7LW9AEYKOPakzNWUrXCR+zb6H+nO7aTfgnTI714aB+aH4dIqO qzMRBc6JNE3EOaXTel1v23JTd6Extu5irXS0NHMci9dcFIUw+sWFGZMemyiCGXOR C/4HWMhiLb+KdB/f+e4I75NF+ADuOOVF0U+T7WJRcvc3H7ctuYIbcS/oZgWtjH3X /Omrt3HdX4sGcUxv5iY2mtXKoOqC6qosOMdMlZEj4vk5oamuPJNGDD8+wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImHF6KZYi5qzY+C1AoZLFApcpTyMB8GA1UdIwQY MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfOjdc/j ELK+Heo82VPVlSMgDsP1gGHmcvLx2bn+l4KD2uhEh+yclpdvKDGVG6Y4tbgpQkf1 kAmzBCzMV2z3yoN4OJy42RFCjk5RssQ2iVoOXlD7JmLNmhiHc82zoepXvJ7eDhLl h015J6wIjgrTeqY2Su1HuGGdFi3oepk+nK9izYOBb2JF2qRYk/sKI2sLHEEHGVE4 Db8w8HCZddIprPHclNifZzFya+07bhFdPFSaBSSHJYkeq1N6rn86VKWMuzuVrILX gj6duO7FNn26K0sFNwBrnmMcnWG7gagcT4+YcUfQ2tSiUKRSDIJOMwHqpU7Zx4je fPqATd/seWMEcA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:16:03 2026 by rpki-client