This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json) Hash identifier: 4DZ6qUo3bD8DklW9yBhTGE3uXAc1xflgWJS87OusJPQ= Subject key identifier: AF:B0:47:BF:A2:2E:02:B7:7D:AD:74:59:C7:54:9C:FA:0C:C0:9E:AD Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2 Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2 Certificate serial: 019BF8E4264E5CE402066315D16D3599BFE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft Manifest number: 07C4 Signing time: Mon 26 Jan 2026 06:00:59 +0000 Manifest this update: Mon 26 Jan 2026 06:00:59 +0000 Manifest next update: Tue 27 Jan 2026 06:00:59 +0000 Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: SpYXxsdJ1aUlpOat7P/u1JxPQqs3DkptENbvd98HQEA=) 2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:26:4e:5c:e4:02:06:63:15:d1:6d:35:99:bf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2 Validity Not Before: Jan 26 06:00:59 2026 GMT Not After : Jan 27 06:00:59 2026 GMT Subject: CN=afb047bfa22e02b77dad7459c7549cfa0cc09ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:6b:0a:17:60:15:a7:5a:02:ff:7d:c3:fa: 09:1e:cc:ee:8c:c3:c4:0f:39:47:68:ce:26:4d:a2: 47:ab:85:fa:36:c0:13:aa:bf:fb:01:80:e6:01:99: a1:ea:4a:c1:85:ad:3b:af:36:51:18:fb:4b:c2:b7: 74:13:85:2a:64:91:a5:fd:f1:0e:d2:e8:cb:39:4e: 7b:ca:fe:15:c3:59:6b:fb:f4:ca:c0:4a:d3:5a:4e: 42:2a:7c:ee:05:e5:76:e9:d8:ff:7d:1a:05:77:77: f8:84:d8:f1:10:02:cd:bf:c9:4e:16:78:c4:4c:f1: f4:d5:38:c4:ba:b7:e3:5e:ff:22:61:e1:c5:34:e3: 33:cd:33:d6:d8:6d:46:e0:54:b4:73:0e:47:18:6c: 32:ca:87:ff:e1:32:b8:f7:37:4a:f9:28:6a:83:99: 64:60:16:c8:e5:0e:82:24:e3:23:1c:12:5b:8d:9a: 32:ec:88:77:43:21:1a:40:f7:70:57:2c:0a:c5:ff: 14:cb:fb:2c:59:de:fd:f4:86:82:13:30:7c:74:52: e3:f3:5b:97:3f:21:e9:2d:30:0e:d8:54:db:62:1b: 25:29:96:3e:87:68:5d:24:ce:6d:37:33:90:57:ce: 18:53:8e:25:d2:f3:d0:e2:0c:e2:4f:1b:de:41:4f: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:47:BF:A2:2E:02:B7:7D:AD:74:59:C7:54:9C:FA:0C:C0:9E:AD X509v3 Authority Key Identifier: keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3c:aa:a2:fc:66:39:26:48:5d:66:7b:80:7f:18:d5:5a:0a: 2e:2a:d4:e9:dc:08:94:52:e1:1e:ec:f9:c5:c1:65:11:4a:cb: 97:03:13:11:27:f0:3f:31:43:77:94:bc:cf:ad:87:cb:f3:c4: 7a:68:a9:bf:b5:7f:12:a5:30:24:0b:56:e7:8a:ad:1d:bf:fa: 63:a2:d7:1a:be:62:1f:fb:69:93:dd:60:2c:c9:df:04:1b:e6: 15:ce:ff:5e:81:b6:b4:28:e6:6a:e2:a4:cd:fe:80:e2:9c:cf: e1:8a:1b:ef:ef:18:46:2a:b7:e2:f8:c6:46:77:19:bb:1d:06: ee:09:9f:70:e4:de:ae:c1:7e:37:11:40:4b:80:93:ad:30:95: e1:c4:35:98:ea:0c:9e:11:11:49:14:15:a4:f1:ff:39:eb:7f: d0:c1:9a:00:2e:20:5d:cc:4b:dd:45:3c:d4:a4:88:ab:a6:6a: 4e:8b:f1:b0:5e:0e:6b:1d:5c:0b:1a:d7:18:6b:48:ac:72:a6: f8:e4:9f:f7:22:7b:79:2d:da:35:a7:b4:f1:17:a2:e3:19:6d: b0:3d:f4:98:34:6d:bd:ff:74:7d:fe:c2:77:e7:38:63:f5:20: a9:f1:68:20:62:54:c1:7d:6e:94:0c:f0:3b:12:14:d6:63:18: 88:7c:0d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45CZOXOQCBmMV0W01mb/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl NzEwZDIwHhcNMjYwMTI2MDYwMDU5WhcNMjYwMTI3MDYwMDU5WjAzMTEwLwYDVQQD EyhhZmIwNDdiZmEyMmUwMmI3N2RhZDc0NTljNzU0OWNmYTBjYzA5ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqZrChdgFadaAv99w/oJHszujMPE DzlHaM4mTaJHq4X6NsATqr/7AYDmAZmh6krBha07rzZRGPtLwrd0E4UqZJGl/fEO 0ujLOU57yv4Vw1lr+/TKwErTWk5CKnzuBeV26dj/fRoFd3f4hNjxEALNv8lOFnjE TPH01TjEurfjXv8iYeHFNOMzzTPW2G1G4FS0cw5HGGwyyof/4TK49zdK+Shqg5lk YBbI5Q6CJOMjHBJbjZoy7Ih3QyEaQPdwVywKxf8Uy/ssWd799IaCEzB8dFLj81uX PyHpLTAO2FTbYhslKZY+h2hdJM5tNzOQV84YU44l0vPQ4gziTxveQU+QzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+wR7+iLgK3fa10WcdUnPoMwJ6tMB8GA1UdIwQY MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt ZDE1MDJmN2NmMjM0LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0 LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjyqovxm OSZIXWZ7gH8Y1VoKLirU6dwIlFLhHuz5xcFlEUrLlwMTESfwPzFDd5S8z62Hy/PE emipv7V/EqUwJAtW54qtHb/6Y6LXGr5iH/tpk91gLMnfBBvmFc7/XoG2tCjmauKk zf6A4pzP4Yob7+8YRiq34vjGRncZux0G7gmfcOTersF+NxFAS4CTrTCV4cQ1mOoM nhERSRQVpPH/Oet/0MGaAC4gXcxL3UU81KSIq6ZqTovxsF4Oax1cCxrXGGtIrHKm +OSf9yJ7eS3aNae08Rei4xltsD30mDRtvf90ff7Cd+c4Y/UgqfFoIGJUwX1ulAzw OxIU1mMYiHwN8g== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:17 2026 by rpki-client