This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: iLSARPXGevsI5VGmbqjX80nshFrCAzW/Rh46W4i1QqU= Subject key identifier: 4D:AE:1C:CF:51:CE:93:F0:6D:FA:D8:CB:34:59:59:3A:ED:F3:DC:2D Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 019BAD5CC61E5B928D2284678A03FD8571CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 17DD Signing time: Sun 11 Jan 2026 14:01:36 +0000 Manifest this update: Sun 11 Jan 2026 14:01:36 +0000 Manifest next update: Mon 12 Jan 2026 14:01:36 +0000 Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=) 2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=) 3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: 0zQnoM44XN6XSKohjT9jTILCvxC4mAdpSa43QBqOhm4=) 4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:c6:1e:5b:92:8d:22:84:67:8a:03:fd:85:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jan 11 14:01:36 2026 GMT Not After : Jan 12 14:01:36 2026 GMT Subject: CN=4dae1ccf51ce93f06dfad8cb3459593aedf3dc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f9:8e:05:c7:eb:76:82:33:e1:72:70:22:a0: 65:61:d0:c6:42:06:65:6d:f4:0f:31:0c:b8:b9:91: 86:db:7e:c3:33:cf:1a:44:cc:13:b6:34:d3:f4:91: 30:6e:8d:93:79:43:0c:ca:9c:8d:08:b4:95:7e:59: 88:df:ad:da:97:99:d4:c0:70:d5:e9:9d:0d:3b:e9: 79:51:a9:41:59:63:eb:1f:bd:64:fc:a5:bd:61:6d: d7:8e:e3:fb:90:67:30:47:a6:10:0b:74:49:08:ee: dc:4e:f2:75:48:0b:30:e9:32:35:3b:55:d8:ee:d8: e2:7c:ef:b6:3d:5a:83:34:da:fd:de:a6:e1:8d:f6: f0:d5:2d:ba:53:30:d1:d6:b7:89:6a:61:9f:ae:4b: 2c:23:62:63:67:fd:a5:9d:44:ed:18:e6:84:17:62: f5:43:43:e1:03:72:8f:12:2b:d1:6c:ff:93:63:7e: df:98:f4:bd:fe:b9:38:b1:bd:df:07:e0:9d:3a:5f: d6:f0:58:ed:b3:3c:eb:20:3d:20:be:ce:83:e6:ee: 9e:0a:f4:a8:8d:d0:ed:d7:a5:f8:b0:44:f4:93:bf: a1:94:08:d8:be:5f:c1:7a:cd:26:27:bb:20:f3:07: 9d:a6:98:02:08:b0:ae:9b:0e:53:cc:32:c7:8b:15: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:1C:CF:51:CE:93:F0:6D:FA:D8:CB:34:59:59:3A:ED:F3:DC:2D X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:93:81:5b:68:2d:a4:a2:9d:26:05:92:1a:ab:b2:96:e5:e6: f2:f4:32:99:ac:94:8d:09:5d:75:1c:55:d9:24:86:f5:7e:f7: cd:2a:c4:2d:97:2d:97:4a:d9:85:b0:37:21:d3:50:5a:2f:b3: 2d:82:04:e2:98:b1:e9:81:f3:e4:c3:fe:65:a2:85:45:c4:66: 94:9c:5a:77:5c:88:d0:40:7c:f7:58:b5:c0:19:77:cb:19:c9: 60:e4:0d:5b:0e:0f:2c:33:95:93:95:d8:5a:17:3c:f4:c8:6f: 65:9b:42:ec:a7:59:ac:02:fb:c3:39:34:02:49:e6:d4:4d:36: 0a:bb:bc:d0:68:e2:69:74:1d:17:d9:66:6c:4c:2e:b6:41:fc: 30:a8:0a:ba:e8:eb:89:72:ce:44:c7:e6:af:2f:c1:fe:24:41: 27:8a:0c:a2:fc:e9:86:49:0f:39:2c:06:ac:41:9c:81:5f:c5: 41:08:15:cf:98:56:15:bd:57:e0:7e:ab:76:3a:01:14:3a:6f: 55:cc:13:ac:1d:de:f6:64:1a:02:bc:1d:cf:a9:4a:85:6c:38: 62:49:ff:4c:0a:5a:8c:2c:f5:b1:a9:f0:17:17:23:7d:f1:88: ee:95:c8:b0:1b:8a:8d:dc:51:dd:89:27:fe:0f:49:99:0f:cd: 6b:27:3c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXMYeW5KNIoRnigP9hXHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjYwMTExMTQwMTM2WhcNMjYwMTEyMTQwMTM2WjAzMTEwLwYDVQQD Eyg0ZGFlMWNjZjUxY2U5M2YwNmRmYWQ4Y2IzNDU5NTkzYWVkZjNkYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvmOBcfrdoIz4XJwIqBlYdDGQgZl bfQPMQy4uZGG237DM88aRMwTtjTT9JEwbo2TeUMMypyNCLSVflmI363al5nUwHDV 6Z0NO+l5UalBWWPrH71k/KW9YW3XjuP7kGcwR6YQC3RJCO7cTvJ1SAsw6TI1O1XY 7tjifO+2PVqDNNr93qbhjfbw1S26UzDR1reJamGfrkssI2JjZ/2lnUTtGOaEF2L1 Q0PhA3KPEivRbP+TY37fmPS9/rk4sb3fB+CdOl/W8FjtszzrID0gvs6D5u6eCvSo jdDt16X4sET0k7+hlAjYvl/Bes0mJ7sg8wedppgCCLCumw5TzDLHixXbrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2uHM9RzpPwbfrYyzRZWTrt89wtMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZOBW2gt pKKdJgWSGquyluXm8vQymayUjQlddRxV2SSG9X73zSrELZctl0rZhbA3IdNQWi+z LYIE4pix6YHz5MP+ZaKFRcRmlJxad1yI0EB891i1wBl3yxnJYOQNWw4PLDOVk5XY Whc89MhvZZtC7KdZrAL7wzk0Aknm1E02Cru80GjiaXQdF9lmbEwutkH8MKgKuujr iXLORMfmry/B/iRBJ4oMovzphkkPOSwGrEGcgV/FQQgVz5hWFb1X4H6rdjoBFDpv VcwTrB3e9mQaArwdz6lKhWw4Ykn/TApajCz1sanwFxcjffGI7pXIsBuKjdxR3Ykn /g9JmQ/Nayc8gA== -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:04 2026 by rpki-client