This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json) Hash identifier: +07RLDRKqjL9Nq1m4ooT8osB+SD6of9vVWL0CHp+BqM= Subject key identifier: 46:E5:C2:3C:DB:87:D8:DD:EA:D1:07:87:48:A8:A1:1A:59:39:74:C2 Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Certificate serial: 019BD76BCD08E461B4C001C661B03AC3B7FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft Manifest number: 1176 Signing time: Mon 19 Jan 2026 18:02:04 +0000 Manifest this update: Mon 19 Jan 2026 18:02:04 +0000 Manifest next update: Tue 20 Jan 2026 18:02:04 +0000 Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: ZtX0DQtjY/qeB5TexIlzshiYXJovCLiXJ89LE5OAWWo=) 2: XKi2BlHneg8Maj6fOXu_OR3e41k.roa (hash: WCQe6/yJBNE4CdbDW2e1jgFjAOf+lrnuYR4ptmdnrnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6b:cd:08:e4:61:b4:c0:01:c6:61:b0:3a:c3:b7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Validity Not Before: Jan 19 18:02:04 2026 GMT Not After : Jan 20 18:02:04 2026 GMT Subject: CN=46e5c23cdb87d8ddead1078748a8a11a593974c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:ea:9c:6b:06:bb:f9:20:77:e8:9f:e2:82: 50:c3:3f:f5:20:bd:1f:da:1b:a2:89:9b:4d:12:20: a7:1e:c4:c6:b3:49:a1:3a:a3:14:15:c5:65:0e:3f: 3b:c8:f5:d7:15:21:21:1a:ff:3d:75:ba:03:f5:ed: 87:16:bc:1d:94:82:a4:70:9f:0e:2f:29:95:99:d2: f6:6e:e3:4a:61:13:d4:ac:5e:99:70:22:24:a4:21: 3b:e7:fa:fa:3c:87:a2:cb:30:6d:30:c1:10:70:d0: c6:55:ea:77:bb:63:bc:d1:96:78:e3:a5:47:6f:12: 34:35:b0:e7:94:ad:8b:df:b4:a6:40:84:d8:8a:dd: ef:b7:a2:00:f4:ea:6a:7a:d9:c8:ee:56:8f:95:37: 7d:92:b6:f3:58:c4:16:87:7b:3f:44:38:d5:6c:9f: 73:f9:da:35:88:30:bd:f4:07:30:ce:a2:63:24:f7: 42:15:8d:6f:5f:cd:c7:9c:c8:2e:9f:24:3f:73:cd: 42:13:c4:54:df:84:bd:9d:a1:93:04:4f:de:c4:67: 4c:7d:f8:c9:1a:74:f7:e4:2d:36:c6:72:1f:51:20: fe:90:df:31:fd:90:93:75:e1:d4:50:e8:92:0f:c1: 72:4a:5b:5e:53:dc:74:23:73:62:61:be:41:57:fb: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:C2:3C:DB:87:D8:DD:EA:D1:07:87:48:A8:A1:1A:59:39:74:C2 X509v3 Authority Key Identifier: keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ce:13:1b:7d:bf:c2:cd:b0:19:49:f7:c8:fc:87:67:59:a9: e1:d6:6d:79:f8:9c:ec:5f:93:41:6b:8e:d3:11:4e:4c:fd:a5: 37:c0:da:a7:c2:df:aa:32:4a:15:42:ca:8e:b0:55:a8:71:24: 26:52:8f:70:08:b0:b4:dd:99:b9:42:83:5d:90:d8:2d:b5:a1: 61:12:27:f3:44:65:22:27:14:25:93:0a:86:08:a3:19:76:3a: 6c:20:d7:18:ce:20:80:7e:c5:23:cd:52:d2:68:8b:12:b1:8f: 9c:b3:7e:fa:ba:f3:25:fb:5a:23:8d:6f:1d:e6:d7:c1:71:eb: 2a:4c:2f:a0:5c:8e:95:6b:ca:13:5f:4b:d8:13:58:75:a8:30: 40:9e:df:80:0c:58:f4:66:5e:9b:81:45:a0:28:4b:f5:a3:d6: 39:be:8b:1f:84:69:5d:ff:2e:16:92:90:b8:aa:8d:01:88:db: c9:38:26:9f:f0:ac:4c:c7:e5:8c:08:49:e5:a9:81:08:23:c5: 78:73:e3:ec:c7:44:bf:d1:09:6e:21:00:de:e8:c2:94:4e:89: 80:08:3a:c6:6f:44:be:7f:45:f4:80:b9:ee:32:c3:44:9d:e8: 6c:7d:0a:53:87:ca:67:c7:4f:a3:8e:3d:40:80:85:73:3d:2d: 70:11:5d:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXa80I5GG0wAHGYbA6w7f+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj NmY0YzcwHhcNMjYwMTE5MTgwMjA0WhcNMjYwMTIwMTgwMjA0WjAzMTEwLwYDVQQD Eyg0NmU1YzIzY2RiODdkOGRkZWFkMTA3ODc0OGE4YTExYTU5Mzk3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0zqnGsGu/kgd+if4oJQwz/1IL0f 2huiiZtNEiCnHsTGs0mhOqMUFcVlDj87yPXXFSEhGv89dboD9e2HFrwdlIKkcJ8O LymVmdL2buNKYRPUrF6ZcCIkpCE75/r6PIeiyzBtMMEQcNDGVep3u2O80ZZ446VH bxI0NbDnlK2L37SmQITYit3vt6IA9OpqetnI7laPlTd9krbzWMQWh3s/RDjVbJ9z +do1iDC99AcwzqJjJPdCFY1vX83HnMgunyQ/c81CE8RU34S9naGTBE/exGdMffjJ GnT35C02xnIfUSD+kN8x/ZCTdeHUUOiSD8FySlteU9x0I3NiYb5BV/uaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEblwjzbh9jd6tEHh0iooRpZOXTCMB8GA1UdIwQY MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5 LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc4TG32/ ws2wGUn3yPyHZ1mp4dZtefic7F+TQWuO0xFOTP2lN8Dap8LfqjJKFULKjrBVqHEk JlKPcAiwtN2ZuUKDXZDYLbWhYRIn80RlIicUJZMKhgijGXY6bCDXGM4ggH7FI81S 0miLErGPnLN++rrzJftaI41vHebXwXHrKkwvoFyOlWvKE19L2BNYdagwQJ7fgAxY 9GZem4FFoChL9aPWOb6LH4RpXf8uFpKQuKqNAYjbyTgmn/CsTMfljAhJ5amBCCPF eHPj7MdEv9EJbiEA3ujClE6JgAg6xm9Evn9F9IC57jLDRJ3obH0KU4fKZ8dPo449 QICFcz0tcBFdZA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:58 2026 by rpki-client