This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft File: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft (raw, json) Hash identifier: 7KakX0NfieiGQGOSJvfSHbntDoUaa3JvzfHzbZg/xQg= Subject key identifier: 10:2A:27:0B:02:72:39:45:07:FA:44:BC:1C:BD:35:9E:27:42:AF:9B Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A Certificate issuer: /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a Certificate serial: 019BFA5B720CC2FCB6C7CDC7F2849FCBC0F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:50:55 +0000 Manifest this update: Mon 26 Jan 2026 12:50:55 +0000 Manifest next update: Tue 27 Jan 2026 12:50:55 +0000 Files and hashes: 1: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl (hash: MaAu3I5w4Is1ZoNd30krqbrMWHvMJ7md9GdRX3nAUQw=) 2: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (hash: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:5b:72:0c:c2:fc:b6:c7:cd:c7:f2:84:9f:cb:c0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a Validity Not Before: Jan 26 12:50:55 2026 GMT Not After : Jan 27 12:50:55 2026 GMT Subject: CN=102a270b0272394507fa44bc1cbd359e2742af9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:11:60:54:78:b5:5f:76:fd:b2:cd:0f:6e: 6f:8b:ee:0d:59:ad:d6:2e:53:33:dc:c6:f1:85:8c: fb:17:ef:a6:3c:4d:2e:db:24:83:c5:02:5c:80:9c: 2b:32:08:4a:cf:90:38:ee:d6:77:66:c0:e4:e1:f4: 1d:ec:12:dd:6f:6b:57:c6:5f:27:52:66:a3:da:fb: 43:9e:5d:7a:20:d3:29:0a:60:e9:df:55:d0:03:3d: ad:c5:21:5d:f3:07:15:31:8d:dc:5a:9d:6b:b1:4a: 4c:7e:53:78:f2:e6:f8:51:c5:67:7b:5b:07:c9:0d: 87:10:85:2b:a4:8e:b9:aa:a5:5f:27:d3:ef:5b:c4: bd:60:c0:f5:3e:ec:b6:48:f8:12:85:9a:bc:2c:c7: 09:67:8a:20:89:16:9a:b9:96:82:2a:5d:af:17:e0: 24:a5:f6:bc:74:8f:25:bd:ae:59:cc:76:9f:7b:91: 25:9e:0e:94:b0:e4:16:25:51:8f:20:5a:55:82:df: d1:a9:c0:90:4f:83:94:5e:e1:ae:29:55:2b:42:0b: 54:11:d7:3c:05:66:a1:2a:b9:c5:7c:b2:11:e9:bc: c2:53:eb:4b:07:50:f8:5a:88:17:14:5b:26:99:8a: c8:8c:7c:f0:a3:4d:d8:49:4f:c3:cf:3b:32:66:4b: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:27:0B:02:72:39:45:07:FA:44:BC:1C:BD:35:9E:27:42:AF:9B X509v3 Authority Key Identifier: keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:e0:9b:a4:fd:93:e5:cd:65:31:e9:c4:25:99:2e:e5:7c: ce:fe:0e:56:3e:a5:3e:63:ff:71:e5:5f:e4:bd:4f:71:d0:b7: 4b:e4:19:7a:02:8c:88:5f:65:1e:54:4a:a2:e5:f7:c5:7f:a5: 71:38:45:b0:5a:c0:aa:43:8b:f5:ab:37:42:b4:df:c5:87:94: e1:d3:01:ea:20:f6:e8:31:11:c8:d2:d8:79:31:f7:9e:c0:26: 1a:f8:c8:f3:86:d3:47:88:62:ec:7f:ac:0d:c1:7e:a6:f3:89: 5c:6b:72:33:73:4f:26:a9:dc:f1:58:25:21:89:16:4b:2c:b6: 86:96:53:8b:08:90:5b:e3:2b:03:af:f1:c5:78:7c:23:0c:97: aa:3f:fa:2e:e5:62:d6:dc:d2:3b:c5:1f:38:7e:93:96:72:ac: 9b:95:d0:cc:50:8c:83:54:bb:53:a8:fa:b5:ce:c2:58:94:80: 1a:b8:d9:c8:c9:83:27:a7:d3:d0:ac:cb:ee:9f:72:79:fc:31: 9d:91:18:ad:71:db:96:5c:08:9e:49:24:67:e9:9e:c1:92:17: 9f:6e:fe:ee:93:6d:0c:a4:ca:ef:bc:d5:99:9a:a9:bb:3b:8c: 01:a9:a3:d4:1f:aa:59:ba:26:29:bb:a0:df:e3:3b:c7:4b:18: d7:1b:37:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6W3IMwvy2x83H8oSfy8D4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOWE5NThlM2MyMDRhNmQ0ZTU1MzZlYzQzNzY1ZDA0ZDFi MGM5NmEwHhcNMjYwMTI2MTI1MDU1WhcNMjYwMTI3MTI1MDU1WjAzMTEwLwYDVQQD EygxMDJhMjcwYjAyNzIzOTQ1MDdmYTQ0YmMxY2JkMzU5ZTI3NDJhZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvwRYFR4tV92/bLND25vi+4NWa3W LlMz3MbxhYz7F++mPE0u2ySDxQJcgJwrMghKz5A47tZ3ZsDk4fQd7BLdb2tXxl8n Umaj2vtDnl16INMpCmDp31XQAz2txSFd8wcVMY3cWp1rsUpMflN48ub4UcVne1sH yQ2HEIUrpI65qqVfJ9PvW8S9YMD1Puy2SPgShZq8LMcJZ4ogiRaauZaCKl2vF+Ak pfa8dI8lva5ZzHafe5Elng6UsOQWJVGPIFpVgt/RqcCQT4OUXuGuKVUrQgtUEdc8 BWahKrnFfLIR6bzCU+tLB1D4WogXFFsmmYrIjHzwo03YSU/DzzsyZkt2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAqJwsCcjlFB/pEvBy9NZ4nQq+bMB8GA1UdIwQY MBaAFJ+alY48IEptTlU27EN2XQTRsMlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVxVmpqd2dTbTFPVlRic1EzWmRCTkd3eVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NjJlNzUtNDgyMS00NjZlLWE5NGUt NzY5YmRkMTcyYTJiLzEvbjVxVmpqd2dTbTFPVlRic1EzWmRCTkd3eVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NjJlNzUtNDgyMS00NjZlLWE5NGUtNzY5YmRkMTcyYTJi LzEvbjVxVmpqd2dTbTFPVlRic1EzWmRCTkd3eVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKPgm6T9 k+XNZTHpxCWZLuV8zv4OVj6lPmP/ceVf5L1PcdC3S+QZegKMiF9lHlRKouX3xX+l cThFsFrAqkOL9as3QrTfxYeU4dMB6iD26DERyNLYeTH3nsAmGvjI84bTR4hi7H+s DcF+pvOJXGtyM3NPJqnc8VglIYkWSyy2hpZTiwiQW+MrA6/xxXh8IwyXqj/6LuVi 1tzSO8UfOH6TlnKsm5XQzFCMg1S7U6j6tc7CWJSAGrjZyMmDJ6fT0KzL7p9yefwx nZEYrXHbllwInkkkZ+mewZIXn27+7pNtDKTK77zVmZqpuzuMAamj1B+qWbomKbug 3+M7x0sY1xs3AQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:40 2026 by rpki-client