This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json) Hash identifier: 3cOEUPjUl6iBPrNiB9bhxme3D9oUm7QpM2y1RdZlOww= Subject key identifier: 30:B0:5D:0F:8A:33:B4:40:C0:09:2C:95:CB:8F:42:B2:E2:26:7C:DE Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314 Certificate serial: 019BFCC0EE24AAC71B9C72D423AFA92EF6E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft Manifest number: 1070 Signing time: Tue 27 Jan 2026 00:01:00 +0000 Manifest this update: Tue 27 Jan 2026 00:01:00 +0000 Manifest next update: Wed 28 Jan 2026 00:01:00 +0000 Files and hashes: 1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=) 2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=) 3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: usdA7vddB4u1x6kYEYwaQPNfLJhSSls5scn2PBK3RwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:ee:24:aa:c7:1b:9c:72:d4:23:af:a9:2e:f6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314 Validity Not Before: Jan 27 00:01:00 2026 GMT Not After : Jan 28 00:01:00 2026 GMT Subject: CN=30b05d0f8a33b440c0092c95cb8f42b2e2267cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:20:1c:8e:35:e0:9a:8b:03:5f:7d:fe:d7: 9c:2c:e7:06:15:92:9b:7a:ac:f1:7c:43:55:c5:86: 22:ae:17:c2:00:ff:d5:82:d2:c6:f7:24:7e:90:ac: ce:f3:cd:0b:88:57:b0:45:ed:3a:01:73:bc:fe:92: 86:97:fc:1d:1f:f2:4f:cd:ae:ae:07:ea:3c:9e:84: 92:06:cf:d6:d1:15:09:ae:9a:6a:95:d7:85:da:87: 6e:e9:5d:f5:55:cf:bc:bd:0d:ff:59:14:96:5b:f2: 91:61:52:4a:ae:a9:9f:99:c8:c6:4a:bd:32:08:ef: fe:92:b5:80:d9:ce:2c:e0:aa:e7:4d:51:d5:e9:e0: c5:32:ad:87:15:af:29:87:41:e2:ce:8b:6d:fc:ae: a5:6a:64:9f:0f:d8:d1:3a:c7:66:2a:a0:58:d7:6a: 61:b2:6a:27:d1:0c:bb:67:1c:d8:90:b3:65:30:72: 85:2c:89:ce:c2:05:f0:10:2a:33:74:af:87:b0:eb: d2:ba:07:fc:32:17:8b:47:59:70:36:d4:10:fc:8b: 0a:5b:aa:8c:1e:0d:3d:f9:58:be:6d:89:ef:74:bc: 76:84:66:74:fb:12:65:95:b2:b2:8d:e7:de:0d:78: 70:98:8b:f5:ba:94:83:fb:57:f8:50:49:45:80:9c: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:5D:0F:8A:33:B4:40:C0:09:2C:95:CB:8F:42:B2:E2:26:7C:DE X509v3 Authority Key Identifier: keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:76:a6:7e:58:eb:63:fd:b4:0f:0e:e7:32:02:e9:03:3d:2c: 69:d5:8b:6e:c0:c4:27:7d:39:d7:01:cd:fd:bd:87:9a:6a:f2: f4:6d:26:6c:8f:e2:c3:10:65:fe:f9:d3:93:ef:3d:1e:34:c4: 82:af:c6:1f:64:ae:c7:5d:79:05:57:d8:04:bd:f1:26:ea:95: ba:7b:a0:5c:a1:3f:d5:ae:fe:b9:89:10:8b:9e:03:56:63:d3: 1c:29:af:26:c7:d0:4d:0e:54:1b:1e:83:e1:a1:83:f1:17:ce: 98:8d:01:7f:7a:6b:53:1c:dc:e9:ad:e6:f6:0f:68:8e:70:ec: f6:1a:65:58:95:10:1e:29:a9:f6:38:b1:ea:e9:91:81:bb:a5: 0c:bc:88:2e:39:8b:61:09:ea:5d:e8:79:40:1c:32:16:65:c9: 00:0d:35:20:ab:6e:0e:82:36:cd:72:11:8c:39:d0:91:c2:f9: 90:a6:52:8b:aa:b8:d3:44:5d:64:38:0f:cb:43:aa:d2:11:89: 1e:9e:3d:9b:74:34:d7:d4:90:f7:4c:1c:1d:43:f7:04:16:e9: 52:05:61:83:34:e1:4e:23:c3:94:1a:69:2d:18:cd:a1:5d:e1: e8:8b:11:6f:12:ba:80:f1:ec:06:25:38:25:9d:9e:0b:e8:ba: 07:ab:2f:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wO4kqscbnHLUI6+pLvbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTNhNTQ3YmYwYmUyZGVlZDdjODRmZTkwMmUzMzY2NTc3 YTIzMTQwHhcNMjYwMTI3MDAwMTAwWhcNMjYwMTI4MDAwMTAwWjAzMTEwLwYDVQQD EygzMGIwNWQwZjhhMzNiNDQwYzAwOTJjOTVjYjhmNDJiMmUyMjY3Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HIgHI414JqLA199/tecLOcGFZKb eqzxfENVxYYirhfCAP/VgtLG9yR+kKzO880LiFewRe06AXO8/pKGl/wdH/JPza6u B+o8noSSBs/W0RUJrppqldeF2odu6V31Vc+8vQ3/WRSWW/KRYVJKrqmfmcjGSr0y CO/+krWA2c4s4KrnTVHV6eDFMq2HFa8ph0Hizott/K6lamSfD9jROsdmKqBY12ph smon0Qy7ZxzYkLNlMHKFLInOwgXwECozdK+HsOvSugf8MheLR1lwNtQQ/IsKW6qM Hg09+Vi+bYnvdLx2hGZ0+xJllbKyjefeDXhwmIv1upSD+1f4UElFgJx00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCwXQ+KM7RAwAkslcuPQrLiJnzeMB8GA1UdIwQY MBaAFLeTpUe/C+Le7XyE/pAuM2ZXeiMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMt ZjBjMzMyNTZmYjIyLzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMtZjBjMzMyNTZmYjIy LzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXamfljr Y/20Dw7nMgLpAz0sadWLbsDEJ3051wHN/b2Hmmry9G0mbI/iwxBl/vnTk+89HjTE gq/GH2Sux115BVfYBL3xJuqVunugXKE/1a7+uYkQi54DVmPTHCmvJsfQTQ5UGx6D 4aGD8RfOmI0Bf3prUxzc6a3m9g9ojnDs9hplWJUQHimp9jix6umRgbulDLyILjmL YQnqXeh5QBwyFmXJAA01IKtuDoI2zXIRjDnQkcL5kKZSi6q400RdZDgPy0Oq0hGJ Hp49m3Q019SQ90wcHUP3BBbpUgVhgzThTiPDlBppLRjNoV3h6IsRbxK6gPHsBiU4 JZ2eC+i6B6svkA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:50 2026 by rpki-client