This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: sV+HqSlTJUhbXLuB0IF6bBEtUExIYZG1Lkw277FbipA= Subject key identifier: 07:61:5A:3D:16:D8:C0:C0:F3:51:60:39:7E:7E:84:5E:CE:8A:9B:86 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019C0179DDEFD1AF4D7028153C6F819C90D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 1148 Signing time: Tue 27 Jan 2026 22:01:29 +0000 Manifest this update: Tue 27 Jan 2026 22:01:29 +0000 Manifest next update: Wed 28 Jan 2026 22:01:29 +0000 Files and hashes: 1: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: Q6UA0/mG0Ze1xu4lu0qG+GGXiz1Sf7121Twz9bKYrFE=) 2: OqFYhVg1Efiv3mat7wl-y0IWh0M.roa (hash: oKWk1mz8YCchnuM+fj+VOQNacesKLKH9rOD1QPPd9Pk=) 3: SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa (hash: rPpkOjYvnM4DCXuhdrHJgLwjmOB3eXAXFBoPZ/CIvH8=) 4: Ug9ynSBXJvbacZUCymyFegFwsdc.roa (hash: gneEDKy7z65cw82gMUszrjpGrKuBIM6nLytArcluJiI=) 5: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (hash: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY=) 6: bv3dWtZZY2LxTtEYmYudDoB39G0.roa (hash: tzxAb1/SE90OUDmzgetWaOiWEjy0yrEkp9StYURk0/Y=) 7: cgUyX51ni1S68djJwifB7g8e6Kw.roa (hash: 3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=) 8: haTrs_5tpUyACklPcJ9fH1LslHE.roa (hash: PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=) 9: iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa (hash: btcDN1EO2IkvpjFNTIzzJGr341Fzj5AkaE+wKJ7Jt0o=) 10: uzdBbBS3T-chT93z9aFklFPXceQ.roa (hash: 2HStjG1X7LnSDu/XK+LCJICQndfda0I58UATYz414mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:79:dd:ef:d1:af:4d:70:28:15:3c:6f:81:9c:90:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Jan 27 22:01:29 2026 GMT Not After : Jan 28 22:01:29 2026 GMT Subject: CN=07615a3d16d8c0c0f35160397e7e845ece8a9b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:20:2e:41:c5:f5:b9:a3:aa:25:1e:2e:da: 3e:80:1b:0c:63:c8:3f:ea:00:9e:60:e1:79:b4:33: 58:e5:2d:74:65:5a:b6:33:53:b7:d9:03:aa:b1:5b: 4d:3d:83:e6:d0:89:9e:4c:a1:4f:09:29:e7:ab:78: 9e:d7:07:b8:27:74:93:d8:41:65:0e:21:03:8a:60: 3a:97:07:ec:8a:f4:82:ea:d4:3f:d3:6b:eb:a7:76: e7:6c:52:77:d9:38:e7:8d:fd:2f:9b:2b:2d:51:02: ca:45:c2:c5:a3:87:87:3d:44:38:82:cb:4b:c8:cc: e2:9d:97:91:58:01:1c:1f:27:e0:67:a2:06:4f:47: de:7f:36:4d:e8:65:d7:ef:67:87:dd:bf:af:8f:99: 62:d8:f1:65:2f:25:21:e7:d4:7e:52:75:ce:29:be: a2:b2:0c:2b:a6:bf:f3:36:cf:56:ad:71:70:3a:cb: 50:e3:53:c0:12:33:ee:ff:f9:69:f3:9d:43:65:e5: 43:a0:cb:90:f9:c3:b1:77:a5:a4:b9:7a:dc:5f:f2: 02:96:e6:ed:70:21:a2:10:61:6a:b4:7c:c6:bb:68: 5c:90:27:b4:7a:5e:12:ef:6a:07:6d:de:73:85:8c: 81:b1:a5:2f:51:ff:56:32:cb:96:c5:2d:a7:bd:3e: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:5A:3D:16:D8:C0:C0:F3:51:60:39:7E:7E:84:5E:CE:8A:9B:86 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:8d:a3:55:8e:d9:3e:b5:36:6b:0e:bd:ad:e5:ff:40:ad: 6b:4f:e5:06:81:07:ea:3d:70:f8:14:1d:4f:d8:20:3d:a9:ec: 9a:37:3d:8b:8c:97:d8:71:fe:53:91:01:29:30:4c:3f:8c:e3: 12:6d:c1:ad:43:38:7d:70:87:d0:29:2e:a7:84:09:2a:40:ac: 0c:7b:f4:14:dc:b7:23:03:f2:96:ab:ab:11:d9:5c:d6:5d:ec: 38:30:3d:f9:e8:8b:68:74:de:a4:0c:36:05:f6:4d:2e:c9:0a: 40:99:48:e1:58:30:fe:4c:4d:56:ec:8d:04:7b:d2:2a:2b:34: 9b:17:e5:84:88:21:4c:98:bd:39:9e:fb:29:48:b7:25:1b:bb: e8:b4:d7:16:d3:7a:3b:4c:92:d7:ca:15:8a:48:55:d3:ab:a7: 90:2f:3d:c4:47:40:63:20:6a:08:71:74:ec:42:9b:e9:92:37: f3:df:99:c9:1d:cd:0e:f2:8e:be:67:fb:e3:34:fc:4d:09:55: 68:92:e8:50:9d:1c:8c:6e:f6:c5:64:d0:8f:df:0b:41:1a:b3: 73:ba:fb:6a:53:31:54:9a:94:4e:bf:83:31:5f:96:76:e3:78: cb:98:4c:7a:a9:9d:21:f9:61:dc:ac:74:dc:93:3f:b9:04:54: a7:a0:fb:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBed3v0a9NcCgVPG+BnJDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwMTI3MjIwMTI5WhcNMjYwMTI4MjIwMTI5WjAzMTEwLwYDVQQD EygwNzYxNWEzZDE2ZDhjMGMwZjM1MTYwMzk3ZTdlODQ1ZWNlOGE5Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb0gLkHF9bmjqiUeLto+gBsMY8g/ 6gCeYOF5tDNY5S10ZVq2M1O32QOqsVtNPYPm0ImeTKFPCSnnq3ie1we4J3ST2EFl DiEDimA6lwfsivSC6tQ/02vrp3bnbFJ32Tjnjf0vmystUQLKRcLFo4eHPUQ4gstL yMzinZeRWAEcHyfgZ6IGT0fefzZN6GXX72eH3b+vj5li2PFlLyUh59R+UnXOKb6i sgwrpr/zNs9WrXFwOstQ41PAEjPu//lp851DZeVDoMuQ+cOxd6WkuXrcX/IClubt cCGiEGFqtHzGu2hckCe0el4S72oHbd5zhYyBsaUvUf9WMsuWxS2nvT6+tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdhWj0W2MDA81FgOX5+hF7OipuGMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKmNo1WO 2T61NmsOva3l/0Cta0/lBoEH6j1w+BQdT9ggPansmjc9i4yX2HH+U5EBKTBMP4zj Em3BrUM4fXCH0Ckup4QJKkCsDHv0FNy3IwPylqurEdlc1l3sODA9+eiLaHTepAw2 BfZNLskKQJlI4Vgw/kxNVuyNBHvSKis0mxflhIghTJi9OZ77KUi3JRu76LTXFtN6 O0yS18oVikhV06unkC89xEdAYyBqCHF07EKb6ZI389+ZyR3NDvKOvmf74zT8TQlV aJLoUJ0cjG72xWTQj98LQRqzc7r7alMxVJqUTr+DMV+WduN4y5hMeqmdIflh3Kx0 3JM/uQRUp6D7iQ== -----END CERTIFICATE-----Generated at Wed Jan 28 06:24:54 2026 by rpki-client