This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json) Hash identifier: HG3vIHP+LZp2PMRl34uWXVv0vfc9i81LfHdPc67Vwlo= Subject key identifier: 8E:D4:3F:7C:C3:35:89:F5:69:05:B3:8C:24:CD:34:DF:A8:D1:F0:C9 Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019BE0A55DB23F39194E3CD478F08A273100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft Manifest number: 17E4 Signing time: Wed 21 Jan 2026 13:01:32 +0000 Manifest this update: Wed 21 Jan 2026 13:01:32 +0000 Manifest next update: Thu 22 Jan 2026 13:01:32 +0000 Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: lYq99cXP/w59rnh2hxpkrLcvu/HtU6HPYaAvgWpERhI=) 2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=) 3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=) 4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a5:5d:b2:3f:39:19:4e:3c:d4:78:f0:8a:27:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Jan 21 13:01:32 2026 GMT Not After : Jan 22 13:01:32 2026 GMT Subject: CN=8ed43f7cc33589f56905b38c24cd34dfa8d1f0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:84:62:7b:74:67:0b:b0:20:21:a8:d9:0b: 92:b0:12:ce:a2:8e:28:3b:44:00:f5:b8:45:eb:eb: d7:c2:e1:09:ff:fb:d7:0b:59:5e:69:e0:20:7e:99: a9:f8:44:6c:29:17:e0:93:71:9c:58:cd:74:a2:ef: 2c:06:3b:c0:7f:82:2e:40:28:f7:62:99:df:25:70: 87:3d:08:9d:7f:ac:81:11:85:47:39:da:57:96:87: 20:a7:7b:40:a2:87:f8:7e:b1:42:32:ac:40:8c:b1: 4a:fd:c4:96:bb:09:13:70:59:69:66:83:73:37:53: 58:b1:4f:6e:e3:f1:35:54:ff:87:6d:4c:18:c7:8b: 6b:4b:e7:dd:c2:d0:4b:1a:38:db:a7:9e:06:9b:e6: 6d:78:85:7f:fd:09:32:11:61:7a:ec:62:9b:91:3d: 22:35:68:5f:36:15:c5:17:e5:07:c6:48:b0:ea:18: 4e:44:7c:86:6a:a3:f4:28:14:7b:69:c9:d3:62:61: 34:aa:a7:10:c1:18:df:70:45:ba:35:0f:ec:94:8c: c0:a7:af:97:74:32:37:a4:b8:c8:19:e5:df:35:8d: f5:e1:7f:5e:11:63:aa:68:40:7d:ba:2a:d9:4a:1d: e8:67:1f:4f:84:3f:14:b3:97:e1:f1:5e:47:97:fb: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:3F:7C:C3:35:89:F5:69:05:B3:8C:24:CD:34:DF:A8:D1:F0:C9 X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a0:06:3f:4b:7c:0d:cd:7c:64:ed:88:01:8b:db:7e:ad:39: 6e:59:82:0c:8b:14:02:9e:11:f5:58:4f:aa:7a:b0:db:26:26: be:b2:d5:ad:4f:dc:da:2f:2a:9c:52:05:c3:d3:3a:2c:68:f8: c0:d2:f4:21:cc:48:77:6f:4d:81:03:a4:1e:c0:ee:27:c6:b5: 52:93:2b:52:9d:7c:b4:1c:7c:80:77:4d:c5:7a:98:23:30:fa: e9:47:52:c2:9e:7a:5e:a0:90:b7:7b:51:f5:88:1c:36:5d:be: 99:df:66:74:e7:07:43:df:75:b7:03:0c:3d:75:17:66:9b:54: ef:93:79:f2:9b:a0:bf:be:19:e7:25:ae:d6:8d:00:93:37:1c: 34:e7:6c:e3:26:06:af:02:b1:94:b3:39:e6:8c:00:a7:d5:46: 9c:86:b0:64:4e:8e:42:21:4e:44:7a:4e:26:33:95:75:1f:e1: 48:b3:1d:61:28:fc:20:ab:41:f8:51:96:69:8f:0f:a4:d2:ab: 26:3e:50:8f:34:2d:35:07:3a:aa:fd:8e:57:fd:2d:25:9e:99: 62:84:f9:af:05:29:7e:12:ce:2b:89:db:34:fa:c1:e7:a0:bc: 60:d5:8f:88:09:d0:2d:e2:21:7f:a5:35:67:7c:65:2c:9c:f4: 9e:73:49:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgpV2yPzkZTjzUePCKJzEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjYwMTIxMTMwMTMyWhcNMjYwMTIyMTMwMTMyWjAzMTEwLwYDVQQD Eyg4ZWQ0M2Y3Y2MzMzU4OWY1NjkwNWIzOGMyNGNkMzRkZmE4ZDFmMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxWEYnt0ZwuwICGo2QuSsBLOoo4o O0QA9bhF6+vXwuEJ//vXC1leaeAgfpmp+ERsKRfgk3GcWM10ou8sBjvAf4IuQCj3 YpnfJXCHPQidf6yBEYVHOdpXlocgp3tAoof4frFCMqxAjLFK/cSWuwkTcFlpZoNz N1NYsU9u4/E1VP+HbUwYx4trS+fdwtBLGjjbp54Gm+ZteIV//QkyEWF67GKbkT0i NWhfNhXFF+UHxkiw6hhORHyGaqP0KBR7acnTYmE0qqcQwRjfcEW6NQ/slIzAp6+X dDI3pLjIGeXfNY314X9eEWOqaEB9uirZSh3oZx9PhD8Us5fh8V5Hl/uoXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7UP3zDNYn1aQWzjCTNNN+o0fDJMB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKAGP0t8 Dc18ZO2IAYvbfq05blmCDIsUAp4R9VhPqnqw2yYmvrLVrU/c2i8qnFIFw9M6LGj4 wNL0IcxId29NgQOkHsDuJ8a1UpMrUp18tBx8gHdNxXqYIzD66UdSwp56XqCQt3tR 9YgcNl2+md9mdOcHQ991twMMPXUXZptU75N58pugv74Z5yWu1o0AkzccNOds4yYG rwKxlLM55owAp9VGnIawZE6OQiFORHpOJjOVdR/hSLMdYSj8IKtB+FGWaY8PpNKr Jj5QjzQtNQc6qv2OV/0tJZ6ZYoT5rwUpfhLOK4nbNPrB56C8YNWPiAnQLeIhf6U1 Z3xlLJz0nnNJAA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:32 2026 by rpki-client