This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json) Hash identifier: 8KJO3yKD6aXVRA6UZOr1po6c9sEO6Hu5BWgYEgMXExQ= Subject key identifier: 7F:4B:64:D1:45:95:8B:5D:7C:00:48:8D:D6:39:76:9F:7C:61:3C:D4 Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710 Certificate serial: 019BFA64B1E3E1CB90D470264B8FBDF5E9F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft Manifest number: 04CE Signing time: Mon 26 Jan 2026 13:01:01 +0000 Manifest this update: Mon 26 Jan 2026 13:01:01 +0000 Manifest next update: Tue 27 Jan 2026 13:01:01 +0000 Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: LQ2oLrnkvfpQvTIuzfrzLG/0J/LNzC0vv+bX4fEOhAo=) 2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:b1:e3:e1:cb:90:d4:70:26:4b:8f:bd:f5:e9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710 Validity Not Before: Jan 26 13:01:01 2026 GMT Not After : Jan 27 13:01:01 2026 GMT Subject: CN=7f4b64d145958b5d7c00488dd639769f7c613cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:5c:ee:ed:e0:c0:1c:8e:58:0a:03:79:54: 3c:0d:36:8a:24:87:48:ca:60:c9:61:c3:d6:9f:10: e8:e6:84:cd:5f:e4:36:7a:3d:86:76:17:32:cf:7c: 0f:b7:80:fe:d7:81:69:26:91:3c:a4:fa:6c:3d:88: a2:2e:50:a0:3b:6c:cd:08:0a:f0:69:66:f8:34:1a: 1d:1c:87:4c:dc:67:ec:69:a5:23:05:a4:d9:d6:95: f1:29:46:a7:9b:3c:e6:c6:ac:b9:b9:37:32:6d:34: 45:2e:4c:df:73:5e:ef:26:db:44:ca:5f:fd:cc:7a: 0b:cf:1c:c5:31:81:81:ec:3a:13:6f:12:f7:2d:b6: 2e:24:c2:64:a0:dd:55:0a:8b:8b:e8:63:3e:08:e6: a1:7e:11:56:1d:98:74:5d:14:86:dd:db:98:65:2b: c5:1c:d6:70:70:a3:3d:21:7a:2a:b1:ca:f9:e1:bc: ec:4f:0c:e6:c8:98:be:71:e4:b6:49:e4:26:74:c3: a8:b5:b4:07:ae:78:03:98:07:1c:6a:86:ec:62:cb: c6:6d:96:87:f4:c3:73:3e:af:2d:7b:b5:b0:1e:35: f0:74:a8:f9:73:b4:03:26:d9:9e:7b:8f:31:95:d8: d9:f5:47:e9:19:77:7b:cc:18:9a:bf:85:24:29:62: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4B:64:D1:45:95:8B:5D:7C:00:48:8D:D6:39:76:9F:7C:61:3C:D4 X509v3 Authority Key Identifier: keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d5:62:11:6c:68:e9:dd:9e:fa:49:cd:3e:fb:db:78:04:82: 81:21:6b:24:c7:0e:ba:9c:ed:e1:27:38:50:1f:4b:51:2c:f4: 81:2f:6e:f0:4a:31:9a:96:b8:af:9f:23:e7:0d:9f:89:d3:e2: 65:ae:fb:08:6d:aa:7f:ca:ae:1a:84:7c:b6:66:c0:dd:14:a7: f0:4e:2c:2b:3a:95:67:3e:fd:d9:9f:58:a7:04:07:9c:12:9d: f5:2f:51:39:a4:57:d5:02:4f:b0:5b:85:c7:2f:39:5a:80:6b: ea:d8:c2:df:2e:a9:ba:e0:b4:1c:67:09:cf:ac:b9:87:2c:aa: 32:f3:6c:22:55:40:50:02:81:0d:5a:70:34:6f:1d:be:b5:8f: 6f:c1:76:94:1a:b0:75:a9:04:bb:f8:b6:02:7f:c1:bb:dc:f3: 1b:2b:59:f6:13:a6:1b:7d:80:8b:69:65:d8:78:93:b7:ff:c7: 13:18:bd:e0:54:2c:99:e3:84:8f:5d:00:c2:f7:a9:28:69:93: fa:28:21:cd:32:2a:e2:2e:c3:4d:80:19:04:9f:78:17:a6:46: 5c:ee:0c:3d:f4:f5:bf:6d:e3:21:c9:f2:84:80:af:fe:95:1a: 50:f3:64:0f:f3:39:9c:fe:60:44:8b:bd:80:95:c1:3f:76:f8: 64:24:cd:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZLHj4cuQ1HAmS4+99en3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5 YmQ3MTAwHhcNMjYwMTI2MTMwMTAxWhcNMjYwMTI3MTMwMTAxWjAzMTEwLwYDVQQD Eyg3ZjRiNjRkMTQ1OTU4YjVkN2MwMDQ4OGRkNjM5NzY5ZjdjNjEzY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcRc7u3gwByOWAoDeVQ8DTaKJIdI ymDJYcPWnxDo5oTNX+Q2ej2Gdhcyz3wPt4D+14FpJpE8pPpsPYiiLlCgO2zNCArw aWb4NBodHIdM3GfsaaUjBaTZ1pXxKUanmzzmxqy5uTcybTRFLkzfc17vJttEyl/9 zHoLzxzFMYGB7DoTbxL3LbYuJMJkoN1VCouL6GM+COahfhFWHZh0XRSG3duYZSvF HNZwcKM9IXoqscr54bzsTwzmyJi+ceS2SeQmdMOotbQHrngDmAccaobsYsvGbZaH 9MNzPq8te7WwHjXwdKj5c7QDJtmee48xldjZ9UfpGXd7zBiav4UkKWKoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9LZNFFlYtdfABIjdY5dp98YTzUMB8GA1UdIwQY MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1 LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdViEWxo 6d2e+knNPvvbeASCgSFrJMcOupzt4Sc4UB9LUSz0gS9u8Eoxmpa4r58j5w2fidPi Za77CG2qf8quGoR8tmbA3RSn8E4sKzqVZz792Z9YpwQHnBKd9S9ROaRX1QJPsFuF xy85WoBr6tjC3y6puuC0HGcJz6y5hyyqMvNsIlVAUAKBDVpwNG8dvrWPb8F2lBqw dakEu/i2An/Bu9zzGytZ9hOmG32Ai2ll2HiTt//HExi94FQsmeOEj10AwvepKGmT +ighzTIq4i7DTYAZBJ94F6ZGXO4MPfT1v23jIcnyhICv/pUaUPNkD/M5nP5gRIu9 gJXBP3b4ZCTNvA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:18 2026 by rpki-client