This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json) Hash identifier: 3iuDFDlGazGc+Z/M904pFHzAJ3y+vxcimU+7QTaUktk= Subject key identifier: 5E:2A:F7:B0:60:FF:48:7A:ED:C9:8D:C8:1B:83:A8:22:49:7A:E4:9D Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Certificate serial: 019BAD25BBA85E1E6804D4F9AD7551D8AB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 13:01:29 +0000 Manifest this update: Sun 11 Jan 2026 13:01:29 +0000 Manifest next update: Mon 12 Jan 2026 13:01:29 +0000 Files and hashes: 1: UlgMubvL0b05NPo0OYBZNNMYbpc.roa (hash: 5BRGLDe+CLca7bIM6Jp7/JjKHJiwcAuqklCH8T20ndI=) 2: WaF459Cc2uKlfeZQW71nNqM2m1o.roa (hash: INQ6UPfyYeMJRdxCsd5oJRH61VvqzRfFQEhDkUi1R2A=) 3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: WSo6U3ufvE8zuaIUBIzk7ykUza82m9eyHmcN6w60ZDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:25:bb:a8:5e:1e:68:04:d4:f9:ad:75:51:d8:ab:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Validity Not Before: Jan 11 13:01:29 2026 GMT Not After : Jan 12 13:01:29 2026 GMT Subject: CN=5e2af7b060ff487aedc98dc81b83a822497ae49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:a7:f4:2d:70:85:8a:c7:54:07:e3:4c:8a: 79:28:01:6b:d7:31:c4:cc:c3:0c:a4:33:9f:c5:14: 24:ee:46:3d:a2:2f:48:3c:3e:41:57:ad:d3:ad:e3: 23:ad:ef:dd:28:c7:0c:3c:1a:a9:b0:a4:cc:01:19: 2d:65:27:89:05:c2:11:0a:be:39:ad:b8:d5:ed:c9: d1:6f:4d:c2:f0:b3:51:32:ab:c4:99:3c:29:09:ba: 44:ea:55:f6:03:ff:2d:ea:41:8d:52:33:12:9e:c0: 5a:6b:ff:8d:4e:04:e1:68:b0:24:ac:ea:37:c8:e4: ef:f4:e4:25:4d:d0:08:9e:09:66:81:99:ce:7a:8a: 8e:c2:51:ab:1a:4e:d0:39:a7:97:ab:88:ae:90:b1: 92:e7:92:37:fc:23:83:44:c7:a0:91:13:e3:b1:1f: 86:97:dd:ec:15:6a:0f:38:52:a2:fc:67:c9:4f:5c: f7:34:dc:0e:a8:18:be:87:fc:52:0a:0b:e3:ab:fe: 52:99:41:af:97:64:22:77:6b:7c:9d:5c:a5:ac:51: ea:1c:04:ce:30:e9:80:2c:6a:c6:cf:59:fd:50:6e: 6e:8c:b7:ac:b5:e0:dc:12:9b:cf:92:f4:0c:34:69: 18:9f:b2:cc:a8:7f:de:c8:3d:b0:31:3b:fc:33:36: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:F7:B0:60:FF:48:7A:ED:C9:8D:C8:1B:83:A8:22:49:7A:E4:9D X509v3 Authority Key Identifier: keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ba:bb:61:10:90:e3:d4:0c:01:80:d0:14:9e:c3:9d:5d:7b: 37:0d:99:a1:a2:10:b0:9a:a6:f5:14:aa:55:56:80:6b:b2:69: 21:40:c3:94:a3:1f:73:a4:12:40:e9:3d:31:97:66:57:ee:02: 18:dc:8a:fc:aa:34:11:21:be:56:ac:05:07:11:57:4d:18:df: 84:55:3c:53:36:2f:bd:a3:b9:5b:3a:dc:e4:dc:22:99:85:c5: e6:70:bb:6a:0e:3a:8c:e9:e5:6e:e8:cf:b2:ee:1c:95:db:64: 33:ce:b0:09:cc:f1:73:61:96:54:1d:25:fc:42:fe:54:41:7f: 2e:44:4f:0b:27:1d:b8:7c:4f:fe:46:74:80:48:03:87:c9:63: c8:37:93:99:37:0a:82:91:c2:c1:bc:66:b2:c5:9e:22:24:b6: 35:e7:c2:b0:d6:24:1a:b3:6f:67:46:3a:bc:75:46:32:81:f6: f3:5c:79:fa:16:0d:99:5d:9d:3f:66:0d:33:57:86:de:b4:11: 74:3e:7a:2f:9c:de:83:ab:1a:17:bb:cd:12:86:f1:15:3c:33: 85:51:44:01:7e:8a:57:2f:00:6a:89:8c:15:3c:40:a1:f2:a4: 05:df:1d:ac:a6:43:d1:45:60:6b:7a:62:4e:c2:73:78:d9:a8: e1:95:c2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutJbuoXh5oBNT5rXVR2KsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk ZWU2MjUwHhcNMjYwMTExMTMwMTI5WhcNMjYwMTEyMTMwMTI5WjAzMTEwLwYDVQQD Eyg1ZTJhZjdiMDYwZmY0ODdhZWRjOThkYzgxYjgzYTgyMjQ5N2FlNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Cn9C1whYrHVAfjTIp5KAFr1zHE zMMMpDOfxRQk7kY9oi9IPD5BV63TreMjre/dKMcMPBqpsKTMARktZSeJBcIRCr45 rbjV7cnRb03C8LNRMqvEmTwpCbpE6lX2A/8t6kGNUjMSnsBaa/+NTgThaLAkrOo3 yOTv9OQlTdAInglmgZnOeoqOwlGrGk7QOaeXq4iukLGS55I3/CODRMegkRPjsR+G l93sFWoPOFKi/GfJT1z3NNwOqBi+h/xSCgvjq/5SmUGvl2Qid2t8nVylrFHqHATO MOmALGrGz1n9UG5ujLesteDcEpvPkvQMNGkYn7LMqH/eyD2wMTv8MzY/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4q97Bg/0h67cmNyBuDqCJJeuSdMB8GA1UdIwQY MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2 LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLq7YRCQ 49QMAYDQFJ7DnV17Nw2ZoaIQsJqm9RSqVVaAa7JpIUDDlKMfc6QSQOk9MZdmV+4C GNyK/Ko0ESG+VqwFBxFXTRjfhFU8UzYvvaO5Wzrc5NwimYXF5nC7ag46jOnlbujP su4cldtkM86wCczxc2GWVB0l/EL+VEF/LkRPCycduHxP/kZ0gEgDh8ljyDeTmTcK gpHCwbxmssWeIiS2NefCsNYkGrNvZ0Y6vHVGMoH281x5+hYNmV2dP2YNM1eG3rQR dD56L5zeg6saF7vNEobxFTwzhVFEAX6KVy8AaomMFTxAofKkBd8drKZD0UVga3pi TsJzeNmo4ZXCPw== -----END CERTIFICATE-----Generated at Sun Jan 11 19:55:01 2026 by rpki-client