This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json) Hash identifier: yEyElfGyA340d95271rTQ6dP9+KnZzhprmJu/GBPDNE= Subject key identifier: 24:95:D2:3D:02:02:FB:72:B6:F7:0E:7B:9E:66:2E:A1:8C:72:A2:A3 Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Certificate serial: 019BB3957CECB1A514FC40B87EA3051708D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft Manifest number: 0F46 Signing time: Mon 12 Jan 2026 19:01:16 +0000 Manifest this update: Mon 12 Jan 2026 19:01:16 +0000 Manifest next update: Tue 13 Jan 2026 19:01:16 +0000 Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: YAor6BH/na+6+G/JlDmBvSD7w+HMgAm0O4AJuj3iA3g=) 2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:7c:ec:b1:a5:14:fc:40:b8:7e:a3:05:17:08:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Validity Not Before: Jan 12 19:01:16 2026 GMT Not After : Jan 13 19:01:16 2026 GMT Subject: CN=2495d23d0202fb72b6f70e7b9e662ea18c72a2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:c3:3e:5a:33:a7:04:fe:ef:49:fa:e1:c9: 46:af:ff:69:89:51:86:d2:6a:e2:9d:b4:3d:50:be: 32:8f:b7:72:41:2d:bd:37:69:ca:34:0b:25:42:fe: 8c:35:0d:c0:49:b7:cc:6c:72:7d:dc:6f:b0:c6:af: 66:eb:05:61:5a:44:e5:be:e6:9a:2a:ea:f4:f5:c6: 57:f4:2b:45:a0:34:d6:0c:a7:40:15:c3:8f:f3:f4: 71:c1:75:f6:2a:9e:a2:09:87:c5:90:ee:94:27:a1: fd:4f:6c:98:65:15:25:3b:ae:f2:4d:6d:3d:a6:d1: 02:5c:74:9f:9e:74:d4:89:0d:0d:2c:0a:55:3a:dd: 1a:9e:05:da:8d:c3:4c:29:d5:08:bd:40:1e:32:0a: 41:26:30:1b:6c:c9:4a:f7:8b:a7:58:53:a0:5f:eb: 59:6c:3c:89:46:00:2d:c0:44:84:b5:80:6b:14:c4: 7a:e0:22:8a:90:f0:00:a6:b4:bb:84:bf:5b:f1:e3: 52:b8:0d:a0:9a:72:7a:6b:2c:c6:71:9c:a9:34:5f: cd:76:37:bf:7f:64:b8:f5:f9:9c:9d:11:a5:53:60: 40:62:85:6b:a5:d5:62:9a:38:b4:70:f5:bf:1c:0e: 7d:78:ff:e7:6f:9e:43:2c:ea:ad:e5:e1:c9:50:9a: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:D2:3D:02:02:FB:72:B6:F7:0E:7B:9E:66:2E:A1:8C:72:A2:A3 X509v3 Authority Key Identifier: keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5a:fd:95:88:0c:57:b4:31:67:de:e8:9f:5b:ac:8a:29:51: f1:ce:12:a8:37:e5:7f:c2:7b:36:e0:11:6e:df:e2:9a:79:77: 1a:ff:d9:0f:a2:76:8c:4d:da:27:52:a1:62:a4:cd:c7:e4:30: 79:6b:61:30:16:b0:1b:71:0e:28:83:6d:c4:e3:1e:dc:f5:ef: 73:9d:36:00:9b:90:b3:22:58:67:ed:b4:de:39:44:db:46:5a: e0:4f:bc:6b:63:cb:3e:5b:ec:87:49:b0:78:f3:eb:be:86:b2: e9:93:e9:b7:7c:e2:bc:c7:91:49:45:a1:ce:ab:25:15:69:3b: 2b:9a:fa:40:e6:1a:90:d3:55:3e:f6:00:b5:aa:1c:bc:0a:7a: 9f:c6:09:6c:06:0f:cc:0d:23:77:cc:ef:86:f8:45:c2:2a:44: 69:07:ad:ff:b6:5f:b8:35:1b:f5:57:5e:0e:e6:35:79:22:ba: f7:b1:85:97:f2:df:88:89:f3:f9:ed:a6:92:b0:82:c9:c1:2e: ea:31:00:c8:9b:fb:81:70:fd:1c:09:9e:90:be:ec:4a:c5:50: 27:e7:48:f5:e0:14:2c:c3:6d:7e:89:8c:6d:a5:41:20:0a:b1: d3:ef:78:9c:fb:62:a8:e9:4a:a3:18:e0:cf:a7:6c:ed:83:36: ec:59:cf:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlXzssaUU/EC4fqMFFwjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODcxZDhmMmMyNmVhNzFhZTVjMTNjODQ1NGE3YmQzMTg3 MTkxODQwHhcNMjYwMTEyMTkwMTE2WhcNMjYwMTEzMTkwMTE2WjAzMTEwLwYDVQQD EygyNDk1ZDIzZDAyMDJmYjcyYjZmNzBlN2I5ZTY2MmVhMThjNzJhMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOHDPlozpwT+70n64clGr/9piVGG 0mrinbQ9UL4yj7dyQS29N2nKNAslQv6MNQ3ASbfMbHJ93G+wxq9m6wVhWkTlvuaa Kur09cZX9CtFoDTWDKdAFcOP8/RxwXX2Kp6iCYfFkO6UJ6H9T2yYZRUlO67yTW09 ptECXHSfnnTUiQ0NLApVOt0angXajcNMKdUIvUAeMgpBJjAbbMlK94unWFOgX+tZ bDyJRgAtwESEtYBrFMR64CKKkPAAprS7hL9b8eNSuA2gmnJ6ayzGcZypNF/Ndje/ f2S49fmcnRGlU2BAYoVrpdVimji0cPW/HA59eP/nb55DLOqt5eHJUJqkyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSV0j0CAvtytvcOe55mLqGMcqKjMB8GA1UdIwQY MBaAFOSHHY8sJupxrlwTyEVKe9MYcZGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3Nzgt ZjkwNWE4M2JkMzg5LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3NzgtZjkwNWE4M2JkMzg5 LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFr9lYgM V7QxZ97on1usiilR8c4SqDflf8J7NuARbt/imnl3Gv/ZD6J2jE3aJ1KhYqTNx+Qw eWthMBawG3EOKINtxOMe3PXvc502AJuQsyJYZ+203jlE20Za4E+8a2PLPlvsh0mw ePPrvoay6ZPpt3zivMeRSUWhzqslFWk7K5r6QOYakNNVPvYAtaocvAp6n8YJbAYP zA0jd8zvhvhFwipEaQet/7ZfuDUb9VdeDuY1eSK697GFl/LfiInz+e2mkrCCycEu 6jEAyJv7gXD9HAmekL7sSsVQJ+dI9eAULMNtfomMbaVBIAqx0+94nPtiqOlKoxjg z6ds7YM27FnPLw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:30:57 2026 by rpki-client