This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json) Hash identifier: uEwT2xgb7Fq2IFrx6eU1l5bBWStghDl3S4AUUmLvzA0= Subject key identifier: 2A:4D:D5:E1:26:5D:28:37:50:E9:6B:5C:FA:31:8A:EA:1B:8B:46:8B Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33 Certificate serial: 019BB05E3704D226A5533B37DC1A77749D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 04:02:03 +0000 Manifest this update: Mon 12 Jan 2026 04:02:03 +0000 Manifest next update: Tue 13 Jan 2026 04:02:03 +0000 Files and hashes: 1: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: tUx75uIqTEY/UfwiBOvzUiM6z9nGj9X/kgwbyE5As6A=) 2: vzX0LpiRwEQlpNTtMNXqGCdmemM.roa (hash: KNuGavq6SzPf6J1CyBPc8g7thzHVaBolgWDilffZwwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5e:37:04:d2:26:a5:53:3b:37:dc:1a:77:74:9d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33 Validity Not Before: Jan 12 04:02:03 2026 GMT Not After : Jan 13 04:02:03 2026 GMT Subject: CN=2a4dd5e1265d283750e96b5cfa318aea1b8b468b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:91:3c:64:79:5f:a9:08:47:f6:88:ca:87: 4c:90:23:1c:70:3d:56:3f:61:c9:61:6f:ca:a6:6e: b3:6b:3b:27:0c:2a:82:fc:3a:5b:7c:74:04:2d:08: 28:d6:54:62:cd:2d:aa:ee:23:53:71:30:23:d7:9e: b5:77:d9:d1:70:f5:76:3f:b1:db:45:9d:14:78:8a: c8:19:1a:90:44:7b:78:18:1d:84:f8:9e:98:82:b3: bf:e9:dc:9f:c1:37:7f:cc:7e:f7:bc:c2:89:ea:ea: 3b:60:34:91:52:a7:35:12:fa:a7:b5:24:5d:ef:c0: 38:15:44:53:2f:25:44:18:4d:68:86:63:01:1f:0d: c5:22:19:a1:71:68:58:db:52:86:94:53:40:f4:cc: bb:a9:4b:a3:88:31:9a:8c:f8:d9:82:e9:e3:73:1d: b3:4d:ad:4b:fd:05:4f:77:1e:2a:36:dd:ae:2f:53: 16:3d:58:38:f0:1c:48:10:d2:26:cf:0d:88:60:26: c1:18:7f:36:48:54:f1:fd:86:d6:14:24:83:87:9d: 63:ea:25:a3:a8:f1:09:1e:90:7c:b9:37:0c:4d:bb: f1:4a:fd:04:9e:56:e0:a7:3b:d5:19:fc:5b:c1:80: 52:fb:7c:88:ca:8b:f6:e8:69:cd:27:3c:7f:7d:4d: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4D:D5:E1:26:5D:28:37:50:E9:6B:5C:FA:31:8A:EA:1B:8B:46:8B X509v3 Authority Key Identifier: keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0a:4d:b1:41:17:ad:9f:b4:0a:2e:8d:0a:ec:25:5d:1b:6e: 29:d6:17:ea:9b:88:19:32:f5:91:07:eb:31:62:d0:09:26:a3: 1b:6e:1a:99:d1:26:d5:57:8f:2d:85:6e:95:36:dd:75:7d:04: d0:38:49:9c:4b:19:27:da:39:fd:fa:3c:e8:76:1d:a6:b0:60: 93:13:2d:d2:5b:ca:cf:c2:f4:20:45:8e:40:0c:96:5a:97:5c: 6f:b2:7c:fc:3f:b2:30:e3:76:d3:33:4f:8b:00:26:1e:16:f5: 56:ac:83:d5:1e:05:9f:98:d7:41:dc:2f:c4:6f:11:38:4c:00: ff:cf:8f:ee:4c:3f:05:20:ca:3d:b6:b3:b7:6b:f6:f1:63:04: c6:4f:11:95:93:ff:96:a3:e0:4a:06:4d:8d:5c:5f:dc:3a:12: e6:01:51:e9:de:f1:1b:9d:32:91:ab:76:6a:e8:0e:7d:3d:59: 3c:a5:6f:07:4d:9e:d6:1b:81:e4:c6:cf:ce:d3:15:95:04:30: f9:1f:95:15:2a:08:c2:09:b9:2c:6e:4d:f8:e9:ac:02:99:64: 69:d6:41:d4:79:c5:e2:e7:20:9a:2d:e4:69:72:5d:96:80:87: 20:3f:aa:63:24:c9:e2:12:e9:63:44:b4:df:29:1b:9a:ed:43: 09:20:06:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXjcE0ialUzs33Bp3dJ0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWRiYzQxYjExZTc3YmM0NGJkMmM3MzU1NTRiNWI0MjU4 ZDBjMzMwHhcNMjYwMTEyMDQwMjAzWhcNMjYwMTEzMDQwMjAzWjAzMTEwLwYDVQQD EygyYTRkZDVlMTI2NWQyODM3NTBlOTZiNWNmYTMxOGFlYTFiOGI0NjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6uRPGR5X6kIR/aIyodMkCMccD1W P2HJYW/Kpm6zazsnDCqC/DpbfHQELQgo1lRizS2q7iNTcTAj1561d9nRcPV2P7Hb RZ0UeIrIGRqQRHt4GB2E+J6YgrO/6dyfwTd/zH73vMKJ6uo7YDSRUqc1EvqntSRd 78A4FURTLyVEGE1ohmMBHw3FIhmhcWhY21KGlFNA9My7qUujiDGajPjZgunjcx2z Ta1L/QVPdx4qNt2uL1MWPVg48BxIENImzw2IYCbBGH82SFTx/YbWFCSDh51j6iWj qPEJHpB8uTcMTbvxSv0EnlbgpzvVGfxbwYBS+3yIyov26GnNJzx/fU1BiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpN1eEmXSg3UOlrXPoxiuobi0aLMB8GA1UdIwQY MBaAFP5dvEGxHne8RL0sc1VUtbQljQwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2wyOFFiRWVkN3hFdlN4elZWUzF0Q1dORERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wODRkMzMtOWZlZC00NjIwLWI0NmMt ODhhNjMxNDgwMjZmLzEvX2wyOFFiRWVkN3hFdlN4elZWUzF0Q1dORERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8wODRkMzMtOWZlZC00NjIwLWI0NmMtODhhNjMxNDgwMjZm LzEvX2wyOFFiRWVkN3hFdlN4elZWUzF0Q1dORERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQpNsUEX rZ+0Ci6NCuwlXRtuKdYX6puIGTL1kQfrMWLQCSajG24amdEm1VePLYVulTbddX0E 0DhJnEsZJ9o5/fo86HYdprBgkxMt0lvKz8L0IEWOQAyWWpdcb7J8/D+yMON20zNP iwAmHhb1VqyD1R4Fn5jXQdwvxG8ROEwA/8+P7kw/BSDKPbazt2v28WMExk8RlZP/ lqPgSgZNjVxf3DoS5gFR6d7xG50ykat2augOfT1ZPKVvB02e1huB5MbPztMVlQQw +R+VFSoIwgm5LG5N+OmsAplkadZB1HnF4ucgmi3kaXJdloCHID+qYyTJ4hLpY0S0 3ykbmu1DCSAGOA== -----END CERTIFICATE-----Generated at Mon Jan 12 12:31:56 2026 by rpki-client