This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json) Hash identifier: vBenJdgl2jsYQ8V32zqTtCvrMQBByTq7lLc2ZBG8d/c= Subject key identifier: 05:72:CE:7F:40:79:08:D6:51:4C:A7:1E:66:04:CD:6C:92:AE:7E:D5 Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Certificate serial: 019BAD5C5158E174AE72D9EA4EE9375F33D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft Manifest number: 0277 Signing time: Sun 11 Jan 2026 14:01:06 +0000 Manifest this update: Sun 11 Jan 2026 14:01:06 +0000 Manifest next update: Mon 12 Jan 2026 14:01:06 +0000 Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: L5/8OO9VoUPX7+Mq8yt/KItFzmFs0pACZok/0mzhvec=) 2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:51:58:e1:74:ae:72:d9:ea:4e:e9:37:5f:33:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Validity Not Before: Jan 11 14:01:06 2026 GMT Not After : Jan 12 14:01:06 2026 GMT Subject: CN=0572ce7f407908d6514ca71e6604cd6c92ae7ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:2f:5c:c8:76:73:40:1d:79:fb:cc:64:64: b7:2d:3f:3f:20:0f:79:f8:8f:86:42:49:59:d1:92: 98:7c:c0:5a:41:06:34:2e:53:9a:6a:95:7d:ed:b0: 67:3b:98:d4:d9:7c:a0:2d:79:a2:e3:03:79:62:89: b9:d6:6f:ac:9e:56:de:30:76:f2:5e:1f:35:4e:5d: 92:b1:15:9d:45:68:b6:28:61:f7:7a:3d:39:bb:cf: ee:03:6e:90:38:66:5f:5a:da:47:66:1f:b3:5d:5c: 28:11:be:5c:57:b0:b6:5f:5c:9f:0c:5d:5f:99:68: 6b:78:8d:4b:5e:4a:d4:67:eb:a3:6a:22:11:e0:d8: ec:e2:cf:8c:50:23:58:ea:b9:2a:c1:12:8d:8b:aa: e8:43:96:3f:c9:65:8c:94:e8:55:af:8f:9c:0e:56: 98:f9:59:6c:0b:a3:e6:68:1d:d4:d5:8f:0e:8d:b2: 76:7e:08:30:0e:33:9b:45:a3:c9:96:88:5e:31:4e: 82:2d:a4:73:03:ff:38:8b:6f:ec:3b:ed:58:77:d0: f4:0a:bc:69:a6:05:0f:a6:46:dc:6f:26:24:2a:92: da:a5:e6:5a:1b:ee:ab:8d:13:ce:86:5e:af:ef:94: b3:80:9c:ab:6e:b3:86:1d:3d:7b:f1:36:40:33:f8: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:CE:7F:40:79:08:D6:51:4C:A7:1E:66:04:CD:6C:92:AE:7E:D5 X509v3 Authority Key Identifier: keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:52:b8:c1:26:f5:a2:37:d4:96:2f:64:89:ca:90:c2:46:6e: cd:d1:86:39:28:76:c0:c7:b5:f1:09:5a:64:3c:52:ee:78:fc: db:0e:46:2c:d3:46:13:e1:74:46:a9:64:b0:cc:9d:0d:16:01: 39:61:92:7e:c5:de:e8:3e:c9:ac:51:90:d8:4c:f0:77:e5:d8: da:d2:b8:86:6a:cb:db:8f:91:10:0b:a2:fb:95:04:5b:53:26: 78:f3:fd:32:96:30:58:15:41:cc:75:04:5c:d7:86:05:60:3c: 82:78:a7:3d:2c:72:2e:12:d7:fb:e3:f7:e8:9e:62:0f:c1:52: 10:3b:36:7e:7f:bd:5c:d1:fb:29:d6:85:dd:68:b0:52:53:f6: 70:e7:21:fd:d0:ba:58:40:f9:cb:4a:07:10:d1:d3:1b:c9:4a: 0a:7c:65:77:a0:ad:5d:29:81:e8:f1:30:ee:c1:be:fe:15:2d: 57:47:c4:f1:6e:35:09:bb:d3:34:dd:e9:14:4a:9a:c4:e8:65: 32:85:98:23:e6:3b:4f:db:78:6b:5f:36:cc:b9:0a:4c:ec:99: 87:9e:a8:87:20:a0:53:27:4a:a1:a1:0a:f1:6e:24:5a:72:2e: 3a:22:aa:7e:57:15:33:e3:38:e7:0f:07:f8:2b:30:4f:4a:2e: e7:d4:05:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXFFY4XSuctnqTuk3XzPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTZjN2IyMDE5NTYwN2YyN2IxM2Q4OGY5MmJmMWQwZWIz OGU2MGYwHhcNMjYwMTExMTQwMTA2WhcNMjYwMTEyMTQwMTA2WjAzMTEwLwYDVQQD EygwNTcyY2U3ZjQwNzkwOGQ2NTE0Y2E3MWU2NjA0Y2Q2YzkyYWU3ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/0vXMh2c0AdefvMZGS3LT8/IA95 +I+GQklZ0ZKYfMBaQQY0LlOaapV97bBnO5jU2XygLXmi4wN5Yom51m+snlbeMHby Xh81Tl2SsRWdRWi2KGH3ej05u8/uA26QOGZfWtpHZh+zXVwoEb5cV7C2X1yfDF1f mWhreI1LXkrUZ+ujaiIR4Njs4s+MUCNY6rkqwRKNi6roQ5Y/yWWMlOhVr4+cDlaY +VlsC6PmaB3U1Y8OjbJ2fggwDjObRaPJloheMU6CLaRzA/84i2/sO+1Yd9D0Crxp pgUPpkbcbyYkKpLapeZaG+6rjRPOhl6v75SzgJyrbrOGHT178TZAM/ig+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVyzn9AeQjWUUynHmYEzWySrn7VMB8GA1UdIwQY MBaAFOYWx7IBlWB/J7E9iPkr8dDrOOYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDkt NWNkMDA0ZDZlMzY2LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDktNWNkMDA0ZDZlMzY2 LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVK4wSb1 ojfUli9kicqQwkZuzdGGOSh2wMe18QlaZDxS7nj82w5GLNNGE+F0RqlksMydDRYB OWGSfsXe6D7JrFGQ2Ezwd+XY2tK4hmrL24+REAui+5UEW1MmePP9MpYwWBVBzHUE XNeGBWA8gninPSxyLhLX++P36J5iD8FSEDs2fn+9XNH7KdaF3WiwUlP2cOch/dC6 WED5y0oHENHTG8lKCnxld6CtXSmB6PEw7sG+/hUtV0fE8W41CbvTNN3pFEqaxOhl MoWYI+Y7T9t4a182zLkKTOyZh56ohyCgUydKoaEK8W4kWnIuOiKqflcVM+M45w8H +CswT0ou59QFLQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:36:24 2026 by rpki-client