This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json) Hash identifier: BoaYy55iP3Ggv+i8yNXaGXfo2uAOEffJ7MUC0pHsvkI= Subject key identifier: B6:89:7B:62:54:3F:90:CB:00:14:70:68:54:8D:DC:1D:B9:5D:F1:77 Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70 Certificate serial: 019BB09467A4F5B98D53B606B50483E23BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft Manifest number: 06FB Signing time: Mon 12 Jan 2026 05:01:14 +0000 Manifest this update: Mon 12 Jan 2026 05:01:14 +0000 Manifest next update: Tue 13 Jan 2026 05:01:14 +0000 Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: gSVt0GBvbYHQ+RIzyC7pYWOq8g65Mmbdersdlmu23lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:67:a4:f5:b9:8d:53:b6:06:b5:04:83:e2:3b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70 Validity Not Before: Jan 12 05:01:14 2026 GMT Not After : Jan 13 05:01:14 2026 GMT Subject: CN=b6897b62543f90cb00147068548ddc1db95df177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:d7:e0:74:df:6f:1a:a8:a3:56:3d:65:f5: ad:3c:15:5e:26:f3:36:fb:37:11:65:d6:22:59:a8: a3:6f:0b:58:bc:8c:0e:53:87:c2:c8:2e:3e:c8:f1: bc:fc:b9:54:8e:d8:f8:d6:42:e9:e8:67:c4:22:45: b0:3c:02:62:6c:53:a4:40:02:f8:da:df:00:66:dc: 5d:a8:cd:bb:03:50:b7:7f:be:7f:37:d5:c3:76:d8: 9e:8c:ed:0d:d6:6e:2d:81:e9:22:09:e3:bd:40:2f: 07:e6:25:66:db:64:3f:1e:9d:9a:db:c1:eb:f1:36: 18:e9:9f:52:b7:75:6c:4c:dc:4d:37:f9:dd:ab:eb: 28:eb:57:b9:55:7b:4a:ba:fb:65:77:d1:6d:0f:7d: 78:55:3c:df:86:95:d7:15:a5:00:8f:7f:03:5a:db: b3:fe:eb:de:d5:1e:d5:09:7f:4c:9e:62:b6:6e:8b: 6e:29:54:43:f8:11:8b:13:ae:44:09:bd:c7:b4:41: a5:6b:ca:16:d0:84:55:8f:d2:0c:93:2a:f9:b5:7e: e7:03:a7:36:7a:7f:0a:3d:dc:97:e4:f1:7e:77:71: c1:1a:60:c6:bc:38:b7:c4:32:ba:60:91:ce:b0:25: a2:fe:d7:95:82:86:61:5e:b9:85:1f:de:2c:a0:86: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:89:7B:62:54:3F:90:CB:00:14:70:68:54:8D:DC:1D:B9:5D:F1:77 X509v3 Authority Key Identifier: keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a0:2b:0e:4d:9b:48:17:5c:cf:12:f7:0b:5f:e4:cf:00:73: 64:10:16:fc:15:27:4f:ac:36:70:0d:12:00:48:4d:5c:dc:b2: d9:12:41:0b:f1:01:e7:ac:fb:6b:92:22:c4:70:00:64:01:c5: ac:40:26:74:f3:ce:0f:37:76:2e:43:e5:ad:04:a6:e0:7a:60: 86:86:f5:11:cf:a7:a4:99:d1:39:e5:69:38:ba:97:85:57:ab: 7c:bd:fb:cc:96:08:91:60:73:3e:c0:e8:85:c2:8c:b7:83:14: 2f:6d:26:b5:74:33:4d:e6:ec:f5:6b:1d:20:a9:c2:f6:c2:d0: 03:40:00:69:48:90:e4:64:f6:10:7e:2f:3a:6b:56:d3:01:03: be:c0:45:ae:32:c0:6c:80:5b:c6:93:f9:d6:56:d7:5e:87:df: 11:ed:b9:84:10:63:24:11:76:b6:fa:f7:6f:5c:dc:ff:14:20: 23:9d:9c:70:34:f8:41:b3:b2:0c:31:86:0c:41:50:53:62:03: a7:9f:f6:70:63:f9:4d:b0:e4:b8:59:a8:e6:5f:fc:91:07:96: b6:73:88:cb:5b:66:45:14:4b:2f:6f:0c:86:d4:17:de:e9:6c: 4f:6b:e9:63:95:29:c6:a9:b8:e2:0d:31:16:6d:6f:5b:85:cd: b9:0d:03:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlGek9bmNU7YGtQSD4jvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz ZTVmNzAwHhcNMjYwMTEyMDUwMTE0WhcNMjYwMTEzMDUwMTE0WjAzMTEwLwYDVQQD EyhiNjg5N2I2MjU0M2Y5MGNiMDAxNDcwNjg1NDhkZGMxZGI5NWRmMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LjX4HTfbxqoo1Y9ZfWtPBVeJvM2 +zcRZdYiWaijbwtYvIwOU4fCyC4+yPG8/LlUjtj41kLp6GfEIkWwPAJibFOkQAL4 2t8AZtxdqM27A1C3f75/N9XDdtiejO0N1m4tgekiCeO9QC8H5iVm22Q/Hp2a28Hr 8TYY6Z9St3VsTNxNN/ndq+so61e5VXtKuvtld9FtD314VTzfhpXXFaUAj38DWtuz /uve1R7VCX9MnmK2botuKVRD+BGLE65ECb3HtEGla8oW0IRVj9IMkyr5tX7nA6c2 en8KPdyX5PF+d3HBGmDGvDi3xDK6YJHOsCWi/teVgoZhXrmFH94soIZ5wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaJe2JUP5DLABRwaFSN3B25XfF3MB8GA1UdIwQY MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1 LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKArDk2b SBdczxL3C1/kzwBzZBAW/BUnT6w2cA0SAEhNXNyy2RJBC/EB56z7a5IixHAAZAHF rEAmdPPODzd2LkPlrQSm4Hpghob1Ec+npJnROeVpOLqXhVerfL37zJYIkWBzPsDo hcKMt4MUL20mtXQzTebs9WsdIKnC9sLQA0AAaUiQ5GT2EH4vOmtW0wEDvsBFrjLA bIBbxpP51lbXXoffEe25hBBjJBF2tvr3b1zc/xQgI52ccDT4QbOyDDGGDEFQU2ID p5/2cGP5TbDkuFmo5l/8kQeWtnOIy1tmRRRLL28MhtQX3ulsT2vpY5Upxqm44g0x Fm1vW4XNuQ0D1g== -----END CERTIFICATE-----Generated at Mon Jan 12 13:48:43 2026 by rpki-client