This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json) Hash identifier: pYhmrk9kZozkhYJhy1rrC9kDrSrmQS7Cww0khz5UeaA= Subject key identifier: 82:8A:7E:99:CF:E9:99:39:63:74:90:F3:49:8E:F0:8E:DC:AC:9C:03 Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Certificate serial: 019B7D1412837A521BF032144B212A31ECFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft Manifest number: 17AC Signing time: Fri 02 Jan 2026 05:00:25 +0000 Manifest this update: Fri 02 Jan 2026 05:00:25 +0000 Manifest next update: Sat 03 Jan 2026 05:00:25 +0000 Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: 0rikYmjWy7L1uo+qrroPq3LLY1ry2kRZvT6j2/Yzrts=) 2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:14:12:83:7a:52:1b:f0:32:14:4b:21:2a:31:ec:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Validity Not Before: Jan 2 05:00:25 2026 GMT Not After : Jan 3 05:00:25 2026 GMT Subject: CN=828a7e99cfe99939637490f3498ef08edcac9c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0d:7b:2b:52:26:73:95:30:04:4b:bc:1a:18: d8:be:56:e0:66:55:9f:8d:b6:a3:03:75:56:b4:1e: 92:b6:3a:2f:3a:d1:f6:0b:45:29:d0:0b:cb:07:f1: 60:3d:f9:30:a9:e0:b5:9e:b1:d7:43:e1:ed:ed:f2: e3:a3:8b:a1:42:ac:03:12:ed:a3:8c:2d:4f:3a:31: 0a:ff:9e:a5:17:49:eb:c8:e4:45:09:a5:26:4b:99: 09:a3:3d:e0:d8:8c:f4:5b:d4:8c:0c:e3:57:96:d2: 3f:e3:ab:c5:9d:18:fa:95:15:de:a3:9e:4d:2d:35: 3f:b8:32:5f:4d:9a:a6:b2:f5:6a:0d:d6:60:e4:11: 33:0f:03:b7:a6:39:e9:6d:f7:92:31:52:86:d2:52: 9a:0c:9c:60:fa:f0:39:06:a6:78:90:9d:66:f9:eb: 4b:4c:c6:fd:58:ad:c9:16:e7:c0:b6:f9:d6:10:22: 76:88:f0:c4:77:eb:19:44:e3:45:39:7c:86:0a:d6: 9c:8e:b6:50:f5:42:20:6b:58:7d:e0:f5:9c:12:6a: 1b:83:49:cb:e3:fe:c8:0b:df:f8:08:0a:df:9e:67: 79:5f:92:14:19:71:29:b4:74:a4:eb:b0:ca:bc:09: 15:03:b2:eb:61:e0:ec:d6:88:64:87:12:58:77:3b: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:7E:99:CF:E9:99:39:63:74:90:F3:49:8E:F0:8E:DC:AC:9C:03 X509v3 Authority Key Identifier: keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b8:53:60:fe:7b:eb:b5:c8:87:c1:f2:54:46:5a:7a:39:e7: 37:82:67:05:92:29:7c:50:7a:44:f6:a6:60:7c:31:d3:42:43: 6c:bf:7c:a4:4f:ff:b7:c3:c6:9c:42:f0:c2:74:77:83:a7:a8: 94:f4:9a:d8:6f:a7:80:24:f6:4f:bc:e2:31:6a:59:54:97:f3: 82:b0:b8:0d:19:d2:bc:77:90:3e:3e:1a:2c:be:8a:d9:84:51: 67:ec:45:c9:d5:ce:a7:44:ca:c8:24:df:7f:0d:01:1a:ce:29: ed:11:a1:8d:4b:c5:3e:2f:89:94:bb:a5:82:c5:3c:ec:b8:63: 8c:b9:f8:f1:45:96:f4:4e:b0:0a:cb:21:c4:e6:93:ca:4e:30: fc:61:65:09:7b:25:41:af:60:3c:80:c2:60:7d:dc:84:0f:80: 2b:a0:db:20:0b:76:93:44:4b:e1:d4:9c:57:ac:b8:0f:bf:3c: a4:75:3b:19:1d:2e:cd:2a:2c:07:46:53:57:56:74:d3:f9:9a: 3c:3e:f5:27:20:41:e3:38:b1:c1:74:6b:55:aa:e2:f2:49:31: ab:f2:a0:87:1a:8d:6e:0a:c1:59:d1:89:99:1b:1a:9f:0d:e7: 47:b6:53:76:d0:28:6e:40:ae:05:47:13:e3:1e:ef:1b:65:08: 3c:23:a7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9FBKDelIb8DIUSyEqMez6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2 MzY0YTAwHhcNMjYwMTAyMDUwMDI1WhcNMjYwMTAzMDUwMDI1WjAzMTEwLwYDVQQD Eyg4MjhhN2U5OWNmZTk5OTM5NjM3NDkwZjM0OThlZjA4ZWRjYWM5YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g17K1Imc5UwBEu8GhjYvlbgZlWf jbajA3VWtB6StjovOtH2C0Up0AvLB/FgPfkwqeC1nrHXQ+Ht7fLjo4uhQqwDEu2j jC1POjEK/56lF0nryORFCaUmS5kJoz3g2Iz0W9SMDONXltI/46vFnRj6lRXeo55N LTU/uDJfTZqmsvVqDdZg5BEzDwO3pjnpbfeSMVKG0lKaDJxg+vA5BqZ4kJ1m+etL TMb9WK3JFufAtvnWECJ2iPDEd+sZRONFOXyGCtacjrZQ9UIga1h94PWcEmobg0nL 4/7IC9/4CArfnmd5X5IUGXEptHSk67DKvAkVA7LrYeDs1ohkhxJYdzuvyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKKfpnP6Zk5Y3SQ80mO8I7crJwDMB8GA1UdIwQY MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1 LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7hTYP57 67XIh8HyVEZaejnnN4JnBZIpfFB6RPamYHwx00JDbL98pE//t8PGnELwwnR3g6eo lPSa2G+ngCT2T7ziMWpZVJfzgrC4DRnSvHeQPj4aLL6K2YRRZ+xFydXOp0TKyCTf fw0BGs4p7RGhjUvFPi+JlLulgsU87LhjjLn48UWW9E6wCsshxOaTyk4w/GFlCXsl Qa9gPIDCYH3chA+AK6DbIAt2k0RL4dScV6y4D788pHU7GR0uzSosB0ZTV1Z00/ma PD71JyBB4zixwXRrVari8kkxq/KghxqNbgrBWdGJmRsanw3nR7ZTdtAobkCuBUcT 4x7vG2UIPCOnKQ== -----END CERTIFICATE-----Generated at Fri Jan 2 08:20:33 2026 by rpki-client