This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json) Hash identifier: 2cwfufiNYY5mSsnP7T0NhOmMGwLY67xI7szEv9eBErI= Subject key identifier: FF:F6:7A:E2:7F:CE:99:9B:4A:08:83:C8:A2:1A:FE:04:50:2D:5E:CF Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Certificate serial: 019BAEA619BA53F1E0947CF90CE6CE0DC4FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft Manifest number: 17C6 Signing time: Sun 11 Jan 2026 20:01:19 +0000 Manifest this update: Sun 11 Jan 2026 20:01:19 +0000 Manifest next update: Mon 12 Jan 2026 20:01:19 +0000 Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: AZ4s1nLk39upd0+5D/1AsW5OQcXBsi5aStJqjqEogzE=) 2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:19:ba:53:f1:e0:94:7c:f9:0c:e6:ce:0d:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Validity Not Before: Jan 11 20:01:19 2026 GMT Not After : Jan 12 20:01:19 2026 GMT Subject: CN=fff67ae27fce999b4a0883c8a21afe04502d5ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:b0:eb:f6:85:71:d9:2d:d3:12:d4:7b:79: ce:22:35:98:63:93:fa:ca:04:18:03:ed:47:c3:2f: 47:4a:c9:ef:4b:a1:2f:ba:bf:99:ab:7e:af:17:e9: 01:bb:72:42:45:5f:cc:dd:40:7b:c5:e7:76:bd:0e: 4e:ad:79:cd:94:56:1f:d2:47:19:74:7d:9a:a6:68: a4:c3:f6:d9:d2:05:8d:ff:58:dd:49:1f:d2:14:8b: 1e:8d:fe:c4:e7:4e:b3:44:ff:f8:52:fa:76:e6:56: e8:3f:ce:f5:90:03:a0:fb:ab:3a:c8:fc:e8:0e:e6: 99:1e:d3:7f:39:56:2c:da:fc:20:de:dc:36:4a:26: e5:f6:81:b8:ca:be:04:3d:e3:29:80:bd:3f:60:0a: fe:fd:14:27:66:e0:d4:f4:d6:1a:89:f2:ea:6c:9f: 39:5c:ae:ea:be:c2:1c:7a:fe:c5:3f:56:ac:bd:4f: 3b:a2:f9:9f:04:79:5e:12:c6:b1:5f:21:05:fe:e3: 66:82:f2:e4:e5:39:db:73:ea:f3:bf:27:07:dd:9f: c4:76:dd:1f:1c:d0:53:4d:0f:e7:0d:86:d7:74:cd: db:6c:85:98:24:0d:c7:83:84:14:a7:bd:79:61:a9: 3a:75:95:ed:f3:66:a6:5b:e8:59:98:f5:1f:da:04: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:7A:E2:7F:CE:99:9B:4A:08:83:C8:A2:1A:FE:04:50:2D:5E:CF X509v3 Authority Key Identifier: keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:be:cc:c9:13:c8:17:b4:f5:a9:51:f2:ac:dc:94:4a:cd: 5a:34:d8:e3:9a:79:d0:6c:3c:96:bf:40:a9:48:39:bd:72:ea: 9b:9d:bd:3f:66:65:b8:aa:2d:37:7a:6b:8a:9e:71:16:b8:4f: eb:78:ea:1d:2b:ee:39:fd:dd:fa:8b:82:dc:1a:34:fd:ce:fb: c6:2b:e7:ef:16:72:88:95:3d:41:1a:de:32:35:e7:e7:a1:04: eb:9f:ce:9a:31:d3:90:08:22:aa:27:71:1a:27:80:40:ce:b4: 30:c9:00:b5:1c:85:cf:6b:98:2f:c2:b9:e2:fa:6f:55:0e:c7: 83:fe:e5:38:01:61:fd:e7:4a:29:3c:bb:c3:8c:cb:1c:ee:b4: c8:c9:b6:91:a1:a4:af:57:d6:fe:9c:25:f1:96:c5:c7:2e:1a: 6e:fa:c9:a5:f2:70:59:f9:31:7b:4a:d8:0b:87:e1:5c:b6:d7: a4:7f:a0:90:b1:2f:fc:75:eb:eb:58:1b:53:33:5e:27:11:64: 1d:85:d7:b7:7a:45:4f:be:42:bb:cf:5f:22:9a:75:30:b1:b0: 65:dc:a5:de:ad:22:b7:81:32:d7:ea:37:67:29:73:0d:7f:13: 95:97:0d:5f:87:51:1d:6b:32:5f:4d:ae:d3:a3:29:f2:8e:ab: 13:b8:49:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuphm6U/HglHz5DObODcT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj ZWE3NzgwHhcNMjYwMTExMjAwMTE5WhcNMjYwMTEyMjAwMTE5WjAzMTEwLwYDVQQD EyhmZmY2N2FlMjdmY2U5OTliNGEwODgzYzhhMjFhZmUwNDUwMmQ1ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu6w6/aFcdkt0xLUe3nOIjWYY5P6 ygQYA+1Hwy9HSsnvS6Evur+Zq36vF+kBu3JCRV/M3UB7xed2vQ5OrXnNlFYf0kcZ dH2apmikw/bZ0gWN/1jdSR/SFIsejf7E506zRP/4Uvp25lboP871kAOg+6s6yPzo DuaZHtN/OVYs2vwg3tw2Sibl9oG4yr4EPeMpgL0/YAr+/RQnZuDU9NYaifLqbJ85 XK7qvsIcev7FP1asvU87ovmfBHleEsaxXyEF/uNmgvLk5Tnbc+rzvycH3Z/Edt0f HNBTTQ/nDYbXdM3bbIWYJA3Hg4QUp715Yak6dZXt82amW+hZmPUf2gRQbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/2euJ/zpmbSgiDyKIa/gRQLV7PMB8GA1UdIwQY MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxi+zMkT yBe09alR8qzclErNWjTY45p50Gw8lr9AqUg5vXLqm529P2ZluKotN3prip5xFrhP 63jqHSvuOf3d+ouC3Bo0/c77xivn7xZyiJU9QRreMjXn56EE65/OmjHTkAgiqidx GieAQM60MMkAtRyFz2uYL8K54vpvVQ7Hg/7lOAFh/edKKTy7w4zLHO60yMm2kaGk r1fW/pwl8ZbFxy4abvrJpfJwWfkxe0rYC4fhXLbXpH+gkLEv/HXr61gbUzNeJxFk HYXXt3pFT75Cu89fIpp1MLGwZdyl3q0it4Ey1+o3ZylzDX8TlZcNX4dRHWsyX02u 06Mp8o6rE7hJqQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:47:57 2026 by rpki-client