This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json) Hash identifier: LHxvMJY5gcwy0ejKTZCX4G/LS9vIjVYJpph09m5V3Fo= Subject key identifier: 71:5B:E7:10:C0:C7:66:80:3D:EE:25:5D:08:E8:10:B6:E3:D5:9F:C7 Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f Certificate serial: 019BB1DE1020937E6DE3ABB2F65158C5B682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft Manifest number: 14D5 Signing time: Mon 12 Jan 2026 11:01:18 +0000 Manifest this update: Mon 12 Jan 2026 11:01:18 +0000 Manifest next update: Tue 13 Jan 2026 11:01:18 +0000 Files and hashes: 1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=) 2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: 4x/eyQdypTUMQBbmG3IrctB9WVDazq8z1Yr/nCbTlW4=) 3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:de:10:20:93:7e:6d:e3:ab:b2:f6:51:58:c5:b6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f Validity Not Before: Jan 12 11:01:18 2026 GMT Not After : Jan 13 11:01:18 2026 GMT Subject: CN=715be710c0c766803dee255d08e810b6e3d59fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:60:19:76:1a:74:30:44:9d:51:d7:38:4f: 4b:63:65:41:ce:fa:06:35:28:00:07:92:03:e1:c4: 36:1f:c0:dd:bf:c3:9a:d3:15:b6:07:be:1e:41:42: e1:70:2e:d6:30:2d:e4:35:5f:2a:e1:67:58:c9:ad: 91:fb:b7:18:24:e4:c9:e9:0a:e5:69:77:94:c3:53: 5f:e0:d9:c8:d8:e9:3b:4f:34:83:bf:46:59:2c:0f: 20:82:20:73:d5:64:1e:2f:78:d9:46:67:2c:bc:74: 06:18:df:e8:67:61:e8:d6:71:92:89:8f:46:ea:22: 57:a4:73:42:32:18:5b:8d:6a:c6:9b:12:50:55:9d: fe:78:fd:b6:1a:f9:a2:f5:eb:51:6e:63:1d:25:6f: 9e:e9:88:1a:52:f2:78:af:11:9b:a7:15:db:c1:f5: 52:18:f3:df:f4:24:7a:60:2a:ad:e3:84:35:81:46: a3:71:3b:8d:34:69:c8:61:2e:73:15:5f:bc:2d:51: cb:02:e9:bd:83:b8:90:03:c7:64:8e:47:b0:9f:4e: 29:01:83:59:ec:a9:15:d7:24:66:d4:43:a0:4f:bc: 4d:0e:5a:ed:76:87:15:96:7a:f3:65:58:49:8a:a7: 5b:0e:8e:5e:b0:47:c5:3f:f5:43:3b:e4:21:94:b6: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:E7:10:C0:C7:66:80:3D:EE:25:5D:08:E8:10:B6:E3:D5:9F:C7 X509v3 Authority Key Identifier: keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:dd:27:4b:ce:78:7f:4b:6c:f6:f5:03:3d:ee:1e:28:82:60: 24:8e:0d:33:f3:77:54:d9:69:3c:90:7e:a1:c6:82:56:bc:88: 5c:2b:1e:af:e0:45:df:7e:6a:9b:c8:df:74:db:11:40:36:43: 13:7d:69:aa:de:69:2d:15:ca:fe:69:a8:f0:02:33:3d:cd:6d: 4e:b4:14:44:92:1b:24:88:1e:db:b7:ee:9a:b0:64:14:c7:05: 05:ee:87:ee:49:16:c1:4d:ae:c8:8a:6a:b4:08:f2:7f:c5:e7: 0f:d3:11:e5:e1:44:58:00:79:02:43:89:3e:5c:31:e4:5c:99: d8:06:70:6f:f8:4e:df:45:f6:8d:9d:f3:83:cf:6a:0b:66:f2: f7:ad:8f:8b:3a:e2:60:7a:76:8c:41:a3:ab:17:a2:92:dc:9b: 21:c3:65:dc:e8:0a:62:8b:76:26:04:dc:9b:6d:67:d3:77:5d: bf:bc:41:40:83:1d:d8:8f:c2:d9:9e:16:61:54:7f:59:fd:95: 39:2f:ca:17:1d:5e:bf:58:c5:5e:6d:ab:e7:62:ba:30:42:98: 0b:97:50:85:01:93:6d:09:c8:b7:d2:bf:c7:a0:5c:39:60:67: 77:61:e8:26:d5:df:18:e2:ca:43:9f:fd:41:ed:04:cc:66:db: 63:0e:cf:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZux3hAgk35t46uy9lFYxbaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3 ZThlM2YwHhcNMjYwMTEyMTEwMTE4WhcNMjYwMTEzMTEwMTE4WjAzMTEwLwYDVQQD Eyg3MTViZTcxMGMwYzc2NjgwM2RlZTI1NWQwOGU4MTBiNmUzZDU5ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1JgGXYadDBEnVHXOE9LY2VBzvoG NSgAB5ID4cQ2H8Ddv8Oa0xW2B74eQULhcC7WMC3kNV8q4WdYya2R+7cYJOTJ6Qrl aXeUw1Nf4NnI2Ok7TzSDv0ZZLA8ggiBz1WQeL3jZRmcsvHQGGN/oZ2Ho1nGSiY9G 6iJXpHNCMhhbjWrGmxJQVZ3+eP22Gvmi9etRbmMdJW+e6YgaUvJ4rxGbpxXbwfVS GPPf9CR6YCqt44Q1gUajcTuNNGnIYS5zFV+8LVHLAum9g7iQA8dkjkewn04pAYNZ 7KkV1yRm1EOgT7xNDlrtdocVlnrzZVhJiqdbDo5esEfFP/VDO+QhlLaI4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFb5xDAx2aAPe4lXQjoELbj1Z/HMB8GA1UdIwQY MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV90nS854 f0ts9vUDPe4eKIJgJI4NM/N3VNlpPJB+ocaCVryIXCser+BF335qm8jfdNsRQDZD E31pqt5pLRXK/mmo8AIzPc1tTrQURJIbJIge27fumrBkFMcFBe6H7kkWwU2uyIpq tAjyf8XnD9MR5eFEWAB5AkOJPlwx5FyZ2AZwb/hO30X2jZ3zg89qC2by962Pizri YHp2jEGjqxeiktybIcNl3OgKYot2JgTcm21n03ddv7xBQIMd2I/C2Z4WYVR/Wf2V OS/KFx1ev1jFXm2r52K6MEKYC5dQhQGTbQnIt9K/x6BcOWBnd2HoJtXfGOLKQ5/9 Qe0EzGbbYw7P0A== -----END CERTIFICATE-----Generated at Mon Jan 12 15:16:43 2026 by rpki-client