This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json) Hash identifier: kd0drAMSTndFVFRms+9+5aZGR1Lyr2AT2R+Bf0EMIog= Subject key identifier: D3:8D:13:B5:38:EF:6B:E4:45:E4:EF:CB:7B:22:18:0E:3F:7F:7D:68 Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Certificate serial: 019BAEDD10B3DB594B51F507E85CB6D35AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft Manifest number: 05C0 Signing time: Sun 11 Jan 2026 21:01:21 +0000 Manifest this update: Sun 11 Jan 2026 21:01:21 +0000 Manifest next update: Mon 12 Jan 2026 21:01:21 +0000 Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: af5g58aTITYbon2aF5u7Shgv92zwYmUcPQPsRDmyy/4=) 2: FAvhW8sWKAscHGAU3zgxhLTugZQ.roa (hash: X1WXq/o7P8HF12gEZBw3GGE/Mbe7dHMWJeZRsRBeNTQ=) 3: MIF8N-KpLT760HK_96OqYdm8Sr8.roa (hash: i6ivYqrYWRkrcljfnaVnu2kE1lYrM4nCwRHvHmb1hvA=) 4: qcFtPoETurA1PkvXMkugUfoiKGU.roa (hash: m5xsMcWMBwTe7Bg6C7QmtOlyUFNHQEv2lA3sKFUAMJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:10:b3:db:59:4b:51:f5:07:e8:5c:b6:d3:5a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac Validity Not Before: Jan 11 21:01:21 2026 GMT Not After : Jan 12 21:01:21 2026 GMT Subject: CN=d38d13b538ef6be445e4efcb7b22180e3f7f7d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:fa:62:53:ba:fc:0c:b3:1d:0a:a3:15:08: a1:3b:26:3d:f9:ae:be:0c:7e:65:70:1b:b7:a9:b5: cf:c1:d9:4d:1d:e2:29:33:47:4f:c4:46:19:39:48: 9b:88:55:6c:6f:a3:91:f9:e1:73:b8:2b:81:59:18: bf:59:0c:71:cd:d2:dc:ee:50:be:92:67:92:29:9c: 85:fc:38:6a:07:6c:6c:fd:d5:39:42:1a:92:7f:07: 51:8b:6c:10:c8:d8:9f:cc:65:68:37:14:a6:8c:78: a9:75:6d:4b:fe:95:0d:e5:b8:5f:62:98:6a:2b:3b: 65:c0:ad:95:63:a4:bf:89:cc:f8:39:4d:3a:5b:45: ce:0f:09:a3:01:26:c4:f6:09:14:f6:75:0b:6a:b9: ea:c2:61:f5:4e:74:65:69:6b:6b:53:b9:f3:6d:a8: e9:0f:3f:2a:fc:11:ed:94:27:eb:54:50:d9:e1:a7: b2:e7:7b:d6:f2:e3:97:eb:9f:cd:b6:f7:3d:d3:f8: 62:29:1d:b1:91:61:bb:e0:3f:96:1c:c1:bd:e0:c2: e8:8f:d5:b8:98:0f:40:8b:2b:c5:0c:e3:af:a9:64: c5:16:c9:2e:6c:4c:d8:ca:ae:78:ab:b1:6c:5a:da: 79:11:00:1c:2d:7c:5b:17:ef:96:47:7e:b8:ed:39: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:13:B5:38:EF:6B:E4:45:E4:EF:CB:7B:22:18:0E:3F:7F:7D:68 X509v3 Authority Key Identifier: keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:63:e3:d2:6e:ba:b2:07:88:8c:97:15:35:60:90:9c:b8: 82:0a:eb:9d:2c:86:27:62:ff:35:48:98:31:78:df:fd:53:96: a0:b9:dd:b6:8d:ab:db:42:dc:87:14:51:6d:83:03:5a:ef:27: da:e2:ee:c0:cc:67:f3:56:c2:fe:ca:0b:bd:a1:f4:67:86:b4: 84:9d:e9:e6:d9:91:b5:54:4c:d3:8d:93:48:db:31:e6:78:2c: cf:c9:9e:ed:68:b8:8b:b3:d7:00:90:5f:88:4b:5e:f6:c0:fb: 1b:02:dc:0d:f7:71:63:ca:5e:82:50:21:c6:00:36:6a:96:3a: c3:29:87:af:56:55:29:20:39:21:9a:8d:70:3a:3f:68:81:cb: 42:a0:e2:3a:d5:14:3a:7e:a6:86:90:5f:4d:de:3a:12:0a:1e: d2:59:03:bd:51:87:0f:44:5a:75:c6:43:d3:db:bd:af:38:ff: a9:3f:f3:e3:a7:a4:04:a8:6e:e3:ce:35:b8:05:a4:08:de:89: ed:98:03:b8:f1:89:49:74:0f:e5:6d:1d:4f:ca:a5:e2:99:72: a0:f9:60:a8:4f:76:17:9b:7a:1e:85:7e:e5:60:3f:3d:07:1c: 8b:d8:8e:be:bd:91:24:9c:ef:67:0f:03:a7:5e:7e:80:a1:4b: 43:7b:bf:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3RCz21lLUfUH6Fy201r4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw YzA5YWMwHhcNMjYwMTExMjEwMTIxWhcNMjYwMTEyMjEwMTIxWjAzMTEwLwYDVQQD EyhkMzhkMTNiNTM4ZWY2YmU0NDVlNGVmY2I3YjIyMTgwZTNmN2Y3ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwf6YlO6/AyzHQqjFQihOyY9+a6+ DH5lcBu3qbXPwdlNHeIpM0dPxEYZOUibiFVsb6OR+eFzuCuBWRi/WQxxzdLc7lC+ kmeSKZyF/DhqB2xs/dU5QhqSfwdRi2wQyNifzGVoNxSmjHipdW1L/pUN5bhfYphq KztlwK2VY6S/icz4OU06W0XODwmjASbE9gkU9nULarnqwmH1TnRlaWtrU7nzbajp Dz8q/BHtlCfrVFDZ4aey53vW8uOX65/Ntvc90/hiKR2xkWG74D+WHMG94MLoj9W4 mA9AiyvFDOOvqWTFFskubEzYyq54q7FsWtp5EQAcLXxbF++WR3647TkMtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNONE7U472vkReTvy3siGA4/f31oMB8GA1UdIwQY MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0 LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTdj49Ju urIHiIyXFTVgkJy4ggrrnSyGJ2L/NUiYMXjf/VOWoLndto2r20LchxRRbYMDWu8n 2uLuwMxn81bC/soLvaH0Z4a0hJ3p5tmRtVRM042TSNsx5ngsz8me7Wi4i7PXAJBf iEte9sD7GwLcDfdxY8peglAhxgA2apY6wymHr1ZVKSA5IZqNcDo/aIHLQqDiOtUU On6mhpBfTd46Egoe0lkDvVGHD0RadcZD09u9rzj/qT/z46ekBKhu4841uAWkCN6J 7ZgDuPGJSXQP5W0dT8ql4plyoPlgqE92F5t6HoV+5WA/PQcci9iOvr2RJJzvZw8D p15+gKFLQ3u/mw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:36:24 2026 by rpki-client