This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft File: 5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json) Hash identifier: GKQ//4mhkTr0HHm4+SUjsPSxfP3YUEOLns3GUJItG7w= Subject key identifier: 7D:81:12:86:B4:B6:1A:29:12:8B:41:CE:3A:D0:77:82:1A:04:4E:05 Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70 Certificate issuer: /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370 Certificate serial: 019C43229914F931C26EE9B7744A7ECFBBC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft Manifest number: 122B Signing time: Mon 09 Feb 2026 16:01:06 +0000 Manifest this update: Mon 09 Feb 2026 16:01:06 +0000 Manifest next update: Tue 10 Feb 2026 16:01:06 +0000 Files and hashes: 1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: 5tbtW0Z58+isoU/QKL6WrgotMJjY+UQAbXMOPTaLAyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:99:14:f9:31:c2:6e:e9:b7:74:4a:7e:cf:bb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370 Validity Not Before: Feb 9 16:01:06 2026 GMT Not After : Feb 10 16:01:06 2026 GMT Subject: CN=7d811286b4b61a29128b41ce3ad077821a044e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:cc:5e:4e:d6:56:48:7f:f6:30:97:bf:5d: 35:c1:e3:34:03:64:25:07:61:47:69:f4:c0:d3:08: bd:5a:e7:10:b2:88:83:3f:27:85:14:8d:bc:c9:73: 6e:0d:53:62:71:6a:c1:a1:5f:35:94:48:85:f7:59: 0c:4b:a2:b9:f7:bd:40:2d:04:30:85:55:bc:55:f3: 9c:42:d8:d3:16:d3:cd:e2:29:f8:d7:ea:4d:81:40: b0:6e:07:35:e8:40:04:3e:62:70:75:7f:63:d2:3a: 03:4e:ac:b8:03:c9:fc:e1:7c:03:d6:93:25:02:85: c3:c8:08:1a:0f:d1:5d:db:57:71:3b:d7:74:0e:fb: 71:21:77:82:68:15:b3:4f:ce:81:d0:8c:74:b3:b9: f3:7e:7f:a3:7f:55:36:6a:8e:6e:ab:be:62:0a:45: 9f:50:44:02:13:bc:12:e6:36:04:0f:2c:f3:17:59: f5:b9:62:d4:ed:db:b4:ee:aa:8b:a6:42:5b:e7:a9: 8f:36:7c:36:6a:e7:e0:1d:13:de:3d:23:51:97:11: 2f:0f:e8:92:6f:e9:53:16:53:b4:2e:4e:22:63:b9: b6:0f:02:97:81:fb:d8:73:c9:c4:8f:51:3f:b5:08: ee:e0:cf:fa:99:77:22:af:e2:5d:f3:74:e4:18:5e: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:12:86:B4:B6:1A:29:12:8B:41:CE:3A:D0:77:82:1A:04:4E:05 X509v3 Authority Key Identifier: keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8b:c5:ec:9a:c7:d3:fd:0f:8c:5d:29:be:44:b3:20:87:91: 24:ec:61:b6:ea:28:4c:5a:6e:a6:1b:a5:de:c7:cb:2b:80:46: 80:35:b8:a9:7f:25:e0:81:c2:25:03:a5:4e:7f:84:03:92:e4: df:f1:32:8e:bd:0f:ad:89:82:ea:55:5f:50:5d:3d:fd:b4:2f: e7:03:78:6b:9e:94:d0:74:5e:04:c3:be:8a:0e:c0:97:26:e2: e5:32:c8:9f:8e:d8:eb:33:c4:61:4b:58:90:6f:22:ca:d8:69: df:5a:95:71:5f:d9:79:74:d5:38:b4:5a:dc:f9:81:4a:8c:3b: 96:63:56:60:5b:07:ec:dd:2d:bd:ef:89:6c:14:59:f4:98:d6: 55:5d:8e:7f:24:33:63:9c:ef:19:a0:71:42:69:15:ec:3a:9e: fd:78:31:bb:e5:62:84:11:15:1f:53:5b:d0:6a:66:fc:6a:e9: 05:e3:ad:3c:2f:21:32:3a:0e:39:7f:81:fc:44:29:1c:2b:f5: 31:78:6d:9c:f1:27:db:37:9a:8e:76:6c:a5:41:05:0f:8a:d5: 22:1d:99:b7:63:42:f3:cb:11:6b:14:15:ea:f7:7a:5f:ba:55: 01:69:c9:3e:28:ba:66:a6:ff:3a:ae:76:41:ae:2d:0a:70:92: da:43:f8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpkU+THCbum3dEp+z7vHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZWZkMTg2OWVlYWZlNmY5ZjAzY2IzNDE4Njg5YmNiMGM2 OTEzNzAwHhcNMjYwMjA5MTYwMTA2WhcNMjYwMjEwMTYwMTA2WjAzMTEwLwYDVQQD Eyg3ZDgxMTI4NmI0YjYxYTI5MTI4YjQxY2UzYWQwNzc4MjFhMDQ0ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jMXk7WVkh/9jCXv101weM0A2Ql B2FHafTA0wi9WucQsoiDPyeFFI28yXNuDVNicWrBoV81lEiF91kMS6K5971ALQQw hVW8VfOcQtjTFtPN4in41+pNgUCwbgc16EAEPmJwdX9j0joDTqy4A8n84XwD1pMl AoXDyAgaD9Fd21dxO9d0DvtxIXeCaBWzT86B0Ix0s7nzfn+jf1U2ao5uq75iCkWf UEQCE7wS5jYEDyzzF1n1uWLU7du07qqLpkJb56mPNnw2aufgHRPePSNRlxEvD+iS b+lTFlO0Lk4iY7m2DwKXgfvYc8nEj1E/tQju4M/6mXcir+Jd83TkGF5FkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2BEoa0thopEotBzjrQd4IaBE4FMB8GA1UdIwQY MBaAFOXv0Yae6v5vnwPLNBhom8sMaRNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYt MDI0OTM1ZGRiOGM2LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYtMDI0OTM1ZGRiOGM2 LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUovF7JrH 0/0PjF0pvkSzIIeRJOxhtuooTFpuphul3sfLK4BGgDW4qX8l4IHCJQOlTn+EA5Lk 3/Eyjr0PrYmC6lVfUF09/bQv5wN4a56U0HReBMO+ig7Alybi5TLIn47Y6zPEYUtY kG8iythp31qVcV/ZeXTVOLRa3PmBSow7lmNWYFsH7N0tve+JbBRZ9JjWVV2OfyQz Y5zvGaBxQmkV7Dqe/Xgxu+VihBEVH1Nb0Gpm/GrpBeOtPC8hMjoOOX+B/EQpHCv1 MXhtnPEn2zeajnZspUEFD4rVIh2Zt2NC88sRaxQV6vd6X7pVAWnJPii6Zqb/Oq52 Qa4tCnCS2kP4FQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:59 2026 by rpki-client