This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json) Hash identifier: 1g56xUos9AYgtBd+rNp8Qr2nQ1zjRFrrpn6epyuvTe0= Subject key identifier: 4E:11:41:E5:19:79:C7:65:89:F8:A6:48:A2:BE:E7:E9:43:07:B9:2D Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd Certificate serial: 019C438FBE2DC29F8D53510E824D54DC5037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft Manifest number: 09D4 Signing time: Mon 09 Feb 2026 18:00:19 +0000 Manifest this update: Mon 09 Feb 2026 18:00:19 +0000 Manifest next update: Tue 10 Feb 2026 18:00:19 +0000 Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: 8oXSQp16H4zbjdbFBUZjWh5dmNfud7JqBwzPNggZBDg=) 2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:be:2d:c2:9f:8d:53:51:0e:82:4d:54:dc:50:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd Validity Not Before: Feb 9 18:00:19 2026 GMT Not After : Feb 10 18:00:19 2026 GMT Subject: CN=4e1141e51979c76589f8a648a2bee7e94307b92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:78:eb:b3:ce:0e:57:c0:be:3e:52:54:15: 0e:72:eb:2e:9e:f4:5a:72:9f:58:6f:1b:65:2d:f5: 46:9a:df:1b:e1:67:cb:00:b4:bb:ff:a9:c0:82:44: 4a:0b:83:e6:34:ed:ef:d9:07:94:6b:65:c5:8c:bc: f6:36:43:53:83:51:8a:98:55:83:72:3f:57:a1:2e: b0:4f:04:73:4c:4b:73:40:57:f0:60:5d:d4:a4:55: 7c:47:8f:f9:2a:e6:a4:65:8c:2c:59:e8:f9:3f:79: c2:6d:35:b3:71:69:84:9f:cd:49:37:37:61:dd:4c: 12:16:80:37:c2:fc:9a:2a:e2:32:23:34:6f:b4:85: 65:bf:65:09:0b:68:99:40:3e:6e:ff:16:af:d7:3d: 12:5b:f6:58:29:34:3f:d6:a2:ae:a9:b0:24:39:54: 6e:60:2b:66:12:f3:7b:51:a8:39:0d:96:a8:13:68: ae:c5:c9:b8:22:65:d8:be:86:08:f9:e5:5c:2f:9a: e8:b2:ef:b7:82:10:57:4a:6f:f0:05:6e:2d:5a:1e: dc:d0:7a:e1:da:81:42:d6:25:59:51:e8:5b:06:99: 08:be:79:db:b2:16:5b:10:57:06:2c:0b:db:80:bf: 74:19:d3:a2:77:0a:ef:2a:e7:13:fe:5c:07:18:79: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:11:41:E5:19:79:C7:65:89:F8:A6:48:A2:BE:E7:E9:43:07:B9:2D X509v3 Authority Key Identifier: keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e1:b3:76:5e:01:83:2e:4b:80:65:74:d5:87:b7:eb:0f:44: ed:d5:80:31:1c:3d:41:34:9c:86:dc:f6:b2:7c:9c:59:03:2e: e4:8a:3d:08:69:56:7d:dc:8e:57:3b:ba:e7:47:01:98:95:4f: 57:4c:53:30:8b:8a:d5:22:63:71:19:ba:88:c3:7c:54:aa:a0: aa:f6:69:6f:ae:d3:47:01:3f:45:94:13:da:b9:9a:c5:e1:b6: 2a:33:bd:e1:15:5d:df:a0:d1:22:fc:b2:32:45:43:8f:77:9a: 98:9a:ae:ed:db:36:91:cf:b0:1d:26:aa:41:1c:33:84:65:60: 2b:54:ec:95:21:1b:0d:ce:f7:d6:e4:32:9b:4b:0f:1a:52:bf: 0b:43:b8:46:2e:37:b7:43:16:6a:6f:54:c4:fd:e1:72:1b:78: fb:8b:57:10:b8:3c:03:ed:47:bf:9a:8b:ca:b5:f2:56:a6:57: de:97:38:e1:55:f7:17:56:f3:93:27:36:35:dc:0c:8e:2c:62: 46:61:ba:73:d2:e5:69:cf:3c:52:43:69:cf:29:0f:14:38:c2: c3:24:d4:ef:62:90:32:f9:78:1f:0e:f3:18:78:8e:63:71:e7: 5d:15:d8:7e:e0:5c:5e:d3:95:f8:5e:d8:71:dd:93:2f:ac:b0: 4f:c0:fb:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj74twp+NU1EOgk1U3FA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2MwZDQ3MWRjM2U0NzkwNGM5MzU3ZDQwZjk3N2EzZTA4 MWI0YmQwHhcNMjYwMjA5MTgwMDE5WhcNMjYwMjEwMTgwMDE5WjAzMTEwLwYDVQQD Eyg0ZTExNDFlNTE5NzljNzY1ODlmOGE2NDhhMmJlZTdlOTQzMDdiOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9V467PODlfAvj5SVBUOcusunvRa cp9YbxtlLfVGmt8b4WfLALS7/6nAgkRKC4PmNO3v2QeUa2XFjLz2NkNTg1GKmFWD cj9XoS6wTwRzTEtzQFfwYF3UpFV8R4/5KuakZYwsWej5P3nCbTWzcWmEn81JNzdh 3UwSFoA3wvyaKuIyIzRvtIVlv2UJC2iZQD5u/xav1z0SW/ZYKTQ/1qKuqbAkOVRu YCtmEvN7Uag5DZaoE2iuxcm4ImXYvoYI+eVcL5rosu+3ghBXSm/wBW4tWh7c0Hrh 2oFC1iVZUehbBpkIvnnbshZbEFcGLAvbgL90GdOidwrvKucT/lwHGHkqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4RQeUZecdlifimSKK+5+lDB7ktMB8GA1UdIwQY MBaAFOZ8DUcdw+R5BMk1fUD5d6PggbS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW53TlJ4M0Q1SGtFeVRWOVFQbDNvLUNCdEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YTU2MzgtNDU1YS00MjUwLTk0ZjAt MDU2MWJkZTBiZmE4LzEvNW53TlJ4M0Q1SGtFeVRWOVFQbDNvLUNCdEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81YTU2MzgtNDU1YS00MjUwLTk0ZjAtMDU2MWJkZTBiZmE4 LzEvNW53TlJ4M0Q1SGtFeVRWOVFQbDNvLUNCdEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeGzdl4B gy5LgGV01Ye36w9E7dWAMRw9QTSchtz2snycWQMu5Io9CGlWfdyOVzu650cBmJVP V0xTMIuK1SJjcRm6iMN8VKqgqvZpb67TRwE/RZQT2rmaxeG2KjO94RVd36DRIvyy MkVDj3eamJqu7ds2kc+wHSaqQRwzhGVgK1TslSEbDc731uQym0sPGlK/C0O4Ri43 t0MWam9UxP3hcht4+4tXELg8A+1Hv5qLyrXyVqZX3pc44VX3F1bzkyc2NdwMjixi RmG6c9Llac88UkNpzykPFDjCwyTU72KQMvl4Hw7zGHiOY3HnXRXYfuBcXtOV+F7Y cd2TL6ywT8D7Bg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:05 2026 by rpki-client