This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: UCGda8Ghr6ji7rg7Fh5UFANZPJFqJijlbvd+HXiAhy0=
Subject key identifier: EC:9B:D3:0B:6D:ED:B6:46:86:62:50:EA:98:9D:B9:02:8B:A5:41:52
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019C4322E2F1CBC444D836B56B477649E531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0FE3
Signing time: Mon 09 Feb 2026 16:01:25 +0000
Manifest this update: Mon 09 Feb 2026 16:01:25 +0000
Manifest next update: Tue 10 Feb 2026 16:01:25 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: HPsb07mHOg8xM9nrPk5IM7NvZZCI8oSXD3bOCnspKIY=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:e2:f1:cb:c4:44:d8:36:b5:6b:47:76:49:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Feb 9 16:01:25 2026 GMT
Not After : Feb 10 16:01:25 2026 GMT
Subject: CN=ec9bd30b6dedb646866250ea989db9028ba54152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:0a:8c:47:4a:e2:6c:c3:bf:55:03:a5:c5:
d3:87:78:62:9e:ea:96:46:3a:97:c0:f1:60:05:ec:
2d:09:d0:c3:d3:b6:85:7a:95:23:79:92:c2:bb:13:
94:4d:a0:4e:73:12:9a:0b:1e:a6:af:70:40:4a:a9:
77:c3:e5:78:f7:f7:28:b5:98:86:02:72:6d:8b:70:
d0:07:34:0e:83:03:a5:80:74:a1:bc:f4:33:a9:49:
58:59:23:06:73:39:d3:9b:ce:94:ba:c8:d7:dc:dc:
62:86:7c:62:41:95:fa:8d:08:51:82:e5:81:c1:f6:
8c:ca:fe:34:6c:9d:df:92:e8:d3:1f:43:b5:b8:20:
a1:5b:28:f4:c6:ed:11:42:84:89:b9:b6:41:fe:1c:
f5:87:72:ad:fd:e7:3b:f0:de:76:0d:2e:a6:f3:e2:
c1:62:f5:e6:d9:b1:97:64:5e:85:07:75:cc:3a:6f:
1a:03:b2:ae:d3:8c:5c:e8:d8:1c:9d:25:5c:f8:d4:
14:84:69:b9:b4:65:3f:ed:c7:9a:ea:cb:b2:a5:cf:
02:3a:50:99:99:33:3f:a2:fa:0c:e9:4e:75:0b:aa:
0c:d4:de:26:e9:f5:28:62:cc:ce:70:90:e5:5c:1c:
0f:31:6f:a4:12:f4:df:e9:9e:47:61:93:cf:cd:d0:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:D3:0B:6D:ED:B6:46:86:62:50:EA:98:9D:B9:02:8B:A5:41:52
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:02:54:ce:d1:70:50:71:6d:fc:48:84:1f:8a:bb:6e:99:be:
48:2d:4b:40:eb:48:82:02:aa:04:22:40:79:99:14:ba:2a:6f:
ef:ce:dd:52:03:f4:cb:1e:63:78:6d:c3:49:1d:2e:ba:08:c8:
fd:5a:df:cb:19:6c:59:16:5f:51:80:d7:fc:5e:b2:e4:73:15:
7a:49:92:93:dc:da:25:31:5b:7c:40:91:77:0e:ce:9e:e4:73:
3c:5c:b9:cf:b0:19:50:15:e7:21:9b:b4:b4:23:a2:ff:ce:2d:
0a:63:14:85:0f:ae:b1:e4:ce:57:2f:a9:3d:c1:ba:ef:07:7d:
94:7b:38:22:36:79:93:e4:37:b8:6d:ff:89:cc:96:50:80:17:
6e:ca:f3:d9:ba:79:69:5c:7c:1b:ff:6a:08:2f:fb:ea:ad:9b:
4a:7e:9a:99:96:f6:c7:f0:20:2d:96:b0:7e:6c:77:d5:98:85:
a5:a3:39:e3:18:91:b7:5a:a4:3d:cf:62:15:19:7d:52:b8:38:
fe:82:b9:c5:a0:9d:e9:fd:e3:8b:44:95:5f:24:67:02:4b:0a:
fd:8b:3e:83:b4:c4:3a:22:ed:bf:ed:5f:2f:87:09:7f:23:3c:
09:fc:5e:74:c7:3e:57:76:ca:d8:af:61:0d:b6:f2:79:0d:27:
25:c0:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:47 2026 by rpki-client