This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json) Hash identifier: KlUPvIsipziZeACgfUTtJmCCqHbjdCuDaECbKlxsplE= Subject key identifier: 06:8D:9B:39:64:4C:4F:83:20:FD:2B:8E:1A:B3:2A:E0:2C:F8:30:DE Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a Certificate serial: 019C42B4129401D8E044619F928888C674D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: isTyN6vJsVj+Sa91bo+IBE302fKoT58r6mooXvF9LnM=) 2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:12:94:01:d8:e0:44:61:9f:92:88:88:c6:74:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=068d9b39644c4f8320fd2b8e1ab32ae02cf830de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:9b:24:68:b3:1c:e0:34:41:ee:cb:cb:4d: 3e:71:36:67:aa:33:e8:d7:0d:ba:62:40:50:47:25: 67:4b:75:f7:f3:41:63:9b:c0:19:aa:53:78:3a:8d: 26:72:44:d9:e5:7a:ff:a7:cf:23:6a:75:eb:ab:74: 74:6f:24:5d:91:28:c3:c8:36:d6:5e:4f:e8:75:ca: 97:a4:8b:e6:50:34:91:8f:2e:32:3a:f9:c6:3b:2c: 1a:0f:23:8b:70:86:61:e3:b8:52:c9:72:5a:53:be: 8b:60:5c:e4:d7:f9:23:3f:ae:ac:4a:35:5b:96:87: 72:83:a1:a3:cb:4e:ee:a2:00:ed:85:c9:e1:1d:10: 84:4e:27:e1:66:9f:0f:ca:b4:10:ea:18:d5:ba:69: a3:f0:98:3e:04:b5:87:e8:d0:99:28:c6:bb:9e:f2: 5e:ce:03:65:90:3a:85:01:58:a0:5a:0d:71:81:17: b8:15:5a:a6:71:b7:a5:7e:30:de:6e:fa:e0:ad:b6: ce:c7:17:03:5b:f6:4d:20:2b:a4:82:da:66:2f:42: 0f:97:f9:cf:2e:f3:aa:2b:45:88:9a:ee:45:36:a8: 18:e9:35:b5:9d:30:d8:3b:9b:a1:5c:a0:97:a6:fc: 81:1a:42:fd:cf:82:32:7e:5d:86:64:8c:55:a0:a6: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8D:9B:39:64:4C:4F:83:20:FD:2B:8E:1A:B3:2A:E0:2C:F8:30:DE X509v3 Authority Key Identifier: keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b9:9e:f4:2b:60:15:1f:a4:78:05:72:fb:a3:f3:e3:54:16: 5f:a2:5e:54:b3:e1:61:43:79:53:68:15:32:30:92:a9:a1:5b: 30:29:91:ed:3b:b0:8e:15:ed:13:33:17:f2:55:7a:5e:c0:47: a8:26:a2:51:76:cf:e1:4c:1a:ad:77:21:b3:b9:9a:5f:5b:e3: 95:58:cc:fc:39:47:7d:22:85:78:d4:ba:e3:cb:02:0a:91:36: 20:d1:72:d0:2c:79:33:d8:b0:9e:8c:19:53:a7:e3:ec:52:ae: 21:d5:54:33:58:cc:ec:da:9b:f0:b5:b1:52:8b:6a:4e:e7:0f: 6a:40:86:8d:f1:65:c0:e2:d7:d1:27:9d:6c:2f:34:1e:74:25: 96:a5:6d:52:c6:40:8c:2d:dc:be:2f:b7:63:bc:a4:70:36:49: 77:8d:ae:8e:2f:e4:65:c2:8f:75:cb:ba:50:f3:e9:76:38:e8: 96:53:0e:4e:dc:33:d7:e5:e1:10:08:4a:ed:5c:38:d9:33:b4: 12:37:68:6c:0f:ad:1b:6f:28:f7:df:ed:7c:88:1a:65:25:c2: 67:b1:dd:f6:0d:26:53:49:6f:65:43:0e:b4:af:90:fb:fc:fb: 6e:ab:c0:3b:98:fc:94:94:6f:7e:d2:67:13:52:65:a4:c1:f3: ac:b5:35:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBKUAdjgRGGfkoiIxnTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0 NjQ1M2EwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD EygwNjhkOWIzOTY0NGM0ZjgzMjBmZDJiOGUxYWIzMmFlMDJjZjgzMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJWbJGizHOA0Qe7Ly00+cTZnqjPo 1w26YkBQRyVnS3X380Fjm8AZqlN4Oo0mckTZ5Xr/p88janXrq3R0byRdkSjDyDbW Xk/odcqXpIvmUDSRjy4yOvnGOywaDyOLcIZh47hSyXJaU76LYFzk1/kjP66sSjVb lodyg6Gjy07uogDthcnhHRCETifhZp8PyrQQ6hjVummj8Jg+BLWH6NCZKMa7nvJe zgNlkDqFAVigWg1xgRe4FVqmcbelfjDebvrgrbbOxxcDW/ZNICukgtpmL0IPl/nP LvOqK0WImu5FNqgY6TW1nTDYO5uhXKCXpvyBGkL9z4Iyfl2GZIxVoKY/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaNmzlkTE+DIP0rjhqzKuAs+DDeMB8GA1UdIwQY MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLme9Ctg FR+keAVy+6Pz41QWX6JeVLPhYUN5U2gVMjCSqaFbMCmR7TuwjhXtEzMX8lV6XsBH qCaiUXbP4UwarXchs7maX1vjlVjM/DlHfSKFeNS648sCCpE2INFy0Cx5M9iwnowZ U6fj7FKuIdVUM1jM7Nqb8LWxUotqTucPakCGjfFlwOLX0SedbC80HnQllqVtUsZA jC3cvi+3Y7ykcDZJd42uji/kZcKPdcu6UPPpdjjollMOTtwz1+XhEAhK7Vw42TO0 EjdobA+tG28o99/tfIgaZSXCZ7Hd9g0mU0lvZUMOtK+Q+/z7bqvAO5j8lJRvftJn E1JlpMHzrLU1RA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:43 2026 by rpki-client