This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json) Hash identifier: pwClF8aDwVzEi3/2cfayjZ6cHLXox75txQhhqnymy/Y= Subject key identifier: 25:B0:2F:C3:14:F8:B5:43:39:03:08:2A:14:96:E5:EC:25:12:52:94 Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Certificate serial: 019C427D619EF8F744783825B8CDBF148929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft Manifest number: 0F90 Signing time: Mon 09 Feb 2026 13:00:39 +0000 Manifest this update: Mon 09 Feb 2026 13:00:39 +0000 Manifest next update: Tue 10 Feb 2026 13:00:39 +0000 Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: Zq6BiZCE+9Yatx4v6vKrnM8XWAR35rMAFpV8Wv/3O+w=) 2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:61:9e:f8:f7:44:78:38:25:b8:cd:bf:14:89:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184 Validity Not Before: Feb 9 13:00:39 2026 GMT Not After : Feb 10 13:00:39 2026 GMT Subject: CN=25b02fc314f8b5433903082a1496e5ec25125294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:a4:83:d9:8a:b1:5b:76:a4:6f:28:50:12: 56:8f:d6:c1:81:85:b2:76:8a:bc:5a:d1:69:53:6f: 44:ac:9d:2a:8e:47:ef:6c:17:1c:7c:6a:82:02:f7: d1:ff:f7:c7:a1:9b:32:21:2c:32:61:bf:c5:d1:b8: e9:d7:a2:00:3a:12:2f:2d:b2:42:f0:25:e4:25:37: 9e:74:c0:bf:39:41:b0:9f:ce:10:dd:91:bd:f1:00: 7c:c3:03:d8:c1:56:ab:d4:e9:33:da:dd:fa:39:42: c9:40:94:5e:c5:ad:76:d9:7d:5d:07:17:ee:d2:7b: 9b:b1:05:d2:46:ff:8c:cf:02:ec:8b:fb:5c:33:da: 3e:29:31:a4:8d:b4:15:f6:3a:bf:91:17:d7:ad:e9: 8a:2c:58:f0:93:f5:6b:7a:31:79:cd:0f:e1:a7:d3: 7e:84:81:8f:ed:73:45:ad:de:8d:68:56:91:35:bf: 21:11:97:64:0c:2a:3a:aa:cb:89:a1:b2:dc:c8:a2: da:e2:82:6a:27:4e:91:12:ad:7b:3a:af:38:b9:47: 67:3a:4b:d2:e5:bb:81:89:66:67:7b:bd:e1:9c:42: 16:25:69:af:b2:b1:68:af:31:65:6d:cb:c9:f0:91: bd:b8:5e:9c:58:be:4c:dc:a5:95:0e:e3:15:ea:bb: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B0:2F:C3:14:F8:B5:43:39:03:08:2A:14:96:E5:EC:25:12:52:94 X509v3 Authority Key Identifier: keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:65:6e:77:86:0a:6b:8e:83:b2:17:77:52:de:d2:65:07: a8:98:e4:da:47:b0:6f:e0:85:79:45:b0:85:23:b3:9e:ec:0c: 1e:0e:fc:b8:89:d2:b0:0f:ce:fd:6d:fa:12:5e:5a:38:29:86: e5:75:69:0e:82:61:2d:57:59:b7:bb:fd:a8:11:a5:e6:66:2c: 8f:66:3e:17:1b:8e:ad:01:a1:f7:e3:6e:3d:a3:f8:47:d5:51: e4:63:94:bb:f7:a0:33:41:4e:49:34:2b:ab:76:84:5a:53:bd: 2c:e9:4e:e6:5e:f8:3e:a1:e2:83:08:b6:18:ff:45:4f:4c:67: f3:6f:56:6c:c9:f6:e7:24:88:ad:6f:c6:29:6b:47:0c:12:5b: d9:16:7e:8c:4b:f4:fb:ca:17:36:c3:c6:fb:0b:f9:63:ba:2f: 83:cf:ff:90:05:36:f2:90:65:1e:72:8e:67:04:f7:a6:10:4d: 70:58:57:be:4e:07:39:2e:62:d3:f6:cb:c4:e6:fe:9d:fb:41: d3:c7:dd:1f:af:91:78:ad:de:5e:6a:6c:c5:83:af:71:1c:e7: 93:d5:ad:c6:be:6c:c2:e6:fe:23:58:1c:d8:d7:a7:5d:1d:f3: 34:0e:c1:bc:84:5d:27:6c:79:d9:bb:26:1c:2a:ef:b4:6b:e6: 6a:3c:8c:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWGe+PdEeDgluM2/FIkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODcxZDhmMmMyNmVhNzFhZTVjMTNjODQ1NGE3YmQzMTg3 MTkxODQwHhcNMjYwMjA5MTMwMDM5WhcNMjYwMjEwMTMwMDM5WjAzMTEwLwYDVQQD EygyNWIwMmZjMzE0ZjhiNTQzMzkwMzA4MmExNDk2ZTVlYzI1MTI1Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2kg9mKsVt2pG8oUBJWj9bBgYWy doq8WtFpU29ErJ0qjkfvbBccfGqCAvfR//fHoZsyISwyYb/F0bjp16IAOhIvLbJC 8CXkJTeedMC/OUGwn84Q3ZG98QB8wwPYwVar1Okz2t36OULJQJRexa122X1dBxfu 0nubsQXSRv+MzwLsi/tcM9o+KTGkjbQV9jq/kRfXremKLFjwk/VrejF5zQ/hp9N+ hIGP7XNFrd6NaFaRNb8hEZdkDCo6qsuJobLcyKLa4oJqJ06REq17Oq84uUdnOkvS 5buBiWZne73hnEIWJWmvsrForzFlbcvJ8JG9uF6cWL5M3KWVDuMV6rsqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWwL8MU+LVDOQMIKhSW5ewlElKUMB8GA1UdIwQY MBaAFOSHHY8sJupxrlwTyEVKe9MYcZGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3Nzgt ZjkwNWE4M2JkMzg5LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zNGZlMmUtMjZkNi00NTVkLTg3NzgtZjkwNWE4M2JkMzg5 LzEvNUljZGp5d202bkd1WEJQSVJVcDcweGh4a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKBlbneG CmuOg7IXd1Le0mUHqJjk2kewb+CFeUWwhSOznuwMHg78uInSsA/O/W36El5aOCmG 5XVpDoJhLVdZt7v9qBGl5mYsj2Y+FxuOrQGh9+NuPaP4R9VR5GOUu/egM0FOSTQr q3aEWlO9LOlO5l74PqHigwi2GP9FT0xn829WbMn25ySIrW/GKWtHDBJb2RZ+jEv0 +8oXNsPG+wv5Y7ovg8//kAU28pBlHnKOZwT3phBNcFhXvk4HOS5i0/bLxOb+nftB 08fdH6+ReK3eXmpsxYOvcRznk9Wtxr5swub+I1gc2NenXR3zNA7BvIRdJ2x52bsm HCrvtGvmajyM0A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:28 2026 by rpki-client