This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json) Hash identifier: M5T6dqZ7UJE3/chLtIXm1QDpqqembwAgPJDsBXhLVco= Subject key identifier: 5E:C8:D7:F1:5D:15:7E:4B:85:17:23:09:43:0E:88:D1:1C:1F:02:D3 Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e Certificate serial: 019C1C14FC3B920BD14E5848F948E4FE1F90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft Manifest number: 0457 Signing time: Mon 02 Feb 2026 02:01:03 +0000 Manifest this update: Mon 02 Feb 2026 02:01:03 +0000 Manifest next update: Tue 03 Feb 2026 02:01:03 +0000 Files and hashes: 1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: XdqVbsjHaJclPFtsSx2dHWIVCxHUxQQDAK75K7Lqma8=) 2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:fc:3b:92:0b:d1:4e:58:48:f9:48:e4:fe:1f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e Validity Not Before: Feb 2 02:01:03 2026 GMT Not After : Feb 3 02:01:03 2026 GMT Subject: CN=5ec8d7f15d157e4b85172309430e88d11c1f02d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:cd:60:55:3a:6b:9e:c1:72:bb:51:40:70: 52:c8:21:2e:ec:ef:0b:c5:40:91:9f:4a:e8:30:f1: 9e:7c:69:3b:5f:88:de:48:e6:59:8c:54:c6:9e:09: c9:40:0f:1a:8f:72:5e:4a:b1:de:23:4e:dd:3e:8c: 4b:74:bb:ef:1a:59:4f:97:7e:9b:fd:7c:69:5c:6e: 33:9a:d7:c8:8d:e3:cb:c1:ac:b6:fe:62:bd:df:b4: 1a:51:11:74:28:b0:17:51:ea:91:d6:9b:c3:ec:ff: f3:32:38:c1:69:0a:00:69:d1:b4:bb:54:a9:62:7f: c9:1d:83:db:0d:20:fb:cf:ae:bd:fe:ee:fb:ec:13: 75:57:05:f9:f3:58:01:49:f1:bf:42:4c:b1:41:87: 1e:73:36:77:92:ec:b6:29:28:fe:e7:fa:b0:b9:9b: b8:6f:6c:24:bf:36:0f:af:86:9c:23:f6:ae:7b:4e: 6e:85:c0:4a:33:74:2a:a9:35:6b:83:52:66:f6:1c: 3e:0b:b0:b5:82:9b:97:39:7c:61:a2:85:a4:6d:8a: 67:f0:6d:a1:06:49:ff:97:ea:9f:75:e5:49:9f:32: 17:bf:f1:84:41:e9:a8:29:17:eb:a1:03:dd:12:e5: 16:cf:4b:0f:60:02:7b:28:72:f8:88:56:6c:b9:66: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C8:D7:F1:5D:15:7E:4B:85:17:23:09:43:0E:88:D1:1C:1F:02:D3 X509v3 Authority Key Identifier: keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:00:91:4a:37:49:ac:c4:5b:b9:7c:cb:d3:97:9f:59:c9:90: 4c:b8:2c:4a:93:ba:90:88:87:57:01:5e:01:08:46:95:10:61: 38:b5:08:62:09:17:bd:61:9e:ec:96:45:53:2f:bf:1f:e5:37: b1:37:77:3a:22:01:e4:79:0e:bb:bd:70:41:8d:6f:97:03:31: 48:7a:39:a5:24:a9:5a:4d:46:33:29:fa:29:72:17:e9:95:36: 88:42:2f:01:4e:7a:22:71:c8:86:e8:e9:8c:c1:2d:ea:36:ff: dd:c8:e9:43:22:e9:f4:82:16:7d:8c:28:22:4e:b3:06:68:16: 43:4f:0d:50:45:b5:af:a5:c5:6c:02:57:3c:6b:17:d0:51:55: 48:b5:53:cb:ad:77:92:bd:04:7b:2b:79:cd:a8:90:50:53:41: d5:44:a2:31:60:3d:66:26:fc:72:a4:ad:39:27:b5:94:48:99: e0:ab:59:2b:59:98:fd:00:2b:4f:8e:ed:a2:f7:4e:2d:16:30: 05:69:e2:91:a0:4e:5e:0c:5d:b7:b6:cd:29:be:1c:82:b6:92: 38:3d:c6:7d:79:90:13:64:04:3c:26:ee:1b:27:e8:1c:ca:f9: f3:8e:a6:61:a4:08:88:19:7c:5f:6f:5d:4e:7d:72:ae:01:26: 8d:c6:8c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFPw7kgvRTlhI+Ujk/h+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3 YWMxMmUwHhcNMjYwMjAyMDIwMTAzWhcNMjYwMjAzMDIwMTAzWjAzMTEwLwYDVQQD Eyg1ZWM4ZDdmMTVkMTU3ZTRiODUxNzIzMDk0MzBlODhkMTFjMWYwMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobzNYFU6a57BcrtRQHBSyCEu7O8L xUCRn0roMPGefGk7X4jeSOZZjFTGngnJQA8aj3JeSrHeI07dPoxLdLvvGllPl36b /XxpXG4zmtfIjePLway2/mK937QaURF0KLAXUeqR1pvD7P/zMjjBaQoAadG0u1Sp Yn/JHYPbDSD7z669/u777BN1VwX581gBSfG/QkyxQYceczZ3kuy2KSj+5/qwuZu4 b2wkvzYPr4acI/aue05uhcBKM3QqqTVrg1Jm9hw+C7C1gpuXOXxhooWkbYpn8G2h Bkn/l+qfdeVJnzIXv/GEQemoKRfroQPdEuUWz0sPYAJ7KHL4iFZsuWa8zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7I1/FdFX5LhRcjCUMOiNEcHwLTMB8GA1UdIwQY MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5 LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwCRSjdJ rMRbuXzL05efWcmQTLgsSpO6kIiHVwFeAQhGlRBhOLUIYgkXvWGe7JZFUy+/H+U3 sTd3OiIB5HkOu71wQY1vlwMxSHo5pSSpWk1GMyn6KXIX6ZU2iEIvAU56InHIhujp jMEt6jb/3cjpQyLp9IIWfYwoIk6zBmgWQ08NUEW1r6XFbAJXPGsX0FFVSLVTy613 kr0Eeyt5zaiQUFNB1USiMWA9Zib8cqStOSe1lEiZ4KtZK1mY/QArT47tovdOLRYw BWnikaBOXgxdt7bNKb4cgraSOD3GfXmQE2QEPCbuGyfoHMr5846mYaQIiBl8X29d Tn1yrgEmjcaMaQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:29:08 2026 by rpki-client