This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json) Hash identifier: 22A3ACYMrSknLoPQj6zq0H0yEQoU10mP4Y/II/C4xus= Subject key identifier: E2:98:25:C7:10:FC:E8:4E:46:AE:C2:FB:B3:67:61:EF:01:03:12:A5 Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141 Certificate serial: 019C446C60BA89AEA7676421CCE1006D6911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft Manifest number: 074D Signing time: Mon 09 Feb 2026 22:01:19 +0000 Manifest this update: Mon 09 Feb 2026 22:01:19 +0000 Manifest next update: Tue 10 Feb 2026 22:01:19 +0000 Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: vSayZDsv8zwrMFT+MgJO5Fe88uZB3awZfdIFdZAFXTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:60:ba:89:ae:a7:67:64:21:cc:e1:00:6d:69:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c375f3af3b912409dd8360a740913556937141 Validity Not Before: Feb 9 22:01:19 2026 GMT Not After : Feb 10 22:01:19 2026 GMT Subject: CN=e29825c710fce84e46aec2fbb36761ef010312a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:35:26:12:60:bf:57:37:e9:46:b2:24:ea: 82:7d:b1:bb:0e:27:a7:25:41:8c:53:a3:cc:73:de: 52:d6:ec:90:5f:5d:36:27:cb:2c:29:f0:ec:63:7b: 26:6a:f0:cf:01:f2:7b:65:60:62:ed:64:a4:22:4b: bc:9c:3d:c0:55:3c:a2:6f:f6:51:95:ad:e3:cc:6d: 8e:6c:c2:05:03:69:68:5b:49:1a:2c:53:fd:a2:1a: 45:a1:1b:d5:fe:e9:d5:f0:4e:8b:d1:c4:b7:ae:b7: a1:97:5f:9b:3b:9f:df:81:de:56:21:b7:0b:6c:16: 1f:85:cc:a4:ad:3f:06:4a:2e:1a:a4:e9:17:13:2f: 37:f4:ad:0f:1a:68:4a:a3:40:11:d6:87:7e:4c:d4: 83:e5:14:40:9e:38:f0:84:1c:03:69:9b:a5:c4:85: 26:c4:e7:5f:61:89:cc:22:cc:26:88:42:44:2c:de: 2a:35:1c:d1:d0:93:d6:2e:25:ed:d6:80:cc:46:9b: 78:ce:0f:6a:ee:c0:fe:f0:f8:e4:3b:a0:04:1e:37: d2:40:35:0d:a4:5f:2c:ba:a6:f3:23:c9:be:48:36: 0a:51:3e:bd:d3:aa:57:ff:7d:a4:7b:14:c2:2c:78: 30:00:ef:ee:b5:d0:59:ad:85:37:68:d0:4d:0b:48: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:98:25:C7:10:FC:E8:4E:46:AE:C2:FB:B3:67:61:EF:01:03:12:A5 X509v3 Authority Key Identifier: keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:09:fc:7b:ef:f4:3b:53:8b:f6:98:ee:76:bf:49:c6:15: da:69:74:91:ff:16:93:0f:0a:bc:13:90:a6:78:15:c7:02:25: e7:1f:7d:5c:66:ee:be:2f:57:21:a9:65:d9:64:c4:79:6a:e1: ce:1f:43:94:25:92:34:65:c5:d8:e7:03:c0:86:28:4e:5d:7d: 71:15:c1:c2:a9:b1:a1:ee:36:5d:90:73:55:08:d7:e1:b3:a2: dd:a7:04:f2:d5:fe:67:4e:f2:13:79:12:ad:26:ac:b4:2e:b6: cc:3e:9d:49:66:83:bf:b9:bd:51:06:05:ba:f1:ab:2f:9e:30: 8e:ef:60:c9:e8:82:30:50:49:b2:e1:e3:65:c6:e6:53:fc:90: b6:0d:84:53:83:05:82:35:9e:95:20:63:78:51:36:e9:84:e5: fc:01:d0:67:17:18:3c:8f:70:b2:7a:0d:48:be:ca:40:22:a4: 64:63:4c:cc:ae:d6:b2:26:75:54:98:5f:b1:fa:5c:13:98:ee: c1:1b:84:e3:2f:ef:66:b0:a3:e9:71:5e:33:bf:04:39:3a:67: 27:dd:56:1d:ea:d0:de:17:c6:1d:7b:0a:93:55:01:fb:a6:49: 2b:71:4c:3a:70:81:c1:e2:21:f6:29:d2:84:74:33:a5:5b:70: e8:cb:a9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbGC6ia6nZ2QhzOEAbWkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM3NWYzYWYzYjkxMjQwOWRkODM2MGE3NDA5MTM1NTY5 MzcxNDEwHhcNMjYwMjA5MjIwMTE5WhcNMjYwMjEwMjIwMTE5WjAzMTEwLwYDVQQD EyhlMjk4MjVjNzEwZmNlODRlNDZhZWMyZmJiMzY3NjFlZjAxMDMxMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ag1JhJgv1c36UayJOqCfbG7Dien JUGMU6PMc95S1uyQX102J8ssKfDsY3smavDPAfJ7ZWBi7WSkIku8nD3AVTyib/ZR la3jzG2ObMIFA2loW0kaLFP9ohpFoRvV/unV8E6L0cS3rrehl1+bO5/fgd5WIbcL bBYfhcykrT8GSi4apOkXEy839K0PGmhKo0AR1od+TNSD5RRAnjjwhBwDaZulxIUm xOdfYYnMIswmiEJELN4qNRzR0JPWLiXt1oDMRpt4zg9q7sD+8PjkO6AEHjfSQDUN pF8suqbzI8m+SDYKUT6906pX/32kexTCLHgwAO/utdBZrYU3aNBNC0h3+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKYJccQ/OhORq7C+7NnYe8BAxKlMB8GA1UdIwQY MBaAFOXDdfOvO5EkCd2DYKdAkTVWk3FBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2It Yzc1YzZkMjBkMzJjLzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2ItYzc1YzZkMjBkMzJj LzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu8J/Hvv 9DtTi/aY7na/ScYV2ml0kf8Wkw8KvBOQpngVxwIl5x99XGbuvi9XIall2WTEeWrh zh9DlCWSNGXF2OcDwIYoTl19cRXBwqmxoe42XZBzVQjX4bOi3acE8tX+Z07yE3kS rSastC62zD6dSWaDv7m9UQYFuvGrL54wju9gyeiCMFBJsuHjZcbmU/yQtg2EU4MF gjWelSBjeFE26YTl/AHQZxcYPI9wsnoNSL7KQCKkZGNMzK7WsiZ1VJhfsfpcE5ju wRuE4y/vZrCj6XFeM78EOTpnJ91WHerQ3hfGHXsKk1UB+6ZJK3FMOnCBweIh9inS hHQzpVtw6MupoA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:14 2026 by rpki-client