This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json) Hash identifier: SPsurGlg64EiO/iLuYZCalKY+IK9bzFnn47ZTFO9nBE= Subject key identifier: 4D:A6:D7:5B:8D:A3:22:2D:2D:2D:01:F2:3C:76:08:AE:F0:E6:40:28 Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806 Certificate serial: 019C1B02FDF148038BFC6B3D45B09ADCF0FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft Manifest number: 2E Signing time: Sun 01 Feb 2026 21:01:46 +0000 Manifest this update: Sun 01 Feb 2026 21:01:46 +0000 Manifest next update: Mon 02 Feb 2026 21:01:46 +0000 Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=) 2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: pNNzJLEg2W8K7QeXxPH/EXmpPVj1fewHBMnBhOmLYqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:02:fd:f1:48:03:8b:fc:6b:3d:45:b0:9a:dc:f0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806 Validity Not Before: Feb 1 21:01:46 2026 GMT Not After : Feb 2 21:01:46 2026 GMT Subject: CN=4da6d75b8da3222d2d2d01f23c7608aef0e64028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:72:d4:c8:66:c6:7d:b4:6d:96:59:4b:d7: 65:f1:36:a7:3d:67:87:46:1e:67:ad:bf:d7:c8:b2: f8:da:5c:92:7b:56:15:77:0b:aa:95:3e:c6:06:69: 74:4b:ad:a2:30:a6:bb:c0:65:52:8d:ef:d2:5e:56: c0:b3:ae:6e:ab:89:8e:b3:29:99:9e:40:ea:e7:27: 3b:57:ba:ea:da:b0:a3:77:99:af:c7:03:cd:4e:07: c9:12:05:36:a3:59:c7:41:29:b3:9e:c1:17:19:fd: 3b:68:64:c1:2e:41:c9:7e:ea:0c:f1:9b:f6:e4:7b: 89:d0:d3:0e:af:46:f2:d9:a1:9d:31:cf:1d:01:ee: cb:18:dc:94:0b:f9:53:4c:43:81:bb:66:83:fb:68: 28:cd:f4:17:b3:87:d5:6f:89:9a:a3:cf:a4:f1:cd: 09:cb:16:d8:a3:02:10:35:14:66:03:84:18:df:19: bb:63:98:4c:76:89:27:28:d0:50:5e:b9:2f:3d:b2: 84:b0:00:38:ed:f4:f5:1e:ce:6f:e0:bb:b2:42:10: 47:e1:0f:80:5b:a6:12:d4:7b:83:ec:15:2d:86:40: c7:43:4a:62:59:e5:c3:d8:61:eb:e5:21:8e:ae:5d: 55:4a:e0:cd:b1:49:3c:e5:71:f5:e3:34:c1:fe:44: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:D7:5B:8D:A3:22:2D:2D:2D:01:F2:3C:76:08:AE:F0:E6:40:28 X509v3 Authority Key Identifier: keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0a:f9:c1:e7:5e:5b:35:24:3f:23:d8:ce:47:67:b4:b2:89: c0:de:7d:40:d4:14:e8:e7:9e:fb:9f:53:1f:4c:63:cc:e9:28: 1e:1a:4c:b0:69:bd:01:0d:92:87:3e:2e:43:23:33:31:21:6d: 94:95:ba:ac:f0:a1:78:76:47:ba:da:cb:99:18:fc:fb:fb:94: 05:19:7f:d3:ad:ba:f9:eb:cc:df:4b:14:4b:aa:ad:bc:76:b1: 08:cb:1a:ab:dc:55:de:79:cb:d0:8d:7b:a1:4e:55:a3:5a:9a: 22:4e:91:85:72:1f:f9:12:3c:f8:4d:5b:fd:36:aa:35:d8:b3: b6:75:24:4b:fc:75:5c:86:d2:b9:25:f0:be:6f:ab:39:00:ab: 34:c3:1e:f1:98:a7:a7:ef:1c:a1:de:e7:ab:49:1f:c7:52:ee: fb:45:7a:ee:19:d8:54:10:69:5f:19:8c:f9:06:24:ee:1e:0e: 98:54:72:47:6c:90:3c:89:9b:d2:f6:4a:0b:88:f7:41:08:ff: 2a:62:14:b5:79:d1:2a:00:fc:23:ca:de:1e:c6:c0:1f:27:a9: 70:36:f6:83:24:59:03:3d:1e:86:9a:92:2e:c8:31:35:77:9d: 5a:40:d2:ff:96:47:8b:b4:9b:66:6e:f7:c2:ed:57:d4:63:65: 28:20:c1:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAv3xSAOL/Gs9RbCa3PD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTRkNWRmMjMzODk4ZTA0ZmFlM2Q4M2U4NTgyMmQ5ODgw ZTA4MDYwHhcNMjYwMjAxMjEwMTQ2WhcNMjYwMjAyMjEwMTQ2WjAzMTEwLwYDVQQD Eyg0ZGE2ZDc1YjhkYTMyMjJkMmQyZDAxZjIzYzc2MDhhZWYwZTY0MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IRy1Mhmxn20bZZZS9dl8TanPWeH Rh5nrb/XyLL42lySe1YVdwuqlT7GBml0S62iMKa7wGVSje/SXlbAs65uq4mOsymZ nkDq5yc7V7rq2rCjd5mvxwPNTgfJEgU2o1nHQSmznsEXGf07aGTBLkHJfuoM8Zv2 5HuJ0NMOr0by2aGdMc8dAe7LGNyUC/lTTEOBu2aD+2gozfQXs4fVb4mao8+k8c0J yxbYowIQNRRmA4QY3xm7Y5hMdoknKNBQXrkvPbKEsAA47fT1Hs5v4LuyQhBH4Q+A W6YS1HuD7BUthkDHQ0piWeXD2GHr5SGOrl1VSuDNsUk85XH14zTB/kSjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2m11uNoyItLS0B8jx2CK7w5kAoMB8GA1UdIwQY MBaAFOak1d8jOJjgT649g+hYItmIDggGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTIt MWY5ZGZkODE0YWI2LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTItMWY5ZGZkODE0YWI2 LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgr5wede WzUkPyPYzkdntLKJwN59QNQU6Oee+59TH0xjzOkoHhpMsGm9AQ2Shz4uQyMzMSFt lJW6rPCheHZHutrLmRj8+/uUBRl/0626+evM30sUS6qtvHaxCMsaq9xV3nnL0I17 oU5Vo1qaIk6RhXIf+RI8+E1b/TaqNdiztnUkS/x1XIbSuSXwvm+rOQCrNMMe8Zin p+8cod7nq0kfx1Lu+0V67hnYVBBpXxmM+QYk7h4OmFRyR2yQPImb0vZKC4j3QQj/ KmIUtXnRKgD8I8reHsbAHyepcDb2gyRZAz0ehpqSLsgxNXedWkDS/5ZHi7SbZm73 wu1X1GNlKCDBgA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:42 2026 by rpki-client