This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json) Hash identifier: S1mHQUcjuWIALoihI2WVYNgxrMCvsjFhczQdxQ5rO3k= Subject key identifier: D5:86:2A:8E:FF:E2:65:5A:B0:6D:6B:86:37:99:7D:11:1E:86:75:D9 Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3 Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3 Certificate serial: 019C43FDCCB821DEB914E3954CBEB6E899FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft Manifest number: 0794 Signing time: Mon 09 Feb 2026 20:00:32 +0000 Manifest this update: Mon 09 Feb 2026 20:00:32 +0000 Manifest next update: Tue 10 Feb 2026 20:00:32 +0000 Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: VdwVy11D/ItusVV2QEAmQfTm5wDYBINBH4DKzm6jsc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:cc:b8:21:de:b9:14:e3:95:4c:be:b6:e8:99:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3 Validity Not Before: Feb 9 20:00:32 2026 GMT Not After : Feb 10 20:00:32 2026 GMT Subject: CN=d5862a8effe2655ab06d6b8637997d111e8675d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:aa:10:ea:56:2c:1c:fe:22:2c:08:ba:05: 46:9a:b4:20:cf:d5:14:86:be:7d:82:98:71:98:c4: 5c:eb:7f:06:4c:08:6f:96:14:43:7d:a9:ee:de:44: 83:28:65:8d:80:73:81:73:b0:e6:60:0c:7b:55:39: 1a:25:c0:08:a1:4b:2b:55:de:32:46:a5:81:50:cb: e9:ca:3a:76:37:0b:b6:69:ee:bc:3e:ca:af:3a:a3: 80:28:e5:e9:4d:4e:05:81:a7:df:24:fe:ca:01:27: 90:9e:2b:30:d3:bb:d0:73:68:b4:2c:39:c7:94:d6: 6c:74:d8:97:e5:0e:7d:c1:24:35:8d:41:ac:90:95: 52:c0:60:fc:98:2c:e9:de:12:af:b8:06:9f:66:8c: 8d:26:4c:d2:6b:07:51:08:6d:2d:d4:06:10:51:9c: aa:d3:ec:1e:ba:3a:11:85:58:57:5f:2f:f8:a7:f4: dd:2e:f1:a6:4f:f0:d7:6e:e4:f2:20:c5:bb:d5:86: 2e:8c:20:52:26:b0:e0:28:80:62:af:4c:4e:9a:66: 70:59:10:df:16:a6:1b:94:a0:97:8a:29:8b:03:ec: 64:09:8e:ff:dc:5c:00:04:c0:75:49:91:7e:7b:c0: 89:19:3e:00:a2:1c:75:7b:47:f5:06:70:14:ab:f4: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:86:2A:8E:FF:E2:65:5A:B0:6D:6B:86:37:99:7D:11:1E:86:75:D9 X509v3 Authority Key Identifier: keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:da:47:6c:71:96:0b:d1:d7:37:04:ff:f0:46:1e:7f:98: 98:d7:3e:1f:a0:0b:36:71:8f:3c:cc:21:da:2b:53:04:da:e2: c4:48:40:60:e3:fa:6b:1b:08:35:b4:e3:8f:61:fe:ce:3e:7e: 69:eb:d3:cb:54:11:aa:4e:60:f3:68:2c:08:d3:76:cf:32:03: 33:fa:57:a3:18:ec:b9:df:68:88:3c:8e:f0:1d:9a:28:d5:ce: e9:25:37:be:e2:77:63:7e:2f:23:8e:a0:2d:9b:53:12:e6:46: 0b:8d:11:7d:95:63:23:b7:26:5e:27:85:4d:20:85:0a:45:44: 47:e0:ba:e5:ef:8b:a8:d2:99:de:37:c2:4a:d6:26:fc:5b:cb: f6:0a:2a:87:70:e5:03:74:05:1a:d2:a6:4b:bc:59:de:fc:36: 06:c8:ab:15:92:bb:8b:61:8a:d8:97:5a:a5:3f:f7:ea:b4:b8: 30:ef:d7:79:a7:14:a5:b8:0a:2e:e7:91:7f:50:7a:9c:62:65: 84:11:88:b0:e6:75:4a:a8:bd:3a:db:8d:10:32:9c:cf:4d:2c: 00:57:b5:1d:de:f6:52:fb:4a:0b:ad:53:f3:52:c7:bb:1b:c0: ac:d6:6a:64:a9:e8:ec:18:2f:61:46:10:26:a1:9b:78:dd:b3: c0:cc:cb:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cy4Id65FOOVTL626Jn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk Mjc1YzMwHhcNMjYwMjA5MjAwMDMyWhcNMjYwMjEwMjAwMDMyWjAzMTEwLwYDVQQD EyhkNTg2MmE4ZWZmZTI2NTVhYjA2ZDZiODYzNzk5N2QxMTFlODY3NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugGqEOpWLBz+IiwIugVGmrQgz9UU hr59gphxmMRc638GTAhvlhRDfanu3kSDKGWNgHOBc7DmYAx7VTkaJcAIoUsrVd4y RqWBUMvpyjp2Nwu2ae68PsqvOqOAKOXpTU4FgaffJP7KASeQnisw07vQc2i0LDnH lNZsdNiX5Q59wSQ1jUGskJVSwGD8mCzp3hKvuAafZoyNJkzSawdRCG0t1AYQUZyq 0+weujoRhVhXXy/4p/TdLvGmT/DXbuTyIMW71YYujCBSJrDgKIBir0xOmmZwWRDf FqYblKCXiimLA+xkCY7/3FwABMB1SZF+e8CJGT4Aohx1e0f1BnAUq/S91wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWGKo7/4mVasG1rhjeZfREehnXZMB8GA1UdIwQY MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNTaR2xx lgvR1zcE//BGHn+YmNc+H6ALNnGPPMwh2itTBNrixEhAYOP6axsINbTjj2H+zj5+ aevTy1QRqk5g82gsCNN2zzIDM/pXoxjsud9oiDyO8B2aKNXO6SU3vuJ3Y34vI46g LZtTEuZGC40RfZVjI7cmXieFTSCFCkVER+C65e+LqNKZ3jfCStYm/FvL9goqh3Dl A3QFGtKmS7xZ3vw2BsirFZK7i2GK2JdapT/36rS4MO/XeacUpbgKLueRf1B6nGJl hBGIsOZ1Sqi9OtuNEDKcz00sAFe1Hd72UvtKC61T81LHuxvArNZqZKno7BgvYUYQ JqGbeN2zwMzLpw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:38 2026 by rpki-client