This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json) Hash identifier: w5mrkJIyOmnrmuNtTUN2A0neBXfChBcBH0er3uHyEM4= Subject key identifier: 55:ED:DF:3F:EA:18:51:53:F1:B0:3A:FA:D8:33:E5:E7:1E:26:A1:2D Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Certificate serial: 019C427DBFB1FE308DAEE660F59781E20AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft Manifest number: 11E2 Signing time: Mon 09 Feb 2026 13:01:03 +0000 Manifest this update: Mon 09 Feb 2026 13:01:03 +0000 Manifest next update: Tue 10 Feb 2026 13:01:03 +0000 Files and hashes: 1: 04FSpzq4m-1XB6Xit5U77C8a4zQ.roa (hash: mIEzNAi8bCdeISsLWc2pP3wecbIvm3THnuOD2ckxOcM=) 2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: MmVkmS+I1r2oFpmeA3I3fu6VXbaDyPInRvEjk75S2OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bf:b1:fe:30:8d:ae:e6:60:f5:97:81:e2:0a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Validity Not Before: Feb 9 13:01:03 2026 GMT Not After : Feb 10 13:01:03 2026 GMT Subject: CN=55eddf3fea185153f1b03afad833e5e71e26a12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:2c:36:fc:a7:6c:3c:28:c3:84:09:3d:81: 70:fd:66:ba:61:b5:b0:46:1e:e4:ec:07:c0:8f:ff: 2b:ee:8c:19:3e:9d:4b:d3:a9:25:ce:34:1e:f1:f8: b1:a8:d0:d9:6d:a0:64:60:30:34:c3:4e:64:77:ec: 63:1e:09:d2:6c:61:61:dc:be:09:3c:41:a5:54:75: 3d:4d:d3:d4:6e:cf:51:14:33:1f:4a:71:f4:56:dc: 95:e0:08:0c:82:63:e8:a8:46:c2:26:4f:34:77:43: 9d:e2:d2:eb:72:be:32:8b:f8:b0:4f:63:9f:41:5e: 84:d3:72:fa:4e:c7:9f:34:c9:6b:86:54:07:94:d2: a8:97:09:a7:36:09:97:1d:84:07:a6:4f:6a:22:a6: 35:f8:62:cb:98:8b:c0:14:a2:c3:3b:e5:f7:d6:b8: 6d:26:8a:0a:de:fe:d7:80:39:d8:00:44:68:26:d9: d4:98:95:5d:9b:2e:9a:82:3d:fe:5e:cf:05:28:b5: 71:0e:ae:16:8d:f4:a1:b3:47:8b:f1:4d:ce:04:e0: 88:3c:f2:0f:23:36:c9:49:f9:6d:ee:f9:ea:ab:9f: 24:57:ca:3c:45:c4:8f:82:7e:2f:77:ca:e1:45:88: a7:1c:df:10:3a:78:17:6a:7d:3a:b4:42:f2:67:2f: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:ED:DF:3F:EA:18:51:53:F1:B0:3A:FA:D8:33:E5:E7:1E:26:A1:2D X509v3 Authority Key Identifier: keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:50:f7:1b:c6:1b:50:29:4b:71:93:5f:8d:93:a3:fc:26: 75:09:58:1a:9c:42:02:fc:a2:67:d8:b1:c2:52:92:24:66:c0: 0f:49:4a:dc:c3:69:fd:0a:84:98:16:28:57:23:e7:10:5e:62: bc:c4:9c:d8:90:b4:19:52:f9:9d:7a:2d:68:29:78:b4:12:61: eb:30:e9:83:b2:b0:33:71:7b:82:30:d7:45:e4:d5:f7:c3:19: c1:df:b2:bd:93:6d:a9:fd:59:54:9c:52:e5:d0:73:a1:c9:28: dc:6f:71:f9:79:01:62:3e:3c:29:39:bb:d7:30:c5:a6:4c:0a: ac:50:eb:ec:cb:be:cd:67:0f:49:a6:3b:ff:6e:fe:24:da:22: 1b:77:a5:3c:ae:fe:16:96:cb:1d:56:2d:ab:55:ab:e3:b6:e4: 36:57:03:61:5d:3e:f0:db:ba:df:e4:50:1f:de:63:f9:47:48: 34:b3:65:f7:1e:59:02:bf:61:d7:e2:41:3a:dd:71:f6:ec:40: fb:27:13:ae:24:f3:9d:d6:6f:7d:4c:2e:8a:5d:d1:23:2e:e0: 0a:f6:1f:f7:b5:6a:3f:20:6b:06:56:10:bf:d8:65:74:b1:48: 28:da:a0:6a:cc:a7:3e:32:bc:0e:f4:fa:f1:02:73:aa:60:a5: 20:1e:73:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb+x/jCNruZg9ZeB4gquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTliYzNkMTQ5MWY4MjI1Zjg4MTE2NGY1OTMxNDRiN2Ey NWM4ZWIwHhcNMjYwMjA5MTMwMTAzWhcNMjYwMjEwMTMwMTAzWjAzMTEwLwYDVQQD Eyg1NWVkZGYzZmVhMTg1MTUzZjFiMDNhZmFkODMzZTVlNzFlMjZhMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/wsNvynbDwow4QJPYFw/Wa6YbWw Rh7k7AfAj/8r7owZPp1L06klzjQe8fixqNDZbaBkYDA0w05kd+xjHgnSbGFh3L4J PEGlVHU9TdPUbs9RFDMfSnH0VtyV4AgMgmPoqEbCJk80d0Od4tLrcr4yi/iwT2Of QV6E03L6TsefNMlrhlQHlNKolwmnNgmXHYQHpk9qIqY1+GLLmIvAFKLDO+X31rht JooK3v7XgDnYAERoJtnUmJVdmy6agj3+Xs8FKLVxDq4WjfShs0eL8U3OBOCIPPIP IzbJSflt7vnqq58kV8o8RcSPgn4vd8rhRYinHN8QOngXan06tELyZy8OJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXt3z/qGFFT8bA6+tgz5eceJqEtMB8GA1UdIwQY MBaAFP+ZvD0UkfgiX4gRZPWTFEt6JcjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTkt Yjg4YWZlZjEzMzY3LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTktYjg4YWZlZjEzMzY3 LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOllQ9xvG G1ApS3GTX42To/wmdQlYGpxCAvyiZ9ixwlKSJGbAD0lK3MNp/QqEmBYoVyPnEF5i vMSc2JC0GVL5nXotaCl4tBJh6zDpg7KwM3F7gjDXReTV98MZwd+yvZNtqf1ZVJxS 5dBzocko3G9x+XkBYj48KTm71zDFpkwKrFDr7Mu+zWcPSaY7/27+JNoiG3elPK7+ FpbLHVYtq1Wr47bkNlcDYV0+8Nu63+RQH95j+UdINLNl9x5ZAr9h1+JBOt1x9uxA +ycTriTzndZvfUwuil3RIy7gCvYf97VqPyBrBlYQv9hldLFIKNqgasynPjK8DvT6 8QJzqmClIB5zFA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:13 2026 by rpki-client