This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json) Hash identifier: xGqI4K5PBQoTCoWlwKWaFSX3jMNU1hJqu6uCT6/5YZ4= Subject key identifier: EF:CA:9B:45:F1:2C:09:A5:44:BF:91:EC:35:90:C2:82:D3:BD:F5:38 Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e Certificate serial: 019C413479476A0F50FE550B71FACC7B5969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft Manifest number: 1077 Signing time: Mon 09 Feb 2026 07:01:23 +0000 Manifest this update: Mon 09 Feb 2026 07:01:23 +0000 Manifest next update: Tue 10 Feb 2026 07:01:23 +0000 Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: livwPUWy1KS66L/Ohhk6gH5ZoYxN0iYPVjvjUf/JVCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:79:47:6a:0f:50:fe:55:0b:71:fa:cc:7b:59:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e Validity Not Before: Feb 9 07:01:23 2026 GMT Not After : Feb 10 07:01:23 2026 GMT Subject: CN=efca9b45f12c09a544bf91ec3590c282d3bdf538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:5b:7e:3b:c5:35:91:42:70:f2:a6:c8:31: d4:ee:2d:b1:b2:2a:bc:54:c8:4d:2c:03:43:cb:b5: 91:ab:c9:41:fa:9b:87:e0:45:4e:0d:89:08:07:f7: af:d5:92:00:cc:61:16:57:9f:09:5c:f9:3f:e9:1f: 53:f6:55:2a:ec:de:7d:8a:3e:86:d5:2f:3a:e8:e1: 78:d7:a2:fa:8f:c3:f2:68:fc:80:bb:c8:f8:c0:5a: da:55:b7:ad:09:44:91:c5:75:49:3a:59:ba:be:bc: d6:ba:e4:ed:bf:db:1c:35:e6:de:6f:f5:33:e7:73: b2:64:b7:cd:37:7c:4e:81:bc:83:b2:07:bc:5c:5a: 23:3a:e9:d0:e5:3d:e3:f2:04:77:84:0a:f1:56:94: 5a:9b:20:61:7d:7b:e8:eb:73:28:7f:f3:42:fc:0f: 16:cd:10:03:ef:89:28:00:07:19:e3:c3:5f:90:0f: 4e:cf:93:50:91:50:dc:4e:3d:cf:3b:d6:38:6f:95: 13:f8:fb:4c:36:9b:1e:56:f2:94:a5:c0:46:20:8a: 57:3b:01:1a:83:df:15:25:52:36:d3:99:5b:7c:59: b3:62:12:45:20:b6:13:64:52:70:c9:72:2b:89:0e: c0:d8:dc:59:0f:28:4b:38:be:af:9b:ad:f7:be:58: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:9B:45:F1:2C:09:A5:44:BF:91:EC:35:90:C2:82:D3:BD:F5:38 X509v3 Authority Key Identifier: keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0c:14:31:e1:bc:42:f4:f5:6e:b3:b4:44:03:11:22:f1:d2: 33:09:b5:f2:98:ba:a1:f3:f8:ad:7c:9d:80:06:da:82:e1:5e: 34:3f:fa:32:d4:39:29:f7:a8:cf:9b:65:ce:72:1e:f9:8e:e8: 80:33:f1:f6:c9:d6:fb:0c:38:20:64:b3:6b:9c:f2:93:35:b9: c3:29:e4:74:ba:3d:97:bd:2f:d4:7b:66:e8:49:73:35:de:1b: 45:b4:7f:78:41:de:30:ff:41:3c:4b:61:ee:55:8d:0b:aa:f9: 04:46:af:7e:94:08:d8:a9:07:0d:62:c6:e2:af:f9:8e:e9:f4: 27:b7:b3:cb:47:13:85:fc:c5:c1:39:75:fd:62:b7:1a:25:5b: bf:d7:78:88:47:72:0d:29:bf:f8:1d:17:16:e1:a3:06:d0:4a: 8f:bc:79:26:c7:b6:27:1d:41:31:8c:5b:16:d1:65:fe:8b:8b: f2:d8:39:31:5a:29:25:b5:79:9d:bf:44:6f:e2:b3:93:d5:87: aa:6d:90:e2:c1:7a:07:f3:20:4f:f2:27:8e:76:ba:c9:5a:11: a7:30:6a:19:61:76:13:56:39:69:84:dc:bb:7c:3a:9e:72:d5: 22:66:3a:e6:14:1f:61:48:13:da:1e:b8:ce:cb:23:4d:ff:82: c7:c0:97:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNHlHag9Q/lULcfrMe1lpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3N2Q3Y2E4MWVlNTlkNTM0NTAzYjJmN2I2M2RiNjJiNWQ0 NGM1NmUwHhcNMjYwMjA5MDcwMTIzWhcNMjYwMjEwMDcwMTIzWjAzMTEwLwYDVQQD EyhlZmNhOWI0NWYxMmMwOWE1NDRiZjkxZWMzNTkwYzI4MmQzYmRmNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sNbfjvFNZFCcPKmyDHU7i2xsiq8 VMhNLANDy7WRq8lB+puH4EVODYkIB/ev1ZIAzGEWV58JXPk/6R9T9lUq7N59ij6G 1S866OF416L6j8PyaPyAu8j4wFraVbetCUSRxXVJOlm6vrzWuuTtv9scNebeb/Uz 53OyZLfNN3xOgbyDsge8XFojOunQ5T3j8gR3hArxVpRamyBhfXvo63Mof/NC/A8W zRAD74koAAcZ48NfkA9Oz5NQkVDcTj3PO9Y4b5UT+PtMNpseVvKUpcBGIIpXOwEa g98VJVI205lbfFmzYhJFILYTZFJwyXIriQ7A2NxZDyhLOL6vm633vlgIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/Km0XxLAmlRL+R7DWQwoLTvfU4MB8GA1UdIwQY MBaAFOd9fKge5Z1TRQOy97Y9titdRMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQt NWMyMDBjNmU3ZDM0LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQtNWMyMDBjNmU3ZDM0 LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQwUMeG8 QvT1brO0RAMRIvHSMwm18pi6ofP4rXydgAbaguFeND/6MtQ5Kfeoz5tlznIe+Y7o gDPx9snW+ww4IGSza5zykzW5wynkdLo9l70v1Htm6ElzNd4bRbR/eEHeMP9BPEth 7lWNC6r5BEavfpQI2KkHDWLG4q/5jun0J7ezy0cThfzFwTl1/WK3GiVbv9d4iEdy DSm/+B0XFuGjBtBKj7x5Jse2Jx1BMYxbFtFl/ouL8tg5MVopJbV5nb9Eb+Kzk9WH qm2Q4sF6B/MgT/Injna6yVoRpzBqGWF2E1Y5aYTcu3w6nnLVImY65hQfYUgT2h64 zssjTf+Cx8CXig== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:52 2026 by rpki-client