This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json) Hash identifier: xEahdvBQpDMdNyKVdV6bgRUMwxrHixke7kXJm0v20HY= Subject key identifier: 85:28:26:6F:1A:10:7C:8E:0C:3C:26:73:D0:70:3B:5A:1B:9D:E5:0C Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b Certificate serial: 019C41A1674A7EABDFC55D420746B43A6C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft Manifest number: 0230 Signing time: Mon 09 Feb 2026 09:00:22 +0000 Manifest this update: Mon 09 Feb 2026 09:00:22 +0000 Manifest next update: Tue 10 Feb 2026 09:00:22 +0000 Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: X6+tMP5hizIqHsQQkyBuM8rqwULFRB2tX0E5EJ7QUyk=) 2: KbZLx2_rFtlHuG7zcnRaRaQol2w.roa (hash: +PvTCrqc0M/beR/HvEF/hRLA4hC3UuAO8zDUgE+xCOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:67:4a:7e:ab:df:c5:5d:42:07:46:b4:3a:6c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b Validity Not Before: Feb 9 09:00:22 2026 GMT Not After : Feb 10 09:00:22 2026 GMT Subject: CN=8528266f1a107c8e0c3c2673d0703b5a1b9de50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:f5:d8:5c:04:3f:01:48:d2:0f:0f:36:aa: c3:0a:6c:9e:e8:2f:6c:9f:0e:ec:93:aa:83:a1:ed: f5:c6:13:4c:cf:98:3d:1e:1c:7b:73:9f:f3:68:9a: 82:a2:54:80:dc:2c:2c:21:a4:9b:12:1c:88:8d:a6: 47:fe:36:b1:f8:4a:f4:65:21:b8:99:1c:97:a2:a8: 81:02:6a:7f:9d:d1:67:1c:98:7e:a1:4b:6d:0c:98: 28:39:9c:25:70:e8:11:62:86:c5:c4:17:5a:c0:18: 84:09:17:b7:3c:98:fc:18:b6:8f:cf:7f:e4:2a:d0: 96:60:51:b4:57:35:a6:0d:f8:22:93:17:88:83:19: ba:27:b5:1b:6e:37:6c:f3:fb:36:1f:c5:3c:e6:10: 38:5a:9d:ab:92:6e:5a:62:3f:4a:b0:3a:8b:12:ba: db:05:0f:5f:cd:3d:02:f4:43:7b:6a:68:74:87:f8: ac:c9:8d:14:7c:00:10:76:97:66:96:2c:29:ec:b4: 48:c4:44:35:97:bf:f4:79:03:73:0d:6c:29:9f:20: 1a:2a:26:a4:17:3f:c1:95:d9:44:55:e5:1b:2f:35: e7:fa:81:1a:43:c7:70:16:bf:92:e8:36:8a:bd:7d: a0:46:d1:76:59:00:f6:79:f2:dd:97:a1:49:5d:0e: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:26:6F:1A:10:7C:8E:0C:3C:26:73:D0:70:3B:5A:1B:9D:E5:0C X509v3 Authority Key Identifier: keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:bc:b4:f8:4a:80:45:cb:4e:76:bf:24:3b:0a:d7:0a:f1: 91:6a:08:40:ff:c3:5d:c8:09:23:51:34:78:08:57:c3:1d:25: f5:0d:ab:21:f6:f9:bd:47:05:c5:2b:c0:99:21:e4:9c:28:d7: 51:07:54:ed:ac:75:ba:08:57:18:fc:ab:c2:7f:85:fe:87:c8: 61:e8:f2:f8:5d:a8:dc:67:0a:bd:29:de:48:3f:e8:69:b7:37: d4:39:73:27:54:52:10:b1:69:05:af:29:78:01:36:ca:6a:03: ee:87:f1:c8:11:71:60:88:0a:50:6b:e2:b0:ea:b0:00:ad:3a: 99:29:1d:7a:61:7d:c8:55:b8:8d:6f:f3:09:2d:16:32:87:cc: a5:70:b0:98:d2:bd:c7:ba:70:ed:5f:c3:e0:87:c5:16:ca:36: 3b:4e:34:08:28:55:3d:a4:18:e5:81:ae:d3:4e:11:ad:70:20: 9d:3d:5b:71:db:af:87:26:ab:59:78:42:18:ba:cd:b1:34:eb: 8c:a8:37:d9:fc:09:57:ab:f9:8b:94:d2:bf:40:0d:ba:cc:25: e7:ce:2e:f5:ed:f5:a3:0d:b4:54:ca:70:f7:25:01:7b:49:66: a2:6f:a2:dc:1f:1a:e7:74:18:ab:6e:fa:28:3b:7e:73:2d:40: 7e:2a:6f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWdKfqvfxV1CB0a0OmybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDdmMTNkOTE2NzZlZWMxZGM5YWNjODcyMzE2ZDYyYWM3 NzlkN2IwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD Eyg4NTI4MjY2ZjFhMTA3YzhlMGMzYzI2NzNkMDcwM2I1YTFiOWRlNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApED12FwEPwFI0g8PNqrDCmye6C9s nw7sk6qDoe31xhNMz5g9Hhx7c5/zaJqColSA3CwsIaSbEhyIjaZH/jax+Er0ZSG4 mRyXoqiBAmp/ndFnHJh+oUttDJgoOZwlcOgRYobFxBdawBiECRe3PJj8GLaPz3/k KtCWYFG0VzWmDfgikxeIgxm6J7Ubbjds8/s2H8U85hA4Wp2rkm5aYj9KsDqLErrb BQ9fzT0C9EN7amh0h/isyY0UfAAQdpdmliwp7LRIxEQ1l7/0eQNzDWwpnyAaKiak Fz/BldlEVeUbLzXn+oEaQ8dwFr+S6DaKvX2gRtF2WQD2efLdl6FJXQ5GNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUoJm8aEHyODDwmc9BwO1obneUMMB8GA1UdIwQY MBaAFOXX8T2RZ27sHcmsyHIxbWKsd517MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yZjU0MWMtZWExMi00NDZmLWJlYTQt YTgyYTE1M2FiMTNlLzEvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yZjU0MWMtZWExMi00NDZmLWJlYTQtYTgyYTE1M2FiMTNl LzEvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat68tPhK gEXLTna/JDsK1wrxkWoIQP/DXcgJI1E0eAhXwx0l9Q2rIfb5vUcFxSvAmSHknCjX UQdU7ax1ughXGPyrwn+F/ofIYejy+F2o3GcKvSneSD/oabc31DlzJ1RSELFpBa8p eAE2ymoD7ofxyBFxYIgKUGvisOqwAK06mSkdemF9yFW4jW/zCS0WMofMpXCwmNK9 x7pw7V/D4IfFFso2O040CChVPaQY5YGu004RrXAgnT1bcduvhyarWXhCGLrNsTTr jKg32fwJV6v5i5TSv0ANuswl584u9e31ow20VMpw9yUBe0lmom+i3B8a53QYq276 KDt+cy1Afipv4g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:09 2026 by rpki-client