This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json) Hash identifier: S23GXN9Yaxh2o5DVDaNVG90thicESXd98iMc/C7gtMg= Subject key identifier: D3:E1:8C:04:16:B1:EA:11:5D:3B:89:C8:9D:B3:72:F6:2D:E1:B0:13 Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Certificate serial: 019C4322E6756BA66E49AC315FCAB10EF8E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft Manifest number: 12C7 Signing time: Mon 09 Feb 2026 16:01:26 +0000 Manifest this update: Mon 09 Feb 2026 16:01:26 +0000 Manifest next update: Tue 10 Feb 2026 16:01:26 +0000 Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: drGOF8mP1jzt6pEUIfVfEykP1DEMxcVIPoydvLqgSRk=) 2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e6:75:6b:a6:6e:49:ac:31:5f:ca:b1:0e:f8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Validity Not Before: Feb 9 16:01:26 2026 GMT Not After : Feb 10 16:01:26 2026 GMT Subject: CN=d3e18c0416b1ea115d3b89c89db372f62de1b013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:30:5f:b7:2f:e2:bd:60:a8:2c:1e:e5:f8: 52:31:46:ed:68:88:63:ac:ec:ed:8f:c5:c0:6b:3b: 40:05:7d:1e:3d:aa:27:1f:85:0c:04:f8:f9:13:18: f1:e2:9f:72:0f:83:42:26:71:80:5e:b7:c2:57:91: de:43:75:91:71:ac:20:d4:72:d5:da:a5:50:45:04: e9:e7:24:48:21:77:7d:25:63:1a:ef:ac:20:16:a4: a4:9f:25:c4:00:b0:e7:0e:d1:cf:da:62:cf:59:b3: af:13:82:80:ee:99:53:fd:21:1a:63:94:04:da:66: dc:36:9c:c3:00:f6:5c:4a:06:bf:db:14:1d:23:1c: 8a:66:a9:20:01:c0:02:f9:ae:f3:6e:f2:fa:63:d6: 48:86:a0:0a:d8:f6:99:d5:5e:34:5e:21:6e:3b:2f: cc:87:4f:aa:ba:cb:46:95:41:dd:7b:cc:3a:db:5a: 08:d3:3c:33:5c:ea:9b:58:16:6e:be:aa:a2:6b:ac: 48:da:73:11:a1:ff:20:12:e8:6d:cc:ad:22:c7:a8: 5a:8f:05:81:d4:77:93:17:f4:ac:f8:99:0b:53:88: 6a:d1:76:c2:75:e8:ab:d6:9e:93:ea:b0:c2:86:a4: af:35:7c:0e:0a:75:22:ed:4a:92:f0:53:a0:44:8b: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:8C:04:16:B1:EA:11:5D:3B:89:C8:9D:B3:72:F6:2D:E1:B0:13 X509v3 Authority Key Identifier: keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2b:45:f5:a3:b6:37:b9:cd:e1:a9:c6:97:3a:34:b1:c3:60: 95:d3:5f:23:11:37:15:77:1c:0a:e7:99:d7:23:b2:6d:f0:7d: 75:74:a6:3b:78:df:fa:f2:7a:26:c5:ed:6a:5a:b5:3b:79:5f: d6:74:8e:e4:ea:15:e0:6f:07:b1:e7:23:66:78:01:4e:cc:4d: b5:2c:64:8a:92:48:9c:8f:3e:a1:85:90:3e:7f:34:b6:60:88: 6e:5c:d6:13:77:95:d4:b0:a3:15:32:4a:76:77:f7:d3:37:d6: ea:4b:6a:4d:5c:fb:d9:0e:49:5a:d4:ef:de:5b:f5:5d:1a:33: 43:99:09:48:86:7c:66:25:04:f1:09:5a:08:8c:f1:cc:dd:67: c2:f6:7b:af:d3:9e:93:f8:b6:a4:18:af:86:13:41:ae:1f:2b: c4:67:f9:10:8f:9c:db:f5:b8:6e:18:60:d0:b8:37:a1:e7:23: 1f:30:a0:63:78:d6:ca:c3:63:4d:9a:51:fb:ed:8f:a0:63:29: fb:0e:3a:d1:99:32:55:91:0d:ec:04:2b:6d:41:1e:1a:31:6b: c4:2c:15:bb:c4:60:05:1b:62:1f:6e:4b:45:60:4a:58:d6:5d: a5:86:cc:ba:e7:c2:67:d9:ba:d4:ee:bc:91:6a:54:7c:8f:40: 40:5c:f9:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuZ1a6ZuSawxX8qxDvjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0 NzQyMmYwHhcNMjYwMjA5MTYwMTI2WhcNMjYwMjEwMTYwMTI2WjAzMTEwLwYDVQQD EyhkM2UxOGMwNDE2YjFlYTExNWQzYjg5Yzg5ZGIzNzJmNjJkZTFiMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSEwX7cv4r1gqCwe5fhSMUbtaIhj rOztj8XAaztABX0ePaonH4UMBPj5Exjx4p9yD4NCJnGAXrfCV5HeQ3WRcawg1HLV 2qVQRQTp5yRIIXd9JWMa76wgFqSknyXEALDnDtHP2mLPWbOvE4KA7plT/SEaY5QE 2mbcNpzDAPZcSga/2xQdIxyKZqkgAcAC+a7zbvL6Y9ZIhqAK2PaZ1V40XiFuOy/M h0+qustGlUHde8w621oI0zwzXOqbWBZuvqqia6xI2nMRof8gEuhtzK0ix6hajwWB 1HeTF/Ss+JkLU4hq0XbCdeir1p6T6rDChqSvNXwOCnUi7UqS8FOgRItfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPhjAQWseoRXTuJyJ2zcvYt4bATMB8GA1UdIwQY MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZitF9aO2 N7nN4anGlzo0scNgldNfIxE3FXccCueZ1yOybfB9dXSmO3jf+vJ6JsXtalq1O3lf 1nSO5OoV4G8HsecjZngBTsxNtSxkipJInI8+oYWQPn80tmCIblzWE3eV1LCjFTJK dnf30zfW6ktqTVz72Q5JWtTv3lv1XRozQ5kJSIZ8ZiUE8QlaCIzxzN1nwvZ7r9Oe k/i2pBivhhNBrh8rxGf5EI+c2/W4bhhg0Lg3oecjHzCgY3jWysNjTZpR++2PoGMp +w460ZkyVZEN7AQrbUEeGjFrxCwVu8RgBRtiH25LRWBKWNZdpYbMuufCZ9m61O68 kWpUfI9AQFz5BQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:08 2026 by rpki-client