This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft File: 5weSQnGbdzi4P0kUerH1gp93ahU.mft (raw, json) Hash identifier: pRCwUGP3PYoQLmP+knopVyZHRUNTshWGx/rY6rxnnlU= Subject key identifier: 15:B8:35:B5:2D:D9:AC:6A:8C:5E:46:28:AD:11:74:59:4D:37:B9:01 Authority key identifier: E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15 Certificate issuer: /CN=e7079242719b7738b83f49147ab1f5829f776a15 Certificate serial: 019C420FBCD4B4F2F7A9095E71A792485AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft Manifest number: 01DA Signing time: Mon 09 Feb 2026 11:00:53 +0000 Manifest this update: Mon 09 Feb 2026 11:00:53 +0000 Manifest next update: Tue 10 Feb 2026 11:00:53 +0000 Files and hashes: 1: 5weSQnGbdzi4P0kUerH1gp93ahU.crl (hash: 22kmiEetCW3Lw9ZvdtmGYwwxNfuNg82ZXNVGyepeVvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:bc:d4:b4:f2:f7:a9:09:5e:71:a7:92:48:5a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7079242719b7738b83f49147ab1f5829f776a15 Validity Not Before: Feb 9 11:00:53 2026 GMT Not After : Feb 10 11:00:53 2026 GMT Subject: CN=15b835b52dd9ac6a8c5e4628ad1174594d37b901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:ee:a1:27:72:3b:d9:e1:7c:99:e2:50:88: b9:48:4b:3e:60:1f:23:a9:e3:d8:61:d1:d3:90:a1: ac:f1:1b:1e:81:cb:c4:0a:27:69:de:e2:f1:8a:e1: b9:01:85:6f:75:1a:f9:7f:f5:4b:7f:f0:7c:ac:41: 2b:e7:d7:47:ec:db:88:46:fb:b9:93:49:6d:25:72: 95:9a:7f:b4:96:70:2c:a1:37:91:84:4f:a6:55:1d: cb:c8:78:78:6c:df:9d:17:88:2d:62:c6:45:94:4b: 53:e3:c8:41:06:ac:c7:a5:d3:3e:25:db:31:e4:e3: 78:a3:63:b4:fe:7a:7d:1c:60:9e:4d:f6:85:37:26: 06:da:41:39:20:29:3b:0a:d5:eb:b1:c8:99:56:55: c4:4b:ad:93:14:f9:6e:93:11:3d:d1:ca:3b:9a:de: d1:84:5b:eb:e9:fa:e8:19:f9:30:be:99:8a:fc:db: 3f:be:26:00:d3:3b:89:fb:a5:d5:7a:11:55:4c:b5: 57:bb:03:21:5f:60:66:98:f6:d1:d2:81:b6:69:4b: 7d:f6:75:a3:89:f6:4f:a7:8d:1c:bb:69:32:c4:f5: 44:94:26:5c:ea:c6:f4:af:7c:e9:06:51:a2:3f:12: 0b:80:ce:c3:ce:e4:e3:31:2d:79:51:12:9e:f9:3a: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B8:35:B5:2D:D9:AC:6A:8C:5E:46:28:AD:11:74:59:4D:37:B9:01 X509v3 Authority Key Identifier: keyid:E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:76:ef:77:19:29:76:51:7a:c2:03:dd:e5:3c:0a:5f:da:5d: ac:89:d7:6f:80:e9:de:69:21:ff:3d:05:01:23:0c:51:e7:6e: 7d:51:41:ba:46:4d:92:41:38:fd:3e:40:ac:90:8c:6f:81:db: 6f:1e:dc:6e:e7:2a:d3:96:b3:0a:a6:a8:52:c2:8e:b9:7f:b5: 30:09:75:8e:e1:ea:5c:07:3b:e4:4b:12:17:8f:8f:84:30:8e: d8:9d:1c:77:f4:49:84:f4:53:67:de:e7:74:a5:8a:62:49:2c: fb:d0:3e:8b:6c:a9:76:d7:c1:7d:1a:bd:5a:62:3a:fb:01:18: d9:1d:fc:a7:81:b0:4d:8a:c9:68:91:82:fa:13:4e:8e:71:fe: 30:60:76:ba:68:8d:d9:c4:2b:f7:4f:08:bb:17:b4:a5:c9:bb: 44:2e:97:31:86:80:70:94:4d:32:b2:ff:d2:1e:b2:1f:f5:b3: 11:3e:09:45:f9:4f:d6:63:70:fd:92:2a:68:84:79:68:b1:47: 87:65:1d:90:88:15:9b:00:3e:0a:14:2f:8e:4a:4c:97:d1:68: 09:76:2b:09:84:10:ad:71:c9:2e:69:c6:ae:c1:f4:bb:58:14: bd:70:66:75:41:ca:cb:01:4b:28:15:2d:61:1c:d1:3a:77:f2: b7:d6:c9:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7zUtPL3qQlecaeSSFrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDc5MjQyNzE5Yjc3MzhiODNmNDkxNDdhYjFmNTgyOWY3 NzZhMTUwHhcNMjYwMjA5MTEwMDUzWhcNMjYwMjEwMTEwMDUzWjAzMTEwLwYDVQQD EygxNWI4MzViNTJkZDlhYzZhOGM1ZTQ2MjhhZDExNzQ1OTRkMzdiOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PLuoSdyO9nhfJniUIi5SEs+YB8j qePYYdHTkKGs8RsegcvECidp3uLxiuG5AYVvdRr5f/VLf/B8rEEr59dH7NuIRvu5 k0ltJXKVmn+0lnAsoTeRhE+mVR3LyHh4bN+dF4gtYsZFlEtT48hBBqzHpdM+Jdsx 5ON4o2O0/np9HGCeTfaFNyYG2kE5ICk7CtXrsciZVlXES62TFPlukxE90co7mt7R hFvr6froGfkwvpmK/Ns/viYA0zuJ+6XVehFVTLVXuwMhX2BmmPbR0oG2aUt99nWj ifZPp40cu2kyxPVElCZc6sb0r3zpBlGiPxILgM7DzuTjMS15URKe+TqXjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW4NbUt2axqjF5GKK0RdFlNN7kBMB8GA1UdIwQY MBaAFOcHkkJxm3c4uD9JFHqx9YKfd2oVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdlU1FuR2Jkemk0UDBrVWVySDFncDkzYWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYTU5YzktMTQ0Ni00Nzc5LWJlMGEt ZDUwZjI5MzA4NDY0LzEvNXdlU1FuR2Jkemk0UDBrVWVySDFncDkzYWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xYTU5YzktMTQ0Ni00Nzc5LWJlMGEtZDUwZjI5MzA4NDY0 LzEvNXdlU1FuR2Jkemk0UDBrVWVySDFncDkzYWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3bvdxkp dlF6wgPd5TwKX9pdrInXb4Dp3mkh/z0FASMMUedufVFBukZNkkE4/T5ArJCMb4Hb bx7cbucq05azCqaoUsKOuX+1MAl1juHqXAc75EsSF4+PhDCO2J0cd/RJhPRTZ97n dKWKYkks+9A+i2ypdtfBfRq9WmI6+wEY2R38p4GwTYrJaJGC+hNOjnH+MGB2umiN 2cQr908Iuxe0pcm7RC6XMYaAcJRNMrL/0h6yH/WzET4JRflP1mNw/ZIqaIR5aLFH h2UdkIgVmwA+ChQvjkpMl9FoCXYrCYQQrXHJLmnGrsH0u1gUvXBmdUHKywFLKBUt YRzROnfyt9bJww== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:36 2026 by rpki-client