This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json) Hash identifier: Kt/b4kjmmyU+7QwBKMfRaxUAtzqDTXasveypCSCajL4= Subject key identifier: B2:55:53:70:73:72:20:A3:43:17:F9:52:A1:4B:85:DB:F1:8B:84:F1 Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Certificate serial: 019C42467431D410AC759220EB6E360B6CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft Manifest number: 37 Signing time: Mon 09 Feb 2026 12:00:39 +0000 Manifest this update: Mon 09 Feb 2026 12:00:39 +0000 Manifest next update: Tue 10 Feb 2026 12:00:39 +0000 Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: O6+K9rBb50wILl97cwR4JD54udZ3kmlnIWrUPqcVhEE=) 2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:74:31:d4:10:ac:75:92:20:eb:6e:36:0b:6c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Validity Not Before: Feb 9 12:00:39 2026 GMT Not After : Feb 10 12:00:39 2026 GMT Subject: CN=b2555370737220a34317f952a14b85dbf18b84f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:77:10:94:75:e5:ba:9d:ea:26:f8:cc:17: 77:9f:c7:f4:4b:cd:a7:50:54:0c:c5:00:bb:30:a4: 52:d7:41:8a:de:96:69:65:e2:89:4c:9d:08:2b:b2: cc:50:eb:65:a7:b7:58:8c:8e:a9:aa:eb:d6:81:c2: 70:76:e2:55:7f:f0:30:30:27:f9:81:bc:7f:18:e3: 19:a9:ef:5b:d2:74:de:9f:61:5b:07:f5:d5:e9:4f: a9:d2:61:fe:b6:77:db:20:7a:77:ba:08:79:38:ce: 18:38:47:b8:72:fd:ce:0b:7d:b7:ae:65:a7:6f:5f: 08:ca:d1:a3:17:94:dc:48:98:10:c5:dc:f6:a0:b1: 97:15:5e:af:20:bc:6c:14:0b:5b:b5:9a:78:1c:6e: d0:fb:f2:0e:9e:8c:aa:5a:7a:40:75:cb:93:14:c8: 96:d3:6c:61:15:8d:64:0b:55:85:d9:7c:7f:8a:74: e8:e5:b8:85:ea:1a:0f:24:11:f3:63:d3:fc:b4:0d: ee:d2:0f:3d:31:a6:2c:4a:1a:1b:57:05:b7:7e:25: 6a:63:55:f7:db:99:1a:61:1c:35:99:74:5b:8a:8e: fe:4c:d2:24:d8:30:73:99:c6:8d:97:5e:92:5f:5f: 2f:39:a4:6b:42:80:53:60:60:d3:fe:0f:eb:ba:4b: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:55:53:70:73:72:20:A3:43:17:F9:52:A1:4B:85:DB:F1:8B:84:F1 X509v3 Authority Key Identifier: keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:23:01:4d:a3:79:5d:c1:2b:b5:d0:e9:81:cf:34:64:bc:94: f6:39:6b:71:13:80:5b:a0:c1:1f:3d:b9:a7:39:67:56:f1:78: 43:ca:23:6d:57:bf:e7:59:35:98:35:c2:42:80:f2:9c:60:43: 6c:d5:c4:aa:ea:49:98:62:13:67:dc:58:31:5e:9b:44:a2:6f: 11:46:ed:1d:bb:b9:16:1c:22:93:75:be:30:cc:b6:05:40:7c: 2c:37:6c:57:83:d9:cc:cc:7d:07:94:eb:33:56:7f:87:a0:09: 45:d7:34:11:bd:1c:93:0a:7e:96:1b:5b:aa:6c:30:6e:54:a4: 7c:1a:78:2f:5e:40:82:9d:30:21:67:a1:93:ed:00:ed:de:25: cd:6d:1b:1c:92:50:c6:c0:2b:13:0e:13:51:e7:8e:b1:fa:f4: 93:0a:91:10:b1:25:17:8b:32:49:ae:f0:39:fa:2f:59:60:e7: fb:74:16:1b:56:5b:b9:a0:b9:46:97:8f:e3:3f:c7:80:f9:12: fa:13:aa:0a:34:62:b0:df:31:47:c9:d9:46:dc:d0:d8:5a:7d: 28:20:ac:ec:c3:c1:ae:59:5e:7b:e6:64:70:48:b6:6e:cb:72: c0:3a:60:f4:4e:3f:2f:3b:c5:49:3d:80:77:a3:48:87:40:c6: 14:0d:74:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnQx1BCsdZIg6242C2z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YjVkYzk3YjgwMWZhMGZmYjkzMDA1Y2NiZjRkNjcyN2I3 NTE5MmEwHhcNMjYwMjA5MTIwMDM5WhcNMjYwMjEwMTIwMDM5WjAzMTEwLwYDVQQD EyhiMjU1NTM3MDczNzIyMGEzNDMxN2Y5NTJhMTRiODVkYmYxOGI4NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsB3EJR15bqd6ib4zBd3n8f0S82n UFQMxQC7MKRS10GK3pZpZeKJTJ0IK7LMUOtlp7dYjI6pquvWgcJwduJVf/AwMCf5 gbx/GOMZqe9b0nTen2FbB/XV6U+p0mH+tnfbIHp3ugh5OM4YOEe4cv3OC323rmWn b18IytGjF5TcSJgQxdz2oLGXFV6vILxsFAtbtZp4HG7Q+/IOnoyqWnpAdcuTFMiW 02xhFY1kC1WF2Xx/inTo5biF6hoPJBHzY9P8tA3u0g89MaYsShobVwW3fiVqY1X3 25kaYRw1mXRbio7+TNIk2DBzmcaNl16SX18vOaRrQoBTYGDT/g/rukvsMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJVU3BzciCjQxf5UqFLhdvxi4TxMB8GA1UdIwQY MBaAFOa13Je4AfoP+5MAXMv01nJ7dRkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUt Njk5NjIxZTAwZjQ2LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUtNjk5NjIxZTAwZjQ2 LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyMBTaN5 XcErtdDpgc80ZLyU9jlrcROAW6DBHz25pzlnVvF4Q8ojbVe/51k1mDXCQoDynGBD bNXEqupJmGITZ9xYMV6bRKJvEUbtHbu5Fhwik3W+MMy2BUB8LDdsV4PZzMx9B5Tr M1Z/h6AJRdc0Eb0ckwp+lhtbqmwwblSkfBp4L15Agp0wIWehk+0A7d4lzW0bHJJQ xsArEw4TUeeOsfr0kwqRELElF4sySa7wOfovWWDn+3QWG1ZbuaC5RpeP4z/HgPkS +hOqCjRisN8xR8nZRtzQ2Fp9KCCs7MPBrllee+ZkcEi2bstywDpg9E4/LzvFST2A d6NIh0DGFA10Mg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:18 2026 by rpki-client