This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json) Hash identifier: I68mO9qOAEeA7b2DStKf0p4Vxo197d6PBs7aCT01Uqg= Subject key identifier: 2F:B2:E4:AB:BF:F8:09:05:94:41:E7:FB:D2:CA:56:D8:29:E9:4A:3D Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b Certificate serial: 019C432268A620CDA6DB3BAFD7FF43AECC93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:54 +0000 Manifest this update: Mon 09 Feb 2026 16:00:54 +0000 Manifest next update: Tue 10 Feb 2026 16:00:54 +0000 Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: DoUs2TXg+FSieiv3CvZq9lG8Y2Witw5pIszBKiYyJBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:68:a6:20:cd:a6:db:3b:af:d7:ff:43:ae:cc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b Validity Not Before: Feb 9 16:00:54 2026 GMT Not After : Feb 10 16:00:54 2026 GMT Subject: CN=2fb2e4abbff809059441e7fbd2ca56d829e94a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:ac:7d:76:64:38:0a:5f:22:0e:e6:54:ac: ed:41:bc:2c:8b:7a:0d:e0:c0:42:0a:c3:df:0c:b9: 38:60:7d:43:76:f1:0e:e1:eb:26:c3:46:3c:3e:7d: 5d:24:8d:ea:14:f4:8f:f6:78:1f:f5:ab:85:88:14: a6:9e:e2:c3:7a:c9:76:31:dc:8d:71:dd:fa:03:47: 29:fe:45:a9:a0:3b:93:91:69:4b:00:20:6f:65:be: bf:58:a0:24:63:3c:91:d4:a6:69:3f:2e:cd:36:6f: c0:74:1a:4f:a0:07:b1:4e:84:8d:39:16:b0:f4:18: 69:8f:06:9f:7e:42:e2:21:42:f8:c3:c8:36:4a:ee: bf:d7:e4:8d:c9:d3:4b:96:06:92:3d:49:12:23:37: fd:16:7a:8a:6c:c8:03:b5:49:1c:58:c5:5c:1d:31: 39:cf:44:ee:be:1b:27:62:29:5e:87:9f:a6:8f:0d: c7:4e:b0:8f:9d:ed:85:09:34:9b:e3:cb:ec:a5:28: 8e:31:07:b3:6a:e8:56:a1:17:4e:14:12:67:69:80: 30:96:e7:a5:5e:d3:ce:8e:94:b4:3f:dd:93:6d:2d: d4:9b:7a:28:11:5d:7e:b1:56:e9:58:59:5c:94:aa: 06:b1:c9:57:66:f0:73:b9:60:13:4e:3a:a5:bd:44: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:E4:AB:BF:F8:09:05:94:41:E7:FB:D2:CA:56:D8:29:E9:4A:3D X509v3 Authority Key Identifier: keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b8:e7:0e:54:55:ac:11:ec:f4:65:ac:c2:70:63:da:28:4e: 69:97:c1:30:f1:33:13:d5:f6:a5:0d:c2:63:49:9c:76:14:54: 21:c7:c0:a7:6c:f9:55:8f:12:26:da:a8:77:5e:61:ee:8f:e0: 54:91:f6:e7:68:47:16:85:10:d4:c3:ce:ac:c4:77:b0:55:65: 2f:8e:8f:dc:a1:84:e5:e8:00:c3:c5:46:fa:ca:76:94:d6:dc: ae:b7:d2:00:b5:80:c2:94:01:a7:5f:db:f7:59:9c:9b:86:8e: f9:5b:00:9d:1f:cf:e2:b7:42:bf:68:ea:2d:bb:a3:0d:50:e3: 3e:ea:26:c2:51:61:2b:3c:f3:1c:43:21:bd:77:b3:19:d1:3b: 4e:98:1a:5d:f6:2c:1c:bb:59:10:ad:29:5c:83:b7:63:44:e6: 37:fb:6a:bf:d3:c2:ed:85:e9:bd:1e:ea:32:d0:b0:77:e4:a1: b7:f6:35:86:98:6d:9c:e5:a9:44:57:80:f3:88:a0:3d:f3:2f: f6:ff:de:2c:17:3a:78:32:a6:25:45:7e:cd:6b:ec:13:5a:9b: d6:1b:f5:06:77:b6:a6:19:0f:9d:05:f7:d7:db:35:04:3c:e0: c1:ba:7b:4b:73:4e:32:a4:0c:fb:9d:5d:f6:76:f1:74:80:b3: 52:0d:07:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImimIM2m2zuv1/9DrsyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0 YmM0NGIwHhcNMjYwMjA5MTYwMDU0WhcNMjYwMjEwMTYwMDU0WjAzMTEwLwYDVQQD EygyZmIyZTRhYmJmZjgwOTA1OTQ0MWU3ZmJkMmNhNTZkODI5ZTk0YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKisfXZkOApfIg7mVKztQbwsi3oN 4MBCCsPfDLk4YH1DdvEO4esmw0Y8Pn1dJI3qFPSP9ngf9auFiBSmnuLDesl2MdyN cd36A0cp/kWpoDuTkWlLACBvZb6/WKAkYzyR1KZpPy7NNm/AdBpPoAexToSNORaw 9BhpjwaffkLiIUL4w8g2Su6/1+SNydNLlgaSPUkSIzf9FnqKbMgDtUkcWMVcHTE5 z0TuvhsnYileh5+mjw3HTrCPne2FCTSb48vspSiOMQezauhWoRdOFBJnaYAwluel XtPOjpS0P92TbS3Um3ooEV1+sVbpWFlclKoGsclXZvBzuWATTjqlvUSJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+y5Ku/+AkFlEHn+9LKVtgp6Uo9MB8GA1UdIwQY MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7jnDlRV rBHs9GWswnBj2ihOaZfBMPEzE9X2pQ3CY0mcdhRUIcfAp2z5VY8SJtqod15h7o/g VJH252hHFoUQ1MPOrMR3sFVlL46P3KGE5egAw8VG+sp2lNbcrrfSALWAwpQBp1/b 91mcm4aO+VsAnR/P4rdCv2jqLbujDVDjPuomwlFhKzzzHEMhvXezGdE7TpgaXfYs HLtZEK0pXIO3Y0TmN/tqv9PC7YXpvR7qMtCwd+Sht/Y1hphtnOWpRFeA84igPfMv 9v/eLBc6eDKmJUV+zWvsE1qb1hv1Bne2phkPnQX319s1BDzgwbp7S3NOMqQM+51d 9nbxdICzUg0Hsw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:07 2026 by rpki-client