This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json) Hash identifier: kVdCHZHVJRflF1Q2DYLdM4tOwiOmmLEYU1Fnf8RPpkE= Subject key identifier: D4:AB:03:F2:0D:98:1D:28:E0:8B:86:07:AD:9E:70:67:FF:25:D0:81 Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70 Certificate serial: 019C435958193FA40177C403E7A0DBD571F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft Manifest number: 0747 Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: 8RqvgBvjePHwSvi01hcwRXf0pFfxjUMS7YCS6TCByYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:58:19:3f:a4:01:77:c4:03:e7:a0:db:d5:71:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=d4ab03f20d981d28e08b8607ad9e7067ff25d081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:f6:bf:7e:ec:08:8c:1b:c9:75:39:53:99: 63:a7:62:fb:8b:a6:84:5c:85:b0:bb:ac:4c:83:34: fb:26:26:06:41:5b:60:2b:50:55:6a:14:3d:31:e8: 30:8a:f2:d8:ec:e6:2b:f3:f8:8e:36:f5:bd:85:62: 18:0e:a6:3f:e5:61:15:9a:5d:df:bc:a0:df:eb:ba: 82:40:29:32:71:fc:73:8b:a0:40:f7:82:0c:2a:e9: 3d:7a:76:94:e8:5b:4b:27:5d:32:46:5a:06:42:29: c8:13:98:7f:ac:e8:e2:34:06:d1:15:f8:ba:fb:5e: 3a:25:e3:8b:cf:a3:e4:d7:de:af:b5:d0:8d:9e:59: 0b:4a:ea:89:61:da:68:a1:50:5a:1d:16:96:68:76: 4e:11:11:bb:89:26:e8:b8:94:96:eb:b7:13:70:99: ab:6c:0f:dc:cd:96:51:8d:f8:89:cb:bc:49:6d:fb: f5:f1:d0:1c:05:11:12:b7:c3:81:ad:90:b9:82:6e: fb:34:e5:d8:01:60:1b:b0:28:b3:a5:78:22:34:72: 25:7b:0b:12:7e:e5:96:28:a2:e4:94:de:fc:ea:d2: 6a:ee:c1:fb:3a:dd:ca:21:30:20:9c:49:d8:9b:59: 4b:3f:aa:56:e6:23:f9:ce:32:d4:af:60:31:ad:49: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:03:F2:0D:98:1D:28:E0:8B:86:07:AD:9E:70:67:FF:25:D0:81 X509v3 Authority Key Identifier: keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:34:db:e1:57:f3:91:22:2d:24:e6:2f:3b:d0:24:67:5b:b1: 33:a3:c7:2d:07:7f:70:9b:49:8e:08:19:23:a0:58:5f:7d:c1: 21:18:02:a1:fe:87:aa:f9:27:dc:83:42:73:66:c4:2e:a3:38: e5:f7:6b:93:8e:f3:ce:0a:fe:b1:c0:7a:b3:5f:65:1f:5c:07: f8:0b:88:eb:84:b6:bd:1a:cc:e7:89:41:3d:10:f0:fb:f6:97: 8e:5b:15:81:ff:60:b9:19:ef:fe:ba:ea:99:27:00:b9:63:c6: e9:ee:b4:df:8e:e6:24:f3:14:1d:df:f0:7c:f5:da:f7:46:e9: 4b:23:82:c6:c1:76:ff:69:68:5f:39:11:2c:d9:34:5a:0e:cf: fb:8c:79:70:a4:72:2b:cc:3c:1f:34:c0:93:a1:b2:6b:45:1e: 20:5d:63:4e:09:8b:57:a2:35:8e:fd:a1:6a:bb:ee:88:be:b8: a2:8f:5b:a4:90:40:00:1f:e5:ce:d9:86:b9:7d:70:8c:43:11: ba:9c:94:b3:b1:5d:0f:8e:1d:fe:23:03:3b:8e:0d:2b:82:ae: a7:1e:36:96:18:b9:23:41:91:cf:6f:2a:ad:53:b0:d7:f5:e6: 18:b0:ed:fa:dd:30:d1:44:91:98:83:8e:b3:86:36:1f:b4:8f: e3:0f:6d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVgZP6QBd8QD56Db1XHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz ZTVmNzAwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD EyhkNGFiMDNmMjBkOTgxZDI4ZTA4Yjg2MDdhZDllNzA2N2ZmMjVkMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ72v37sCIwbyXU5U5ljp2L7i6aE XIWwu6xMgzT7JiYGQVtgK1BVahQ9MegwivLY7OYr8/iONvW9hWIYDqY/5WEVml3f vKDf67qCQCkycfxzi6BA94IMKuk9enaU6FtLJ10yRloGQinIE5h/rOjiNAbRFfi6 +146JeOLz6Pk196vtdCNnlkLSuqJYdpooVBaHRaWaHZOERG7iSbouJSW67cTcJmr bA/czZZRjfiJy7xJbfv18dAcBRESt8OBrZC5gm77NOXYAWAbsCizpXgiNHIlewsS fuWWKKLklN786tJq7sH7Ot3KITAgnEnYm1lLP6pW5iP5zjLUr2AxrUk2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSrA/INmB0o4IuGB62ecGf/JdCBMB8GA1UdIwQY MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1 LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzTb4Vfz kSItJOYvO9AkZ1uxM6PHLQd/cJtJjggZI6BYX33BIRgCof6Hqvkn3INCc2bELqM4 5fdrk47zzgr+scB6s19lH1wH+AuI64S2vRrM54lBPRDw+/aXjlsVgf9guRnv/rrq mScAuWPG6e60347mJPMUHd/wfPXa90bpSyOCxsF2/2loXzkRLNk0Wg7P+4x5cKRy K8w8HzTAk6Gya0UeIF1jTgmLV6I1jv2harvuiL64oo9bpJBAAB/lztmGuX1wjEMR upyUs7FdD44d/iMDO44NK4Kupx42lhi5I0GRz28qrVOw1/XmGLDt+t0w0USRmIOO s4Y2H7SP4w9tVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:57 2026 by rpki-client