This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json) Hash identifier: V+O+AmwicuW1SjNKLn6N5xfwNgQZCuBxo3QfO+mtJlE= Subject key identifier: 9F:49:83:E2:33:E5:95:30:FD:DD:69:D7:96:54:7B:FC:68:00:66:97 Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4 Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4 Certificate serial: 019C413431B20DCA40D6A51C39D38BBBDF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft Manifest number: 118D Signing time: Mon 09 Feb 2026 07:01:05 +0000 Manifest this update: Mon 09 Feb 2026 07:01:05 +0000 Manifest next update: Tue 10 Feb 2026 07:01:05 +0000 Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: DmS2mEvGDgd8ZxhpPN9/Nu/jjcEHT0mo8E8WdqvsOss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:31:b2:0d:ca:40:d6:a5:1c:39:d3:8b:bb:df:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4 Validity Not Before: Feb 9 07:01:05 2026 GMT Not After : Feb 10 07:01:05 2026 GMT Subject: CN=9f4983e233e59530fddd69d796547bfc68006697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:50:93:01:a5:05:f1:61:ae:bc:58:3a:04: ad:60:e4:8f:62:59:99:4a:6b:55:fb:d2:8b:7a:f4: 84:21:ff:f2:5c:61:89:cb:b2:d7:9c:8a:85:61:b1: c3:da:09:ea:fe:82:f3:78:3e:ca:66:50:88:bb:d0: 40:86:9b:f6:5f:dc:f2:0b:75:15:cd:62:d2:a6:eb: 84:45:86:db:e7:33:90:22:5e:9b:d5:e5:31:5d:34: 68:1d:a6:26:16:25:5b:af:a5:5d:37:31:a7:ea:cf: 8a:ca:d4:48:9a:1e:9c:e4:0b:aa:1d:99:4f:a0:31: 31:53:d7:40:a5:4e:4a:51:ae:38:57:98:3f:f0:74: 04:63:45:10:4a:46:af:7f:fe:03:35:43:e8:e4:9c: a7:38:d8:b1:aa:e0:65:0e:88:50:a3:c4:a0:c2:82: 2c:22:4d:14:8e:a5:9f:31:85:02:84:c4:dc:2b:4b: eb:7f:ec:bc:06:fe:78:72:50:3b:f9:41:52:df:5f: 36:a1:59:fb:8b:2d:72:16:82:56:f8:ec:da:a5:14: eb:83:a6:bb:6a:8a:c4:14:b0:8d:6d:17:7a:7d:11: 63:8a:da:7d:e1:2c:84:1f:27:58:54:2d:4a:cb:c8: e5:59:06:f2:46:9c:7d:90:12:3f:e4:a2:81:da:43: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:83:E2:33:E5:95:30:FD:DD:69:D7:96:54:7B:FC:68:00:66:97 X509v3 Authority Key Identifier: keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:78:49:12:91:46:3d:53:c4:b4:19:30:ac:19:eb:80:97:5f: 09:df:e8:ea:69:32:00:45:fa:e5:e2:cd:41:1d:74:31:c5:aa: d4:ed:64:f2:51:4d:08:93:d7:ad:da:94:ee:f9:e3:a0:55:e7: 4b:45:84:f6:a5:6f:3a:39:4a:f0:91:e6:ac:94:13:9e:f7:2c: 54:c7:8f:9e:56:30:5a:4f:79:c4:95:f1:30:9f:c0:5a:bc:2b: cb:db:63:45:d2:82:c6:43:c7:eb:33:57:73:83:fb:7b:36:81: cb:73:45:7b:0d:2b:b2:da:0d:e4:7e:05:73:ae:28:d8:92:63: f0:51:42:4f:03:6e:cf:d3:87:fa:6e:fc:eb:83:3a:35:92:a7: 07:ba:ff:41:d1:f9:bc:aa:fb:b7:32:2a:36:44:52:08:ac:2b: 9a:aa:18:43:fd:39:62:2d:8c:bb:8c:f1:28:f3:f6:d0:d4:18: 1b:e8:7d:5c:a4:f4:41:34:9e:0f:57:ed:32:1a:39:d4:1f:53: 05:6c:70:cf:e5:67:b2:4c:70:48:70:4f:81:d3:e8:3f:66:ed: e2:c6:99:27:c4:65:65:29:ae:d0:5c:3b:f0:a4:aa:9d:30:a3: ce:fe:4e:15:d1:7e:fe:1e:fc:0c:74:38:ec:1b:59:c4:d3:12: 2a:ab:f0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNDGyDcpA1qUcOdOLu993MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZWU2ZWMxYWYzZTg4NTU3ODBiNTdkNTBjMzNiNmM4ZWUz MzI0YTQwHhcNMjYwMjA5MDcwMTA1WhcNMjYwMjEwMDcwMTA1WjAzMTEwLwYDVQQD Eyg5ZjQ5ODNlMjMzZTU5NTMwZmRkZDY5ZDc5NjU0N2JmYzY4MDA2Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1plQkwGlBfFhrrxYOgStYOSPYlmZ SmtV+9KLevSEIf/yXGGJy7LXnIqFYbHD2gnq/oLzeD7KZlCIu9BAhpv2X9zyC3UV zWLSpuuERYbb5zOQIl6b1eUxXTRoHaYmFiVbr6VdNzGn6s+KytRImh6c5AuqHZlP oDExU9dApU5KUa44V5g/8HQEY0UQSkavf/4DNUPo5JynONixquBlDohQo8SgwoIs Ik0UjqWfMYUChMTcK0vrf+y8Bv54clA7+UFS3182oVn7iy1yFoJW+OzapRTrg6a7 aorEFLCNbRd6fRFjitp94SyEHydYVC1Ky8jlWQbyRpx9kBI/5KKB2kPDDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Jg+Iz5ZUw/d1p15ZUe/xoAGaXMB8GA1UdIwQY MBaAFLHubsGvPohVeAtX1QwztsjuMySkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjIt NjUyNjQ2MzY2NjkxLzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjItNjUyNjQ2MzY2Njkx LzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3hJEpFG PVPEtBkwrBnrgJdfCd/o6mkyAEX65eLNQR10McWq1O1k8lFNCJPXrdqU7vnjoFXn S0WE9qVvOjlK8JHmrJQTnvcsVMePnlYwWk95xJXxMJ/AWrwry9tjRdKCxkPH6zNX c4P7ezaBy3NFew0rstoN5H4Fc64o2JJj8FFCTwNuz9OH+m7864M6NZKnB7r/QdH5 vKr7tzIqNkRSCKwrmqoYQ/05Yi2Mu4zxKPP20NQYG+h9XKT0QTSeD1ftMho51B9T BWxwz+VnskxwSHBPgdPoP2bt4saZJ8RlZSmu0Fw78KSqnTCjzv5OFdF+/h78DHQ4 7BtZxNMSKqvw2A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:14 2026 by rpki-client