This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json) Hash identifier: fe6Vqi1C+T+bTWRiE5Bji8rhFxKhvc1meT3uj626dn4= Subject key identifier: B5:F3:75:FC:1C:E3:9F:C6:96:62:60:F4:B5:D6:F9:E0:ED:1A:87:02 Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Certificate serial: 019C4322B73C6BBDC6E29BF8693307400841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft Manifest number: 0CD5 Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: kSI+FlB1FyVEUh0wWBFQ1/wgZiKltOPi6IP10kl8mXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b7:3c:6b:bd:c6:e2:9b:f8:69:33:07:40:08:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=b5f375fc1ce39fc6966260f4b5d6f9e0ed1a8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:91:31:ad:8e:d3:61:18:f9:7c:67:75:7c: a1:50:80:20:a1:0b:23:4f:06:d3:15:6b:0e:ee:d7: ec:af:52:e8:03:f6:34:16:7f:0e:ee:d5:5e:29:f3: 7f:8c:c0:e1:0a:4c:44:1e:64:b5:7e:b6:6b:16:bb: dd:bd:2f:b4:69:ca:27:1e:05:20:a8:44:f1:ad:03: 53:00:40:96:45:a9:49:61:9e:48:25:87:b0:e8:a7: bf:90:80:d6:f8:16:c0:2e:6e:29:54:a4:ad:65:f6: ff:2b:53:a1:ee:55:76:57:54:6c:18:1c:60:93:62: 46:12:ce:0f:0f:e0:16:8e:33:4d:52:79:62:31:58: bc:4a:e2:12:89:a1:77:0d:e1:b7:fd:87:26:e1:48: 35:33:83:0f:a8:8c:b7:37:f7:8b:d1:4a:27:05:b6: a8:43:d2:ae:d9:ae:14:c4:6a:90:d7:60:92:ca:81: 8d:49:89:4a:44:58:0f:b8:df:f4:18:d6:6c:4d:7a: f1:76:da:92:a9:96:53:48:27:b5:6f:b0:1e:ca:7c: eb:bf:ad:ee:e3:8f:75:33:38:0b:23:eb:3e:38:40: 5a:7c:f8:c5:b6:14:b1:5d:42:b9:be:07:b1:10:83: c6:42:4c:70:48:26:df:ce:5e:54:fe:e4:8c:29:d6: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:75:FC:1C:E3:9F:C6:96:62:60:F4:B5:D6:F9:E0:ED:1A:87:02 X509v3 Authority Key Identifier: keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:5d:ad:9b:5f:54:5a:96:03:f2:a1:e5:4b:ba:bd:19:c1: 69:78:46:3a:0e:7b:76:98:d2:ef:77:56:57:a3:bd:32:3b:21: b7:84:d2:cc:aa:b7:f0:13:e2:76:67:98:73:ae:a6:f2:19:2f: aa:22:5b:ba:c5:c7:a2:c4:0d:0b:cc:45:20:aa:cc:0f:4a:65: 13:45:fc:dc:67:97:36:ad:13:41:0a:1c:3e:65:0d:f1:58:1f: 43:b5:13:39:bc:0d:03:e9:97:bf:b6:c5:95:42:8d:af:8c:de: 05:57:b6:a9:8a:38:a6:5f:94:e4:54:a0:9b:75:3a:73:5d:7d: 52:3e:64:cc:ab:66:3f:cd:6b:6e:6c:a9:0d:ac:07:9d:ba:2e: ac:06:d1:85:46:30:3e:09:1f:36:e2:7b:d0:b7:2a:7e:f4:d1: 26:e7:42:3a:46:b7:3d:2b:c4:3f:7f:39:33:94:63:6b:c8:92: 91:80:8a:12:e2:96:a6:7a:dd:2c:c4:91:b1:20:85:70:92:38: 4e:b8:48:bb:61:11:3d:a4:63:9d:5e:1b:bc:81:6d:85:c5:1c: 68:cc:b1:5b:45:0b:7c:6f:d2:4b:29:48:48:3a:05:7f:50:62: 18:44:73:cd:7e:80:91:99:d1:98:42:52:00:d3:5e:ba:a5:fc: f3:d9:d6:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrc8a73G4pv4aTMHQAhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTEzNjMyNjgwOWYwNjg3ZjdkN2Q0ZGMxYTgxYjdiOTlh M2Q3ZDMwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD EyhiNWYzNzVmYzFjZTM5ZmM2OTY2MjYwZjRiNWQ2ZjllMGVkMWE4NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZuRMa2O02EY+XxndXyhUIAgoQsj TwbTFWsO7tfsr1LoA/Y0Fn8O7tVeKfN/jMDhCkxEHmS1frZrFrvdvS+0aconHgUg qETxrQNTAECWRalJYZ5IJYew6Ke/kIDW+BbALm4pVKStZfb/K1Oh7lV2V1RsGBxg k2JGEs4PD+AWjjNNUnliMVi8SuISiaF3DeG3/Ycm4Ug1M4MPqIy3N/eL0UonBbao Q9Ku2a4UxGqQ12CSyoGNSYlKRFgPuN/0GNZsTXrxdtqSqZZTSCe1b7Aeynzrv63u 4491MzgLI+s+OEBafPjFthSxXUK5vgexEIPGQkxwSCbfzl5U/uSMKdY6CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXzdfwc45/GlmJg9LXW+eDtGocCMB8GA1UdIwQY MBaAFBuRNjJoCfBof319TcGoG3uZo9fTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAt NTliNTNiM2E2ZGExLzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAtNTliNTNiM2E2ZGEx LzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTJdrZtf VFqWA/Kh5Uu6vRnBaXhGOg57dpjS73dWV6O9Mjsht4TSzKq38BPidmeYc66m8hkv qiJbusXHosQNC8xFIKrMD0plE0X83GeXNq0TQQocPmUN8VgfQ7UTObwNA+mXv7bF lUKNr4zeBVe2qYo4pl+U5FSgm3U6c119Uj5kzKtmP81rbmypDawHnbourAbRhUYw PgkfNuJ70LcqfvTRJudCOka3PSvEP385M5Rja8iSkYCKEuKWpnrdLMSRsSCFcJI4 TrhIu2ERPaRjnV4bvIFthcUcaMyxW0ULfG/SSylISDoFf1BiGERzzX6AkZnRmEJS ANNeuqX889nW/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:17 2026 by rpki-client