This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json) Hash identifier: nUwPtRJTk6fzODAJ/9/g4J/WtQDg0YpBH+u1nlSs5Rw= Subject key identifier: 9F:E3:EC:FD:25:F2:66:EC:10:C8:6E:2E:D3:C0:67:18:D8:79:64:B4 Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3 Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3 Certificate serial: 019C427DA71D2758A2C366016C50F08A9943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft Manifest number: 096B Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: dNtholjM0rJkoExbTXQl0PxW/BeXx7GeXpDOZlss/vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a7:1d:27:58:a2:c3:66:01:6c:50:f0:8a:99:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=9fe3ecfd25f266ec10c86e2ed3c06718d87964b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:04:c4:16:f8:6e:46:9d:ed:61:55:6d:17: 00:0b:1e:12:43:ff:e8:7f:33:a1:a2:45:6f:d0:0f: f1:22:f7:c0:bc:10:45:53:53:47:22:73:1a:5b:ef: 0e:86:81:e1:26:47:59:8d:28:87:5d:83:3d:b3:b2: 51:f7:38:b4:47:25:4f:f6:7d:a4:6c:9b:4c:80:50: 1d:b8:67:b3:4b:a6:b4:b0:41:c0:b0:37:5e:a9:08: bd:d1:c4:df:fa:fc:06:31:60:e7:28:6d:4d:d1:c3: de:f4:57:36:9e:0a:69:21:4b:a5:a3:a3:9d:1d:31: 5a:88:fd:91:cc:da:68:b9:ab:36:64:fa:4f:8a:5b: 5f:28:40:f9:9d:6c:b1:af:b5:62:c1:d5:8a:4c:f0: 06:26:79:0d:1d:db:e3:9e:13:60:ba:ac:9f:4b:d5: e3:84:3e:eb:41:ac:8c:cf:b7:50:4e:62:58:c1:c4: 1e:98:c4:fd:80:10:24:15:da:81:ee:76:ed:39:72: 0f:fc:7a:25:e4:f3:a1:c3:00:6a:0f:c7:30:9a:ab: 64:df:5c:a9:09:38:84:9b:b9:8b:48:0f:e1:34:fb: 9a:f3:00:82:40:ef:35:fd:90:09:52:88:17:1f:8a: 32:a0:44:ef:49:b6:c3:90:c2:0a:f6:8c:29:87:10: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:EC:FD:25:F2:66:EC:10:C8:6E:2E:D3:C0:67:18:D8:79:64:B4 X509v3 Authority Key Identifier: keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:22:e7:85:4b:e3:9d:69:d2:0f:c3:58:10:b6:9d:db:7b: 08:27:c3:56:67:70:11:c2:6b:a6:d2:9e:22:12:11:86:4c:0e: 25:06:43:1a:87:1b:d5:fa:3a:83:36:7f:6a:a3:63:4a:86:b7: bf:ab:21:8a:ac:a9:81:97:9f:40:c8:b2:ff:c4:21:e2:05:cc: 8b:60:2a:ea:48:a4:46:f8:ad:b4:e0:e5:8c:d9:a2:0b:3b:f5: 91:4f:62:99:51:1a:80:7d:9d:6b:cd:5e:ef:07:99:a2:f8:4a: 25:1d:2c:f5:e4:02:3a:2e:ae:d9:58:6c:4d:fc:68:2c:29:82: 70:4d:26:62:cd:24:c0:7f:65:d8:d2:e6:c3:c5:3a:f2:af:f0: 8b:61:78:c4:1f:70:1f:a4:0f:be:90:11:b7:22:a6:6d:9e:42: 54:2d:3b:a1:35:17:01:76:5b:da:90:4b:26:b0:e6:9e:06:80: 19:7a:fd:5c:e7:19:d1:c1:85:b5:34:4c:48:8d:93:80:e7:ee: c2:73:df:0a:fc:fa:86:92:3c:c2:ea:60:0e:4e:77:b4:89:c2: 91:5d:eb:d4:94:a0:54:2e:8b:c1:d6:3b:69:55:07:c6:fa:5b: 2f:60:81:2d:ae:90:aa:6b:31:a5:58:45:40:b2:ba:1f:1a:2f: 34:d4:d4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfacdJ1iiw2YBbFDwiplDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5 NjFmZDMwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD Eyg5ZmUzZWNmZDI1ZjI2NmVjMTBjODZlMmVkM2MwNjcxOGQ4Nzk2NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGIExBb4bkad7WFVbRcACx4SQ//o fzOhokVv0A/xIvfAvBBFU1NHInMaW+8OhoHhJkdZjSiHXYM9s7JR9zi0RyVP9n2k bJtMgFAduGezS6a0sEHAsDdeqQi90cTf+vwGMWDnKG1N0cPe9Fc2ngppIUulo6Od HTFaiP2RzNpouas2ZPpPiltfKED5nWyxr7ViwdWKTPAGJnkNHdvjnhNguqyfS9Xj hD7rQayMz7dQTmJYwcQemMT9gBAkFdqB7nbtOXIP/Hol5POhwwBqD8cwmqtk31yp CTiEm7mLSA/hNPua8wCCQO81/ZAJUogXH4oyoETvSbbDkMIK9owphxD8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/j7P0l8mbsEMhuLtPAZxjYeWS0MB8GA1UdIwQY MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHwi54VL 451p0g/DWBC2ndt7CCfDVmdwEcJrptKeIhIRhkwOJQZDGocb1fo6gzZ/aqNjSoa3 v6shiqypgZefQMiy/8Qh4gXMi2Aq6kikRvittODljNmiCzv1kU9imVEagH2da81e 7weZovhKJR0s9eQCOi6u2VhsTfxoLCmCcE0mYs0kwH9l2NLmw8U68q/wi2F4xB9w H6QPvpARtyKmbZ5CVC07oTUXAXZb2pBLJrDmngaAGXr9XOcZ0cGFtTRMSI2TgOfu wnPfCvz6hpI8wupgDk53tInCkV3r1JSgVC6LwdY7aVUHxvpbL2CBLa6QqmsxpVhF QLK6HxovNNTUrw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:31 2026 by rpki-client