This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json) Hash identifier: MNdhgvqoWcJJizDBcHD+SAfUz7Bt2KYZRnM9bLNEfZo= Subject key identifier: 57:3A:CF:35:F3:75:65:9E:13:75:E4:33:F6:60:50:62:BB:08:47:CE Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Certificate serial: 019C41D883D5A6A29B25C8F4097D3F9E072D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 10:00:34 +0000 Manifest this update: Mon 09 Feb 2026 10:00:34 +0000 Manifest next update: Tue 10 Feb 2026 10:00:34 +0000 Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: QClxwJYluT5aoZ+4GXLfarNk/YgWvjy4NMtg7JWrgtA=) 2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:83:d5:a6:a2:9b:25:c8:f4:09:7d:3f:9e:07:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Validity Not Before: Feb 9 10:00:34 2026 GMT Not After : Feb 10 10:00:34 2026 GMT Subject: CN=573acf35f375659e1375e433f6605062bb0847ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a1:56:93:19:2e:60:bc:e5:a2:9e:06:30:b9: 51:82:12:b4:a2:3e:d1:31:56:17:c7:45:40:39:5d: 70:d0:d4:d1:b8:c7:fa:59:30:e0:96:66:98:05:7b: b4:ee:86:74:9e:7b:0d:2a:9c:b3:03:1b:78:34:13: 04:7e:dd:2b:67:b1:41:ac:d9:ff:f8:ff:47:1b:aa: 74:80:82:47:ff:b6:af:e6:06:60:4d:8f:d9:40:37: aa:98:40:14:bf:14:66:63:ee:65:b8:59:09:c9:81: ed:c9:52:a1:1d:fc:08:5c:03:88:a9:38:ed:fd:31: 69:28:27:2c:5d:61:d2:17:be:84:37:85:bd:72:74: 0e:f1:7f:4f:76:e8:31:a0:43:7a:59:0b:da:a8:91: 89:05:7c:34:c8:2e:01:85:0b:47:77:4f:e4:99:ca: 28:31:3f:04:3b:30:62:8e:4d:30:fe:ae:53:50:f1: 14:e6:7f:81:1d:24:a8:39:8a:7c:bd:48:f6:42:7a: 94:ae:0c:46:2a:6c:10:59:73:e9:56:9e:13:3c:76: 7e:a3:33:35:c8:79:97:ba:e0:df:e6:e1:2f:63:93: bd:57:bb:09:db:3f:c4:3f:37:ea:f8:cc:7c:2d:3f: 84:cc:ea:55:70:4a:7e:84:fc:54:09:d3:c6:2b:e8: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:CF:35:F3:75:65:9E:13:75:E4:33:F6:60:50:62:BB:08:47:CE X509v3 Authority Key Identifier: keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:02:1b:ea:eb:d1:d3:e4:fb:86:df:97:54:73:85:44:f4:2f: 70:1d:f6:e3:6f:08:09:bd:2b:6f:63:02:71:10:5d:74:92:24: 0c:7a:63:8f:77:c6:3b:1b:fb:7d:82:61:bf:be:01:b6:b5:d4: 6d:a2:6e:5d:de:87:2f:f6:60:82:7c:ac:81:84:1c:f8:5b:29: 15:da:15:3f:31:63:7b:ad:9c:c2:65:20:57:02:bc:a3:36:31: 99:ad:71:45:05:bc:1b:23:66:78:8e:3e:e3:1c:9a:ee:6d:f5: e2:0c:ca:71:87:10:f4:64:5c:f2:2c:61:40:49:4c:4f:4a:2a: 1c:aa:fb:e1:76:01:b6:79:6f:1e:fe:39:3e:ac:23:9f:66:5c: 82:be:53:fb:1c:71:9c:7e:32:bc:6c:76:b0:3b:84:6c:1b:46: 4f:86:97:c6:e4:f6:a8:e9:94:24:f7:f7:0e:ba:84:65:5d:19: 31:87:c8:15:67:73:fa:3d:23:ff:37:ff:76:40:01:8a:93:8f: c0:c0:0e:bf:df:46:97:c2:a4:ba:2a:bf:d4:95:ce:19:0a:c1: e9:73:9b:bb:83:27:a1:6e:31:f5:b8:59:da:b1:54:6f:9e:78: ea:83:18:d6:53:48:84:42:8e:97:2b:bc:13:3a:52:1b:1c:f9: ea:56:41:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IPVpqKbJcj0CX0/ngctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3 NGQ1YzUwHhcNMjYwMjA5MTAwMDM0WhcNMjYwMjEwMTAwMDM0WjAzMTEwLwYDVQQD Eyg1NzNhY2YzNWYzNzU2NTllMTM3NWU0MzNmNjYwNTA2MmJiMDg0N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36FWkxkuYLzlop4GMLlRghK0oj7R MVYXx0VAOV1w0NTRuMf6WTDglmaYBXu07oZ0nnsNKpyzAxt4NBMEft0rZ7FBrNn/ +P9HG6p0gIJH/7av5gZgTY/ZQDeqmEAUvxRmY+5luFkJyYHtyVKhHfwIXAOIqTjt /TFpKCcsXWHSF76EN4W9cnQO8X9PdugxoEN6WQvaqJGJBXw0yC4BhQtHd0/kmcoo MT8EOzBijk0w/q5TUPEU5n+BHSSoOYp8vUj2QnqUrgxGKmwQWXPpVp4TPHZ+ozM1 yHmXuuDf5uEvY5O9V7sJ2z/EPzfq+Mx8LT+EzOpVcEp+hPxUCdPGK+gaiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc6zzXzdWWeE3XkM/ZgUGK7CEfOMB8GA1UdIwQY MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0 LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAIb6uvR 0+T7ht+XVHOFRPQvcB32428ICb0rb2MCcRBddJIkDHpjj3fGOxv7fYJhv74BtrXU baJuXd6HL/ZggnysgYQc+FspFdoVPzFje62cwmUgVwK8ozYxma1xRQW8GyNmeI4+ 4xya7m314gzKcYcQ9GRc8ixhQElMT0oqHKr74XYBtnlvHv45Pqwjn2Zcgr5T+xxx nH4yvGx2sDuEbBtGT4aXxuT2qOmUJPf3DrqEZV0ZMYfIFWdz+j0j/zf/dkABipOP wMAOv99Gl8Kkuiq/1JXOGQrB6XObu4MnoW4x9bhZ2rFUb5546oMY1lNIhEKOlyu8 EzpSGxz56lZBTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:53 2026 by rpki-client