This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json) Hash identifier: 3DpRje/Yne4xV6j5wF3CVQp33413XNiSO3Nxiu97mJY= Subject key identifier: 5C:F6:36:08:D2:BF:D4:AB:B0:B4:A3:25:9B:45:99:9E:D7:21:BD:AC Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Certificate serial: 019C427DBD847E9A8B0694D5D51421553759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft Manifest number: 1764 Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=) 2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: JvZubWOxfY8Gou/7ruTrAo68pZTuHGbStCwgk6qnuTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bd:84:7e:9a:8b:06:94:d5:d5:14:21:55:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=5cf63608d2bfd4abb0b4a3259b45999ed721bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:25:c8:2a:2f:74:5c:a6:6b:1a:d8:74:90: d5:60:8b:7d:9b:16:e4:62:6d:5d:7c:b6:ce:77:e9: 91:42:76:09:9f:53:cd:30:07:07:c3:fb:ad:5e:3f: 75:e7:88:db:c8:6d:08:d7:78:cf:30:a1:89:12:7e: 67:e3:4f:05:80:69:7c:ee:c3:50:3f:11:18:3a:ad: 35:1a:12:7f:c7:2e:e3:4e:c6:7f:0e:94:34:f0:c4: 6c:e9:a4:0e:18:df:e4:70:30:1c:08:55:bb:43:dd: 07:c4:41:38:f5:5a:c0:de:fe:70:40:63:f6:52:ac: 44:16:85:53:05:8e:32:25:46:18:48:24:58:2a:af: a2:26:3e:4c:ca:02:68:54:15:69:cb:48:b5:76:01: ea:74:01:d7:67:cf:e7:08:be:bd:2e:a4:4e:4b:c5: 94:ba:46:8f:e8:ca:3a:6c:45:15:b5:d8:dd:e0:e2: a9:d8:3e:4e:9a:11:cf:85:38:91:de:ee:7e:46:39: ab:be:5b:a7:55:50:a4:39:db:da:c0:ba:62:58:a0: b4:76:55:d7:5b:bc:57:bc:26:3f:3c:84:84:5f:1c: 5c:68:35:2c:78:99:e7:46:3f:15:e4:9c:d1:9f:f3: cf:dc:d5:fa:bd:13:9b:aa:96:05:3f:84:68:ac:95: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:36:08:D2:BF:D4:AB:B0:B4:A3:25:9B:45:99:9E:D7:21:BD:AC X509v3 Authority Key Identifier: keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:92:1d:f3:a4:e2:87:30:51:a5:49:e2:ba:e3:a9:87:f2:52: 9d:06:93:4f:48:ec:1d:2e:8a:8f:85:e6:71:5b:56:ec:e5:3e: e0:7d:ff:ae:0b:71:a7:71:19:ff:19:a0:89:89:8f:30:e9:ee: 89:d9:ab:f9:82:3b:7f:5e:80:84:e9:f8:75:19:ca:19:33:a8: 7b:c5:8c:2f:26:ea:8e:af:63:45:1b:1b:3f:41:97:d7:7f:9b: 41:c6:a5:ef:b7:e0:e3:0a:18:4e:8b:e8:1b:a2:26:d2:45:40: 9d:6a:99:fa:f7:52:b2:43:fc:01:06:40:5c:ca:80:3e:91:b5: 8e:37:2d:18:d9:26:c3:dd:8b:52:ba:70:95:d0:df:7d:44:2d: d7:53:02:24:cd:c5:fe:e6:3c:df:78:85:b3:55:81:39:a5:b9: 04:16:1f:52:d8:d4:a4:9b:9e:2e:cb:94:e6:b4:dd:2c:7b:71: 17:0d:c5:97:e3:12:27:06:e0:ff:b5:7a:4a:15:9d:15:1c:c7: fb:8d:1b:1e:05:a2:86:0e:60:11:c7:c2:a6:8f:b2:87:43:d9: de:e2:d0:cb:e1:12:f9:f8:3d:cc:af:66:22:9e:65:dc:2b:19: cd:23:5e:c2:77:88:62:ac:0c:1a:a2:b8:3e:1d:6c:cc:ce:10: a2:fa:8f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb2EfpqLBpTV1RQhVTdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj ZDUxMTIwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD Eyg1Y2Y2MzYwOGQyYmZkNGFiYjBiNGEzMjU5YjQ1OTk5ZWQ3MjFiZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjUlyCovdFymaxrYdJDVYIt9mxbk Ym1dfLbOd+mRQnYJn1PNMAcHw/utXj9154jbyG0I13jPMKGJEn5n408FgGl87sNQ PxEYOq01GhJ/xy7jTsZ/DpQ08MRs6aQOGN/kcDAcCFW7Q90HxEE49VrA3v5wQGP2 UqxEFoVTBY4yJUYYSCRYKq+iJj5MygJoVBVpy0i1dgHqdAHXZ8/nCL69LqROS8WU ukaP6Mo6bEUVtdjd4OKp2D5OmhHPhTiR3u5+RjmrvlunVVCkOdvawLpiWKC0dlXX W7xXvCY/PISEXxxcaDUseJnnRj8V5JzRn/PP3NX6vRObqpYFP4RorJWyqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz2NgjSv9SrsLSjJZtFmZ7XIb2sMB8GA1UdIwQY MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZId86Ti hzBRpUniuuOph/JSnQaTT0jsHS6Kj4XmcVtW7OU+4H3/rgtxp3EZ/xmgiYmPMOnu idmr+YI7f16AhOn4dRnKGTOoe8WMLybqjq9jRRsbP0GX13+bQcal77fg4woYTovo G6Im0kVAnWqZ+vdSskP8AQZAXMqAPpG1jjctGNkmw92LUrpwldDffUQt11MCJM3F /uY833iFs1WBOaW5BBYfUtjUpJueLsuU5rTdLHtxFw3Fl+MSJwbg/7V6ShWdFRzH +40bHgWihg5gEcfCpo+yh0PZ3uLQy+ES+fg9zK9mIp5l3CsZzSNewneIYqwMGqK4 Ph1szM4QovqP0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:48 2026 by rpki-client