This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json) Hash identifier: 0iUxJgPthvgMCsJsmQl6syn8RRx7V5lr8BBRgxKYHFU= Subject key identifier: 14:22:99:A0:BD:11:9C:49:0B:F3:D4:1F:CA:FD:82:EC:BC:9F:6B:76 Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd Certificate serial: 019C4322C70FC55E4EB1F71DA99539A316F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:18 +0000 Manifest this update: Mon 09 Feb 2026 16:01:18 +0000 Manifest next update: Tue 10 Feb 2026 16:01:18 +0000 Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: Q/oLq+Z7YK7gzO1TF5+UrHXyFJLYYTYn6LeO8M/uBmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c7:0f:c5:5e:4e:b1:f7:1d:a9:95:39:a3:16:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd Validity Not Before: Feb 9 16:01:18 2026 GMT Not After : Feb 10 16:01:18 2026 GMT Subject: CN=142299a0bd119c490bf3d41fcafd82ecbc9f6b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:59:3a:d1:ca:57:8a:6b:fa:16:e9:0b:a2: 4c:d4:a1:0e:b5:b3:84:7b:3e:53:59:8e:5a:74:5d: 61:af:32:0c:c3:11:c6:86:96:96:bf:b4:fc:53:69: ac:be:42:9b:95:4f:a1:9b:55:1a:cf:82:88:90:1c: f2:e9:af:ce:71:67:dd:ff:a1:02:eb:8b:07:41:b2: 81:93:43:8d:6e:7b:2e:3d:c2:48:1c:a1:de:9c:e1: 9f:fb:ee:17:f5:79:c5:bd:b3:7e:10:fd:17:82:cc: 38:60:e3:74:0e:51:16:07:71:ec:d1:95:8e:f6:9e: 36:e4:97:02:1b:95:e7:5d:d9:83:a8:dd:14:8d:ed: 65:db:f2:f8:24:80:16:95:e0:fb:a5:e5:0e:16:aa: b4:43:75:8e:83:1e:8b:6f:de:0a:f4:f9:b8:3a:f1: df:7e:08:d2:02:48:29:bf:24:b4:38:2e:fb:e5:2b: 21:b8:10:a1:f8:a3:27:a4:96:4f:97:cc:da:c0:83: 12:9b:33:b4:c6:ea:8c:ef:1a:bb:11:e0:6e:a9:e7: 4d:1f:bd:07:da:bf:25:59:66:08:39:a5:23:86:b3: b2:08:ca:6a:08:6d:26:63:37:06:69:e4:7e:28:f1: 96:17:a0:c6:df:66:cc:0a:86:33:d2:77:88:9f:bf: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:99:A0:BD:11:9C:49:0B:F3:D4:1F:CA:FD:82:EC:BC:9F:6B:76 X509v3 Authority Key Identifier: keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5d:06:94:25:d2:42:8a:c2:13:cb:f3:16:ba:8d:9d:4f:a0: a9:3f:86:a0:11:11:65:a5:78:41:fe:e4:00:74:77:c7:07:ef: 19:60:89:f8:42:38:87:ce:37:50:70:fe:c8:ab:f8:f5:e1:c0: 16:3a:68:7c:f1:62:f5:ed:fb:63:14:35:13:9f:17:48:ff:69: ec:86:f1:94:df:aa:70:c0:77:45:1b:c8:0f:38:32:5f:d3:a9: 80:d3:ed:e1:7c:54:79:2c:ad:c4:d5:70:15:71:69:de:19:5a: 44:b6:bb:a0:26:48:f0:06:cb:9d:8d:e1:b2:f5:1f:91:32:7f: 46:54:e4:e5:e3:77:72:4f:69:9e:5b:2d:56:05:d1:1c:82:9e: d0:28:b6:ad:47:01:91:66:23:e0:66:45:f2:60:a1:19:4f:09: 79:a7:66:de:c6:bc:10:fb:2b:a2:e9:e2:01:7d:e1:e6:be:00: 55:b7:b2:81:78:c1:8e:43:23:f2:b0:8a:fd:77:1f:a9:4f:67: 9c:cf:c8:d8:f2:0c:d4:62:b9:5f:84:d2:23:2a:0a:b0:31:4b: 75:4d:8d:25:e2:43:fc:9d:14:eb:bb:b7:3a:1e:75:29:10:4f: 9f:03:c1:90:1b:49:68:b4:18:ba:cb:80:d3:52:9a:6c:b1:08: f1:20:d5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIscPxV5OsfcdqZU5oxb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTk0NjMwZmM3NDU1NmNlNTA4MDI2ODcwOTAxNTQ1ZmI3 YjA0Y2QwHhcNMjYwMjA5MTYwMTE4WhcNMjYwMjEwMTYwMTE4WjAzMTEwLwYDVQQD EygxNDIyOTlhMGJkMTE5YzQ5MGJmM2Q0MWZjYWZkODJlY2JjOWY2Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ1ZOtHKV4pr+hbpC6JM1KEOtbOE ez5TWY5adF1hrzIMwxHGhpaWv7T8U2msvkKblU+hm1Uaz4KIkBzy6a/OcWfd/6EC 64sHQbKBk0ONbnsuPcJIHKHenOGf++4X9XnFvbN+EP0Xgsw4YON0DlEWB3Hs0ZWO 9p425JcCG5XnXdmDqN0Uje1l2/L4JIAWleD7peUOFqq0Q3WOgx6Lb94K9Pm4OvHf fgjSAkgpvyS0OC775SshuBCh+KMnpJZPl8zawIMSmzO0xuqM7xq7EeBuqedNH70H 2r8lWWYIOaUjhrOyCMpqCG0mYzcGaeR+KPGWF6DG32bMCoYz0neIn79+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQimaC9EZxJC/PUH8r9guy8n2t2MB8GA1UdIwQY MBaAFP+ZRjD8dFVs5QgCaHCQFUX7ewTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAt ZWFmY2E1ODU0MjU3LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAtZWFmY2E1ODU0MjU3 LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO10GlCXS QorCE8vzFrqNnU+gqT+GoBERZaV4Qf7kAHR3xwfvGWCJ+EI4h843UHD+yKv49eHA FjpofPFi9e37YxQ1E58XSP9p7IbxlN+qcMB3RRvIDzgyX9OpgNPt4XxUeSytxNVw FXFp3hlaRLa7oCZI8AbLnY3hsvUfkTJ/RlTk5eN3ck9pnlstVgXRHIKe0Ci2rUcB kWYj4GZF8mChGU8Jeadm3sa8EPsrouniAX3h5r4AVbeygXjBjkMj8rCK/XcfqU9n nM/I2PIM1GK5X4TSIyoKsDFLdU2NJeJD/J0U67u3Oh51KRBPnwPBkBtJaLQYusuA 01KabLEI8SDVbg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:39 2026 by rpki-client