This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json) Hash identifier: XD21RplhxAB6Gy/3lr41Jbn+5Bt92/s4PQsOPg+7TUg= Subject key identifier: 49:8C:2A:5F:EC:3A:8C:91:89:4A:6F:EB:BA:EB:3B:92:72:72:A5:9E Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1 Certificate serial: 019C20286F232EAA9570438C77321699BC34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft Manifest number: 1800 Signing time: Mon 02 Feb 2026 21:00:46 +0000 Manifest this update: Mon 02 Feb 2026 21:00:46 +0000 Manifest next update: Tue 03 Feb 2026 21:00:46 +0000 Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: /gBWGRPh5lEJbg5/HNggZQybNI5jaswbJC58rgDh2ak=) 2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:28:6f:23:2e:aa:95:70:43:8c:77:32:16:99:bc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1 Validity Not Before: Feb 2 21:00:46 2026 GMT Not After : Feb 3 21:00:46 2026 GMT Subject: CN=498c2a5fec3a8c91894a6febbaeb3b927272a59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:4f:53:6f:1a:eb:3e:31:d6:56:b3:c8:dd: 2d:f7:ad:b1:40:29:b5:df:47:05:ef:7c:cd:6b:13: da:74:96:1a:05:28:85:08:b7:df:88:6b:1a:dd:1e: 96:78:52:f3:e4:2b:0d:ef:ec:5c:d8:d3:5f:35:f5: c1:82:56:eb:95:28:29:9f:8f:14:36:43:91:c8:96: 59:c3:22:66:d3:ac:7a:e8:bb:63:95:c6:5c:60:ef: c6:a6:48:ab:36:46:00:c1:a3:88:21:a5:36:b1:7c: 0c:34:15:1e:ad:f8:8f:d3:8a:fc:4b:e6:f2:15:cf: 98:80:7c:e0:7c:3f:08:a5:bc:71:33:14:eb:04:90: 46:69:a9:9c:a0:ae:a6:e1:42:81:fb:c4:02:13:d1: 55:ec:50:ef:3d:a6:89:28:aa:c2:b8:0f:ab:57:2f: 11:ba:32:0c:9e:8e:30:77:e2:4a:83:68:95:a9:a9: b9:90:fc:0d:63:35:5c:0f:0e:d8:0b:84:81:8e:62: bb:50:98:a1:3d:fb:e1:01:d6:58:5d:8d:d8:c5:d7: f9:e1:a9:6e:b5:a8:66:2d:77:b4:63:47:54:be:be: 09:73:e6:94:92:0d:36:52:9f:0d:97:1f:81:ef:53: 16:7a:77:7e:e2:d6:d8:1a:41:de:fc:b1:4f:ba:ac: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:2A:5F:EC:3A:8C:91:89:4A:6F:EB:BA:EB:3B:92:72:72:A5:9E X509v3 Authority Key Identifier: keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:32:b2:1a:6b:b7:3b:38:6c:9a:4d:4c:72:20:36:be:d0:cd: 84:b5:a4:2d:1a:a0:76:8d:be:ed:78:9a:cf:d3:14:9c:3e:ba: 67:25:e4:37:0a:5c:f8:75:75:69:82:6c:b6:ea:af:30:13:e8: db:72:fb:de:f2:65:7f:e2:f0:8b:f5:61:a2:68:21:d6:7a:ec: d3:b5:37:67:1d:b1:f5:15:96:f9:9b:75:d5:32:19:e3:d1:b8: 4f:70:e6:ae:92:c7:80:be:30:8a:df:d6:79:a7:0f:02:eb:21: 94:a6:d6:fe:8e:8c:f4:01:8d:0d:84:bb:e0:ee:21:e7:b7:b1: 33:69:2b:99:bd:7c:02:7a:fe:e8:4f:54:82:19:bc:2b:b6:db: 25:e9:a0:1f:37:f2:d0:47:05:ca:87:50:34:6a:a9:01:d1:8d: 74:bd:08:fa:31:5c:30:59:77:9d:d0:73:71:0f:09:4b:fe:0b: ab:68:3c:0d:07:73:dc:5f:df:2b:03:b0:7a:9a:c6:a8:cc:33: fe:a1:ef:f9:c1:af:38:87:0b:94:ed:f9:7e:65:4d:83:07:21: d3:02:ad:c3:c9:bc:b0:81:7d:54:06:3a:15:93:48:a4:77:dc: b1:38:39:df:54:4f:91:bb:2e:15:c3:57:16:16:3b:b3:5c:92: f7:32:25:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgKG8jLqqVcEOMdzIWmbw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2 N2EwYzEwHhcNMjYwMjAyMjEwMDQ2WhcNMjYwMjAzMjEwMDQ2WjAzMTEwLwYDVQQD Eyg0OThjMmE1ZmVjM2E4YzkxODk0YTZmZWJiYWViM2I5MjcyNzJhNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa5PU28a6z4x1lazyN0t962xQCm1 30cF73zNaxPadJYaBSiFCLffiGsa3R6WeFLz5CsN7+xc2NNfNfXBglbrlSgpn48U NkORyJZZwyJm06x66LtjlcZcYO/GpkirNkYAwaOIIaU2sXwMNBUerfiP04r8S+by Fc+YgHzgfD8IpbxxMxTrBJBGaamcoK6m4UKB+8QCE9FV7FDvPaaJKKrCuA+rVy8R ujIMno4wd+JKg2iVqam5kPwNYzVcDw7YC4SBjmK7UJihPfvhAdZYXY3Yxdf54alu tahmLXe0Y0dUvr4Jc+aUkg02Up8Nlx+B71MWend+4tbYGkHe/LFPuqxY+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmMKl/sOoyRiUpv67rrO5JycqWeMB8GA1UdIwQY MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDKyGmu3 Ozhsmk1MciA2vtDNhLWkLRqgdo2+7Xiaz9MUnD66ZyXkNwpc+HV1aYJstuqvMBPo 23L73vJlf+Lwi/Vhomgh1nrs07U3Zx2x9RWW+Zt11TIZ49G4T3DmrpLHgL4wit/W eacPAushlKbW/o6M9AGNDYS74O4h57exM2krmb18Anr+6E9Ughm8K7bbJemgHzfy 0EcFyodQNGqpAdGNdL0I+jFcMFl3ndBzcQ8JS/4Lq2g8DQdz3F/fKwOweprGqMwz /qHv+cGvOIcLlO35fmVNgwch0wKtw8m8sIF9VAY6FZNIpHfcsTg531RPkbsuFcNX FhY7s1yS9zIlDw== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:45 2026 by rpki-client