This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json) Hash identifier: 6MAYWIZa9xEYKkr3/xzT/KDjhuqv7cMehn/qTOuXYu0= Subject key identifier: 10:38:90:6F:22:D1:A3:B3:48:59:48:BA:E5:51:FE:7C:40:4D:45:40 Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Certificate serial: 019C416B0028E1E7E1F9D4754C48B817D985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft Manifest number: 1195 Signing time: Mon 09 Feb 2026 08:00:57 +0000 Manifest this update: Mon 09 Feb 2026 08:00:57 +0000 Manifest next update: Tue 10 Feb 2026 08:00:57 +0000 Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: LjD/cx9Cm1w9cgjQJM9QLyZUpnUHbaM3q7LfKCxQj7I=) 2: xu9m0hgW8GLJqqV5sAEGFCWL3iM.roa (hash: jbb1Ol93Bc4F6xDnWgQv6CKjC8B2J+BLxGOlCtqLSLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6b:00:28:e1:e7:e1:f9:d4:75:4c:48:b8:17:d9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Validity Not Before: Feb 9 08:00:57 2026 GMT Not After : Feb 10 08:00:57 2026 GMT Subject: CN=1038906f22d1a3b3485948bae551fe7c404d4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:d5:3d:c7:e8:d4:9e:d7:74:9f:bc:eb:be: 18:b8:76:90:39:2c:16:da:72:f3:56:94:af:d3:a2: ba:26:f0:f5:01:1d:63:f8:04:93:fa:33:8a:e0:a0: c8:0f:12:e7:94:d4:d7:ff:bd:37:19:0e:ad:a1:44: 1f:72:4c:c1:9f:8f:08:e9:00:c2:9b:69:73:14:05: 0a:9c:d8:ab:4c:b1:c9:13:43:28:52:72:b8:3a:31: a8:4d:c0:f6:6f:dc:cb:51:24:d8:36:19:50:e0:fc: cb:79:1a:d4:19:b5:7f:2a:27:c1:64:c3:d1:8d:ab: 0f:7f:05:3a:56:0a:92:25:1a:da:ac:93:8b:2f:59: 48:74:90:84:0b:65:7e:cf:95:f6:c6:dc:0f:d3:56: f4:d6:15:5d:34:87:3c:06:3f:81:60:89:07:8f:d3: ed:12:7b:5f:6f:c9:83:90:e2:ed:77:77:1e:97:c2: 0e:75:d6:96:d4:ae:07:d0:5a:24:a5:fc:b2:5f:9c: d5:41:ea:e2:df:32:76:88:01:1d:5c:45:44:73:a2: ce:5e:a6:9c:ed:3a:41:92:2a:47:07:fd:42:01:bb: 61:b9:ad:3d:ae:3d:07:2c:f6:60:dc:14:4f:c2:40: 6d:ea:da:bc:ca:e1:b3:53:10:12:62:15:66:7c:68: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:38:90:6F:22:D1:A3:B3:48:59:48:BA:E5:51:FE:7C:40:4D:45:40 X509v3 Authority Key Identifier: keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:61:18:7c:0f:53:22:5f:4d:10:6f:c6:2a:90:60:07:0d:49: d8:06:a0:85:9f:4c:db:50:75:80:fb:fa:06:ca:be:92:84:f3: 55:e3:d1:10:8c:17:43:36:51:66:10:bc:d1:e0:2a:bb:f5:56: 82:ab:09:91:cb:13:9d:c1:60:6a:77:e0:56:41:4f:c7:af:3d: f8:e1:18:d8:7d:f1:ec:a4:e3:ca:cd:b4:d4:db:7c:ea:74:8c: 87:30:20:53:b4:de:2c:32:0b:42:ff:4d:41:9d:05:5d:f0:78: a4:b5:06:54:48:e6:bc:15:30:36:47:09:73:db:d8:38:2c:79: 4a:03:54:ec:c8:7f:22:ce:73:bf:6e:3e:d2:33:e6:8c:6e:e5: 8d:2b:48:70:fe:22:9b:aa:c1:d3:45:28:3c:a8:13:3a:fb:d2: 2b:0a:3d:41:a1:4e:9d:33:cf:df:9f:f0:8c:ae:98:c0:00:f5: 24:36:b3:b1:e7:74:d3:ff:32:f0:0a:62:f0:44:3a:93:2c:46: fd:83:c0:8d:fe:73:78:c0:73:c9:05:83:13:ab:28:c1:a2:cb: ea:4e:c4:45:c2:a7:74:d4:78:c0:98:bf:f9:61:eb:8e:2e:53: 24:37:0e:ba:5b:84:c5:92:ee:40:f2:69:eb:12:8f:0f:aa:f7: c5:29:91:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBawAo4efh+dR1TEi4F9mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NDU3NjM2ZTVhZDY2ZTFmMGZiYjJjMTBkZjI5MDk1ZTYz ZTk5MmYwHhcNMjYwMjA5MDgwMDU3WhcNMjYwMjEwMDgwMDU3WjAzMTEwLwYDVQQD EygxMDM4OTA2ZjIyZDFhM2IzNDg1OTQ4YmFlNTUxZmU3YzQwNGQ0NTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yfVPcfo1J7XdJ+8674YuHaQOSwW 2nLzVpSv06K6JvD1AR1j+AST+jOK4KDIDxLnlNTX/703GQ6toUQfckzBn48I6QDC m2lzFAUKnNirTLHJE0MoUnK4OjGoTcD2b9zLUSTYNhlQ4PzLeRrUGbV/KifBZMPR jasPfwU6VgqSJRrarJOLL1lIdJCEC2V+z5X2xtwP01b01hVdNIc8Bj+BYIkHj9Pt Entfb8mDkOLtd3cel8IOddaW1K4H0FokpfyyX5zVQeri3zJ2iAEdXEVEc6LOXqac 7TpBkipHB/1CAbthua09rj0HLPZg3BRPwkBt6tq8yuGzUxASYhVmfGh4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA4kG8i0aOzSFlIuuVR/nxATUVAMB8GA1UdIwQY MBaAFORFdjblrWbh8PuywQ3ykJXmPpkvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEt YjBkNWU4YmU4NTNjLzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEtYjBkNWU4YmU4NTNj LzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWEYfA9T Il9NEG/GKpBgBw1J2AaghZ9M21B1gPv6Bsq+koTzVePREIwXQzZRZhC80eAqu/VW gqsJkcsTncFganfgVkFPx689+OEY2H3x7KTjys201Nt86nSMhzAgU7TeLDILQv9N QZ0FXfB4pLUGVEjmvBUwNkcJc9vYOCx5SgNU7Mh/Is5zv24+0jPmjG7ljStIcP4i m6rB00UoPKgTOvvSKwo9QaFOnTPP35/wjK6YwAD1JDazsed00/8y8Api8EQ6kyxG /YPAjf5zeMBzyQWDE6sowaLL6k7ERcKndNR4wJi/+WHrji5TJDcOuluExZLuQPJp 6xKPD6r3xSmRXw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:37 2026 by rpki-client