This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json) Hash identifier: B80uIp8OxZQ8uQq2gudkCSYQjN+a0JSUBy+JPneAimw= Subject key identifier: 28:1A:5E:DD:57:5B:A5:A9:25:11:3C:C1:1A:57:72:83:D6:35:69:37 Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Certificate serial: 019C42469AB55D28532CC6B4051B92842163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft Manifest number: 0383 Signing time: Mon 09 Feb 2026 12:00:49 +0000 Manifest this update: Mon 09 Feb 2026 12:00:49 +0000 Manifest next update: Tue 10 Feb 2026 12:00:49 +0000 Files and hashes: 1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: 4YsO2K6BxDulVjQwUx9nfW+gxNJsN0gXuwA/Hd1aDpU=) 2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9a:b5:5d:28:53:2c:c6:b4:05:1b:92:84:21:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Validity Not Before: Feb 9 12:00:49 2026 GMT Not After : Feb 10 12:00:49 2026 GMT Subject: CN=281a5edd575ba5a925113cc11a577283d6356937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:ae:3c:7b:8c:b2:13:b4:ce:4b:15:b0:dc: 61:41:51:11:d1:44:11:42:5c:bd:6c:99:bb:1d:71: 4d:7d:4b:bf:83:47:a4:89:70:31:b0:d0:5b:7f:e5: f7:4c:e7:b8:40:60:90:cf:94:f0:3c:3b:8e:72:11: 86:6f:08:14:28:6a:9d:b9:eb:d4:58:8c:31:63:5c: 4a:55:12:d5:08:e5:6f:90:45:54:8e:99:4e:03:c1: e0:04:1c:d9:28:92:da:84:dc:a2:c9:4e:b3:20:02: 81:ec:45:5a:21:d7:4d:fd:f1:ee:92:dc:31:f5:10: 37:8b:1c:b6:c6:e2:76:c8:52:0a:45:66:9c:e8:e5: 0f:d0:0e:a7:c4:a1:ac:56:bd:e0:51:b6:7b:75:95: ea:ba:6f:76:b7:46:7a:07:80:e5:c3:5e:51:42:c4: f6:66:ae:29:58:d8:e3:51:1d:32:32:78:fb:ae:83: 11:a7:9d:db:42:d5:21:16:2a:01:5d:52:0a:b6:38: de:ab:9a:ad:23:58:a0:5d:a1:25:83:40:d6:2e:a5: b8:a0:9d:0f:13:5a:ee:17:65:b2:a9:ae:f8:db:3b: 35:3e:2e:75:42:ed:14:d0:26:e1:be:65:3e:6e:39: 4b:e3:75:0c:fc:a1:f6:6c:08:77:2f:23:ee:79:91: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:5E:DD:57:5B:A5:A9:25:11:3C:C1:1A:57:72:83:D6:35:69:37 X509v3 Authority Key Identifier: keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e9:73:ec:d6:f2:7e:e9:7b:ce:3a:c0:47:0d:87:d1:da:a0: ae:52:15:a0:82:32:15:d5:8d:7e:33:f2:22:58:11:99:a8:4a: c1:49:53:4b:c6:6f:f9:00:bb:4c:87:7b:d8:9b:45:07:99:5b: e9:b8:61:25:f9:d0:dc:55:a7:ae:86:fb:45:be:6b:02:7c:1f: d8:19:22:94:2e:20:e4:37:3b:ff:7b:05:d7:8a:8d:41:0c:d9: 0d:08:9f:33:ce:63:41:bd:91:77:0b:5e:67:89:e7:e5:b4:4e: ba:2a:fb:6c:32:09:48:55:6d:78:de:be:a9:01:0b:8b:50:f4: df:26:d0:ff:52:dc:55:07:18:69:79:ed:74:48:80:e5:c7:91: d8:fb:9c:11:76:b1:6a:3f:d9:b6:ec:5d:7e:57:97:d1:78:53: aa:45:d1:12:7f:c7:cd:2b:c1:f2:b3:65:49:a6:f8:da:46:dc: 79:95:a6:fe:34:d1:1b:5e:bd:e1:47:14:07:ec:2b:65:e3:d3: 7e:88:1c:34:50:2e:51:9f:12:31:68:6d:7e:a6:4f:3e:3e:2a: 80:72:15:58:98:da:84:e8:bd:9a:3f:39:a6:28:00:0c:81:74: 72:2f:da:8e:c4:bd:2d:a6:a0:6a:ec:41:5f:d6:b1:b6:47:70: d6:11:80:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpq1XShTLMa0BRuShCFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk NjY5NzMwHhcNMjYwMjA5MTIwMDQ5WhcNMjYwMjEwMTIwMDQ5WjAzMTEwLwYDVQQD EygyODFhNWVkZDU3NWJhNWE5MjUxMTNjYzExYTU3NzI4M2Q2MzU2OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEWuPHuMshO0zksVsNxhQVER0UQR Qly9bJm7HXFNfUu/g0ekiXAxsNBbf+X3TOe4QGCQz5TwPDuOchGGbwgUKGqduevU WIwxY1xKVRLVCOVvkEVUjplOA8HgBBzZKJLahNyiyU6zIAKB7EVaIddN/fHuktwx 9RA3ixy2xuJ2yFIKRWac6OUP0A6nxKGsVr3gUbZ7dZXqum92t0Z6B4Dlw15RQsT2 Zq4pWNjjUR0yMnj7roMRp53bQtUhFioBXVIKtjjeq5qtI1igXaElg0DWLqW4oJ0P E1ruF2Wyqa742zs1Pi51Qu0U0CbhvmU+bjlL43UM/KH2bAh3LyPueZHuDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgaXt1XW6WpJRE8wRpXcoPWNWk3MB8GA1UdIwQY MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt OGE1NDVjYjM1YTlhLzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhulz7Nby ful7zjrARw2H0dqgrlIVoIIyFdWNfjPyIlgRmahKwUlTS8Zv+QC7TId72JtFB5lb 6bhhJfnQ3FWnrob7Rb5rAnwf2BkilC4g5Dc7/3sF14qNQQzZDQifM85jQb2Rdwte Z4nn5bROuir7bDIJSFVteN6+qQELi1D03ybQ/1LcVQcYaXntdEiA5ceR2PucEXax aj/ZtuxdfleX0XhTqkXREn/HzSvB8rNlSab42kbceZWm/jTRG1694UcUB+wrZePT fogcNFAuUZ8SMWhtfqZPPj4qgHIVWJjahOi9mj85pigADIF0ci/ajsS9LaagauxB X9axtkdw1hGAOw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:52 2026 by rpki-client