This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: EpqT58cQMXblX8jOGYirNaTOt/fuM5dFEoGfOe+nKxI=
Subject key identifier: 0A:78:75:94:7A:C0:5C:91:A3:D9:72:2E:6E:4A:52:B9:F2:7D:BE:36
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 019C432307E5742E472D9DFC395584741DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 05F4
Signing time: Mon 09 Feb 2026 16:01:35 +0000
Manifest this update: Mon 09 Feb 2026 16:01:35 +0000
Manifest next update: Tue 10 Feb 2026 16:01:35 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: 5hm9yLt8pKPZnK1+HJZIqInuGA3RDw+Wf08lU9juVGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:23:07:e5:74:2e:47:2d:9d:fc:39:55:84:74:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Feb 9 16:01:35 2026 GMT
Not After : Feb 10 16:01:35 2026 GMT
Subject: CN=0a7875947ac05c91a3d9722e6e4a52b9f27dbe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:ee:09:ae:81:0a:a7:89:df:65:a5:78:35:
f0:78:e0:60:aa:5a:c1:f2:d6:91:e1:24:fe:78:79:
32:69:b5:5d:bf:e1:b0:f6:00:c0:f3:18:e9:2f:4a:
3d:86:f0:68:78:b4:5c:92:d4:4d:a0:fc:88:dc:97:
78:91:f5:53:73:6f:5d:e2:1d:dc:d9:92:dc:03:df:
53:a3:e4:63:e3:24:62:58:2c:f6:1c:88:ed:d7:2f:
41:c7:0b:fa:70:3d:01:c8:40:dc:6c:70:0e:3c:aa:
af:62:40:2b:b5:7a:a6:14:a8:fb:96:2f:01:b0:0e:
c8:dd:56:f1:4a:d6:e7:4f:08:c2:e5:23:7b:6a:93:
90:cf:7c:22:bc:2d:b3:20:83:c6:3c:43:7d:c8:05:
5a:94:60:bf:45:83:af:1f:c5:00:0a:58:13:a9:ea:
a2:0c:8b:96:c4:9a:4b:92:4c:63:38:46:95:40:9d:
c1:d1:29:b4:86:a1:c5:ca:ef:0e:35:da:2e:5e:ea:
27:80:3c:ed:0c:fd:da:93:e7:78:9d:d0:54:6d:c8:
d7:c6:16:ac:d2:b7:f7:71:aa:b1:78:4f:b5:f0:fe:
da:71:25:51:a2:68:c4:b6:ea:3a:c6:c5:c5:9a:6f:
af:7b:e4:dd:12:62:77:92:c1:99:aa:b9:e6:aa:9f:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:75:94:7A:C0:5C:91:A3:D9:72:2E:6E:4A:52:B9:F2:7D:BE:36
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:e2:e2:78:2d:06:f0:4d:a1:60:b6:c5:e1:f1:a3:71:40:
70:f7:e9:33:6e:51:c1:0f:aa:5b:ae:0d:cc:16:31:d6:0b:c1:
1f:7b:73:dd:6b:d6:2a:f8:c6:a4:9d:39:e7:43:f5:85:85:c7:
31:da:c8:11:c4:c6:4f:c6:a5:97:1d:52:f9:31:13:24:1e:12:
38:1a:8b:b2:d6:e1:c9:b8:9d:fa:55:f2:89:5b:79:c9:bb:3e:
c0:ed:66:db:af:a0:c0:01:5d:96:48:70:62:c6:85:19:93:18:
31:b0:3c:63:f1:d2:ff:6f:fd:fd:22:10:a1:b2:24:26:b8:4b:
d6:4e:6e:59:02:05:1e:33:f5:85:d1:c2:5b:33:ef:ab:76:54:
6c:31:37:46:2f:62:b3:b8:7e:60:24:fc:b2:a5:f4:82:3a:2b:
5d:6a:65:7f:95:9d:2b:35:04:6a:70:e5:0b:2c:20:00:7a:bd:
41:47:ac:40:cc:e6:5d:33:3a:5d:b9:55:69:99:0c:10:e0:35:
f6:e9:e9:d0:c2:52:d5:96:14:1e:c1:d1:63:8e:00:f3:7d:aa:
ca:27:91:73:f2:20:9a:b5:46:9d:04:5a:ea:6b:ff:f4:cf:3c:
34:17:fb:b4:f5:8a:f3:b3:d5:1a:57:1a:8d:1e:6c:51:5b:bf:
20:6e:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:11 2026 by rpki-client