This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft File: D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json) Hash identifier: n1g8XN6A3/aFBonhcHSnV1dqjT7b7LZYZWQKHkf3zsw= Subject key identifier: 50:7E:B5:77:16:48:E0:8E:02:C1:B5:13:92:AA:F5:6F:9E:F0:99:7B Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0 Certificate issuer: /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0 Certificate serial: 019C416A760D734BD600932122C897D45396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft Manifest number: 44 Signing time: Mon 09 Feb 2026 08:00:21 +0000 Manifest this update: Mon 09 Feb 2026 08:00:21 +0000 Manifest next update: Tue 10 Feb 2026 08:00:21 +0000 Files and hashes: 1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: zLj7PEX5ap0rkVNekZv/KLsS04YphAWTFTBxRSyPtI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:76:0d:73:4b:d6:00:93:21:22:c8:97:d4:53:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0 Validity Not Before: Feb 9 08:00:21 2026 GMT Not After : Feb 10 08:00:21 2026 GMT Subject: CN=507eb5771648e08e02c1b51392aaf56f9ef0997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:33:2c:ff:ad:22:9d:3b:ec:9e:de:5e:f9: ab:3d:63:30:16:76:9b:3b:88:38:4e:64:e4:0d:2f: 6d:5f:58:12:a7:00:08:83:df:d5:6b:b6:27:28:7a: c5:cf:d8:88:68:b7:41:ce:e9:21:51:b4:d4:2b:b3: 16:9f:d5:be:22:bc:43:a7:d8:08:e9:39:6f:cc:50: 6f:fa:18:d1:f9:e5:6b:09:c6:c4:33:99:69:64:bf: 82:1f:e2:cf:6d:49:7c:90:d1:c6:82:d6:1f:b1:b7: 3a:ab:99:ae:fa:0b:38:dc:1c:df:05:ed:6a:a1:d0: 01:40:d7:e7:43:50:dd:10:f9:73:4e:f0:06:c9:00: 20:67:5c:66:b7:8a:23:79:7f:5d:13:85:24:e9:53: 96:c4:16:d8:c1:ee:f3:44:3e:21:d4:7d:e9:a8:91: 09:22:22:82:c7:27:69:13:aa:71:9f:eb:74:e5:e5: fb:b8:f1:1b:78:f1:48:7d:90:6f:f9:22:13:ec:73: f5:83:e0:48:7d:34:4d:12:d7:de:ba:f2:6c:3b:e5: 86:3a:58:d1:29:38:a7:fa:f5:d4:c9:fa:55:1f:61: c5:2c:d8:4c:64:0a:42:1b:b3:1b:59:81:92:d0:49: 65:7c:d1:d7:be:61:5d:cb:05:24:94:cb:75:67:47: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:B5:77:16:48:E0:8E:02:C1:B5:13:92:AA:F5:6F:9E:F0:99:7B X509v3 Authority Key Identifier: keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:1f:74:5f:4a:a4:ce:31:ab:35:a6:ce:c0:7a:3a:ac:aa: 33:dd:da:7d:6a:38:35:ed:6d:e4:c0:4c:59:a4:17:d5:27:27: 0c:9d:f4:95:cf:a6:e5:f9:98:6e:35:0f:f6:d4:19:15:52:5b: 31:ac:df:7b:d5:3f:fe:29:b8:05:53:8b:d1:39:52:d3:42:5a: 22:65:fd:e3:3a:db:bb:72:c0:dd:c6:35:07:37:c3:3a:d6:94: a2:a5:c5:e1:ce:aa:a7:bc:ef:83:40:6f:1f:40:78:dd:07:e1: bb:2b:e4:dc:91:15:e4:ba:b4:5c:e7:5f:8b:fb:96:ea:31:cc: a0:c8:9c:8b:ae:46:54:a1:f6:f7:98:b4:b7:d5:52:4c:04:cc: 6e:95:eb:eb:5e:94:37:ca:f0:3e:75:20:98:7d:b9:d2:52:d4: 5b:d9:ae:37:ab:70:7a:dc:72:cd:38:d9:68:84:19:ab:a2:50: 52:48:87:27:31:8e:42:05:69:50:67:39:45:d3:09:a1:f5:07: a8:67:fb:93:ef:78:f3:b5:04:ca:ec:c5:2b:73:34:5e:05:e2: 0c:9d:22:53:a9:1f:46:d8:60:58:c8:72:0f:1d:57:2f:44:ec: bf:12:fb:da:eb:7c:05:e1:be:15:a9:7b:dd:45:4d:03:ea:3c: 4b:7d:d6:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBanYNc0vWAJMhIsiX1FOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZmOTlmMjI3MzM1NjU1NjI2OTViYjFhNGYyZTJiMThk ZWZmYjAwHhcNMjYwMjA5MDgwMDIxWhcNMjYwMjEwMDgwMDIxWjAzMTEwLwYDVQQD Eyg1MDdlYjU3NzE2NDhlMDhlMDJjMWI1MTM5MmFhZjU2ZjllZjA5OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44zLP+tIp077J7eXvmrPWMwFnab O4g4TmTkDS9tX1gSpwAIg9/Va7YnKHrFz9iIaLdBzukhUbTUK7MWn9W+IrxDp9gI 6TlvzFBv+hjR+eVrCcbEM5lpZL+CH+LPbUl8kNHGgtYfsbc6q5mu+gs43BzfBe1q odABQNfnQ1DdEPlzTvAGyQAgZ1xmt4ojeX9dE4Uk6VOWxBbYwe7zRD4h1H3pqJEJ IiKCxydpE6pxn+t05eX7uPEbePFIfZBv+SIT7HP1g+BIfTRNEtfeuvJsO+WGOljR KTin+vXUyfpVH2HFLNhMZApCG7MbWYGS0EllfNHXvmFdywUklMt1Z0dfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB+tXcWSOCOAsG1E5Kq9W+e8Jl7MB8GA1UdIwQY MBaAFA+f+Z8iczVlViaVuxpPLisY3v+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfNW55SnpOV1ZXSnBXN0drOHVLeGplXzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzVmMDgtNWRjNi00NmY5LWFmMTgt MzQ3ZWJiMzk3NWNmLzEvRDVfNW55SnpOV1ZXSnBXN0drOHVLeGplXzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzVmMDgtNWRjNi00NmY5LWFmMTgtMzQ3ZWJiMzk3NWNm LzEvRDVfNW55SnpOV1ZXSnBXN0drOHVLeGplXzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEMfdF9K pM4xqzWmzsB6OqyqM93afWo4Ne1t5MBMWaQX1ScnDJ30lc+m5fmYbjUP9tQZFVJb Mazfe9U//im4BVOL0TlS00JaImX94zrbu3LA3cY1BzfDOtaUoqXF4c6qp7zvg0Bv H0B43Qfhuyvk3JEV5Lq0XOdfi/uW6jHMoMici65GVKH295i0t9VSTATMbpXr616U N8rwPnUgmH250lLUW9muN6twetxyzTjZaIQZq6JQUkiHJzGOQgVpUGc5RdMJofUH qGf7k+9487UEyuzFK3M0XgXiDJ0iU6kfRthgWMhyDx1XL0TsvxL72ut8BeG+Fal7 3UVNA+o8S33W+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:02 2026 by rpki-client