This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json) Hash identifier: MqBYJP2N+6W1oR74z+Qo4La98XBUd1AOzirvAr9p8rs= Subject key identifier: 54:0F:D3:4F:1C:DD:87:D2:CF:2E:F7:CE:DF:D5:2A:CD:FA:59:FE:F0 Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1 Certificate serial: 019C24E143953BF9169EE928220DC0B5BB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft Manifest number: 0422 Signing time: Tue 03 Feb 2026 19:01:08 +0000 Manifest this update: Tue 03 Feb 2026 19:01:08 +0000 Manifest next update: Wed 04 Feb 2026 19:01:08 +0000 Files and hashes: 1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: oiyZJC/5/c/pa4bUYV6HGofEquLPZrbXxLBa9cYWWBg=) 2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:e1:43:95:3b:f9:16:9e:e9:28:22:0d:c0:b5:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1 Validity Not Before: Feb 3 19:01:08 2026 GMT Not After : Feb 4 19:01:08 2026 GMT Subject: CN=540fd34f1cdd87d2cf2ef7cedfd52acdfa59fef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:03:3d:a0:94:ec:b2:3b:8b:b6:f4:4a:aa:f0: f5:1e:76:7c:4b:06:08:42:1a:34:ac:11:cd:f4:ce: d5:0a:c0:0a:d2:4f:ec:d1:82:dd:7e:81:3d:cb:a6: 1d:c0:f0:89:69:75:6f:22:82:9f:2c:67:d2:63:5c: 5a:7e:20:a0:d9:8b:b2:3e:53:d9:3e:cc:50:d0:d0: 2b:26:5f:54:35:60:29:d9:00:e5:9e:ad:8c:8f:5e: 7f:71:d7:2d:9b:8c:c3:1e:bd:73:ea:b1:2e:a1:f6: 9f:ec:d8:82:1e:15:ca:72:11:11:73:e3:11:b1:e4: 8c:cc:c2:45:a1:f9:55:82:e3:bf:73:2f:a3:7a:2b: 66:6f:86:65:d0:da:ac:b4:bd:f3:c6:54:66:12:36: 3b:b9:7d:3d:31:ac:11:62:5d:5c:6a:9c:40:a1:f9: a0:06:52:bf:96:40:ed:20:10:e8:e9:b1:6a:fc:46: 84:2e:cf:0b:a2:f6:b2:df:61:65:1a:82:30:44:a3: 9a:24:e4:73:17:be:ed:c3:f7:04:6c:24:76:79:54: 3a:77:fe:b4:cc:59:38:1b:11:e9:12:55:4a:a5:06: a0:9b:72:32:6e:1e:96:93:b6:e4:11:74:bf:bb:12: ff:81:d4:5e:99:c9:42:46:1c:b5:71:c2:9d:79:da: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0F:D3:4F:1C:DD:87:D2:CF:2E:F7:CE:DF:D5:2A:CD:FA:59:FE:F0 X509v3 Authority Key Identifier: keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:33:dc:92:4b:be:53:d3:72:be:fb:bc:66:c4:07:a3:ff:bb: da:28:97:69:18:f1:28:f8:4e:c1:88:57:ae:f4:79:09:90:26: 31:9c:3c:e8:84:a6:b6:98:7c:a7:b0:23:bc:42:1f:ef:23:f3: 3f:44:0f:0e:f9:74:29:db:d0:c2:c4:c1:7a:28:bf:df:27:77: c1:17:7c:37:43:4f:5a:61:6e:9f:80:06:5c:c6:75:c9:d1:7b: a3:cf:66:33:03:05:2f:a8:04:19:43:c6:7d:86:0c:b2:0b:6b: 0c:5d:f7:c7:9e:44:b3:ae:c4:29:df:31:5b:ef:20:6b:1b:13: 17:a6:d8:2b:42:73:d8:29:77:de:a2:0f:0d:29:8f:41:ef:1e: 9d:fb:8c:0c:ff:fa:2c:92:60:b1:c6:af:ba:87:0f:98:e1:bb: 6a:38:78:d9:ea:f5:aa:f5:7c:85:39:d6:e5:c5:d3:b3:98:f8: 30:0b:fa:d1:00:35:6a:a2:e3:dc:06:0a:5a:b3:b3:b2:ab:ff: 6e:c7:3f:3c:fe:31:d7:c6:3c:eb:64:71:76:9b:bc:d2:fa:12: b7:34:99:e0:fb:f6:3b:90:dc:98:9c:f6:19:38:4f:86:df:a9: d6:17:3b:ef:67:63:35:18:a8:fa:b3:1a:a9:f8:20:bd:d7:17: bd:33:d6:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwk4UOVO/kWnukoIg3AtbtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Mzk4Yzk2Zjc4NDc4MWIyZWRjMjAzYzc1MWM0ZTg3OTg3 ODVmYTEwHhcNMjYwMjAzMTkwMTA4WhcNMjYwMjA0MTkwMTA4WjAzMTEwLwYDVQQD Eyg1NDBmZDM0ZjFjZGQ4N2QyY2YyZWY3Y2VkZmQ1MmFjZGZhNTlmZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AM9oJTssjuLtvRKqvD1HnZ8SwYI Qho0rBHN9M7VCsAK0k/s0YLdfoE9y6YdwPCJaXVvIoKfLGfSY1xafiCg2YuyPlPZ PsxQ0NArJl9UNWAp2QDlnq2Mj15/cdctm4zDHr1z6rEuofaf7NiCHhXKchERc+MR seSMzMJFoflVguO/cy+jeitmb4Zl0NqstL3zxlRmEjY7uX09MawRYl1capxAofmg BlK/lkDtIBDo6bFq/EaELs8Lovay32FlGoIwRKOaJORzF77tw/cEbCR2eVQ6d/60 zFk4GxHpElVKpQagm3Iybh6Wk7bkEXS/uxL/gdRemclCRhy1ccKdedqfjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQP008c3YfSzy73zt/VKs36Wf7wMB8GA1UdIwQY MBaAFOU5jJb3hHgbLtwgPHUcToeYeF+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMt ZDFlNDYwNTE4NDgzLzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMtZDFlNDYwNTE4NDgz LzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTPckku+ U9Nyvvu8ZsQHo/+72iiXaRjxKPhOwYhXrvR5CZAmMZw86ISmtph8p7AjvEIf7yPz P0QPDvl0KdvQwsTBeii/3yd3wRd8N0NPWmFun4AGXMZ1ydF7o89mMwMFL6gEGUPG fYYMsgtrDF33x55Es67EKd8xW+8gaxsTF6bYK0Jz2Cl33qIPDSmPQe8enfuMDP/6 LJJgscavuocPmOG7ajh42er1qvV8hTnW5cXTs5j4MAv60QA1aqLj3AYKWrOzsqv/ bsc/PP4x18Y862Rxdpu80voStzSZ4Pv2O5DcmJz2GThPht+p1hc772djNRio+rMa qfggvdcXvTPWuQ== -----END CERTIFICATE-----Generated at Wed Feb 4 04:39:06 2026 by rpki-client