This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json) Hash identifier: gjyj/K8ER/Tww16iCkCoUd4sDk2pzc9a+j1QaCS8qqQ= Subject key identifier: 53:2B:86:BB:8D:88:D1:56:A0:2A:45:18:88:DA:17:1C:03:D4:12:75 Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Certificate serial: 019C43C6DB0084BA712DC410E8124FDC36E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft Manifest number: 0E2E Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: Gf/vPwCT/40NduUr3Dy3z65WmgjHMNTJfs8ZKiN1JlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:db:00:84:ba:71:2d:c4:10:e8:12:4f:dc:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=532b86bb8d88d156a02a451888da171c03d41275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:64:b0:51:94:80:aa:1c:b4:ba:e2:5b:6b: f7:81:31:e3:a2:61:83:a4:35:fe:32:96:8a:38:8f: 7f:87:23:80:e1:28:dd:0e:ad:e0:d3:5f:2a:f6:19: 79:c1:29:70:e5:b1:64:6b:ac:45:48:22:42:28:82: 30:72:50:4b:d3:bf:c4:ea:a9:8c:9c:a7:4e:ca:46: f3:44:3a:ca:a1:7a:13:a9:2f:1f:8e:0a:5d:75:36: fb:22:67:26:be:1d:12:53:fd:ae:62:1b:a1:40:61: a1:47:59:96:fd:62:4b:8e:b3:cf:fc:1f:c6:22:3b: 35:96:b1:99:18:5d:c7:57:9f:4c:76:7e:08:eb:c0: 57:85:18:5a:d3:3c:6d:61:5c:dd:6c:0d:bd:04:18: ec:ab:5f:4f:74:a7:c8:04:99:50:4c:f7:9b:32:e9: 9a:99:e0:77:86:b7:16:85:e7:36:01:fd:81:f2:c2: 36:9b:d8:2c:3a:5e:71:95:35:28:1a:98:4d:49:39: 06:4c:17:6a:7b:d8:fe:55:c1:be:bc:21:9a:94:41: 1c:5a:15:d6:ff:4d:6d:da:93:c3:b8:87:ff:93:97: bb:de:79:51:0a:16:bc:52:71:74:28:5e:22:46:4e: 9e:8e:bc:c3:c6:d9:f1:32:aa:dc:c7:05:da:5c:14: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:86:BB:8D:88:D1:56:A0:2A:45:18:88:DA:17:1C:03:D4:12:75 X509v3 Authority Key Identifier: keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:92:3c:f9:b8:c8:fd:1b:c2:48:0f:5f:7e:04:0a:36:ae:5b: a4:76:9a:b8:78:6c:61:cb:05:63:b2:fe:5c:d7:9f:f6:9f:e1: 40:83:e1:4f:df:b3:52:79:4a:70:1e:55:e0:86:a2:5c:73:23: 06:de:d2:6f:93:c7:bb:9b:ca:a2:2f:69:81:cb:fc:16:10:24: 74:c4:e4:5f:0b:87:3b:71:63:44:43:ca:68:99:c1:ed:59:9b: 4e:3c:45:61:ea:56:e6:17:ba:6c:4c:31:70:36:eb:29:ee:ec: 29:8b:37:a5:8e:6c:7c:49:96:13:a8:ce:2d:f7:06:05:ce:98: 9b:58:a4:39:60:93:6f:4f:a3:14:a3:92:71:b6:b2:9c:2c:10: 2e:c3:93:78:2a:72:ce:94:ab:9b:fd:30:6d:e1:2e:fa:d4:7e: 99:e5:f1:42:9b:d7:d5:5e:b8:c3:56:5c:9f:41:0c:5a:ce:32: 2c:c9:75:1a:d3:2c:bb:e6:1c:bf:a7:62:d4:0e:72:82:41:e5: ce:88:1c:f4:f6:bc:3e:ce:93:24:d4:3d:44:89:5b:4f:c9:80: 07:cb:b1:15:95:53:e1:1b:83:27:50:f5:21:90:a1:5a:e0:c8: ed:11:ff:27:b6:3c:bb:c7:23:90:e5:19:e3:34:a0:f3:18:c9: d5:9e:04:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtsAhLpxLcQQ6BJP3DbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOWU1ZjM4OGRjMzQ5MWE0Yzk1NDdiYjU3ODhlMmZlNGY1 MGQwMzYwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD Eyg1MzJiODZiYjhkODhkMTU2YTAyYTQ1MTg4OGRhMTcxYzAzZDQxMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwJksFGUgKoctLriW2v3gTHjomGD pDX+MpaKOI9/hyOA4SjdDq3g018q9hl5wSlw5bFka6xFSCJCKIIwclBL07/E6qmM nKdOykbzRDrKoXoTqS8fjgpddTb7Imcmvh0SU/2uYhuhQGGhR1mW/WJLjrPP/B/G Ijs1lrGZGF3HV59Mdn4I68BXhRha0zxtYVzdbA29BBjsq19PdKfIBJlQTPebMuma meB3hrcWhec2Af2B8sI2m9gsOl5xlTUoGphNSTkGTBdqe9j+VcG+vCGalEEcWhXW /01t2pPDuIf/k5e73nlRCha8UnF0KF4iRk6ejrzDxtnxMqrcxwXaXBR6TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMrhruNiNFWoCpFGIjaFxwD1BJ1MB8GA1UdIwQY MBaAFLOeXziNw0kaTJVHu1eI4v5PUNA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYt NWRjZWI5ZWNjMmI3LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYtNWRjZWI5ZWNjMmI3 LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJI8+bjI /RvCSA9ffgQKNq5bpHaauHhsYcsFY7L+XNef9p/hQIPhT9+zUnlKcB5V4IaiXHMj Bt7Sb5PHu5vKoi9pgcv8FhAkdMTkXwuHO3FjREPKaJnB7VmbTjxFYepW5he6bEwx cDbrKe7sKYs3pY5sfEmWE6jOLfcGBc6Ym1ikOWCTb0+jFKOScbaynCwQLsOTeCpy zpSrm/0wbeEu+tR+meXxQpvX1V64w1Zcn0EMWs4yLMl1GtMsu+Ycv6di1A5ygkHl zogc9Pa8Ps6TJNQ9RIlbT8mAB8uxFZVT4RuDJ1D1IZChWuDI7RH/J7Y8u8cjkOUZ 4zSg8xjJ1Z4ENw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:29 2026 by rpki-client