This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json) Hash identifier: TUxr8lu33pjWoUn1JgC+QNZC1fXk8asTPelj2IhBGvg= Subject key identifier: B1:1D:92:EF:2A:43:8A:CD:A0:92:A2:06:F8:1A:AE:C8:41:5C:68:4F Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019C420F1FF357F01EDAA24DBBC26AF5C812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: Wsq7SBeNnMbvZpW/S3lN+k9INgkXrs84ahiGn1nPN04=) 2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:1f:f3:57:f0:1e:da:a2:4d:bb:c2:6a:f5:c8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=b11d92ef2a438acda092a206f81aaec8415c684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:fd:b1:76:f4:c0:14:20:42:48:a2:84:58: 99:54:e8:5c:3f:76:60:d5:3b:af:fc:31:fb:1e:c3: 7b:bc:14:3f:b9:f0:f8:28:8f:ab:98:dc:49:02:f6: bf:81:fc:57:9e:c0:37:55:41:e9:80:88:b6:ec:84: c8:98:7f:c1:09:2d:1b:b1:c6:b2:57:83:5c:a2:3d: 7d:2b:bc:45:30:59:0a:3e:a2:87:de:00:be:53:bc: f8:5d:5f:6c:36:64:d0:23:41:c5:be:25:22:11:7e: 9b:be:e3:5b:fd:32:66:50:3e:40:cb:c9:16:30:26: 9e:1e:8a:01:00:36:51:97:8e:ad:5c:c8:0d:5b:e2: 67:dc:f6:3b:eb:c8:6d:f0:32:9e:5c:8b:67:cc:f8: 1e:71:a5:f4:c8:3f:46:3e:14:b3:7e:b6:f4:c9:7c: 29:65:2d:e1:1a:16:a9:9c:96:9e:f1:48:8f:c9:69: 1d:68:32:d8:c3:16:5a:9b:81:c1:06:11:2a:ae:af: b9:65:ed:8b:64:2c:d6:26:e1:f2:5d:eb:65:7c:d8: d8:4a:2b:8c:b0:15:ca:6f:61:4e:9a:88:92:c9:65: 38:93:8c:86:09:e4:02:2c:b3:64:f8:4a:72:70:2f: c3:2c:a4:b4:19:01:ae:44:f1:6b:a7:1e:18:64:52: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:92:EF:2A:43:8A:CD:A0:92:A2:06:F8:1A:AE:C8:41:5C:68:4F X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1d:ba:f9:8f:ca:8f:11:00:da:fb:3f:42:c4:df:36:aa:eb: 30:c3:55:70:8e:41:4b:3f:0f:00:42:a1:e7:df:a1:23:ef:52: 18:cc:9e:63:d9:b0:42:89:d3:23:d3:4f:bc:62:b9:d2:53:8f: 0f:9d:05:02:f4:85:9f:fd:c5:44:70:16:90:49:d4:71:30:ac: 1d:df:5b:fe:23:e3:25:cf:7f:53:55:16:c2:62:f6:36:ef:3e: 8f:e8:ef:0c:83:89:3d:d5:05:c8:a1:63:96:08:5b:86:95:a1: 8b:3d:52:6a:87:f7:b5:41:bd:ad:e4:6c:5d:fe:99:30:7f:b0: c2:3c:11:0e:f1:78:9c:95:4a:7e:53:06:2d:ee:12:b0:b1:d3: 1b:45:ad:93:06:b3:87:e3:c3:1d:b6:dc:97:c2:fa:63:0c:e0: 7f:28:39:cb:96:9b:98:a3:c8:66:66:33:d2:54:51:5c:31:9c: 4e:91:1d:ba:02:aa:ca:63:75:8a:50:a3:43:ed:47:65:3b:d1: b6:80:e9:2f:df:69:1a:be:53:58:25:e2:69:b9:31:14:1a:64: 39:80:dc:d0:2a:43:d5:77:a9:ef:ad:c7:9e:87:af:16:1c:69: e2:17:f2:ff:34:52:9f:2b:a5:ee:e3:b4:79:54:08:2b:c2:ec: 2f:a6:a5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDx/zV/Ae2qJNu8Jq9cgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EyhiMTFkOTJlZjJhNDM4YWNkYTA5MmEyMDZmODFhYWVjODQxNWM2ODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEn9sXb0wBQgQkiihFiZVOhcP3Zg 1Tuv/DH7HsN7vBQ/ufD4KI+rmNxJAva/gfxXnsA3VUHpgIi27ITImH/BCS0bscay V4Ncoj19K7xFMFkKPqKH3gC+U7z4XV9sNmTQI0HFviUiEX6bvuNb/TJmUD5Ay8kW MCaeHooBADZRl46tXMgNW+Jn3PY768ht8DKeXItnzPgecaX0yD9GPhSzfrb0yXwp ZS3hGhapnJae8UiPyWkdaDLYwxZam4HBBhEqrq+5Ze2LZCzWJuHyXetlfNjYSiuM sBXKb2FOmoiSyWU4k4yGCeQCLLNk+EpycC/DLKS0GQGuRPFrpx4YZFJoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEdku8qQ4rNoJKiBvgarshBXGhPMB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB26+Y/K jxEA2vs/QsTfNqrrMMNVcI5BSz8PAEKh59+hI+9SGMyeY9mwQonTI9NPvGK50lOP D50FAvSFn/3FRHAWkEnUcTCsHd9b/iPjJc9/U1UWwmL2Nu8+j+jvDIOJPdUFyKFj lghbhpWhiz1Saof3tUG9reRsXf6ZMH+wwjwRDvF4nJVKflMGLe4SsLHTG0Wtkwaz h+PDHbbcl8L6Ywzgfyg5y5abmKPIZmYz0lRRXDGcTpEdugKqymN1ilCjQ+1HZTvR toDpL99pGr5TWCXiabkxFBpkOYDc0CpD1Xep763HnoevFhxp4hfy/zRSnyul7uO0 eVQIK8LsL6alEg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:21 2026 by rpki-client