This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json) Hash identifier: V3rOSMfSW9eImgCVf4ZdNozYhBS8pYLwf19G7rWj7/E= Subject key identifier: 11:30:DA:C8:DB:77:08:3D:1A:94:AA:0A:9F:7F:61:F0:DB:E9:FE:34 Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06 Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006 Certificate serial: 019C4434CA624E8B127B07C8CF839B64E80A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft Manifest number: 0EF0 Signing time: Mon 09 Feb 2026 21:00:36 +0000 Manifest this update: Mon 09 Feb 2026 21:00:36 +0000 Manifest next update: Tue 10 Feb 2026 21:00:36 +0000 Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: 8L5hfiao8D6yeWMjGcR5cjrRQpi8Fj42gW2IsE9mE0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:ca:62:4e:8b:12:7b:07:c8:cf:83:9b:64:e8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006 Validity Not Before: Feb 9 21:00:36 2026 GMT Not After : Feb 10 21:00:36 2026 GMT Subject: CN=1130dac8db77083d1a94aa0a9f7f61f0dbe9fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:9a:67:44:f7:8e:b2:27:f4:0d:75:a4:90: 3a:44:7b:b6:bc:9f:44:eb:94:58:c5:a6:85:a9:e8: ec:da:92:e2:b3:21:ac:25:5b:85:ce:fd:ab:a6:52: d5:8f:dd:b5:66:0c:0c:23:22:b0:38:4f:49:3b:82: 28:fa:8f:0d:3c:7e:5a:1e:a7:74:83:69:66:29:7c: b1:8b:a8:bc:de:49:cb:46:76:62:0a:f2:9d:8a:3b: 6b:6b:af:82:d9:6c:8f:a9:99:1f:19:4a:1e:25:bb: 63:b6:a9:12:99:42:2c:84:fd:65:e4:29:41:a5:f3: 43:ce:d8:31:cb:ad:21:67:6a:b9:30:fb:41:c1:13: 0a:b5:bc:5a:e8:f5:a5:77:29:45:46:80:96:87:49: 64:51:0d:78:fe:14:32:eb:66:9a:01:19:17:2e:99: e1:ca:06:6d:83:e6:79:7c:d8:bb:87:53:4a:b8:e8: de:c1:4a:d9:52:e2:bf:75:2a:42:66:26:7b:85:fd: 38:8f:33:c0:da:1f:85:00:2a:4d:57:fd:a7:20:d5: 92:bd:c0:2f:90:09:c8:11:7b:a8:78:c6:22:47:c8: 7c:e6:b7:de:9f:1c:e2:38:5a:a7:20:d4:2e:a4:0b: bf:4f:60:fe:c6:b8:54:3f:90:d8:b1:31:47:0d:40: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:30:DA:C8:DB:77:08:3D:1A:94:AA:0A:9F:7F:61:F0:DB:E9:FE:34 X509v3 Authority Key Identifier: keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:19:ab:f5:f6:fe:4d:ce:c1:5a:dc:9c:f0:f8:38:64:0b:f2: 48:fe:66:20:a1:a1:4d:a1:a7:81:6c:53:bb:f6:6c:93:82:94: 74:6c:da:71:40:33:53:5c:bf:5e:4b:f7:72:3f:37:01:9d:03: 8a:ae:4e:b2:9f:65:8a:db:c5:4e:e5:d6:05:e3:ae:99:a0:a1: 99:57:1b:1f:a0:d4:aa:7a:78:bc:1a:aa:36:d8:93:3b:20:4e: c8:85:9e:f9:18:ca:24:df:a8:8b:03:82:dc:2f:a0:7a:90:65: c3:5b:77:1b:27:7d:c5:b0:6a:c0:1b:d8:a7:d5:b1:8a:04:19: d3:ba:ee:b2:d3:4c:16:39:0d:3b:e7:1a:3d:5f:14:a9:a0:a8: c3:ea:d7:56:dc:1f:65:0a:07:b6:aa:7c:fb:6f:a2:9c:ed:1e: 94:6e:35:df:72:37:0f:86:aa:2e:d4:c0:a7:55:4a:3e:3d:fe: 08:ac:f4:16:4a:a6:53:e7:dd:b0:db:64:88:cb:62:35:9b:82: a2:62:6e:df:7e:db:26:4f:2b:72:5d:85:1d:69:a1:f8:58:5f: ab:55:83:63:c8:d2:60:48:2b:d5:ca:eb:fc:40:86:22:fc:89: 6d:85:cd:59:81:60:39:cd:86:f8:60:4d:45:26:11:82:a0:97: 58:06:da:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENMpiTosSewfIz4ObZOgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YjkxYjE5ZjRiZGJkNmZmMWQ3ZjM3MmQzYTBkZDEzOTAw NTAwMDYwHhcNMjYwMjA5MjEwMDM2WhcNMjYwMjEwMjEwMDM2WjAzMTEwLwYDVQQD EygxMTMwZGFjOGRiNzcwODNkMWE5NGFhMGE5ZjdmNjFmMGRiZTlmZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ViaZ0T3jrIn9A11pJA6RHu2vJ9E 65RYxaaFqejs2pLisyGsJVuFzv2rplLVj921ZgwMIyKwOE9JO4Io+o8NPH5aHqd0 g2lmKXyxi6i83knLRnZiCvKdijtra6+C2WyPqZkfGUoeJbtjtqkSmUIshP1l5ClB pfNDztgxy60hZ2q5MPtBwRMKtbxa6PWldylFRoCWh0lkUQ14/hQy62aaARkXLpnh ygZtg+Z5fNi7h1NKuOjewUrZUuK/dSpCZiZ7hf04jzPA2h+FACpNV/2nINWSvcAv kAnIEXuoeMYiR8h85rfenxziOFqnINQupAu/T2D+xrhUP5DYsTFHDUAu7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEw2sjbdwg9GpSqCp9/YfDb6f40MB8GA1UdIwQY MBaAFOa5Gxn0vb1v8dfzctOg3ROQBQAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDct MDRiNTI4ZmFlMDNhLzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDctMDRiNTI4ZmFlMDNh LzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhmr9fb+ Tc7BWtyc8Pg4ZAvySP5mIKGhTaGngWxTu/Zsk4KUdGzacUAzU1y/Xkv3cj83AZ0D iq5Osp9litvFTuXWBeOumaChmVcbH6DUqnp4vBqqNtiTOyBOyIWe+RjKJN+oiwOC 3C+gepBlw1t3Gyd9xbBqwBvYp9WxigQZ07rustNMFjkNO+caPV8UqaCow+rXVtwf ZQoHtqp8+2+inO0elG4133I3D4aqLtTAp1VKPj3+CKz0FkqmU+fdsNtkiMtiNZuC omJu337bJk8rcl2FHWmh+Fhfq1WDY8jSYEgr1crr/ECGIvyJbYXNWYFgOc2G+GBN RSYRgqCXWAbaTA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:14 2026 by rpki-client