This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json) Hash identifier: S9ahUC91D2m/njakoJ+VNR2RMJzLyYZlfn3Q3bbpTQ8= Subject key identifier: 16:C0:19:6C:A5:18:E4:5B:DB:97:43:19:1F:68:23:1B:AC:25:15:48 Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Certificate serial: 019C41D8875F8BE6E5E8218944D553189751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft Manifest number: 1280 Signing time: Mon 09 Feb 2026 10:00:35 +0000 Manifest this update: Mon 09 Feb 2026 10:00:35 +0000 Manifest next update: Tue 10 Feb 2026 10:00:35 +0000 Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: fAqNvUFssMo9DI3GRmRlC15FEJ7puqmiTutiab/Ku5Q=) 2: Bl6ecBYyvP74akh6LYMNk-UPmww.roa (hash: WdzzNwRANJ0xSBXtIJYAS4hehtEEYmmyefLmgeY2F3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:87:5f:8b:e6:e5:e8:21:89:44:d5:53:18:97:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542 Validity Not Before: Feb 9 10:00:35 2026 GMT Not After : Feb 10 10:00:35 2026 GMT Subject: CN=16c0196ca518e45bdb9743191f68231bac251548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:6d:41:4d:9e:e1:4b:ac:77:5d:a2:7f:e5: 7f:f5:48:6e:29:90:2a:ad:19:86:3f:6d:6b:b0:c8: fc:66:d3:21:8c:5a:89:8f:f9:68:e6:f3:a3:5c:dc: f3:d0:ed:13:5e:ee:d2:d7:34:1a:4b:d0:d6:a9:6f: 0a:63:ef:e3:22:0b:6e:b0:e0:2c:98:12:96:26:bd: 56:6b:6b:21:48:b2:a6:08:64:7b:b0:b8:f2:09:0b: 6d:c8:f6:3b:fb:4f:c9:16:2e:b9:3a:cf:2d:8a:15: 6a:7e:62:8c:e5:e8:c2:78:b7:5f:cf:de:fa:93:d5: 29:5b:6d:8c:f5:a8:ba:d4:4d:2e:0a:e8:5e:99:df: 69:4b:a8:22:c1:f2:2c:56:61:50:7d:36:2c:4b:79: f0:62:0f:78:2b:67:ce:1f:2b:df:e1:ce:12:d7:2a: 9f:4c:ed:fb:64:64:8b:ed:a9:3a:b1:a5:ee:c7:ee: 6e:13:0b:60:47:be:aa:05:0b:c8:7d:e6:45:e9:f6: b1:59:57:d4:c0:88:53:dd:01:91:44:61:a2:44:a3: 0c:01:35:59:9a:2d:d1:c4:75:5a:e5:e0:ea:94:1a: 22:da:fd:4d:90:8e:83:b3:15:66:46:c7:c7:b3:4f: ba:a2:ad:5b:1f:65:d4:ef:a0:bb:71:96:c8:df:40: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:19:6C:A5:18:E4:5B:DB:97:43:19:1F:68:23:1B:AC:25:15:48 X509v3 Authority Key Identifier: keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:77:6b:2d:e5:4a:a3:a5:1f:08:c1:e8:ec:1c:4a:36:84:10: f8:7b:e4:13:c1:2c:a1:2d:db:5e:c2:b8:78:a0:7a:46:f0:1b: 9a:a9:40:d2:07:62:ff:dc:01:2a:b1:1a:5e:12:86:63:04:42: 16:69:be:cc:da:0d:49:af:85:51:a9:dd:21:d4:1a:8d:c0:3e: b3:fb:d7:8b:5a:32:a7:69:4f:d7:26:01:65:41:43:40:e2:2b: e9:8e:39:24:09:80:b2:5e:6a:b3:65:fa:88:e0:97:6e:0e:9e: 01:70:0d:11:ca:fe:d8:c7:c1:ff:f5:1f:ab:09:53:d6:2f:8f: d4:ec:26:0c:d2:3a:93:ea:87:32:48:1e:13:29:5e:db:32:4c: 97:dd:25:a0:63:0c:88:86:45:a6:01:e2:dc:4c:e7:d9:dc:86: 60:95:95:6e:f5:f6:74:58:1a:e5:24:5b:09:0e:48:be:7a:fe: d5:87:ba:5e:8c:d4:26:0e:32:f8:f2:4a:db:1e:f0:3e:e3:5f: 89:aa:db:fe:59:c1:c9:e9:9c:59:72:ea:ce:3a:4a:93:ca:aa: 72:89:08:0e:8c:b9:c1:b6:b0:5e:f2:7d:6f:35:47:21:9b:e9: 95:4c:84:8d:da:fc:d8:3c:2f:67:5b:2c:6b:2c:5a:63:df:18: 0e:d5:fb:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Idfi+bl6CGJRNVTGJdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NmU3NzI2ZmY1M2ExM2M4MGNjYmNhNGQ1ZDM5NGU0ZThh ZWY1NDIwHhcNMjYwMjA5MTAwMDM1WhcNMjYwMjEwMTAwMDM1WjAzMTEwLwYDVQQD EygxNmMwMTk2Y2E1MThlNDViZGI5NzQzMTkxZjY4MjMxYmFjMjUxNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2BtQU2e4Uusd12if+V/9UhuKZAq rRmGP21rsMj8ZtMhjFqJj/lo5vOjXNzz0O0TXu7S1zQaS9DWqW8KY+/jIgtusOAs mBKWJr1Wa2shSLKmCGR7sLjyCQttyPY7+0/JFi65Os8tihVqfmKM5ejCeLdfz976 k9UpW22M9ai61E0uCuhemd9pS6giwfIsVmFQfTYsS3nwYg94K2fOHyvf4c4S1yqf TO37ZGSL7ak6saXux+5uEwtgR76qBQvIfeZF6faxWVfUwIhT3QGRRGGiRKMMATVZ mi3RxHVa5eDqlBoi2v1NkI6DsxVmRsfHs0+6oq1bH2XU76C7cZbI30DlfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbAGWylGORb25dDGR9oIxusJRVIMB8GA1UdIwQY MBaAFOZudyb/U6E8gMy8pNXTlOTorvVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGIt NTE2Y2E4NGZlNWZlLzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zMWIxMWYtMmI2Yi00MjUyLTk5MGItNTE2Y2E4NGZlNWZl LzEvNW01M0p2OVRvVHlBekx5azFkT1U1T2l1OVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3drLeVK o6UfCMHo7BxKNoQQ+HvkE8EsoS3bXsK4eKB6RvAbmqlA0gdi/9wBKrEaXhKGYwRC Fmm+zNoNSa+FUandIdQajcA+s/vXi1oyp2lP1yYBZUFDQOIr6Y45JAmAsl5qs2X6 iOCXbg6eAXANEcr+2MfB//UfqwlT1i+P1OwmDNI6k+qHMkgeEyle2zJMl90loGMM iIZFpgHi3Ezn2dyGYJWVbvX2dFga5SRbCQ5Ivnr+1Ye6XozUJg4y+PJK2x7wPuNf iarb/lnByemcWXLqzjpKk8qqcokIDoy5wbawXvJ9bzVHIZvplUyEjdr82DwvZ1ss ayxaY98YDtX7hA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:02 2026 by rpki-client