This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json) Hash identifier: bLnnHiq7I2KxeVQrEe1PFNDqIc3P5KH+RHi67rZzDYI= Subject key identifier: 25:98:FE:92:F5:EB:5C:1D:2C:A7:93:E8:EE:A8:1A:E7:95:D2:EE:65 Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019C4246C7D958DA1807CDBE45754DE07BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft Manifest number: 0E67 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: 6lkZili7Yl5Z+B+6tiOJtbAselWERrABEuwIncbD/NA=) 2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c7:d9:58:da:18:07:cd:be:45:75:4d:e0:7b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=2598fe92f5eb5c1d2ca793e8eea81ae795d2ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:af:54:f3:f4:b4:74:80:9e:1d:e0:ed:a7: 66:36:c3:25:58:6d:89:1a:0e:8b:b8:a0:87:77:83: 25:f2:ec:13:4f:02:23:d3:b7:5d:82:e6:6a:45:06: 98:28:91:3d:86:8f:c6:a9:6f:82:35:09:1d:0a:3b: 97:31:3a:a6:c9:6e:50:68:b7:02:83:d2:bc:31:d2: 5f:52:c7:bd:7b:74:57:8a:eb:71:7e:e3:a8:41:d3: 0f:c6:0c:d8:17:c5:56:19:2d:80:56:80:4a:f6:30: 52:34:08:50:08:65:66:8e:9f:94:41:2e:8e:ac:49: 37:db:9f:a8:6a:d1:7c:4f:eb:d2:87:be:a4:c4:b2: 65:06:d3:88:47:8b:a4:c7:94:71:18:8b:13:d9:5b: 92:a2:35:c5:b6:e4:0e:2a:2a:a1:4f:5a:e6:75:4b: e3:59:9d:dd:09:c5:96:2c:b9:a9:76:13:a0:d6:66: d8:d6:cc:d1:da:90:59:52:57:a6:04:2d:4d:55:a8: 23:7f:a9:51:7e:7a:3c:46:3b:14:31:10:6e:f8:c4: a8:c8:bd:67:40:22:9a:2b:76:d4:01:7a:3f:44:df: 9b:03:43:35:43:22:0e:1b:89:be:46:c4:b4:bb:7f: ed:d1:d7:1f:1b:75:5c:6d:e9:11:58:01:dd:43:74: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:FE:92:F5:EB:5C:1D:2C:A7:93:E8:EE:A8:1A:E7:95:D2:EE:65 X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:82:0d:b6:a1:65:70:8f:97:51:68:65:53:3a:4a:9f:1c:5c: 8c:65:18:f6:d1:37:73:0b:00:47:59:58:68:b9:18:d6:55:08: 45:27:28:8a:61:48:2b:42:81:c2:c4:06:93:5b:ff:0d:ec:27: c8:65:4a:99:95:de:27:95:8f:13:7b:f6:ae:03:19:65:22:cd: 3c:0a:1f:1a:f6:f0:0b:7c:a2:d5:88:55:27:b9:21:b8:a0:f1: 71:91:41:a9:e9:a3:97:8a:36:df:31:61:c6:20:f6:0c:12:ec: d5:23:1c:9c:39:17:2e:19:be:bb:8b:b5:c7:71:14:da:82:3d: 9d:28:d0:0c:c4:a7:6f:20:dd:b5:79:46:0b:03:47:99:3f:9a: 8e:5c:ad:b4:09:a0:08:96:b0:27:c2:d3:51:e0:e0:32:1f:56: ca:19:3b:75:25:e4:ab:19:47:a1:b6:4f:72:b8:14:32:c7:68: 88:9b:04:d3:08:61:06:8e:6b:a3:2a:73:99:a5:67:8e:c7:cc: e8:77:03:33:f4:49:10:0c:66:87:aa:3f:d1:ed:f6:fd:06:b9: 7f:dd:00:0e:0f:c5:63:3a:5a:e8:c4:b1:f8:10:b3:dc:df:65: 4e:b3:79:aa:5c:1a:89:25:95:d9:3b:01:dd:80:7b:15:d6:b3: 7d:31:71:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsfZWNoYB82+RXVN4Hv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD EygyNTk4ZmU5MmY1ZWI1YzFkMmNhNzkzZThlZWE4MWFlNzk1ZDJlZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf6vVPP0tHSAnh3g7admNsMlWG2J Gg6LuKCHd4Ml8uwTTwIj07ddguZqRQaYKJE9ho/GqW+CNQkdCjuXMTqmyW5QaLcC g9K8MdJfUse9e3RXiutxfuOoQdMPxgzYF8VWGS2AVoBK9jBSNAhQCGVmjp+UQS6O rEk325+oatF8T+vSh76kxLJlBtOIR4ukx5RxGIsT2VuSojXFtuQOKiqhT1rmdUvj WZ3dCcWWLLmpdhOg1mbY1szR2pBZUlemBC1NVagjf6lRfno8RjsUMRBu+MSoyL1n QCKaK3bUAXo/RN+bA0M1QyIOG4m+RsS0u3/t0dcfG3VcbekRWAHdQ3TcNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWY/pL161wdLKeT6O6oGueV0u5lMB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYINtqFl cI+XUWhlUzpKnxxcjGUY9tE3cwsAR1lYaLkY1lUIRScoimFIK0KBwsQGk1v/Dewn yGVKmZXeJ5WPE3v2rgMZZSLNPAofGvbwC3yi1YhVJ7khuKDxcZFBqemjl4o23zFh xiD2DBLs1SMcnDkXLhm+u4u1x3EU2oI9nSjQDMSnbyDdtXlGCwNHmT+ajlyttAmg CJawJ8LTUeDgMh9Wyhk7dSXkqxlHobZPcrgUMsdoiJsE0whhBo5roypzmaVnjsfM 6HcDM/RJEAxmh6o/0e32/Qa5f90ADg/FYzpa6MSx+BCz3N9lTrN5qlwaiSWV2TsB 3YB7FdazfTFx1g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:30 2026 by rpki-client