This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json) Hash identifier: IWrb4IfriW7wThMn+eEO5S0o1iZVWtE1tzQycfCJXco= Subject key identifier: 69:7F:68:32:14:90:15:F0:11:F2:AF:2A:F7:6E:36:0F:45:A2:C0:3D Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Certificate serial: 019C41A2451DF2CED640A8F566253E341CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft Manifest number: 0DFE Signing time: Mon 09 Feb 2026 09:01:19 +0000 Manifest this update: Mon 09 Feb 2026 09:01:19 +0000 Manifest next update: Tue 10 Feb 2026 09:01:19 +0000 Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: +ewDY841iwjsycKYzRx8XkJNDJ+E39D0AkVqZo+5f/E=) 2: mFHqDso79bnSGrudnucQz5R41Oo.roa (hash: xaP9Kn1Lx08lI3zRt9f0iOZYpubw0vPg4T0MZuTFXEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:45:1d:f2:ce:d6:40:a8:f5:66:25:3e:34:1c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628 Validity Not Before: Feb 9 09:01:19 2026 GMT Not After : Feb 10 09:01:19 2026 GMT Subject: CN=697f6832149015f011f2af2af76e360f45a2c03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:6b:50:d1:d1:d2:00:ee:3e:d4:de:cc:42: d2:55:2a:7d:b6:0c:18:7a:23:03:39:23:e1:33:65: 68:b1:68:2d:2e:e8:0b:52:3e:54:cf:56:cd:47:0f: 80:2a:8f:55:aa:d0:86:7f:b3:7d:a8:28:f0:a2:d9: 08:b5:e9:0f:46:63:b8:fa:21:d7:53:b6:da:d2:13: 4a:b8:69:41:bd:e7:91:56:52:a3:4c:5c:40:14:14: f6:17:2b:13:82:38:3a:fe:7a:8d:38:16:f0:86:50: 58:1a:b3:70:97:9b:84:e8:89:3f:94:65:a3:30:b6: c5:5d:4e:b1:c3:41:60:19:7a:ed:b6:56:0b:bc:6d: e9:00:17:3c:97:5f:e1:fe:06:1b:9c:da:a5:27:65: 7b:2e:57:4b:3c:64:a6:e7:1a:c4:67:5f:e3:0a:13: 7c:d1:d2:9b:3d:08:f2:d6:c7:08:ea:e7:2b:d5:ff: 8d:92:06:d0:1a:02:0b:4a:6e:d9:fa:15:7e:62:28: 16:c4:6c:65:07:96:ed:89:a0:ed:77:c1:34:df:34: 5a:52:06:9d:36:e0:8c:ac:b2:78:be:e6:8d:e3:68: a3:0e:52:be:01:c0:89:59:5d:a6:3a:5f:e6:c9:6b: 89:9b:a6:fb:1e:46:0e:a1:68:04:11:82:b6:43:04: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7F:68:32:14:90:15:F0:11:F2:AF:2A:F7:6E:36:0F:45:A2:C0:3D X509v3 Authority Key Identifier: keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ca:07:d9:99:f9:5f:e1:b6:d4:59:93:4d:13:e1:7f:45:2d: 48:ab:1d:b0:74:c9:aa:5d:fb:48:6f:ac:9a:3b:b1:b0:9f:33: d2:ac:56:00:9f:ee:5d:d9:9e:4e:f3:69:0e:e1:64:1d:a2:ad: 4b:46:dd:12:94:75:86:6f:ed:01:9f:f5:85:0b:e8:7c:bd:53: 6e:e1:2c:f8:ac:e3:43:cc:31:53:78:24:57:0a:51:73:a8:be: 70:50:cd:81:59:8c:af:02:55:68:0d:8a:5d:56:b5:a6:03:a0: 99:37:fa:63:6c:2b:54:cd:9b:ec:14:7d:fb:1c:b2:f0:4e:79: af:c4:48:aa:6b:9e:f3:a4:c7:bc:f3:ae:b3:35:8c:c1:2f:40: 54:e5:c6:29:b3:46:95:c6:60:1c:db:88:40:56:3d:fa:ed:95: 3e:c0:eb:f1:9c:2f:d1:cb:1a:a0:2b:80:30:d0:75:9a:72:23: 64:6d:cd:87:31:c7:6a:fa:0f:b8:f6:3a:b3:fb:fa:be:3e:a5: 45:ab:59:16:d1:d4:ee:00:2e:c2:ae:d1:d2:e3:7e:72:8e:5a: 40:24:92:d0:fe:09:d2:07:3d:98:2a:1f:63:f9:83:3f:2b:91: b3:68:af:d8:94:ed:b3:99:32:68:0f:1e:53:51:ae:32:a7:09: 84:aa:6b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokUd8s7WQKj1ZiU+NBzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2Y5MWIwMjE1Mjg4MmJmOTYwNWQ3NmJlYTQyMWFhMGJk NGU2MjgwHhcNMjYwMjA5MDkwMTE5WhcNMjYwMjEwMDkwMTE5WjAzMTEwLwYDVQQD Eyg2OTdmNjgzMjE0OTAxNWYwMTFmMmFmMmFmNzZlMzYwZjQ1YTJjMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywprUNHR0gDuPtTezELSVSp9tgwY eiMDOSPhM2VosWgtLugLUj5Uz1bNRw+AKo9VqtCGf7N9qCjwotkItekPRmO4+iHX U7ba0hNKuGlBveeRVlKjTFxAFBT2FysTgjg6/nqNOBbwhlBYGrNwl5uE6Ik/lGWj MLbFXU6xw0FgGXrttlYLvG3pABc8l1/h/gYbnNqlJ2V7LldLPGSm5xrEZ1/jChN8 0dKbPQjy1scI6ucr1f+NkgbQGgILSm7Z+hV+YigWxGxlB5btiaDtd8E03zRaUgad NuCMrLJ4vuaN42ijDlK+AcCJWV2mOl/myWuJm6b7HkYOoWgEEYK2QwTn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGl/aDIUkBXwEfKvKvduNg9FosA9MB8GA1UdIwQY MBaAFOQ/kbAhUogr+WBddr6kIaoL1OYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQt MDMwODAyNjQxYzY3LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQtMDMwODAyNjQxYzY3 LzEvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMoH2Zn5 X+G21FmTTRPhf0UtSKsdsHTJql37SG+smjuxsJ8z0qxWAJ/uXdmeTvNpDuFkHaKt S0bdEpR1hm/tAZ/1hQvofL1TbuEs+KzjQ8wxU3gkVwpRc6i+cFDNgVmMrwJVaA2K XVa1pgOgmTf6Y2wrVM2b7BR9+xyy8E55r8RIqmue86THvPOuszWMwS9AVOXGKbNG lcZgHNuIQFY9+u2VPsDr8Zwv0csaoCuAMNB1mnIjZG3NhzHHavoPuPY6s/v6vj6l RatZFtHU7gAuwq7R0uN+co5aQCSS0P4J0gc9mCofY/mDPyuRs2iv2JTts5kyaA8e U1GuMqcJhKpr7w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:58 2026 by rpki-client