This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json) Hash identifier: CADX0wRo3jonU7byW6YWuCaqCUClh3GE7XrunhRFm8w= Subject key identifier: B6:E4:B3:33:6A:7D:D6:F7:2E:13:34:1B:5C:C3:D6:6D:0E:23:A3:6E Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13 Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13 Certificate serial: 019C42EBB0299F5E8ED894CAFA0B16AC586D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft Manifest number: 31 Signing time: Mon 09 Feb 2026 15:01:08 +0000 Manifest this update: Mon 09 Feb 2026 15:01:08 +0000 Manifest next update: Tue 10 Feb 2026 15:01:08 +0000 Files and hashes: 1: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: HuGlEq7HJzpEQ6ttOahWWS2M61AbgfJSJAVnM8C4Myc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b0:29:9f:5e:8e:d8:94:ca:fa:0b:16:ac:58:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13 Validity Not Before: Feb 9 15:01:08 2026 GMT Not After : Feb 10 15:01:08 2026 GMT Subject: CN=b6e4b3336a7dd6f72e13341b5cc3d66d0e23a36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:69:34:89:1c:87:22:6a:ba:61:80:3b:a6: 2d:d6:d4:5f:fc:6b:ed:d4:91:93:3c:90:82:ca:48: 63:6a:f1:a1:bc:bf:77:b2:4b:d0:df:06:25:31:5e: 57:f3:64:3b:66:9f:3f:b1:99:fe:85:20:df:10:02: 2a:22:c5:56:2b:43:15:17:9d:36:89:cb:7c:49:31: c9:7d:3e:96:b1:67:f0:56:85:ce:6d:19:7f:19:36: ad:18:88:3c:c2:3e:d4:33:4e:83:a1:49:f2:00:de: ca:fb:a3:99:4e:b4:41:74:60:ce:b3:e3:37:e5:28: 21:15:0c:f0:6f:87:6d:f0:9a:d9:fd:11:dc:22:39: c2:2b:90:f5:30:cb:cc:71:7e:db:95:ab:9b:3c:6a: 62:25:0f:1c:6a:da:0e:f7:09:e9:63:2d:5b:fe:61: 5f:61:49:e9:2e:07:8f:12:44:79:70:c4:eb:27:16: 14:27:2b:1a:15:ed:68:95:5a:0f:29:9e:87:1e:c2: 4a:58:59:f8:0b:92:20:37:04:ec:ff:eb:a0:25:88: 9f:f7:3e:27:cc:89:4e:97:99:3e:63:f6:f5:0a:d6: 75:34:62:fa:d0:75:b5:be:8a:c0:2f:f6:15:ed:33: 1e:19:4b:b6:6a:6b:eb:5b:a7:a1:2c:8d:e1:3e:8e: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E4:B3:33:6A:7D:D6:F7:2E:13:34:1B:5C:C3:D6:6D:0E:23:A3:6E X509v3 Authority Key Identifier: keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6f:1b:ef:0b:89:9c:b9:cb:fd:63:21:b4:56:86:ce:ec:56: 02:ad:75:8b:78:1b:43:80:3f:a2:c6:bb:f6:58:57:97:5c:4d: 98:07:fb:83:71:a6:fe:cb:9f:3c:be:ad:35:e2:63:a2:d6:d0: 67:28:2d:26:70:83:de:20:d8:9e:51:8c:f2:aa:f3:31:10:8a: 24:44:7b:c2:3d:a1:81:8a:95:a1:04:ff:6e:8a:5b:02:f9:29: 8e:17:82:d8:d0:92:63:49:a1:4e:fc:f4:f6:4b:5d:91:6f:fe: 82:4e:3f:8a:ed:1f:9a:56:71:d4:1b:0a:31:50:65:80:9f:97: b0:58:c2:fd:43:c9:7e:cd:d4:9f:06:c9:a6:e1:d6:59:72:14: e8:3b:a7:0d:47:49:c3:54:dd:c4:96:02:90:86:fe:05:6d:c9: e3:47:46:aa:d5:91:28:eb:25:ca:bb:b7:12:e7:e6:38:12:ad: b7:8c:52:fc:4d:85:f9:9f:94:2b:0d:66:1b:86:45:4c:05:73: 69:56:54:5a:93:fc:36:ae:62:b3:7f:0b:25:08:c1:1d:5f:bb: 16:11:68:98:fc:6d:da:d9:3b:cb:a3:80:71:3d:94:b5:14:9c: be:51:25:ef:4f:ce:97:94:9c:a9:db:5e:26:d8:b8:a6:55:e8: 68:54:e0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67Apn16O2JTK+gsWrFhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTJkMjFlYmNmNmVkNDQ1NGM0ZmY0NjgzMjRiZGVkZDQ5 YmFhMTMwHhcNMjYwMjA5MTUwMTA4WhcNMjYwMjEwMTUwMTA4WjAzMTEwLwYDVQQD EyhiNmU0YjMzMzZhN2RkNmY3MmUxMzM0MWI1Y2MzZDY2ZDBlMjNhMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXlpNIkchyJqumGAO6Yt1tRf/Gvt 1JGTPJCCykhjavGhvL93skvQ3wYlMV5X82Q7Zp8/sZn+hSDfEAIqIsVWK0MVF502 ict8STHJfT6WsWfwVoXObRl/GTatGIg8wj7UM06DoUnyAN7K+6OZTrRBdGDOs+M3 5SghFQzwb4dt8JrZ/RHcIjnCK5D1MMvMcX7blaubPGpiJQ8catoO9wnpYy1b/mFf YUnpLgePEkR5cMTrJxYUJysaFe1olVoPKZ6HHsJKWFn4C5IgNwTs/+ugJYif9z4n zIlOl5k+Y/b1CtZ1NGL60HW1vorAL/YV7TMeGUu2amvrW6ehLI3hPo6eTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbkszNqfdb3LhM0G1zD1m0OI6NuMB8GA1UdIwQY MBaAFLOS0h689u1EVMT/RoMkve3Um6oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMt ZGJkZGE0NzU3MTU1LzEvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMtZGJkZGE0NzU3MTU1 LzEvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG8b7wuJ nLnL/WMhtFaGzuxWAq11i3gbQ4A/osa79lhXl1xNmAf7g3Gm/sufPL6tNeJjotbQ ZygtJnCD3iDYnlGM8qrzMRCKJER7wj2hgYqVoQT/bopbAvkpjheC2NCSY0mhTvz0 9ktdkW/+gk4/iu0fmlZx1BsKMVBlgJ+XsFjC/UPJfs3UnwbJpuHWWXIU6DunDUdJ w1TdxJYCkIb+BW3J40dGqtWRKOslyru3EufmOBKtt4xS/E2F+Z+UKw1mG4ZFTAVz aVZUWpP8Nq5is38LJQjBHV+7FhFomPxt2tk7y6OAcT2UtRScvlEl70/Ol5Scqdte Jti4plXoaFTg0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:01 2026 by rpki-client