This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json) Hash identifier: HaBpBlbAo9J3XCuXSVckuZXG2DR3TDxHMoNRbleDUL0= Subject key identifier: 30:EF:54:62:1C:3C:06:25:2B:C0:80:DB:8E:C4:B4:80:F8:F7:B9:C8 Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB Certificate issuer: /CN=e59469565f719bed86adc73fb6e6c886f60bdaab Certificate serial: 019C1BDDDB6CBC013EB6E70A8C75CF8B7845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft Manifest number: 34 Signing time: Mon 02 Feb 2026 01:00:50 +0000 Manifest this update: Mon 02 Feb 2026 01:00:50 +0000 Manifest next update: Tue 03 Feb 2026 01:00:50 +0000 Files and hashes: 1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: JLlJlXQSDSvXMDzE8yyAME6fTIQbccdS8V9SUmhh03o=) 2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:dd:db:6c:bc:01:3e:b6:e7:0a:8c:75:cf:8b:78:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab Validity Not Before: Feb 2 01:00:50 2026 GMT Not After : Feb 3 01:00:50 2026 GMT Subject: CN=30ef54621c3c06252bc080db8ec4b480f8f7b9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:45:2b:55:ec:ac:8a:77:35:88:f6:50:db: 25:a8:ba:fb:8a:fb:60:32:90:d9:dc:b0:b4:ee:cc: a2:45:5d:05:25:38:91:b1:fd:62:25:ee:c4:99:6d: bc:d6:9a:de:89:6a:39:97:18:b7:b4:2f:3e:48:e8: 0a:99:0e:b1:8a:02:ce:53:0c:94:f9:72:a4:b0:34: df:5d:57:f8:41:f2:d4:c3:b1:a7:3d:21:21:35:b0: 03:ff:71:45:cd:15:e5:81:72:63:b3:3a:ad:01:ef: d8:83:43:e4:9e:53:38:4f:48:9e:eb:8a:af:85:86: 5c:b4:70:15:5f:f2:e2:85:d2:a9:f9:08:d7:95:af: a6:37:9e:de:6a:e5:76:f1:78:06:ba:d6:ed:a5:0b: 7a:aa:0c:3e:26:6e:12:64:5a:86:7c:98:21:38:42: 2b:ba:23:e6:86:cc:bc:3c:84:ea:e7:b6:7d:bf:32: 54:c7:80:e2:18:81:e1:b7:9c:b1:74:22:30:cd:b8: de:34:cb:c9:58:a1:bb:d9:05:d6:60:a7:73:6e:67: d7:de:3b:21:59:d5:b5:ef:09:5c:11:f6:f7:75:b9: 5c:25:31:5f:36:8b:39:3b:c0:e3:a2:4f:0b:aa:95: 02:15:27:b3:13:9a:92:6e:3b:5e:c6:e4:d1:45:e0: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EF:54:62:1C:3C:06:25:2B:C0:80:DB:8E:C4:B4:80:F8:F7:B9:C8 X509v3 Authority Key Identifier: keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:52:4b:43:55:cc:50:4d:df:66:e5:da:4f:6a:d8:0a:da: e1:b2:79:c2:0d:1f:9f:77:8c:44:73:df:81:48:32:bc:0d:ea: c5:da:68:a6:df:ca:73:d0:18:6b:73:bf:13:17:0c:61:fe:fb: 93:96:a9:f4:ee:9d:94:84:a8:9d:96:c9:bb:6a:ae:21:2a:dc: f7:89:73:54:7c:69:9d:6b:12:b7:07:d5:bf:73:9e:29:29:8f: 18:2c:6d:c7:34:e6:da:a0:0b:05:d3:2e:41:93:89:a4:23:26: 7e:5a:7f:24:2c:4d:ae:d2:b1:a4:11:4e:28:ed:4f:9f:44:84: 5a:23:fa:7b:b6:48:19:c8:d0:96:73:45:b8:a6:bb:f6:9d:de: 5a:0a:1d:6f:4c:f3:f6:4e:06:ab:24:e3:d5:be:fe:fb:bd:9d: c4:be:a6:8a:f1:9f:5f:85:12:3b:a9:df:f2:2b:e4:bc:a4:4e: 61:11:51:f7:44:e7:56:94:ee:42:7b:62:14:b4:43:e1:89:5b: 3d:36:8d:76:5c:68:77:c6:cf:db:fc:25:47:e8:81:8e:d3:09: 25:4c:4b:f7:fc:da:fa:94:b5:65:59:72:7b:04:17:ae:24:51: 7e:2c:65:dd:e4:97:5a:80:73:9a:92:0f:79:87:f7:67:14:fc: 99:1c:7b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3dtsvAE+tucKjHXPi3hFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1OTQ2OTU2NWY3MTliZWQ4NmFkYzczZmI2ZTZjODg2ZjYw YmRhYWIwHhcNMjYwMjAyMDEwMDUwWhcNMjYwMjAzMDEwMDUwWjAzMTEwLwYDVQQD EygzMGVmNTQ2MjFjM2MwNjI1MmJjMDgwZGI4ZWM0YjQ4MGY4ZjdiOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvlFK1XsrIp3NYj2UNslqLr7ivtg MpDZ3LC07syiRV0FJTiRsf1iJe7EmW281preiWo5lxi3tC8+SOgKmQ6xigLOUwyU +XKksDTfXVf4QfLUw7GnPSEhNbAD/3FFzRXlgXJjszqtAe/Yg0PknlM4T0ie64qv hYZctHAVX/LihdKp+QjXla+mN57eauV28XgGutbtpQt6qgw+Jm4SZFqGfJghOEIr uiPmhsy8PITq57Z9vzJUx4DiGIHht5yxdCIwzbjeNMvJWKG72QXWYKdzbmfX3jsh WdW17wlcEfb3dblcJTFfNos5O8Djok8LqpUCFSezE5qSbjtexuTRReAHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDvVGIcPAYlK8CA247EtID497nIMB8GA1UdIwQY MBaAFOWUaVZfcZvthq3HP7bmyIb2C9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGIt Njg2NmE0MDFhNjdkLzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGItNjg2NmE0MDFhNjdk LzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh5SS0NV zFBN32bl2k9q2Ara4bJ5wg0fn3eMRHPfgUgyvA3qxdpopt/Kc9AYa3O/ExcMYf77 k5ap9O6dlISonZbJu2quISrc94lzVHxpnWsStwfVv3OeKSmPGCxtxzTm2qALBdMu QZOJpCMmflp/JCxNrtKxpBFOKO1Pn0SEWiP6e7ZIGcjQlnNFuKa79p3eWgodb0zz 9k4GqyTj1b7++72dxL6mivGfX4USO6nf8ivkvKROYRFR90TnVpTuQntiFLRD4Ylb PTaNdlxod8bP2/wlR+iBjtMJJUxL9/za+pS1ZVlyewQXriRRfixl3eSXWoBzmpIP eYf3ZxT8mRx7ug== -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:25 2026 by rpki-client