This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft File: s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft (raw, json) Hash identifier: nEM+u9VF4nqcGtQZJuzUoGgdMx6aWwf+efGhSugxn1A= Subject key identifier: 7F:3D:BD:BE:90:BA:C4:0C:3A:89:2C:E4:88:F7:80:8B:44:B1:7F:4F Authority key identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4 Certificate issuer: /CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4 Certificate serial: 019C41339D0EF9719F2D665F9D7F955A3600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft Manifest number: 0136 Signing time: Mon 09 Feb 2026 07:00:27 +0000 Manifest this update: Mon 09 Feb 2026 07:00:27 +0000 Manifest next update: Tue 10 Feb 2026 07:00:27 +0000 Files and hashes: 1: s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl (hash: IXtTyONsa7FRHARf/tvS7edMo4hCJgiweBTxdhWHzfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:9d:0e:f9:71:9f:2d:66:5f:9d:7f:95:5a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4 Validity Not Before: Feb 9 07:00:27 2026 GMT Not After : Feb 10 07:00:27 2026 GMT Subject: CN=7f3dbdbe90bac40c3a892ce488f7808b44b17f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:da:53:23:58:52:35:f8:bd:1a:ad:38:3e: 91:14:71:c8:e6:43:70:55:56:8e:b8:65:ef:c3:92: 66:33:a2:a2:60:0f:a7:b7:42:bc:ae:ca:8c:2a:5c: 95:aa:7d:58:d5:31:5a:23:71:26:5f:8d:a7:ff:27: 80:1c:f9:2a:d4:80:b3:78:46:76:d6:25:93:af:b6: 77:d3:08:38:a8:0a:53:ef:77:ac:7a:7c:97:aa:b0: 76:49:e9:f0:b6:d5:13:30:d7:27:e8:4d:67:6a:12: 25:5d:61:0c:d3:79:b4:8e:fc:0a:c7:f6:26:5f:26: 41:78:cf:f0:5a:18:72:29:21:d9:4a:64:ab:7d:78: fc:26:cf:1b:73:6f:77:74:6a:53:af:07:a1:4e:b0: 62:09:54:35:94:25:8f:78:73:90:c1:84:5f:0d:a6: 68:ae:7c:da:da:78:20:23:00:78:44:bb:ad:a5:16: 89:eb:23:2b:66:cc:2e:71:9f:5b:b0:a3:47:92:64: 08:a4:e7:9f:15:cb:5e:0a:38:17:b0:90:0a:1c:53: f3:23:51:23:8d:14:04:1c:ff:c0:67:3d:c3:c9:24: 78:85:7e:55:92:e9:eb:4f:82:b8:f2:98:c5:8b:12: a2:46:20:20:35:29:38:26:6e:80:b7:1f:9d:0b:a8: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3D:BD:BE:90:BA:C4:0C:3A:89:2C:E4:88:F7:80:8B:44:B1:7F:4F X509v3 Authority Key Identifier: keyid:B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a7:79:d6:7a:ec:79:7b:d5:ee:1c:d3:c5:4d:29:05:b5:df: bc:60:b3:f0:80:3f:1c:2d:74:b4:7a:c7:e1:65:34:56:44:19: 01:bf:a7:38:07:bf:31:a2:5e:1e:59:b7:3a:ad:4c:3e:26:9b: 05:99:c4:0b:f0:19:63:6c:c1:91:ee:65:6d:21:7f:f3:dc:fe: fc:57:ec:03:c5:cb:33:d5:9b:f1:44:38:1d:b8:a3:93:00:6c: 32:b3:51:10:af:3d:85:25:8b:29:bc:d9:08:b2:9d:6d:5e:2e: b2:2a:25:7d:75:44:86:51:23:c0:74:bc:bf:9f:1d:fd:15:64: c9:81:d2:21:96:e8:3c:a3:7c:ba:28:95:04:59:81:13:39:70: 34:c5:eb:f2:9c:e6:b4:8d:2f:81:68:0b:b4:a4:fb:79:4a:6a: 30:7d:90:dd:00:9a:b6:66:0d:c5:cd:50:6b:b3:01:e1:12:c9: 13:c0:e2:48:00:81:4e:ab:39:57:32:03:4b:66:c7:77:74:02: 36:c7:68:d2:ac:9b:d7:06:ab:f2:ac:aa:c1:8b:bc:6a:bc:29: 27:9b:01:d3:b0:d6:b4:79:64:6f:29:53:7a:5d:a8:66:60:fe: da:58:29:2b:81:d8:82:03:45:47:6a:97:e8:c2:b1:11:03:86: 36:6e:11:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM50O+XGfLWZfnX+VWjYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTBlYTI3YTY1NGIyOGEzODkxYTlkYmZhZmNiOWRlMmRj M2I1ZTQwHhcNMjYwMjA5MDcwMDI3WhcNMjYwMjEwMDcwMDI3WjAzMTEwLwYDVQQD Eyg3ZjNkYmRiZTkwYmFjNDBjM2E4OTJjZTQ4OGY3ODA4YjQ0YjE3ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFfaUyNYUjX4vRqtOD6RFHHI5kNw VVaOuGXvw5JmM6KiYA+nt0K8rsqMKlyVqn1Y1TFaI3EmX42n/yeAHPkq1ICzeEZ2 1iWTr7Z30wg4qApT73esenyXqrB2SenwttUTMNcn6E1nahIlXWEM03m0jvwKx/Ym XyZBeM/wWhhyKSHZSmSrfXj8Js8bc293dGpTrwehTrBiCVQ1lCWPeHOQwYRfDaZo rnza2nggIwB4RLutpRaJ6yMrZswucZ9bsKNHkmQIpOefFcteCjgXsJAKHFPzI1Ej jRQEHP/AZz3DySR4hX5VkunrT4K48pjFixKiRiAgNSk4Jm6Atx+dC6hxbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH89vb6QusQMOoks5Ij3gItEsX9PMB8GA1UdIwQY MBaAFLOQ6iemVLKKOJGp2/r8ud4tw7XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVEcUo2WlVzb280a2FuYi12eTUzaTNEdGVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8yMjZiNjktNGEwMS00ZTMzLTg0YTgt MDJiMmFjZWUzYmRjLzEvczVEcUo2WlVzb280a2FuYi12eTUzaTNEdGVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8yMjZiNjktNGEwMS00ZTMzLTg0YTgtMDJiMmFjZWUzYmRj LzEvczVEcUo2WlVzb280a2FuYi12eTUzaTNEdGVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVad51nrs eXvV7hzTxU0pBbXfvGCz8IA/HC10tHrH4WU0VkQZAb+nOAe/MaJeHlm3Oq1MPiab BZnEC/AZY2zBke5lbSF/89z+/FfsA8XLM9Wb8UQ4HbijkwBsMrNREK89hSWLKbzZ CLKdbV4usiolfXVEhlEjwHS8v58d/RVkyYHSIZboPKN8uiiVBFmBEzlwNMXr8pzm tI0vgWgLtKT7eUpqMH2Q3QCatmYNxc1Qa7MB4RLJE8DiSACBTqs5VzIDS2bHd3QC Nsdo0qyb1war8qyqwYu8arwpJ5sB07DWtHlkbylTel2oZmD+2lgpK4HYggNFR2qX 6MKxEQOGNm4R1w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:37 2026 by rpki-client