This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft File: 5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json) Hash identifier: E7vGmEz9OAUYEEUCFdUid0frJe3B7Gpb2n2fwPAX4Pw= Subject key identifier: F4:33:50:20:51:4C:D6:E6:70:50:8A:76:C2:FC:8B:F6:33:80:54:56 Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83 Certificate issuer: /CN=e410972cc459568804bb4b791d7c13cfb2283883 Certificate serial: 019C420F3C14ECA6A296E4648532833E6A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft Manifest number: 15DE Signing time: Mon 09 Feb 2026 11:00:20 +0000 Manifest this update: Mon 09 Feb 2026 11:00:20 +0000 Manifest next update: Tue 10 Feb 2026 11:00:20 +0000 Files and hashes: 1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: N9Cdj1Da3ZE7o1XX0l5e2r/xd8fnvj+YLbE+NXGoGcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:3c:14:ec:a6:a2:96:e4:64:85:32:83:3e:6a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883 Validity Not Before: Feb 9 11:00:20 2026 GMT Not After : Feb 10 11:00:20 2026 GMT Subject: CN=f4335020514cd6e670508a76c2fc8bf633805456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:5b:a8:bc:f0:fb:b7:4c:a1:7a:00:ee:f1: dc:47:24:83:03:b9:8e:17:5e:99:f3:23:3c:0f:66: 75:5b:71:1e:12:c4:ac:d3:6b:59:e4:6a:df:7c:ba: 45:2e:e4:18:bb:69:7f:99:c1:7e:ff:3d:9a:02:70: a9:71:5a:10:5e:79:1e:68:8e:84:e8:ce:9c:db:b3: 79:a8:18:a6:a5:1b:6f:99:e6:c7:d3:67:71:0c:d2: fb:b6:ba:af:36:29:31:b1:d0:d6:29:6c:29:a9:5f: fd:15:2a:9e:f7:37:a8:fb:6a:ad:37:ad:34:9e:b9: 16:21:15:e9:92:ac:fc:3f:96:1e:97:78:ff:a8:61: b1:3d:1a:a8:dc:68:ba:30:b8:96:9e:12:ea:72:ff: 28:c9:bb:18:a8:d9:7e:52:81:35:f9:e8:38:1d:fd: 4c:e9:15:f8:e7:f1:f5:4f:79:74:19:9f:a4:c4:65: 69:4d:0b:1b:5c:fe:50:79:93:78:c5:5f:36:77:cb: d6:56:2c:9a:b0:2e:f5:c0:8a:89:57:87:72:27:92: 39:98:95:94:28:83:dd:1e:a8:da:22:ef:ad:aa:1a: 27:f4:bd:81:58:81:6c:53:65:09:bf:bf:33:20:28: 8e:6a:c1:1e:95:bd:0c:af:78:5f:19:17:8f:a5:14: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:33:50:20:51:4C:D6:E6:70:50:8A:76:C2:FC:8B:F6:33:80:54:56 X509v3 Authority Key Identifier: keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2c:d8:f8:56:fe:8e:a5:ec:d1:7c:82:4a:31:57:03:5c:c9: e4:6e:27:c0:70:19:d3:4f:80:b5:33:e6:4e:3d:78:c1:18:73: 56:e8:dc:66:5c:fb:65:d7:c8:ce:9e:3d:6e:bb:37:b9:e9:9b: 3f:ba:a7:2e:b4:17:09:ae:8d:b5:d7:7b:ca:86:d2:5a:05:ad: 0b:1b:d9:48:44:bd:06:5d:3c:3b:31:f6:1e:a1:c7:9e:aa:81: f1:fd:2d:41:80:2e:8a:c9:7d:55:c2:46:2d:27:fd:a6:5b:9a: ff:89:0e:d4:13:76:9b:b4:5e:1c:29:a7:dd:77:9f:b8:49:e2: 2f:0f:15:06:38:ef:25:56:54:fc:0e:3e:98:f6:3a:69:ac:b7: f1:db:ee:bd:85:98:92:d3:1b:b8:37:fa:83:60:8f:cf:ec:27: 5a:7e:a3:5c:59:b2:81:16:da:8f:c4:98:dd:35:01:19:17:f6: 24:30:3b:0d:ee:3e:99:aa:a9:03:0a:a7:c2:a2:d9:6d:10:53: e4:bb:00:0a:a2:91:23:a2:e4:f8:28:f7:0d:ae:5f:ca:c0:6a: 1e:c6:9d:25:5d:c4:db:d2:7a:68:e3:37:94:b9:f9:d1:a1:f6: c6:0c:00:9f:d8:41:dc:c2:fa:47:b4:aa:35:f0:2f:d2:86:54: 8b:6a:ba:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzwU7KailuRkhTKDPmpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy ODM4ODMwHhcNMjYwMjA5MTEwMDIwWhcNMjYwMjEwMTEwMDIwWjAzMTEwLwYDVQQD EyhmNDMzNTAyMDUxNGNkNmU2NzA1MDhhNzZjMmZjOGJmNjMzODA1NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOBbqLzw+7dMoXoA7vHcRySDA7mO F16Z8yM8D2Z1W3EeEsSs02tZ5GrffLpFLuQYu2l/mcF+/z2aAnCpcVoQXnkeaI6E 6M6c27N5qBimpRtvmebH02dxDNL7trqvNikxsdDWKWwpqV/9FSqe9zeo+2qtN600 nrkWIRXpkqz8P5Yel3j/qGGxPRqo3Gi6MLiWnhLqcv8oybsYqNl+UoE1+eg4Hf1M 6RX45/H1T3l0GZ+kxGVpTQsbXP5QeZN4xV82d8vWViyasC71wIqJV4dyJ5I5mJWU KIPdHqjaIu+tqhon9L2BWIFsU2UJv78zICiOasEelb0Mr3hfGRePpRSJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQzUCBRTNbmcFCKdsL8i/YzgFRWMB8GA1UdIwQY MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0 LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyzY+Fb+ jqXs0XyCSjFXA1zJ5G4nwHAZ00+AtTPmTj14wRhzVujcZlz7ZdfIzp49brs3uemb P7qnLrQXCa6Ntdd7yobSWgWtCxvZSES9Bl08OzH2HqHHnqqB8f0tQYAuisl9VcJG LSf9plua/4kO1BN2m7ReHCmn3XefuEniLw8VBjjvJVZU/A4+mPY6aay38dvuvYWY ktMbuDf6g2CPz+wnWn6jXFmygRbaj8SY3TUBGRf2JDA7De4+maqpAwqnwqLZbRBT 5LsACqKRI6Lk+Cj3Da5fysBqHsadJV3E29J6aOM3lLn50aH2xgwAn9hB3ML6R7Sq NfAv0oZUi2q61A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:02 2026 by rpki-client