This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json) Hash identifier: eCh/3RASEhZTLT89BQcCO5fFT9r6eLSpI9oo8Y3YM4w= Subject key identifier: EF:E8:0A:CD:02:A0:13:0E:78:E7:52:B6:C0:9B:55:0B:81:9E:32:C8 Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Certificate serial: 019C451059EA722E6A4F6D1814C51102FBD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft Manifest number: 0A43 Signing time: Tue 10 Feb 2026 01:00:25 +0000 Manifest this update: Tue 10 Feb 2026 01:00:25 +0000 Manifest next update: Wed 11 Feb 2026 01:00:25 +0000 Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: XBrvNyzqmTLE21VgcaA6dVdCl49dZNDcyIYUdMKAeXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:59:ea:72:2e:6a:4f:6d:18:14:c5:11:02:fb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Validity Not Before: Feb 10 01:00:25 2026 GMT Not After : Feb 11 01:00:25 2026 GMT Subject: CN=efe80acd02a0130e78e752b6c09b550b819e32c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:b7:c8:ca:a1:79:b0:74:fe:a5:24:c4:99: 0d:df:4a:a7:d5:71:6e:9c:3b:a5:01:df:dd:a9:51: 7b:4d:00:95:44:55:4a:09:15:6e:33:45:a7:c0:54: 43:22:1b:8e:1f:9b:4d:83:92:d9:0b:07:17:b5:27: 5e:f0:48:c2:27:e6:1b:33:da:61:b2:c9:66:a4:fc: 85:e4:42:5c:8a:57:b1:94:d3:1e:52:6e:f8:85:19: e7:64:a2:91:6e:5d:ed:d6:2b:68:d2:a6:9e:40:c4: 9a:b3:eb:c9:e4:82:65:61:35:83:c2:30:bc:e9:16: 89:8f:0b:ee:72:f3:9f:d2:2b:2a:37:db:cd:7d:b7: 75:ad:f8:1c:ac:b5:53:81:87:c3:59:bd:ed:59:8f: d3:9f:3e:49:a4:3e:e4:e9:df:74:c5:2c:5f:06:28: 7d:a7:c8:61:93:47:d9:9a:65:85:40:8d:1d:33:04: 04:e9:6b:27:18:c7:dd:67:59:a8:fa:14:f1:bb:90: 7f:93:66:9e:4d:75:2b:70:c0:10:67:0c:e4:8a:a4: 7b:be:92:4e:47:9f:3f:da:d5:b2:62:41:ee:b3:3e: 65:ff:82:5e:ea:a4:05:f8:94:2d:0d:1e:e2:c6:16: 4c:78:a5:ca:cd:40:ac:3a:ba:f1:b3:b9:ec:e5:9a: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:0A:CD:02:A0:13:0E:78:E7:52:B6:C0:9B:55:0B:81:9E:32:C8 X509v3 Authority Key Identifier: keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6b:37:c7:0d:4c:c7:c1:fc:93:02:78:3f:89:dc:6c:fb:a5: 34:6b:cc:85:16:98:5d:e1:3b:80:f6:7b:cd:d2:5c:0d:38:c0: d3:c8:8f:f5:35:9d:6f:91:1f:29:b4:fb:dd:75:d3:5e:c2:42: 92:dc:d5:76:88:61:db:4f:56:7a:8a:cb:51:47:ec:c1:46:69: 1d:7e:56:2a:cf:d4:ab:fb:a7:26:68:08:0c:ac:48:62:c2:46: 1f:dc:84:b6:71:12:bc:c6:db:74:ed:ad:9c:11:b6:39:f7:9b: 94:9e:41:74:b8:5e:4c:c8:d2:fc:d4:6b:cb:26:fd:06:9c:32: 2f:36:99:f9:3b:a3:3a:14:cd:2a:01:e3:fa:73:40:53:d7:7b: 40:ea:56:24:2c:e5:cf:af:64:8a:ab:2b:dc:82:81:64:2c:ff: 68:45:ee:a1:0e:5c:81:e4:ae:36:64:2c:99:be:bb:2d:02:59: 01:10:fb:11:d7:5e:1a:63:9d:35:b5:dd:3d:49:a9:b0:b1:9a: 90:7c:49:2b:2e:a5:cc:83:57:d7:2e:ec:d0:5d:08:c5:01:67: 3d:8e:a2:bf:47:d1:cc:d0:2e:6a:2f:5b:04:19:a2:ed:32:4e: 6e:fe:fc:b9:a1:99:c8:4e:ac:cd:fe:95:db:6c:d9:5c:1d:5a: 86:96:0b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEFnqci5qT20YFMURAvvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj MDkwMjAwHhcNMjYwMjEwMDEwMDI1WhcNMjYwMjExMDEwMDI1WjAzMTEwLwYDVQQD EyhlZmU4MGFjZDAyYTAxMzBlNzhlNzUyYjZjMDliNTUwYjgxOWUzMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PW3yMqhebB0/qUkxJkN30qn1XFu nDulAd/dqVF7TQCVRFVKCRVuM0WnwFRDIhuOH5tNg5LZCwcXtSde8EjCJ+YbM9ph sslmpPyF5EJcilexlNMeUm74hRnnZKKRbl3t1ito0qaeQMSas+vJ5IJlYTWDwjC8 6RaJjwvucvOf0isqN9vNfbd1rfgcrLVTgYfDWb3tWY/Tnz5JpD7k6d90xSxfBih9 p8hhk0fZmmWFQI0dMwQE6WsnGMfdZ1mo+hTxu5B/k2aeTXUrcMAQZwzkiqR7vpJO R58/2tWyYkHusz5l/4Je6qQF+JQtDR7ixhZMeKXKzUCsOrrxs7ns5ZryOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/oCs0CoBMOeOdStsCbVQuBnjLIMB8GA1UdIwQY MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWs3xw1M x8H8kwJ4P4ncbPulNGvMhRaYXeE7gPZ7zdJcDTjA08iP9TWdb5EfKbT73XXTXsJC ktzVdohh209WeorLUUfswUZpHX5WKs/Uq/unJmgIDKxIYsJGH9yEtnESvMbbdO2t nBG2OfeblJ5BdLheTMjS/NRryyb9BpwyLzaZ+TujOhTNKgHj+nNAU9d7QOpWJCzl z69kiqsr3IKBZCz/aEXuoQ5cgeSuNmQsmb67LQJZARD7EddeGmOdNbXdPUmpsLGa kHxJKy6lzINX1y7s0F0IxQFnPY6iv0fRzNAuai9bBBmi7TJObv78uaGZyE6szf6V 22zZXB1ahpYLoA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:51 2026 by rpki-client