This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json) Hash identifier: L9mRQuaQlTYI5lGiwaRaWQc1en6KH8dJpg2XhaS3feg= Subject key identifier: 84:97:94:97:A2:7E:49:68:95:1E:2D:8C:0B:64:EE:79:35:40:23:1A Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Certificate serial: 019C41D84B8BBF196599FC2781D4981CDE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft Manifest number: 052D Signing time: Mon 09 Feb 2026 10:00:19 +0000 Manifest this update: Mon 09 Feb 2026 10:00:19 +0000 Manifest next update: Tue 10 Feb 2026 10:00:19 +0000 Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: lgZ7D8XCj+1xeoTjl4WFeXzUS29g5TIrObOGL8P8EDY=) 2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4b:8b:bf:19:65:99:fc:27:81:d4:98:1c:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Validity Not Before: Feb 9 10:00:19 2026 GMT Not After : Feb 10 10:00:19 2026 GMT Subject: CN=84979497a27e4968951e2d8c0b64ee793540231a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:92:4f:33:e8:33:4d:18:7b:5a:fe:a9:70: 6e:0a:48:c3:d3:8a:f3:ba:3d:de:42:c7:9a:d5:6e: 30:29:85:59:c7:50:93:b6:2e:0e:2a:b5:10:b9:59: a0:3d:62:8d:2a:cf:92:da:92:34:da:cf:45:62:31: 46:62:02:cb:3a:a6:a1:74:7a:d3:75:e6:91:9b:25: 44:9f:0b:51:db:de:34:ec:34:84:ef:75:e9:d9:1d: 7f:77:2d:85:c1:5a:76:f1:7b:0b:9d:38:b3:57:4f: 81:21:10:06:76:74:11:05:1d:e1:ed:5e:9f:99:d4: e9:eb:f8:c6:ca:a7:5c:f9:b1:99:67:55:a3:c6:f2: ae:b3:d0:b4:90:04:8d:a1:4b:be:bb:89:d4:aa:31: 2a:61:a4:30:3f:a2:eb:71:ee:01:1e:fc:f4:15:9c: d4:c2:7c:6c:9e:4c:64:fe:dd:17:61:11:06:9b:ee: 21:b4:6b:d8:ff:9a:8b:3d:75:ca:21:5c:41:ff:11: f0:61:ae:c0:a2:40:8f:74:95:64:78:c6:04:81:a0: 59:e9:f5:5d:da:5f:e0:08:5f:5e:65:bd:ed:a0:86: 05:a0:65:9f:f7:5e:cc:10:7d:d8:44:04:b6:1e:8d: b1:f9:77:26:91:07:e1:89:6e:2b:77:7a:b2:37:e0: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:94:97:A2:7E:49:68:95:1E:2D:8C:0B:64:EE:79:35:40:23:1A X509v3 Authority Key Identifier: keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:c2:e9:a3:e6:ea:f9:04:99:fa:29:15:37:b2:c7:b9:11: 05:e7:db:a5:9b:9f:4d:72:2f:88:7d:1b:83:cf:09:39:e6:d8: bc:18:fd:e2:6f:79:a9:a5:7c:c6:29:61:87:fb:94:62:3c:00: 19:8a:75:c5:7e:b0:75:bf:99:b1:b3:db:90:02:96:42:df:a1: 9a:07:80:bd:5f:57:1c:8b:2c:ba:fc:63:be:fd:88:f2:e6:7e: 15:f3:05:05:3a:3f:a0:b4:93:d4:f4:c8:21:cd:cd:16:ee:23: 7f:c8:8c:4c:a0:2f:60:d2:2b:fb:21:51:70:29:1a:87:b9:5b: 26:f0:4c:50:63:dc:a1:84:31:91:cd:c4:bc:02:35:6b:44:08: 80:a2:1b:8a:86:61:20:cb:40:df:57:4d:ef:88:f8:2a:d6:ba: ba:16:67:f8:95:0e:1a:1f:d8:52:0f:a9:6b:ed:1f:b9:18:40: 6d:86:97:6c:64:5e:fd:a9:bb:e2:af:65:07:6c:15:c0:47:72: b0:1a:71:9a:d0:07:8a:5f:ea:5a:6f:81:ec:21:23:e6:16:1c: e2:f2:d9:53:68:53:37:61:5a:87:fd:84:d8:06:9b:f1:e9:85: be:65:63:93:d8:52:f3:09:d7:da:06:b7:e6:5f:2e:e4:c0:19: 1f:24:ca:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EuLvxllmfwngdSYHN5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw N2EwZTIwHhcNMjYwMjA5MTAwMDE5WhcNMjYwMjEwMTAwMDE5WjAzMTEwLwYDVQQD Eyg4NDk3OTQ5N2EyN2U0OTY4OTUxZTJkOGMwYjY0ZWU3OTM1NDAyMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOiSTzPoM00Ye1r+qXBuCkjD04rz uj3eQsea1W4wKYVZx1CTti4OKrUQuVmgPWKNKs+S2pI02s9FYjFGYgLLOqahdHrT deaRmyVEnwtR29407DSE73Xp2R1/dy2FwVp28XsLnTizV0+BIRAGdnQRBR3h7V6f mdTp6/jGyqdc+bGZZ1WjxvKus9C0kASNoUu+u4nUqjEqYaQwP6Lrce4BHvz0FZzU wnxsnkxk/t0XYREGm+4htGvY/5qLPXXKIVxB/xHwYa7AokCPdJVkeMYEgaBZ6fVd 2l/gCF9eZb3toIYFoGWf917MEH3YRAS2Ho2x+XcmkQfhiW4rd3qyN+B6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISXlJeifklolR4tjAtk7nk1QCMaMB8GA1UdIwQY MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0LC6aPm 6vkEmfopFTeyx7kRBefbpZufTXIviH0bg88JOebYvBj94m95qaV8xilhh/uUYjwA GYp1xX6wdb+ZsbPbkAKWQt+hmgeAvV9XHIssuvxjvv2I8uZ+FfMFBTo/oLST1PTI Ic3NFu4jf8iMTKAvYNIr+yFRcCkah7lbJvBMUGPcoYQxkc3EvAI1a0QIgKIbioZh IMtA31dN74j4Kta6uhZn+JUOGh/YUg+pa+0fuRhAbYaXbGRe/am74q9lB2wVwEdy sBpxmtAHil/qWm+B7CEj5hYc4vLZU2hTN2Fah/2E2Aab8emFvmVjk9hS8wnX2ga3 5l8u5MAZHyTKng== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:59 2026 by rpki-client