This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json) Hash identifier: /mxd9ou8K923o8cHsvSFe+2nVeggYLl+bw95NuWLKpQ= Subject key identifier: 2D:34:DC:E0:04:96:9C:F1:B2:99:93:A5:02:40:D9:A9:55:88:95:99 Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67 Certificate serial: 019C1CF0D93D160926AD0E569DE705826A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft Manifest number: 0F9B Signing time: Mon 02 Feb 2026 06:01:12 +0000 Manifest this update: Mon 02 Feb 2026 06:01:12 +0000 Manifest next update: Tue 03 Feb 2026 06:01:12 +0000 Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: VnOLLDHF9NrNeCPHz6Kjk6Y/6/APnRukets3StYlFtA=) 2: 5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (hash: uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:d9:3d:16:09:26:ad:0e:56:9d:e7:05:82:6a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e505d93497f19d2563066b409200969711f28c67 Validity Not Before: Feb 2 06:01:12 2026 GMT Not After : Feb 3 06:01:12 2026 GMT Subject: CN=2d34dce004969cf1b29993a50240d9a955889599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:d3:80:c4:69:80:83:e9:bc:05:ce:41:41: 00:2c:8c:00:e2:bc:1a:d3:08:35:86:4b:21:88:ac: d0:55:24:f5:41:d6:90:9a:fb:76:80:ef:ff:6a:5d: 8d:1b:e5:10:f3:08:7e:3e:85:bf:3e:77:e3:e9:59: a8:0c:81:88:e3:7e:51:c7:2b:d0:e2:e8:4b:6d:67: b3:d3:2b:23:dd:e9:70:4b:70:17:f8:a7:fb:fe:57: ab:52:02:06:df:79:86:17:bc:c9:5e:de:8b:71:ad: c4:88:7c:c6:f8:f3:d0:e1:fd:fc:80:54:b7:f5:ed: 54:96:59:64:5d:e1:9b:cd:65:b0:39:a3:ff:41:9f: 5c:1e:a6:a0:6a:ee:c5:1b:ae:bc:50:bc:0d:11:63: 9c:df:1d:75:34:6c:9e:66:66:13:5c:96:58:8b:7e: 4f:a4:b5:f0:b7:6f:28:99:79:ab:1b:6f:8a:d8:12: 31:f0:80:37:98:4a:1c:75:43:d2:b1:f3:e6:9c:18: 6f:78:37:3a:86:9d:3d:db:39:02:78:65:95:43:a9: 91:05:c4:5c:9b:37:f3:ef:7b:ec:fd:08:cf:98:55: 72:59:eb:f4:ab:8d:d4:73:aa:c6:5d:7f:64:77:2f: ed:80:2f:3c:f6:3e:fe:9d:c3:0b:81:96:48:0d:5c: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:34:DC:E0:04:96:9C:F1:B2:99:93:A5:02:40:D9:A9:55:88:95:99 X509v3 Authority Key Identifier: keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9d:2b:a7:04:0a:a6:f3:52:8b:1a:b4:25:c7:b1:ff:79:61: 6b:50:2f:20:72:61:70:57:58:1b:ee:44:de:6c:82:67:c6:f8: 24:e7:e8:2f:e0:b9:65:17:19:ee:8e:62:20:76:83:6c:12:e7: e9:95:67:ca:a3:88:24:bc:d5:b0:79:7f:ce:09:4f:e3:9b:45: 59:ec:07:61:15:97:5a:34:e9:cb:97:17:4a:ac:0f:8f:7e:e7: 5d:1b:86:31:38:64:ee:d3:10:d9:3f:78:99:03:0d:f5:79:d6: db:07:34:d0:b1:13:8a:6b:83:f4:51:b5:23:d7:fc:38:6d:35: a1:2a:2f:7f:35:a1:c0:9c:0f:06:61:44:5c:12:4a:e8:ce:8c: 67:e4:9d:dd:5b:c3:88:05:24:eb:13:5e:b6:b9:e9:b0:a9:f7: 73:32:a5:30:3d:b8:c4:2a:bc:48:8b:94:b0:56:85:98:56:11: cf:32:5b:e9:3b:41:cf:a1:29:41:0a:36:0d:ed:01:cd:41:1c: f3:07:3a:a7:eb:69:08:42:87:5b:ec:ee:b1:7d:f7:be:7f:6f: 98:70:3f:3a:f9:79:13:c0:16:d4:44:1a:9e:89:be:45:be:c1: 4d:fe:1c:5c:87:89:3d:68:74:45:58:52:ee:1e:0c:57:56:80: 12:ae:84:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8Nk9FgkmrQ5WnecFgmpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm MjhjNjcwHhcNMjYwMjAyMDYwMTEyWhcNMjYwMjAzMDYwMTEyWjAzMTEwLwYDVQQD EygyZDM0ZGNlMDA0OTY5Y2YxYjI5OTkzYTUwMjQwZDlhOTU1ODg5NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUHTgMRpgIPpvAXOQUEALIwA4rwa 0wg1hkshiKzQVST1QdaQmvt2gO//al2NG+UQ8wh+PoW/Pnfj6VmoDIGI435RxyvQ 4uhLbWez0ysj3elwS3AX+Kf7/lerUgIG33mGF7zJXt6Lca3EiHzG+PPQ4f38gFS3 9e1UlllkXeGbzWWwOaP/QZ9cHqagau7FG668ULwNEWOc3x11NGyeZmYTXJZYi35P pLXwt28omXmrG2+K2BIx8IA3mEocdUPSsfPmnBhveDc6hp092zkCeGWVQ6mRBcRc mzfz73vs/QjPmFVyWev0q43Uc6rGXX9kdy/tgC889j7+ncMLgZZIDVze6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC003OAElpzxspmTpQJA2alViJWZMB8GA1UdIwQY MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ0rpwQK pvNSixq0Jcex/3lha1AvIHJhcFdYG+5E3myCZ8b4JOfoL+C5ZRcZ7o5iIHaDbBLn 6ZVnyqOIJLzVsHl/zglP45tFWewHYRWXWjTpy5cXSqwPj37nXRuGMThk7tMQ2T94 mQMN9XnW2wc00LETimuD9FG1I9f8OG01oSovfzWhwJwPBmFEXBJK6M6MZ+Sd3VvD iAUk6xNetrnpsKn3czKlMD24xCq8SIuUsFaFmFYRzzJb6TtBz6EpQQo2De0BzUEc 8wc6p+tpCEKHW+zusX33vn9vmHA/Ovl5E8AW1EQanom+Rb7BTf4cXIeJPWh0RVhS 7h4MV1aAEq6ECw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:29:59 2026 by rpki-client