This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: H1HLHjYD3CHYKMKBgna1ZxQC+0dzj3bi/7Mh3Vl9E+s=
Subject key identifier: 2E:5C:C0:AA:C9:B2:0C:65:8B:E0:A1:56:EF:78:D9:AC:B3:1B:DE:0F
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019C4390095C0EDDE3E7D087EA219C926860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 18:00:38 +0000
Manifest this update: Mon 09 Feb 2026 18:00:38 +0000
Manifest next update: Tue 10 Feb 2026 18:00:38 +0000
Files and hashes: 1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: QClLVu+fvSnai9tkcttA/fVOEjuVkBukfHR+scHy0DU=)
2: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (hash: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:09:5c:0e:dd:e3:e7:d0:87:ea:21:9c:92:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Feb 9 18:00:38 2026 GMT
Not After : Feb 10 18:00:38 2026 GMT
Subject: CN=2e5cc0aac9b20c658be0a156ef78d9acb31bde0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:28:5f:ba:c2:a8:35:12:ce:92:e5:9a:10:
15:66:e4:45:c1:c9:27:a1:d8:f4:88:cb:cf:ef:cc:
7d:d9:18:46:4c:80:7f:f4:28:1a:61:cf:6b:7b:e7:
0a:eb:3c:3f:6c:16:5e:24:8b:7d:89:a1:78:f2:a6:
ba:a5:e5:33:82:b0:59:1d:3f:c5:c2:cf:82:eb:4b:
9c:20:2d:bc:56:9d:4c:6b:2a:1c:15:cb:dc:a3:71:
78:f5:0c:1a:6f:01:88:c3:63:9f:46:3d:d3:8a:d0:
39:1d:60:69:ad:71:b2:76:69:78:b4:03:da:31:d1:
fe:74:1b:44:0b:9a:fd:e4:af:c2:cb:9c:3d:10:2d:
76:cd:13:4c:d7:17:aa:e9:bf:88:6e:97:29:59:2e:
48:82:6d:69:e1:0c:bf:1b:ef:82:a5:3d:b7:6e:86:
0c:e6:3a:26:5a:d2:e9:3a:65:c3:8e:01:d5:0d:68:
42:46:2f:36:6e:cc:9c:15:d2:87:a4:9b:4e:64:eb:
e5:3d:25:c6:a6:66:01:0d:0d:13:95:3f:b6:22:06:
24:b4:66:3c:0c:a3:90:21:a7:c1:f8:4d:43:0f:dc:
02:f3:c8:10:a5:78:98:a5:75:cd:99:a8:b4:0d:6a:
ad:af:d3:a3:1b:f2:c9:04:7e:d5:34:86:a5:24:5a:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:C0:AA:C9:B2:0C:65:8B:E0:A1:56:EF:78:D9:AC:B3:1B:DE:0F
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:f0:f0:05:36:f5:45:ff:33:92:ee:b1:4b:55:69:5d:49:
f3:47:db:a5:09:ce:01:19:90:a0:49:85:02:ee:ea:20:85:02:
ed:a7:21:71:87:37:c7:17:2f:f3:a7:e2:85:48:d9:f2:0d:ef:
8d:33:21:3f:79:65:58:2e:29:3f:c5:35:3a:22:c0:5d:51:9b:
ad:4f:98:7d:80:ac:1a:aa:02:c3:07:81:7f:45:2a:11:1c:07:
64:cf:07:7f:b4:66:0e:4a:9a:8f:d3:aa:af:13:9a:83:af:17:
be:b2:49:62:8b:34:e0:e6:e4:8e:57:7a:2e:7e:d9:9c:1e:77:
e6:ff:2d:9e:f4:e1:bd:05:f0:5f:3a:e0:bf:35:5b:1c:c7:48:
27:11:95:87:32:13:e5:c0:f5:c6:6d:9b:ec:a5:e0:35:96:06:
20:37:de:e6:94:7a:c9:e9:96:16:4e:a6:a5:c1:a0:e0:01:bb:
c5:5b:07:85:c5:6e:bb:7c:d4:79:6b:dc:ac:83:44:76:c6:b6:
1e:e3:0f:83:69:e1:69:9a:5b:66:37:3d:be:cc:c2:ab:2c:d4:
f7:f5:6d:68:7e:44:24:97:bd:7c:78:5e:4b:44:f1:5f:41:95:
58:aa:f7:7b:d8:dc:37:3b:35:3e:0a:b5:26:c5:02:63:4c:6a:
26:b0:65:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkAlcDt3j59CH6iGckmhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjYwMjA5MTgwMDM4WhcNMjYwMjEwMTgwMDM4WjAzMTEwLwYDVQQD
EygyZTVjYzBhYWM5YjIwYzY1OGJlMGExNTZlZjc4ZDlhY2IzMWJkZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur4oX7rCqDUSzpLlmhAVZuRFwckn
odj0iMvP78x92RhGTIB/9CgaYc9re+cK6zw/bBZeJIt9iaF48qa6peUzgrBZHT/F
ws+C60ucIC28Vp1MayocFcvco3F49QwabwGIw2OfRj3TitA5HWBprXGydml4tAPa
MdH+dBtEC5r95K/Cy5w9EC12zRNM1xeq6b+IbpcpWS5Igm1p4Qy/G++CpT23boYM
5jomWtLpOmXDjgHVDWhCRi82bsycFdKHpJtOZOvlPSXGpmYBDQ0TlT+2IgYktGY8
DKOQIafB+E1DD9wC88gQpXiYpXXNmai0DWqtr9OjG/LJBH7VNIalJFqvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5cwKrJsgxli+ChVu942ayzG94PMB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUrw8AU2
9UX/M5LusUtVaV1J80fbpQnOARmQoEmFAu7qIIUC7achcYc3xxcv86fihUjZ8g3v
jTMhP3llWC4pP8U1OiLAXVGbrU+YfYCsGqoCwweBf0UqERwHZM8Hf7RmDkqaj9Oq
rxOag68XvrJJYos04Obkjld6Ln7ZnB535v8tnvThvQXwXzrgvzVbHMdIJxGVhzIT
5cD1xm2b7KXgNZYGIDfe5pR6yemWFk6mpcGg4AG7xVsHhcVuu3zUeWvcrINEdsa2
HuMPg2nhaZpbZjc9vszCqyzU9/VtaH5EJJe9fHheS0TxX0GVWKr3e9jcNzs1Pgq1
JsUCY0xqJrBlAw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:51 2026 by rpki-client