This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json) Hash identifier: yXoMy5o1Dkv9KGGt9wegKsqGudSnHixaipRmq91ZUHk= Subject key identifier: 5B:70:9D:2F:EE:45:02:B2:9D:EF:47:EF:F0:4D:03:23:8A:F8:72:BD Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868 Certificate serial: 019C42B478E0AD65626A52BED43E49DB0631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft Manifest number: 055F Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: MTWvaT-KZib9yb4FWgpaDciaIa4.roa (hash: udiDof62oIqMZQkTZswgaISYaPILO26piyBTi1c5Vbg=) 2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: kE6YMXQew0/7++vFxvRdEApjQbfcf+iwARnpdRDgh+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:78:e0:ad:65:62:6a:52:be:d4:3e:49:db:06:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=5b709d2fee4502b29def47eff04d03238af872bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:49:ed:a0:be:46:8b:c8:17:53:be:08:05: 2b:ce:ca:2b:99:e5:d6:3e:ee:59:73:af:d7:01:06: cf:3c:04:f8:3d:a1:be:38:d5:2c:47:8f:2b:e9:a8: 3e:56:99:37:d3:9e:f5:98:d6:f0:3e:8c:32:e9:f0: e6:e4:2f:13:cc:98:ea:18:63:9e:02:e6:bd:b7:a2: ea:82:36:76:a1:a6:fe:9d:80:91:6d:24:de:dd:40: 1a:e0:c0:bc:c4:cb:63:7b:09:70:cc:e5:c7:bf:9f: a8:4f:0b:4d:65:a8:25:48:38:d2:ae:35:ae:f7:d7: 6b:39:d3:48:03:e4:9c:6c:a2:b1:7f:af:d0:15:67: c3:ea:18:3f:3e:65:3b:17:7e:c5:36:d6:e1:6c:5b: d3:fb:8d:3b:2e:f6:7c:b8:66:09:b8:7e:4f:c8:17: e5:63:9c:c0:b4:4e:f7:c0:fa:4d:91:18:b4:12:dc: b9:aa:95:4b:76:42:aa:68:0e:a5:22:33:02:d9:ad: 3c:9a:a6:d2:e3:aa:4f:ca:86:e1:03:1f:5b:10:68: 5d:d9:a8:54:19:fa:07:f6:c2:56:2d:22:0e:f0:66: 71:1a:cc:d8:97:a9:d6:2c:1e:56:81:05:30:04:0e: b1:f5:ab:42:b1:ae:dd:e1:79:04:f6:17:ba:7f:d6: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:70:9D:2F:EE:45:02:B2:9D:EF:47:EF:F0:4D:03:23:8A:F8:72:BD X509v3 Authority Key Identifier: keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b1:23:3f:02:97:09:a9:01:d0:73:c5:0a:15:de:e0:86:48: 0e:f8:8f:6b:88:7a:4e:bf:b1:6a:7b:b6:ed:dd:f8:1e:cb:99: 87:cd:8c:27:a4:b3:b7:44:33:30:44:ae:04:3b:c6:86:00:7f: bf:6a:89:6d:f9:79:33:5c:26:32:9d:ce:2a:a1:03:ce:e7:a9: e8:a3:0f:dc:49:33:97:c9:48:47:a3:3e:86:d8:00:1f:2e:aa: e8:ed:24:70:e0:0d:87:66:a9:1f:b2:44:38:ee:cf:37:8f:41: 70:53:90:cd:f6:9f:05:dc:8e:64:cc:73:3c:23:42:a1:37:ed: 6a:53:69:26:66:94:3d:fc:19:18:9e:51:e9:f8:bf:92:7c:15: 48:52:fe:5f:01:1c:43:19:34:c2:1f:ab:ad:8b:6e:7f:95:2d: 7f:84:75:d1:c6:f7:c5:80:04:f8:83:c1:b8:21:fd:3a:40:1c: 8c:92:14:6b:98:d6:7e:22:ff:18:9d:af:93:48:f6:a2:8f:c8: 26:f7:79:b5:3a:47:6c:7c:84:0a:dd:eb:f2:cd:85:ce:91:26: ca:eb:5e:e8:42:44:e2:34:19:9d:c5:cf:70:4c:c3:73:d3:14: 62:9f:6f:72:86:22:6e:d9:65:f8:44:f5:7e:42:13:d9:bc:c8: cb:78:c0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHjgrWVialK+1D5J2wYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw MmY4NjgwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD Eyg1YjcwOWQyZmVlNDUwMmIyOWRlZjQ3ZWZmMDRkMDMyMzhhZjg3MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJJ7aC+RovIF1O+CAUrzsormeXW Pu5Zc6/XAQbPPAT4PaG+ONUsR48r6ag+Vpk30571mNbwPowy6fDm5C8TzJjqGGOe Aua9t6LqgjZ2oab+nYCRbSTe3UAa4MC8xMtjewlwzOXHv5+oTwtNZaglSDjSrjWu 99drOdNIA+ScbKKxf6/QFWfD6hg/PmU7F37FNtbhbFvT+407LvZ8uGYJuH5PyBfl Y5zAtE73wPpNkRi0Ety5qpVLdkKqaA6lIjMC2a08mqbS46pPyobhAx9bEGhd2ahU GfoH9sJWLSIO8GZxGszYl6nWLB5WgQUwBA6x9atCsa7d4XkE9he6f9aQewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtwnS/uRQKyne9H7/BNAyOK+HK9MB8GA1UdIwQY MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbEjPwKX CakB0HPFChXe4IZIDviPa4h6Tr+xanu27d34HsuZh82MJ6Szt0QzMESuBDvGhgB/ v2qJbfl5M1wmMp3OKqEDzuep6KMP3Ekzl8lIR6M+htgAHy6q6O0kcOANh2apH7JE OO7PN49BcFOQzfafBdyOZMxzPCNCoTftalNpJmaUPfwZGJ5R6fi/knwVSFL+XwEc Qxk0wh+rrYtuf5Utf4R10cb3xYAE+IPBuCH9OkAcjJIUa5jWfiL/GJ2vk0j2oo/I Jvd5tTpHbHyECt3r8s2FzpEmyute6EJE4jQZncXPcEzDc9MUYp9vcoYibtll+ET1 fkIT2bzIy3jAvw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:44 2026 by rpki-client