This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json) Hash identifier: rc8jA/EmqegruDQE09vtX2iqLIZsYFWTNiipBoDdoXY= Subject key identifier: 06:CF:C4:75:B6:77:06:2A:A3:AC:9F:12:E8:28:21:85:B1:7F:1E:78 Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431 Certificate serial: 019C1E03055F110B84236CE555D928870B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft Manifest number: 44 Signing time: Mon 02 Feb 2026 11:00:40 +0000 Manifest this update: Mon 02 Feb 2026 11:00:40 +0000 Manifest next update: Tue 03 Feb 2026 11:00:40 +0000 Files and hashes: 1: 1bWashext9122i8GtxbzSUnEQOQ.roa (hash: XJz5JuLVIrs1ixBvcHUnXk+6Mw8nbek7Q6f2/l5+pE8=) 2: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: vBs7fSb5GWBjRRQN1ZadfgioX1E4K/XtBMcOrxxBjXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:05:5f:11:0b:84:23:6c:e5:55:d9:28:87:0b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e40b16d369ad27ced85499465328f095b155f431 Validity Not Before: Feb 2 11:00:40 2026 GMT Not After : Feb 3 11:00:40 2026 GMT Subject: CN=06cfc475b677062aa3ac9f12e8282185b17f1e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:94:2d:9c:73:4e:68:47:d7:09:46:38:91: 84:e5:be:ee:75:42:dd:ce:2e:02:07:35:a8:7c:82: e5:fa:fb:98:27:54:e9:a5:37:f1:bc:10:18:28:cd: f0:b5:74:05:1f:a5:2d:f3:db:0f:21:f7:ff:0e:a3: ea:e3:03:28:36:f1:87:8f:48:b6:3e:f9:cf:03:ef: e9:ec:ab:38:2e:23:06:fb:24:93:86:c1:2f:d4:40: d9:dc:d5:b7:6a:2e:ba:e2:41:a6:90:b8:6b:75:fe: 52:72:e1:e8:06:a2:46:77:f8:69:b1:03:57:72:aa: 0d:ff:dd:1f:5a:00:92:27:26:72:6f:1d:08:0f:02: ca:50:3d:d1:a3:a0:85:cf:2d:e8:0b:09:3d:b6:12: 02:8d:bf:6a:06:e5:3a:74:dd:17:4c:3f:69:e2:fa: 7f:ba:2c:52:98:ad:c9:54:6f:18:9c:75:15:6f:57: b4:0a:9a:31:95:23:18:81:93:27:da:7e:32:33:f4: 47:13:5b:d3:69:3b:04:34:b2:79:a8:5d:6f:bd:d2: ec:7d:50:44:27:db:a1:01:55:ce:c5:ea:04:8a:e4: 73:4e:52:ff:67:28:8c:e1:8a:47:de:fb:58:68:6c: f8:c3:ab:fe:54:5c:4f:a1:44:72:29:36:c4:cb:e3: 4a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:C4:75:B6:77:06:2A:A3:AC:9F:12:E8:28:21:85:B1:7F:1E:78 X509v3 Authority Key Identifier: keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:a4:7e:4f:2a:03:72:11:6a:ec:36:a7:49:f5:43:e7:63: b9:10:17:66:61:09:d4:28:70:0b:60:f0:4f:f8:f6:7a:b6:e7: 7a:4e:92:57:ba:70:5e:b6:7c:4b:8b:44:bc:1c:32:1f:36:85: fe:33:14:8e:96:1d:c6:5c:5c:c3:13:a9:3c:dc:93:6b:d4:e9: ae:3a:09:dc:d6:fc:4e:0f:7f:e5:bc:cc:d9:6e:0c:08:62:6a: 7d:9d:e3:bf:af:83:dc:8a:10:dd:80:79:51:c3:1c:a8:b6:b3: ac:eb:70:49:4e:50:c5:f1:ac:db:9c:10:4c:7c:c9:b0:62:ab: c2:17:28:7a:0e:27:43:56:5e:eb:e7:e5:e2:37:e7:0f:93:67: 2d:08:62:41:a9:30:ea:b7:ee:8a:cf:e0:d3:6f:71:81:f2:8c: d6:ff:21:14:01:80:37:5d:08:aa:55:87:b0:45:7f:e5:48:f5: 3f:cc:3e:79:68:b0:85:e9:56:c4:11:1b:03:0b:3e:5f:e1:fa: 94:fc:65:7b:75:55:62:42:4c:fd:eb:3e:11:de:9f:5c:f1:b7: 2e:ef:e6:2c:5a:9a:98:b6:ae:74:37:e4:71:ab:b2:a7:e8:61: 65:9e:d1:9e:20:2b:67:f8:10:79:7a:51:4d:96:66:13:5e:eb: 20:68:70:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweAwVfEQuEI2zlVdkohwsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MGIxNmQzNjlhZDI3Y2VkODU0OTk0NjUzMjhmMDk1YjE1 NWY0MzEwHhcNMjYwMjAyMTEwMDQwWhcNMjYwMjAzMTEwMDQwWjAzMTEwLwYDVQQD EygwNmNmYzQ3NWI2NzcwNjJhYTNhYzlmMTJlODI4MjE4NWIxN2YxZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaULZxzTmhH1wlGOJGE5b7udULd zi4CBzWofILl+vuYJ1TppTfxvBAYKM3wtXQFH6Ut89sPIff/DqPq4wMoNvGHj0i2 PvnPA+/p7Ks4LiMG+ySThsEv1EDZ3NW3ai664kGmkLhrdf5ScuHoBqJGd/hpsQNX cqoN/90fWgCSJyZybx0IDwLKUD3Ro6CFzy3oCwk9thICjb9qBuU6dN0XTD9p4vp/ uixSmK3JVG8YnHUVb1e0CpoxlSMYgZMn2n4yM/RHE1vTaTsENLJ5qF1vvdLsfVBE J9uhAVXOxeoEiuRzTlL/ZyiM4YpH3vtYaGz4w6v+VFxPoURyKTbEy+NKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbPxHW2dwYqo6yfEugoIYWxfx54MB8GA1UdIwQY MBaAFOQLFtNprSfO2FSZRlMo8JWxVfQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAt MDM3MWQ0YjQ1NDdhLzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAtMDM3MWQ0YjQ1NDdh LzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb2kfk8q A3IRauw2p0n1Q+djuRAXZmEJ1ChwC2DwT/j2erbnek6SV7pwXrZ8S4tEvBwyHzaF /jMUjpYdxlxcwxOpPNyTa9TprjoJ3Nb8Tg9/5bzM2W4MCGJqfZ3jv6+D3IoQ3YB5 UcMcqLazrOtwSU5QxfGs25wQTHzJsGKrwhcoeg4nQ1Ze6+fl4jfnD5NnLQhiQakw 6rfuis/g029xgfKM1v8hFAGAN10IqlWHsEV/5Uj1P8w+eWiwhelWxBEbAws+X+H6 lPxle3VVYkJM/es+Ed6fXPG3Lu/mLFqamLaudDfkcauyp+hhZZ7RniArZ/gQeXpR TZZmE17rIGhw7w== -----END CERTIFICATE-----Generated at Mon Feb 2 15:54:03 2026 by rpki-client