This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: 6OsDpen2JNM/5e9/cq7Z6JvKj60NjTJVuEbYDhc8S0w=
Subject key identifier: ED:55:EB:B4:7C:0B:5A:B0:14:32:0F:7A:89:6C:0C:8A:AE:2E:5C:C0
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019C438FAF3584A521F9DC5EEAC5534CF0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 14C2
Signing time: Mon 09 Feb 2026 18:00:15 +0000
Manifest this update: Mon 09 Feb 2026 18:00:15 +0000
Manifest next update: Tue 10 Feb 2026 18:00:15 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 1VBgbYefsdkCCbE9OuS5kVPI1RFAmE2FCII3ZRCfb7U=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:af:35:84:a5:21:f9:dc:5e:ea:c5:53:4c:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Feb 9 18:00:15 2026 GMT
Not After : Feb 10 18:00:15 2026 GMT
Subject: CN=ed55ebb47c0b5ab014320f7a896c0c8aae2e5cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:bc:8f:a7:cd:7c:fa:80:1f:2b:f8:d6:05:
cb:9e:52:e3:bb:f6:85:1c:d1:fa:67:32:0c:8a:3d:
13:db:b6:41:1b:58:35:a0:ec:04:10:58:a6:bb:94:
d8:90:6a:b2:26:4f:d4:e5:c6:2b:86:28:6b:d6:7d:
f3:b6:32:89:e9:de:2b:89:6e:50:cf:ea:2b:81:d9:
32:a9:bf:c5:92:32:fb:b3:85:df:25:39:55:10:f6:
90:94:7d:4a:70:24:e1:7a:2f:5f:f2:fa:c0:22:3d:
ef:f9:44:fa:2c:dd:20:b5:4d:58:2f:6c:b0:d3:0e:
f6:f6:e5:4c:5b:1d:1c:dd:f6:b7:2f:4e:ad:ce:91:
f2:eb:56:14:b5:d9:2d:a9:30:f5:26:66:68:8e:be:
d1:df:4d:9b:a5:6e:1a:bb:e4:c7:95:1e:da:ce:a0:
4e:de:f2:d2:05:f2:d9:b5:42:d1:c6:de:15:2f:f3:
d1:f0:1a:66:09:88:6c:87:ea:69:54:2d:f1:4e:f3:
a3:85:e0:16:a1:db:2c:cc:01:87:c7:a6:91:fa:1b:
53:f5:67:f0:7c:63:82:bd:4b:9a:0b:2e:03:54:54:
48:e4:5d:b0:47:58:2b:cf:34:fb:73:41:87:86:17:
40:38:cc:05:e9:5a:88:25:88:ce:5d:a7:f9:b7:fc:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:EB:B4:7C:0B:5A:B0:14:32:0F:7A:89:6C:0C:8A:AE:2E:5C:C0
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c6:cd:cb:57:6a:8a:90:6c:9b:43:76:27:b9:33:32:c1:a9:
42:01:f0:e6:d8:97:44:77:f3:23:bc:03:aa:c3:32:a0:97:29:
cd:56:30:06:4f:22:0b:21:d5:75:bd:28:c1:a3:03:3f:25:dd:
6c:b9:a8:15:5c:39:e2:d6:99:eb:9e:ea:85:50:bd:14:da:a8:
d6:34:77:da:ae:17:b6:90:96:fa:65:d6:9a:68:fc:54:b4:dd:
9d:82:e0:63:83:be:8a:b4:34:fe:01:52:02:11:e2:cf:de:df:
60:f1:43:6c:a8:c5:83:47:13:ed:73:80:72:7e:ad:c3:11:08:
55:89:f1:82:37:ea:af:9f:9b:84:58:d5:3f:cb:11:9b:38:da:
a2:28:e9:eb:49:8f:8a:81:87:64:74:a6:32:68:b4:16:ee:b7:
df:45:c5:79:6d:57:52:97:a9:cb:14:42:63:cc:e1:85:69:a1:
b3:45:8c:05:fe:d6:db:e1:12:1b:a7:ab:cc:95:fd:23:58:a6:
01:32:f5:05:0f:6a:de:16:7b:ca:f6:3e:2f:69:b2:56:9e:32:
7b:7d:ab:66:92:99:99:16:0a:f9:8b:a6:79:3f:d4:20:0b:9c:
38:f7:3a:94:71:bb:bd:7e:23:45:6c:40:18:aa:43:61:ea:a4:
cc:c9:f2:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj681hKUh+dxe6sVTTPDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0
ZTQ2ZmMwHhcNMjYwMjA5MTgwMDE1WhcNMjYwMjEwMTgwMDE1WjAzMTEwLwYDVQQD
EyhlZDU1ZWJiNDdjMGI1YWIwMTQzMjBmN2E4OTZjMGM4YWFlMmU1Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFW8j6fNfPqAHyv41gXLnlLju/aF
HNH6ZzIMij0T27ZBG1g1oOwEEFimu5TYkGqyJk/U5cYrhihr1n3ztjKJ6d4riW5Q
z+orgdkyqb/FkjL7s4XfJTlVEPaQlH1KcCThei9f8vrAIj3v+UT6LN0gtU1YL2yw
0w729uVMWx0c3fa3L06tzpHy61YUtdktqTD1JmZojr7R302bpW4au+THlR7azqBO
3vLSBfLZtULRxt4VL/PR8BpmCYhsh+ppVC3xTvOjheAWodsszAGHx6aR+htT9Wfw
fGOCvUuaCy4DVFRI5F2wR1grzzT7c0GHhhdAOMwF6VqIJYjOXaf5t/yRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1V67R8C1qwFDIPeolsDIquLlzAMB8GA1UdIwQY
MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt
ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz
LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusbNy1dq
ipBsm0N2J7kzMsGpQgHw5tiXRHfzI7wDqsMyoJcpzVYwBk8iCyHVdb0owaMDPyXd
bLmoFVw54taZ657qhVC9FNqo1jR32q4XtpCW+mXWmmj8VLTdnYLgY4O+irQ0/gFS
AhHiz97fYPFDbKjFg0cT7XOAcn6twxEIVYnxgjfqr5+bhFjVP8sRmzjaoijp60mP
ioGHZHSmMmi0Fu6330XFeW1XUpepyxRCY8zhhWmhs0WMBf7W2+ESG6erzJX9I1im
ATL1BQ9q3hZ7yvY+L2myVp4ye32rZpKZmRYK+YumeT/UIAucOPc6lHG7vX4jRWxA
GKpDYeqkzMnyag==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:35 2026 by rpki-client