This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json) Hash identifier: X5VBw5EHFRGZDsloE0AZAWknjT505KFW+iPzhYE8i0A= Subject key identifier: C1:9C:12:5D:B3:B5:3A:11:09:16:04:12:59:7F:0F:09:2D:D2:90:F2 Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d Certificate serial: 019C43221C5F1FF6A5350384EFACEB97E0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft Manifest number: 019A Signing time: Mon 09 Feb 2026 16:00:34 +0000 Manifest this update: Mon 09 Feb 2026 16:00:34 +0000 Manifest next update: Tue 10 Feb 2026 16:00:34 +0000 Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: Xv3V17ds5sBRrKLvbMZRvqxOZE6LsGvPcvhjn7gLDgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1c:5f:1f:f6:a5:35:03:84:ef:ac:eb:97:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d Validity Not Before: Feb 9 16:00:34 2026 GMT Not After : Feb 10 16:00:34 2026 GMT Subject: CN=c19c125db3b53a1109160412597f0f092dd290f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:99:8d:af:bd:e1:15:31:f7:44:61:9b:bc: e5:1b:ab:71:a3:a2:9a:42:e3:43:bb:1e:e3:e0:a6: 0c:43:85:65:21:29:a1:51:8f:7e:a8:22:26:1d:3b: 9a:0a:5f:34:88:de:71:c5:5a:5c:2a:1c:0f:d1:93: df:a4:ea:a1:9d:37:88:a2:ca:71:e3:0e:20:06:39: 32:75:9b:dc:61:a1:4a:75:7a:54:59:a1:63:ce:91: 7d:39:3d:ad:23:ac:76:65:b2:68:f5:02:60:cc:c8: 95:86:46:25:c8:13:b9:51:98:02:d2:1d:a2:29:bd: 6b:2a:69:93:ee:44:de:68:f2:9e:3e:76:45:8d:98: 31:76:71:75:7c:8d:2a:db:15:64:0a:7c:c1:4c:e2: 51:4a:f8:df:5a:1d:b5:0f:b9:f2:6b:b3:a6:b7:0f: 68:d2:41:fd:8f:3c:83:c9:27:e3:a7:19:66:99:09: f2:ca:2e:9f:cf:ae:48:9b:97:53:1c:16:f0:56:96: 33:ea:ae:3c:9f:cf:5a:df:54:11:a7:9b:d1:5f:56: 98:76:22:52:6e:46:75:4f:38:46:91:53:18:ed:a3: 72:47:a7:66:0e:1c:25:69:34:1b:d4:32:a2:35:f1: 01:17:75:ea:87:b4:f1:e5:1f:f7:00:14:75:ed:01: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:12:5D:B3:B5:3A:11:09:16:04:12:59:7F:0F:09:2D:D2:90:F2 X509v3 Authority Key Identifier: keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fe:7e:c4:f4:36:dd:4b:28:c4:63:2b:75:44:bb:86:8c:78: cb:89:4a:65:18:8f:2a:25:d0:04:c0:fe:0a:2f:9f:3d:22:40: 1a:98:82:d4:a4:c2:a0:80:8f:40:d4:17:7f:27:3d:68:2a:c1: ba:fb:5e:8c:ad:16:76:94:ed:a1:7f:b4:1d:48:20:fb:31:60: 9f:27:fc:c2:0a:25:f7:8a:48:13:9f:91:ab:3c:8f:9b:6d:42: 7d:6f:1f:04:20:60:de:47:19:9e:21:bc:d8:ed:a8:60:13:56: 9e:ce:39:cb:3f:ac:9e:78:7b:91:a1:0e:f6:e0:fe:e1:76:b3: 08:1a:ff:d3:7e:21:a8:62:58:d4:ac:58:7d:93:eb:e5:22:b4: 0f:da:e2:62:a9:df:45:04:86:a4:6c:79:b9:19:f3:32:b0:76: b5:e6:d8:27:ea:97:de:9f:cc:d5:e3:85:0c:13:1d:ac:3b:18: fe:b6:30:f5:96:81:6d:7d:cb:36:d7:b9:2b:a9:73:80:cd:1f: 4a:c5:ce:7f:c0:75:f3:7e:8d:53:16:2a:5c:83:3d:21:a1:e6: 21:6f:58:88:66:01:f1:d9:0c:82:4a:0d:89:21:a8:93:a8:09: 8a:62:3d:54:8f:7e:da:d2:84:4f:7c:da:5e:27:22:ff:d0:6d: 48:fe:f2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhxfH/alNQOE76zrl+DqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MDNmNGRhNWI0MjNkODk5ZmJiNWI1NjE2NGZiMDc2OTZk ODE1OWQwHhcNMjYwMjA5MTYwMDM0WhcNMjYwMjEwMTYwMDM0WjAzMTEwLwYDVQQD EyhjMTljMTI1ZGIzYjUzYTExMDkxNjA0MTI1OTdmMGYwOTJkZDI5MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZeZja+94RUx90Rhm7zlG6txo6Ka QuNDux7j4KYMQ4VlISmhUY9+qCImHTuaCl80iN5xxVpcKhwP0ZPfpOqhnTeIospx 4w4gBjkydZvcYaFKdXpUWaFjzpF9OT2tI6x2ZbJo9QJgzMiVhkYlyBO5UZgC0h2i Kb1rKmmT7kTeaPKePnZFjZgxdnF1fI0q2xVkCnzBTOJRSvjfWh21D7nya7Omtw9o 0kH9jzyDySfjpxlmmQnyyi6fz65Im5dTHBbwVpYz6q48n89a31QRp5vRX1aYdiJS bkZ1TzhGkVMY7aNyR6dmDhwlaTQb1DKiNfEBF3Xqh7Tx5R/3ABR17QHgcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGcEl2ztToRCRYEEll/Dwkt0pDyMB8GA1UdIwQY MBaAFOQD9NpbQj2Jn7tbVhZPsHaW2BWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mZDIxMGQtZDRjMy00ODMxLWE0NDYt YTAwOTU2YWZjNDY5LzEvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mZDIxMGQtZDRjMy00ODMxLWE0NDYtYTAwOTU2YWZjNDY5 LzEvNUFQMDJsdENQWW1mdTF0V0ZrLXdkcGJZRlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf5+xPQ2 3UsoxGMrdUS7hox4y4lKZRiPKiXQBMD+Ci+fPSJAGpiC1KTCoICPQNQXfyc9aCrB uvtejK0WdpTtoX+0HUgg+zFgnyf8wgol94pIE5+RqzyPm21CfW8fBCBg3kcZniG8 2O2oYBNWns45yz+snnh7kaEO9uD+4XazCBr/034hqGJY1KxYfZPr5SK0D9riYqnf RQSGpGx5uRnzMrB2tebYJ+qX3p/M1eOFDBMdrDsY/rYw9ZaBbX3LNte5K6lzgM0f SsXOf8B1836NUxYqXIM9IaHmIW9YiGYB8dkMgkoNiSGok6gJimI9VI9+2tKET3za Xici/9BtSP7yHw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:24 2026 by rpki-client