This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json) Hash identifier: wEP1jsKbmxAKtHZwiB0Wvveue35Nhtkc/NxPFK3zV4A= Subject key identifier: D2:43:E9:81:36:19:94:E4:05:47:29:DA:06:04:04:49:65:1D:43:30 Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2 Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2 Certificate serial: 019C43223CF80063979DA0D9EEB7F8B0D6FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 16:00:43 +0000 Manifest this update: Mon 09 Feb 2026 16:00:43 +0000 Manifest next update: Tue 10 Feb 2026 16:00:43 +0000 Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: KQ3j1pxQRN86DZZTbFbssV9CKdrYezkkMvemy4i14Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:3c:f8:00:63:97:9d:a0:d9:ee:b7:f8:b0:d6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2 Validity Not Before: Feb 9 16:00:43 2026 GMT Not After : Feb 10 16:00:43 2026 GMT Subject: CN=d243e981361994e4054729da06040449651d4330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:ba:d5:5b:f2:7e:d4:39:55:59:9f:1c:f9: 62:ae:fa:1c:fd:2d:44:79:25:e6:65:40:85:b9:ee: e9:dc:d8:ad:c7:a7:e9:30:9b:e5:22:80:85:04:89: 3b:53:cc:73:fd:46:a9:f5:51:4a:db:f8:6b:7c:fa: d7:0d:a2:51:fd:f3:e1:49:06:18:b8:53:02:eb:61: 60:21:bb:88:85:2b:5e:ce:80:05:ad:fd:f5:b4:ae: d2:9a:9d:67:ba:f4:9e:4b:96:ba:60:d3:79:82:cf: 28:6c:54:a3:92:3f:f9:de:3f:f6:da:b2:ca:79:dc: 21:91:14:41:a3:d1:e4:56:08:93:50:1f:47:5e:e2: 4e:b9:fa:13:5b:d2:d1:0d:ab:b0:39:68:c6:bc:40: ae:de:9b:2e:b6:cf:6f:a9:cd:f8:5f:69:d5:bd:47: 9b:96:d7:3e:78:20:2d:55:e3:d9:2d:1d:b9:fb:02: 4b:e8:80:f1:8e:c6:ec:b7:c4:92:ac:09:80:00:43: 61:85:38:a1:78:00:fc:ba:4a:fc:73:84:75:d4:ae: 9a:73:c9:83:8a:ad:b2:bd:f3:a4:81:83:27:2b:82: 15:8c:7b:6c:f1:f9:6a:d2:8a:4f:5d:f0:0b:ef:36: 37:df:84:34:e7:58:43:8f:86:50:cb:37:f9:24:b6: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:43:E9:81:36:19:94:E4:05:47:29:DA:06:04:04:49:65:1D:43:30 X509v3 Authority Key Identifier: keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d6:ed:82:4d:d5:e3:ac:7a:fb:01:83:14:fa:c8:ed:db:d6: e5:19:ce:69:e6:8f:7d:e6:10:db:e1:9a:8a:77:12:31:8b:25: 93:fe:20:56:97:0c:c7:3a:80:50:87:44:3c:e9:f7:cc:be:8b: 49:4b:25:08:56:7d:df:61:63:26:d7:97:a4:33:da:6f:7e:78: 1a:51:c4:12:78:eb:c8:1b:5e:4e:f2:7f:92:98:21:0c:7e:e7: f2:64:91:c1:86:f6:5a:9b:9b:ff:42:f0:e6:a5:0a:46:b2:4e: 0b:2c:52:9f:49:68:1e:62:58:5f:25:08:ee:1d:ea:09:37:ab: 2c:2d:30:81:36:2a:85:c0:c8:e3:e8:28:75:ef:27:a1:24:8a: a1:70:8c:76:7e:16:60:0a:79:39:b7:8c:62:53:88:be:b0:ed: bb:eb:dd:28:62:ae:53:18:86:df:6a:f4:96:02:74:62:2a:32: 2b:0b:18:27:e3:90:bb:dd:d0:ae:88:fe:4e:1f:b8:43:66:5c: b6:b3:95:4b:6c:fd:30:06:7d:c6:60:70:b0:9a:bb:0d:f7:c2: 6a:c4:92:c0:3c:33:b7:f9:78:84:43:e5:6a:8c:47:06:56:b2: 1a:f9:08:ea:04:24:de:97:58:08:50:0a:c9:57:5d:44:b5:cb: f7:f8:12:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjz4AGOXnaDZ7rf4sNb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OThkMjNkNjIxZWFmMmRkNTc5ODBkNWEwMGZiY2NjOTg1 ODgyZjIwHhcNMjYwMjA5MTYwMDQzWhcNMjYwMjEwMTYwMDQzWjAzMTEwLwYDVQQD EyhkMjQzZTk4MTM2MTk5NGU0MDU0NzI5ZGEwNjA0MDQ0OTY1MWQ0MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aW61VvyftQ5VVmfHPlirvoc/S1E eSXmZUCFue7p3Nitx6fpMJvlIoCFBIk7U8xz/Uap9VFK2/hrfPrXDaJR/fPhSQYY uFMC62FgIbuIhStezoAFrf31tK7Smp1nuvSeS5a6YNN5gs8obFSjkj/53j/22rLK edwhkRRBo9HkVgiTUB9HXuJOufoTW9LRDauwOWjGvECu3psuts9vqc34X2nVvUeb ltc+eCAtVePZLR25+wJL6IDxjsbst8SSrAmAAENhhTiheAD8ukr8c4R11K6ac8mD iq2yvfOkgYMnK4IVjHts8flq0opPXfAL7zY334Q051hDj4ZQyzf5JLaKoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJD6YE2GZTkBUcp2gYEBEllHUMwMB8GA1UdIwQY MBaAFEeY0j1iHq8t1XmA1aAPvMyYWILyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjVqU1BXSWVyeTNWZVlEVm9BLTh6SmhZZ3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zOWEzZGQtMmQyNi00NzUzLWExODAt NTZkNjExNzIwMjI0LzEvUjVqU1BXSWVyeTNWZVlEVm9BLTh6SmhZZ3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zOWEzZGQtMmQyNi00NzUzLWExODAtNTZkNjExNzIwMjI0 LzEvUjVqU1BXSWVyeTNWZVlEVm9BLTh6SmhZZ3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdbtgk3V 46x6+wGDFPrI7dvW5RnOaeaPfeYQ2+GaincSMYslk/4gVpcMxzqAUIdEPOn3zL6L SUslCFZ932FjJteXpDPab354GlHEEnjryBteTvJ/kpghDH7n8mSRwYb2Wpub/0Lw 5qUKRrJOCyxSn0loHmJYXyUI7h3qCTerLC0wgTYqhcDI4+gode8noSSKoXCMdn4W YAp5ObeMYlOIvrDtu+vdKGKuUxiG32r0lgJ0YioyKwsYJ+OQu93Qroj+Th+4Q2Zc trOVS2z9MAZ9xmBwsJq7DffCasSSwDwzt/l4hEPlaoxHBlayGvkI6gQk3pdYCFAK yVddRLXL9/gS0w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:01 2026 by rpki-client