This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json) Hash identifier: uZytzQxErmoJJzDRAIX3XvKu1q1RKLDlC0QuGmfKdvQ= Subject key identifier: F5:02:60:07:8F:8D:BA:88:B4:C4:BC:AD:08:21:90:0B:F2:B3:0D:82 Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e Certificate serial: 019C45102E4F0B28BF6EE91EDBA434ABDD2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft Manifest number: 0B58 Signing time: Tue 10 Feb 2026 01:00:14 +0000 Manifest this update: Tue 10 Feb 2026 01:00:14 +0000 Manifest next update: Wed 11 Feb 2026 01:00:14 +0000 Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: f++KlcGlyU266a3mMfgrcx2Z1xCCbLR7RC5WdaPmQ9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:2e:4f:0b:28:bf:6e:e9:1e:db:a4:34:ab:dd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e Validity Not Before: Feb 10 01:00:14 2026 GMT Not After : Feb 11 01:00:14 2026 GMT Subject: CN=f50260078f8dba88b4c4bcad0821900bf2b30d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:4b:66:72:45:5c:06:bf:f6:b9:5c:99:0c: a8:8f:10:07:79:bc:60:52:89:f0:4d:e5:58:1a:2d: 0d:3e:5e:87:a5:1d:4b:d1:d0:6f:43:a2:66:24:2e: 70:27:5c:af:24:3c:8b:98:ed:60:65:8d:b8:4d:97: ce:13:0f:b0:6c:cd:0c:d2:1c:4f:7a:df:7f:80:8c: 60:e0:d3:fc:10:80:96:b3:7a:8d:5f:fd:b6:56:b5: 05:32:43:d9:16:81:ea:f3:ec:62:1f:ec:ef:20:c3: 03:a0:ee:cd:a8:ce:8c:bf:79:bb:55:6b:48:05:ac: 61:a4:98:c6:24:56:17:0d:88:96:bc:11:f6:9e:f3: c5:5e:c8:91:96:43:86:07:74:ab:06:61:4e:bb:64: a8:ad:19:99:40:3c:f8:a2:9a:83:5a:3a:b8:49:8f: ac:34:61:99:25:8e:a4:54:23:1a:d3:82:9e:7d:7b: 59:2d:7e:55:bb:1f:91:a1:a2:2d:ee:96:df:f9:7f: 63:1f:9d:8b:fa:26:1f:68:00:c6:ce:be:44:92:b6: 8d:1b:47:83:a9:b9:e6:1f:9b:62:89:98:77:d6:3d: e9:1c:6d:da:7f:1f:b5:dd:d9:4c:15:c3:08:31:2a: c4:d7:0c:e8:1c:29:42:31:e2:2c:83:a6:cd:d7:73: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:02:60:07:8F:8D:BA:88:B4:C4:BC:AD:08:21:90:0B:F2:B3:0D:82 X509v3 Authority Key Identifier: keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:85:75:f4:62:3a:5e:ab:c1:94:8b:f0:2e:7a:17:55:08: 69:8f:ae:bb:8b:60:c2:41:db:1a:3c:a0:dc:24:a8:c0:4c:76: f9:20:cc:77:64:ec:56:90:38:61:5d:81:59:aa:76:5d:00:ae: 2b:44:92:62:98:44:e0:66:b9:47:87:26:ae:00:c8:1a:91:27: 15:40:66:3e:aa:a0:3f:56:14:00:9a:7a:6e:f4:eb:70:01:87: a3:60:75:50:e3:c1:5e:62:54:c1:85:42:20:6f:4c:be:3d:cb: dc:b5:44:e0:fa:c3:4f:e1:76:e7:b0:96:96:26:9f:4c:72:bf: 1c:35:ab:8f:94:a2:dc:c8:9f:f0:40:07:5a:a1:fc:37:de:b7: b6:62:ee:b0:cb:55:29:dd:0e:32:de:a7:2a:25:46:d7:1b:0e: 54:37:28:2d:7c:77:ea:32:e5:d5:54:b3:e6:c2:18:8c:35:58: 8a:38:f8:6c:36:7e:fb:4b:d4:db:8c:28:17:e0:b5:72:9f:65: 6e:21:ae:b0:97:ac:0f:7a:56:24:05:18:0f:5f:19:ff:b5:b6: 71:44:51:98:1b:ff:2d:a9:0a:77:99:35:3d:f0:ad:29:06:08: 2a:95:1e:a1:d0:48:10:f2:b3:87:a8:ed:fa:d9:f8:4f:be:a1: 39:c7:60:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEC5PCyi/buke26Q0q90uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTk1YTRhOTFiYzI5YzhkN2VkMTA0YTAzODQwMTlhNGZl NTllMGUwHhcNMjYwMjEwMDEwMDE0WhcNMjYwMjExMDEwMDE0WjAzMTEwLwYDVQQD EyhmNTAyNjAwNzhmOGRiYTg4YjRjNGJjYWQwODIxOTAwYmYyYjMwZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikxLZnJFXAa/9rlcmQyojxAHebxg UonwTeVYGi0NPl6HpR1L0dBvQ6JmJC5wJ1yvJDyLmO1gZY24TZfOEw+wbM0M0hxP et9/gIxg4NP8EICWs3qNX/22VrUFMkPZFoHq8+xiH+zvIMMDoO7NqM6Mv3m7VWtI BaxhpJjGJFYXDYiWvBH2nvPFXsiRlkOGB3SrBmFOu2SorRmZQDz4opqDWjq4SY+s NGGZJY6kVCMa04KefXtZLX5Vux+RoaIt7pbf+X9jH52L+iYfaADGzr5EkraNG0eD qbnmH5tiiZh31j3pHG3afx+13dlMFcMIMSrE1wzoHClCMeIsg6bN13PpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUCYAePjbqItMS8rQghkAvysw2CMB8GA1UdIwQY MBaAFOSZWkqRvCnI1+0QSgOEAZpP5Z4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYt OWRmNGJiMThmYjA2LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYtOWRmNGJiMThmYjA2 LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWyFdfRi Ol6rwZSL8C56F1UIaY+uu4tgwkHbGjyg3CSowEx2+SDMd2TsVpA4YV2BWap2XQCu K0SSYphE4Ga5R4cmrgDIGpEnFUBmPqqgP1YUAJp6bvTrcAGHo2B1UOPBXmJUwYVC IG9Mvj3L3LVE4PrDT+F257CWliafTHK/HDWrj5Si3Mif8EAHWqH8N963tmLusMtV Kd0OMt6nKiVG1xsOVDcoLXx36jLl1VSz5sIYjDVYijj4bDZ++0vU24woF+C1cp9l biGusJesD3pWJAUYD18Z/7W2cURRmBv/LakKd5k1PfCtKQYIKpUeodBIEPKzh6jt +tn4T76hOcdgfw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:29 2026 by rpki-client