This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: MUBox0P+epnf3mdXcUrP3ipwOfD8+Pj8aSDvx8/y84I= Subject key identifier: C7:3A:4E:F0:21:EE:31:CA:56:4B:1E:30:05:90:82:D5:6E:E8:6D:CF Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019C427DDD334B378738C1DA82F218FF9501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 04F4 Signing time: Mon 09 Feb 2026 13:01:10 +0000 Manifest this update: Mon 09 Feb 2026 13:01:10 +0000 Manifest next update: Tue 10 Feb 2026 13:01:10 +0000 Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: 1VK8SleG+l7UUbvPsLjeHKgihrc7kBoUUhRLRQkhAtY=) 2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:dd:33:4b:37:87:38:c1:da:82:f2:18:ff:95:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Feb 9 13:01:10 2026 GMT Not After : Feb 10 13:01:10 2026 GMT Subject: CN=c73a4ef021ee31ca564b1e30059082d56ee86dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:90:dc:98:b3:ca:5f:b4:bb:68:87:27:43: 53:f5:63:ac:69:a5:3f:44:99:2f:b1:82:0a:23:63: 02:82:e7:a7:d2:df:9a:b3:70:6c:c5:23:62:42:5d: 93:e7:80:06:7d:f2:95:18:c4:a6:51:64:76:62:90: 1f:9b:57:44:aa:3f:80:68:5a:a8:fe:e2:a2:b1:01: 84:61:35:c2:5d:78:0f:4e:ed:1a:f3:27:2c:51:f2: 3d:6b:f3:da:15:91:e0:49:62:df:a8:90:d9:35:7b: 65:b0:06:c7:f5:32:b9:e7:35:a9:ce:76:7a:9c:94: e5:aa:4c:b5:c8:d1:6a:69:ed:96:2b:21:04:c8:21: fe:21:a1:4b:32:ae:eb:d7:64:ee:fe:28:e6:dc:3f: 0e:3e:47:2f:67:d6:ad:e1:10:ea:d4:d6:c7:03:39: 3e:fc:2f:aa:46:9b:94:a3:76:ae:38:f6:07:54:2e: 8c:63:8b:fc:51:d6:e6:2e:13:62:1c:b0:f1:d2:75: 1e:0f:e7:21:ce:1f:f2:0e:91:d9:a0:c3:ea:1a:8a: 3b:6d:43:0e:43:71:44:7a:2b:a5:70:ed:e6:e1:62: 13:65:25:a7:ea:c4:b1:b6:b3:07:58:ac:80:ac:be: e5:de:65:d9:c8:1e:c4:60:b7:1c:68:c0:64:33:a3: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:4E:F0:21:EE:31:CA:56:4B:1E:30:05:90:82:D5:6E:E8:6D:CF X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4e:c7:57:65:5c:7b:b0:2a:8e:7f:b3:ba:21:11:53:00:de: 20:64:fe:30:f4:aa:29:85:c8:4a:af:ef:73:c6:47:49:21:5f: 24:35:de:2a:d2:77:f0:51:c5:b7:60:ba:c9:14:64:95:b0:53: 59:53:c2:dc:48:df:9a:7a:72:dd:4c:c9:42:04:29:fe:7c:a2: 0b:29:2f:3f:75:27:03:ea:e6:cc:d2:3d:d3:45:53:2c:6c:22: 75:8b:c1:06:43:16:e5:f8:75:34:b9:b6:c5:38:f2:8b:11:59: 5f:84:3b:b2:f6:d8:15:4b:5d:35:ae:51:ce:2f:09:0b:88:1b: 30:a7:e2:84:61:be:da:4a:86:49:21:36:08:0e:59:6e:58:9a: 83:02:7b:75:e8:81:71:09:8c:a7:c8:b5:64:38:12:fd:f9:a7: 8b:75:70:72:fb:22:88:d3:78:99:af:54:0f:6a:e1:dd:d5:8c: c5:01:13:85:14:2e:bc:9d:1a:82:e0:2f:77:59:f3:5f:70:67: fa:09:90:80:52:70:d1:b9:cf:38:21:e9:9e:9c:f1:b9:3b:1a: 8a:34:b2:1f:2b:ec:c6:44:59:3f:ac:91:ae:72:9a:82:47:1d: 97:c7:b8:af:b9:7a:ec:94:af:bf:59:6a:95:92:72:1e:96:29: d1:39:a7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfd0zSzeHOMHagvIY/5UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD EyhjNzNhNGVmMDIxZWUzMWNhNTY0YjFlMzAwNTkwODJkNTZlZTg2ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqaQ3Jizyl+0u2iHJ0NT9WOsaaU/ RJkvsYIKI2MCguen0t+as3BsxSNiQl2T54AGffKVGMSmUWR2YpAfm1dEqj+AaFqo /uKisQGEYTXCXXgPTu0a8ycsUfI9a/PaFZHgSWLfqJDZNXtlsAbH9TK55zWpznZ6 nJTlqky1yNFqae2WKyEEyCH+IaFLMq7r12Tu/ijm3D8OPkcvZ9at4RDq1NbHAzk+ /C+qRpuUo3auOPYHVC6MY4v8UdbmLhNiHLDx0nUeD+chzh/yDpHZoMPqGoo7bUMO Q3FEeiulcO3m4WITZSWn6sSxtrMHWKyArL7l3mXZyB7EYLccaMBkM6M7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc6TvAh7jHKVkseMAWQgtVu6G3PMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs07HV2Vc e7Aqjn+zuiERUwDeIGT+MPSqKYXISq/vc8ZHSSFfJDXeKtJ38FHFt2C6yRRklbBT WVPC3Ejfmnpy3UzJQgQp/nyiCykvP3UnA+rmzNI900VTLGwidYvBBkMW5fh1NLm2 xTjyixFZX4Q7svbYFUtdNa5Rzi8JC4gbMKfihGG+2kqGSSE2CA5ZbliagwJ7deiB cQmMp8i1ZDgS/fmni3VwcvsiiNN4ma9UD2rh3dWMxQEThRQuvJ0aguAvd1nzX3Bn +gmQgFJw0bnPOCHpnpzxuTsaijSyHyvsxkRZP6yRrnKagkcdl8e4r7l67JSvv1lq lZJyHpYp0TmnZw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:25 2026 by rpki-client