This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json) Hash identifier: eqU5rp4b3FgdubXkKIiLRSGu26AS7d6KB0auq/wDpLo= Subject key identifier: 65:E6:26:50:A1:D1:94:99:D2:4C:21:2A:BD:2D:14:88:A4:36:7F:E0 Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820 Certificate serial: 019C43909EF28350E3D0178C3E60DF0F0F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft Manifest number: 035C Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: bnVJr1WItS3i2hLxWKkB5veRJXn0gfDG77wZMhtxO5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:9e:f2:83:50:e3:d0:17:8c:3e:60:df:0f:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820 Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=65e62650a1d19499d24c212abd2d1488a4367fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:09:af:0a:e7:07:f9:b8:99:a0:d8:a9:21: a0:b1:53:96:bf:9a:92:ee:d9:bf:fd:e3:da:6a:6e: fb:11:6a:33:7e:08:18:51:05:a7:82:c6:88:68:76: 32:17:58:23:65:e5:d5:5f:f1:b6:d6:54:d6:87:3e: 1d:a4:1a:55:ac:d6:85:90:c3:4c:6d:dd:85:91:7d: f7:17:ea:f1:53:18:db:99:6d:88:9a:b5:ee:20:16: 64:70:48:38:32:57:2f:07:71:95:97:8f:63:3a:c1: df:34:5a:ca:99:77:00:0c:62:56:b6:f2:7b:38:09: ed:af:19:2f:74:f5:79:48:e0:22:3a:35:32:02:3f: 1c:69:cc:28:50:20:cb:72:3f:94:df:33:6e:f4:13: 1b:32:bf:20:b8:60:65:b8:d3:48:ef:2b:d0:32:0f: 3a:cb:d3:bf:c8:4e:b9:6d:1d:4b:f5:af:d4:8b:fb: 14:df:f4:b6:00:6e:bc:61:7c:52:ce:ec:0b:e7:ab: 14:eb:41:e0:f3:12:2d:33:f1:f9:28:03:92:73:5a: 38:a3:09:17:e8:9f:c1:7b:48:e5:76:e6:17:2c:d4: 70:4a:96:48:7b:db:7b:5a:b9:f9:11:75:84:0c:bf: 66:d5:9a:56:ee:dd:39:b6:81:75:89:9f:cf:ba:74: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:26:50:A1:D1:94:99:D2:4C:21:2A:BD:2D:14:88:A4:36:7F:E0 X509v3 Authority Key Identifier: keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:68:81:7a:87:5f:b2:b6:1c:15:bc:69:78:1a:4c:ce:24:9a: c6:ea:08:4d:bb:67:42:fc:05:7a:bc:59:1a:3a:8d:59:fa:7e: 11:cb:1b:24:7e:16:7c:bf:1c:5d:6d:03:23:5d:f0:f4:b3:df: e6:47:65:58:b2:d1:9b:0e:eb:3c:e4:be:37:11:41:39:f8:79: 29:66:f9:99:81:80:3a:7c:64:b0:28:94:5c:da:bd:70:78:71: db:66:d6:a7:96:dc:1d:b5:57:79:86:9e:c7:51:c7:a3:db:35: 21:46:ec:f1:5a:61:c0:fc:50:6f:22:07:e2:8c:f9:c0:df:cc: 6a:36:59:6d:e3:8b:58:c0:17:43:82:86:1e:16:25:ff:d6:15: 30:5d:db:b2:ad:3a:2a:2f:ea:a1:2f:c7:d1:b8:43:ad:e1:20: 18:aa:6f:26:b9:8e:02:70:2b:de:9d:55:d6:cc:d1:61:13:fb: 83:f2:49:97:9d:5c:42:f5:66:d6:8c:41:36:26:e1:23:84:74: e8:69:2b:f8:22:ad:c3:b3:ba:be:09:e8:71:dd:9e:71:bd:33: b1:e1:86:5c:be:7f:71:94:3d:20:c6:85:37:74:9f:eb:0c:78: bf:87:4c:d0:cc:e0:46:28:04:11:16:15:a7:e6:bc:74:77:fe: 44:39:cd:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJ7yg1Dj0BeMPmDfDw9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDFkMzgwN2VhOWQ4YWQ3NWRmNDc4NTU4OTk1MDllZTZm MzI4MjAwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD Eyg2NWU2MjY1MGExZDE5NDk5ZDI0YzIxMmFiZDJkMTQ4OGE0MzY3ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtgJrwrnB/m4maDYqSGgsVOWv5qS 7tm//ePaam77EWozfggYUQWngsaIaHYyF1gjZeXVX/G21lTWhz4dpBpVrNaFkMNM bd2FkX33F+rxUxjbmW2ImrXuIBZkcEg4MlcvB3GVl49jOsHfNFrKmXcADGJWtvJ7 OAntrxkvdPV5SOAiOjUyAj8cacwoUCDLcj+U3zNu9BMbMr8guGBluNNI7yvQMg86 y9O/yE65bR1L9a/Ui/sU3/S2AG68YXxSzuwL56sU60Hg8xItM/H5KAOSc1o4owkX 6J/Be0jlduYXLNRwSpZIe9t7Wrn5EXWEDL9m1ZpW7t05toF1iZ/PunQ/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXmJlCh0ZSZ0kwhKr0tFIikNn/gMB8GA1UdIwQY MBaAFOVB04B+qditdd9HhViZUJ7m8yggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgt MmQwNzdiNzgyYzcyLzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgtMmQwNzdiNzgyYzcy LzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWiBeodf srYcFbxpeBpMziSaxuoITbtnQvwFerxZGjqNWfp+EcsbJH4WfL8cXW0DI13w9LPf 5kdlWLLRmw7rPOS+NxFBOfh5KWb5mYGAOnxksCiUXNq9cHhx22bWp5bcHbVXeYae x1HHo9s1IUbs8VphwPxQbyIH4oz5wN/MajZZbeOLWMAXQ4KGHhYl/9YVMF3bsq06 Ki/qoS/H0bhDreEgGKpvJrmOAnAr3p1V1szRYRP7g/JJl51cQvVm1oxBNibhI4R0 6Gkr+CKtw7O6vgnocd2ecb0zseGGXL5/cZQ9IMaFN3Sf6wx4v4dM0MzgRigEERYV p+a8dHf+RDnNzA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:58 2026 by rpki-client