This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: NTrEpbgQM1eS3LOihHqDpML8SsKTbpmgylgh+tH0/UM=
Subject key identifier: BA:D2:D8:21:EF:BD:50:79:2F:0D:F1:32:84:E4:68:55:83:97:F0:B5
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019C43909E086D28DEA04435C712797D5B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 03F2
Signing time: Mon 09 Feb 2026 18:01:16 +0000
Manifest this update: Mon 09 Feb 2026 18:01:16 +0000
Manifest next update: Tue 10 Feb 2026 18:01:16 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: SvTWngkZX6u8Mo3tu5U9sHYRqKCTMYA7HFs2jEZo3vo=)
2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:9e:08:6d:28:de:a0:44:35:c7:12:79:7d:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Feb 9 18:01:16 2026 GMT
Not After : Feb 10 18:01:16 2026 GMT
Subject: CN=bad2d821efbd50792f0df13284e468558397f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:70:e5:73:0a:31:93:b2:59:59:7e:5e:ea:
c6:33:26:1b:e2:95:95:e2:94:78:6f:31:50:19:ee:
6b:3b:1c:c9:3c:68:f7:71:6f:ef:79:d1:f0:e1:fc:
02:2f:88:2a:9b:8f:1a:91:88:d6:aa:cc:4d:dc:87:
6e:07:b9:62:2b:15:49:64:1e:3b:8f:ea:77:b0:61:
9f:cd:f3:18:0f:77:a7:53:38:63:5e:70:db:d5:dc:
54:a8:f7:77:3a:56:53:a0:ae:1e:fc:2f:99:8d:3e:
02:7e:d6:9d:08:04:2b:cf:fe:d6:77:9a:75:f8:3d:
37:68:b5:5b:a0:f1:f7:f8:fe:d0:25:9d:83:08:36:
9a:4c:a1:e0:75:fa:b3:76:d4:5f:80:6c:93:39:e4:
a3:f5:ab:ab:ed:6f:7f:34:73:a9:3f:9f:38:11:2a:
53:5c:c6:c9:22:cb:65:45:cc:96:e2:66:5c:65:ec:
21:74:fa:99:08:b0:2c:52:1f:b3:fb:a6:ae:72:48:
a5:b0:5e:62:20:9d:12:1d:3d:a2:54:34:fb:1a:af:
a2:b3:82:b4:7c:42:7c:a1:b7:1f:61:cc:97:5f:47:
2f:ff:02:d0:46:0a:7f:25:68:d0:f9:0f:a6:26:42:
6b:ad:c2:41:2f:f2:f8:ee:03:cf:c1:cf:1d:d9:22:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:D8:21:EF:BD:50:79:2F:0D:F1:32:84:E4:68:55:83:97:F0:B5
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:01:99:15:e3:48:7a:70:77:b8:ac:91:ec:e1:0b:e2:e2:
ef:18:35:c1:ff:f0:48:41:4d:4c:b7:b8:7f:ce:0f:31:99:78:
0e:c4:ce:7b:99:6e:dc:75:fd:48:37:cf:27:ed:ea:0b:f1:3a:
a8:07:60:13:a9:b6:16:d8:00:7c:d8:55:72:c4:43:18:2a:ee:
29:27:38:d0:59:99:73:08:8a:42:95:b5:d5:49:3b:f1:c5:9c:
0a:be:2b:e2:71:8a:dd:97:65:31:07:0d:bb:ba:1f:30:95:9d:
b5:b3:83:9a:49:b3:99:91:33:2d:47:39:ed:42:bc:ee:ee:6f:
f1:88:3a:9c:bd:cf:67:be:f2:dd:92:c2:c3:5e:1a:60:67:47:
1d:c7:f4:db:3d:53:a0:78:61:10:7a:64:ab:ea:6d:00:09:51:
38:76:09:04:78:3c:32:38:98:e7:17:e1:9e:3a:ef:c7:65:70:
07:a5:c4:45:6b:be:09:59:76:88:6f:84:b9:3b:ba:b4:2b:b4:
64:70:19:65:94:8b:a6:3d:b5:f1:9f:de:bd:82:d6:d6:15:65:
9b:4a:4b:82:29:8e:fa:5f:b1:1c:0c:f6:bc:8e:7f:f5:43:32:
f5:48:e5:19:99:98:04:2c:a8:97:03:e0:04:52:d6:62:70:0a:
c9:b0:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:15 2026 by rpki-client