This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json) Hash identifier: 4CdtJWDcrEQqUQUnxJDmErA38AiBQyAhQW42DmTUs3o= Subject key identifier: 94:8F:2C:0E:41:4B:D2:09:E3:11:53:52:80:BD:9E:B1:F0:85:99:3D Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Certificate serial: 019C4246B9E3C7A06D6E418EA054259B7947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft Manifest number: 0901 Signing time: Mon 09 Feb 2026 12:00:57 +0000 Manifest this update: Mon 09 Feb 2026 12:00:57 +0000 Manifest next update: Tue 10 Feb 2026 12:00:57 +0000 Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: BTy+EbOzLbCc3i8aVuvNTAQZyavhq9hyulWafqxkCmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b9:e3:c7:a0:6d:6e:41:8e:a0:54:25:9b:79:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Validity Not Before: Feb 9 12:00:57 2026 GMT Not After : Feb 10 12:00:57 2026 GMT Subject: CN=948f2c0e414bd209e311535280bd9eb1f085993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b0:3b:1c:bb:c3:4e:9b:9d:e3:7d:8f:16:fa: 51:ab:1c:ac:72:18:41:98:cd:ab:cd:a5:5e:33:32: 78:70:57:42:c8:70:42:79:81:e1:c8:1b:64:5c:c2: 00:4d:68:a4:b2:0e:0b:4d:11:b4:34:f4:0a:f3:b4: a1:3b:c4:fd:97:13:26:d5:ec:49:e5:91:03:f3:0b: 58:65:7a:da:d1:f0:4d:2a:55:95:ca:43:41:e0:84: d3:90:98:68:ac:58:3b:db:e0:b0:b3:29:80:c1:15: a3:24:05:60:0e:eb:e4:c4:2f:d2:14:45:5c:91:7d: 15:41:2c:9f:b7:f2:59:a2:5d:a2:07:48:ba:90:f3: a8:b8:74:13:70:07:f7:07:d8:51:b9:c7:26:fa:87: d2:ae:a4:b2:d5:3c:27:6f:54:03:eb:0f:64:53:8b: 8e:25:0f:3b:38:64:a4:41:f7:4e:5e:e7:34:84:98: 24:59:59:9b:cf:2d:0a:a8:b8:1e:1e:fb:55:e8:96: 51:6d:e7:82:53:8c:09:2f:54:e1:20:b1:06:e5:2f: 9f:59:85:81:2b:f3:43:e7:33:de:db:6a:cc:f3:8a: 68:17:13:47:1d:70:00:4c:93:9b:f5:3f:9e:e3:9d: d8:01:31:cc:47:1d:9d:75:28:3a:3c:a6:d2:55:e7: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8F:2C:0E:41:4B:D2:09:E3:11:53:52:80:BD:9E:B1:F0:85:99:3D X509v3 Authority Key Identifier: keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6e:8b:a2:66:cb:a3:58:b3:42:85:27:c2:13:91:3a:6a:f9: 60:6d:68:b3:44:4b:71:9a:c5:c3:c1:f9:31:18:66:c4:63:ea: 3e:d7:1f:e5:08:73:b8:94:81:cb:de:3e:68:87:c3:9f:d7:09: a9:5c:5a:33:a5:fc:b8:fe:e2:53:58:0c:e8:3f:5e:cb:3a:fb: 03:c0:f5:93:2f:5f:3f:a9:9d:95:a4:9e:db:75:d3:1b:ad:07: 02:34:41:32:28:99:32:bd:ff:9e:e1:d8:f9:bd:3a:59:fc:a2: 72:fc:c7:b1:fe:bc:38:60:37:c0:53:26:1f:5c:1d:62:e7:8b: 04:11:dd:9d:f8:50:d5:48:20:d2:e7:88:dc:88:8d:8e:7e:b3: 73:90:60:38:6c:4f:aa:4e:ca:7c:cf:5d:f5:0f:7b:c2:52:df: fc:eb:78:a1:92:af:e9:8b:0c:9b:a4:03:dd:37:a3:2d:b6:ba: 38:8a:da:27:92:3c:38:c3:d8:8b:db:60:66:c8:b2:98:8d:01: 6c:fe:77:e5:e8:b4:34:5e:66:8e:95:c7:60:0a:a7:45:71:ff: 72:ce:77:66:51:32:6e:c1:ee:54:d2:5f:32:67:ea:06:93:31: 20:00:d0:97:64:e3:9a:4b:b6:73:26:c1:b3:20:19:79:fd:11: 41:0f:3b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrnjx6BtbkGOoFQlm3lHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj Y2VkYjMwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD Eyg5NDhmMmMwZTQxNGJkMjA5ZTMxMTUzNTI4MGJkOWViMWYwODU5OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bA7HLvDTpud432PFvpRqxyschhB mM2rzaVeMzJ4cFdCyHBCeYHhyBtkXMIATWiksg4LTRG0NPQK87ShO8T9lxMm1exJ 5ZED8wtYZXra0fBNKlWVykNB4ITTkJhorFg72+CwsymAwRWjJAVgDuvkxC/SFEVc kX0VQSyft/JZol2iB0i6kPOouHQTcAf3B9hRuccm+ofSrqSy1Twnb1QD6w9kU4uO JQ87OGSkQfdOXuc0hJgkWVmbzy0KqLgeHvtV6JZRbeeCU4wJL1ThILEG5S+fWYWB K/ND5zPe22rM84poFxNHHXAATJOb9T+e453YATHMRx2ddSg6PKbSVee7gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSPLA5BS9IJ4xFTUoC9nrHwhZk9MB8GA1UdIwQY MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM26LombL o1izQoUnwhOROmr5YG1os0RLcZrFw8H5MRhmxGPqPtcf5QhzuJSBy94+aIfDn9cJ qVxaM6X8uP7iU1gM6D9eyzr7A8D1ky9fP6mdlaSe23XTG60HAjRBMiiZMr3/nuHY +b06WfyicvzHsf68OGA3wFMmH1wdYueLBBHdnfhQ1Ugg0ueI3IiNjn6zc5BgOGxP qk7KfM9d9Q97wlLf/Ot4oZKv6YsMm6QD3TejLba6OIraJ5I8OMPYi9tgZsiymI0B bP535ei0NF5mjpXHYAqnRXH/cs53ZlEybsHuVNJfMmfqBpMxIADQl2Tjmku2cybB syAZef0RQQ87Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:51 2026 by rpki-client