This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft File: I6ec9SWGV3ZHm825K0L81ZANT9Y.mft (raw, json) Hash identifier: 1ZkyFtmomw6fcEU+PKmKGCVu4iytRocGrWTk2Sh47Bs= Subject key identifier: 5F:90:CF:59:AA:C1:18:E5:0A:1C:8F:D2:DD:58:5F:9A:9D:AC:80:0F Authority key identifier: 23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6 Certificate issuer: /CN=23a79cf525865776479bcdb92b42fcd5900d4fd6 Certificate serial: 019C42469474723C52A641D97948D910FF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft Manifest number: 01D0 Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: I6ec9SWGV3ZHm825K0L81ZANT9Y.crl (hash: 3mtZIxNKum2qMm0sqEbjBWSxu/jjo/TvBSx3uE1PW8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:94:74:72:3c:52:a6:41:d9:79:48:d9:10:ff:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a79cf525865776479bcdb92b42fcd5900d4fd6 Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=5f90cf59aac118e50a1c8fd2dd585f9a9dac800f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:9f:60:af:e5:ec:29:41:c9:5c:0b:48:39: 94:aa:78:1e:c2:4a:4c:d2:f3:b9:d3:0c:94:54:d4: 4f:e5:5a:7b:f2:06:38:0c:21:5e:cb:a5:81:f9:38: aa:18:ea:1b:b4:08:a5:0e:01:60:da:00:19:af:7d: 36:7c:9c:34:24:20:86:27:f2:8c:54:71:7e:a3:57: 87:bb:8b:e4:c0:1f:e7:0c:05:fb:99:26:3f:d1:85: 17:b8:e6:f4:0a:12:b1:4e:ab:2b:9e:52:9c:48:42: 4e:1d:75:0a:a6:4a:a4:f5:a6:30:6d:5f:b8:b0:49: a4:9a:55:f8:ab:bc:95:14:13:a4:64:39:8c:51:6f: b3:cf:25:a5:04:8a:e2:d7:15:15:5c:d0:65:77:0a: 68:55:11:14:66:4b:18:db:82:78:0c:33:62:e7:e1: d2:e4:c4:0d:67:1c:3a:b7:27:eb:24:f1:8a:c1:ae: 70:af:b9:aa:3e:84:bf:1e:41:e0:42:44:a4:97:a5: 3d:c5:d9:64:de:6c:d6:d4:a3:ed:5f:80:52:1b:b6: 1f:ed:59:d1:0b:5c:1c:63:94:5e:11:73:58:a7:05: 58:1c:26:eb:c4:7f:0e:8e:ed:74:63:a2:81:5b:ff: 68:98:f5:37:5e:de:b7:d7:d3:a7:4d:e3:53:bf:eb: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:90:CF:59:AA:C1:18:E5:0A:1C:8F:D2:DD:58:5F:9A:9D:AC:80:0F X509v3 Authority Key Identifier: keyid:23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:91:9e:e9:a5:c7:f8:2b:1d:e7:d2:d8:95:65:88:af:6c:59: 02:c0:6d:b4:7b:be:9b:1b:09:bf:69:d2:e6:45:a6:a4:fd:be: ec:15:d8:2d:bd:3e:17:ae:41:0b:6a:2d:13:e5:4b:7a:fb:01: 5a:c0:75:50:59:3f:8b:87:45:28:ba:d4:01:d5:11:32:5c:37: 90:51:99:76:b5:e0:af:9c:db:f7:5b:62:69:91:51:35:c2:ee: 06:06:e1:5a:33:54:4a:06:60:a8:65:c5:ae:e0:e2:f6:e5:cf: 90:79:15:5b:7b:df:e2:43:58:01:e1:e0:90:0b:6b:b6:fa:0b: a4:38:d3:dc:4f:b4:14:0e:52:4f:fc:5a:f6:7e:c2:c0:1d:83: e5:2e:c7:86:11:c5:eb:df:4c:7c:f2:c9:a5:aa:71:c8:d7:3b: 3a:22:bf:ff:71:2f:6d:e5:2d:3a:38:57:d8:d3:c5:97:f2:95: ac:85:c3:bb:64:b3:4c:9c:f9:14:2f:e1:a1:8f:3a:47:b3:31: 0b:5b:7b:ec:c1:b9:c2:06:fb:eb:22:42:7d:08:86:5c:b1:ed: c4:59:66:5b:27:1a:c5:6b:86:cb:48:b0:39:7f:4d:2d:18:cb: a4:6c:13:d4:87:31:33:8a:02:57:bf:1d:b2:06:05:14:5b:a5: 5e:af:10:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpR0cjxSpkHZeUjZEP+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTc5Y2Y1MjU4NjU3NzY0NzliY2RiOTJiNDJmY2Q1OTAw ZDRmZDYwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD Eyg1ZjkwY2Y1OWFhYzExOGU1MGExYzhmZDJkZDU4NWY5YTlkYWM4MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujifYK/l7ClByVwLSDmUqngewkpM 0vO50wyUVNRP5Vp78gY4DCFey6WB+TiqGOobtAilDgFg2gAZr302fJw0JCCGJ/KM VHF+o1eHu4vkwB/nDAX7mSY/0YUXuOb0ChKxTqsrnlKcSEJOHXUKpkqk9aYwbV+4 sEmkmlX4q7yVFBOkZDmMUW+zzyWlBIri1xUVXNBldwpoVREUZksY24J4DDNi5+HS 5MQNZxw6tyfrJPGKwa5wr7mqPoS/HkHgQkSkl6U9xdlk3mzW1KPtX4BSG7Yf7VnR C1wcY5ReEXNYpwVYHCbrxH8Oju10Y6KBW/9omPU3Xt6319OnTeNTv+urGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Qz1mqwRjlChyP0t1YX5qdrIAPMB8GA1UdIwQY MBaAFCOnnPUlhld2R5vNuStC/NWQDU/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZlYzlTV0dWM1pIbTgyNUswTDgxWkFOVDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NzEyMzEtODNhZi00ZjgyLWIxMGMt YjZiYjdlYjA0YjI1LzEvSTZlYzlTV0dWM1pIbTgyNUswTDgxWkFOVDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85NzEyMzEtODNhZi00ZjgyLWIxMGMtYjZiYjdlYjA0YjI1 LzEvSTZlYzlTV0dWM1pIbTgyNUswTDgxWkFOVDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJGe6aXH +Csd59LYlWWIr2xZAsBttHu+mxsJv2nS5kWmpP2+7BXYLb0+F65BC2otE+VLevsB WsB1UFk/i4dFKLrUAdURMlw3kFGZdrXgr5zb91tiaZFRNcLuBgbhWjNUSgZgqGXF ruDi9uXPkHkVW3vf4kNYAeHgkAtrtvoLpDjT3E+0FA5ST/xa9n7CwB2D5S7HhhHF 699MfPLJpapxyNc7OiK//3EvbeUtOjhX2NPFl/KVrIXDu2SzTJz5FC/hoY86R7Mx C1t77MG5wgb76yJCfQiGXLHtxFlmWycaxWuGy0iwOX9NLRjLpGwT1IcxM4oCV78d sgYFFFulXq8QMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:12 2026 by rpki-client