This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json) Hash identifier: zIUTY/CV//lEi/cZAYjAP/YFYMO1brBkD6RgCFdgqls= Subject key identifier: 09:65:D7:C7:A1:5E:EC:8C:B4:C0:5F:57:7B:76:72:B1:54:7A:04:C3 Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f Certificate serial: 019C432283F3DFA885BD0A877D09E03BA0E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft Manifest number: 06AD Signing time: Mon 09 Feb 2026 16:01:01 +0000 Manifest this update: Mon 09 Feb 2026 16:01:01 +0000 Manifest next update: Tue 10 Feb 2026 16:01:01 +0000 Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: StfZjb0hmNJI1isUPQ0bdylOmV7uUbYg1Rf97mssxzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:83:f3:df:a8:85:bd:0a:87:7d:09:e0:3b:a0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f Validity Not Before: Feb 9 16:01:01 2026 GMT Not After : Feb 10 16:01:01 2026 GMT Subject: CN=0965d7c7a15eec8cb4c05f577b7672b1547a04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:67:d1:80:0b:7e:27:5f:ce:48:2d:95:5c: b1:a4:1f:d3:9d:62:31:a0:91:bb:47:4c:97:30:a7: f0:fc:ba:d9:48:a3:84:f3:95:6d:77:99:cf:52:c8: 60:3a:bd:1c:13:71:da:e6:71:5b:8e:8f:38:85:8a: 80:94:b9:a5:da:03:a2:79:56:c9:0c:f9:7c:c9:5a: b6:e6:91:88:4a:de:1e:1d:45:14:31:3f:e3:b3:75: e3:70:cd:b1:59:4c:d6:65:87:ea:26:22:af:4e:a9: e8:cd:85:be:38:25:80:e1:25:d7:1e:06:e6:83:9d: 97:37:6d:8e:2c:cc:1e:a4:69:1a:d9:6b:d2:79:19: 3d:0a:29:52:2a:58:c6:c6:b4:c6:f3:d0:71:37:ba: 1f:36:99:1a:e9:1a:9f:48:50:ae:fa:51:03:a0:0b: ca:d4:d4:0a:49:25:2a:71:64:21:79:34:82:37:6f: 72:18:d4:e8:40:07:ab:22:0a:08:15:a2:6b:96:e1: 4e:28:e1:a3:4d:dc:73:14:56:5e:62:00:76:1a:62: fa:a9:11:11:a0:8d:3c:28:4b:ec:77:09:31:a9:af: 0e:a7:c4:a9:09:75:1a:d2:08:fe:ec:8d:ce:c6:d3: a5:ee:10:47:c1:11:af:03:20:5d:e5:35:1f:38:d7: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:D7:C7:A1:5E:EC:8C:B4:C0:5F:57:7B:76:72:B1:54:7A:04:C3 X509v3 Authority Key Identifier: keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:87:33:a3:e7:55:05:20:ef:2b:e9:2c:b4:2e:98:9c:22:3f: 89:5c:e2:c7:45:86:e4:df:cf:de:99:fe:f3:0c:f1:ca:44:e7: 9c:61:31:a0:00:e2:5d:9e:76:59:6c:63:2a:cb:b8:f8:ff:11: 52:da:6f:08:0d:6d:0b:ca:ca:cd:7b:ce:6a:4a:7b:74:57:51: f7:f3:85:72:9b:2e:5d:e0:80:99:23:15:a5:75:4b:89:92:dd: a2:6f:ca:7c:22:11:11:2c:95:1e:8f:20:84:15:1d:9c:d8:bf: c4:69:bc:8b:1f:d8:cb:a4:2a:4e:6c:05:12:10:bb:15:3b:cf: 84:3e:fc:2b:2f:de:ca:41:56:57:7e:82:da:7a:a5:3b:41:e6: de:50:00:12:69:69:70:2f:31:27:3c:55:d3:43:42:83:d4:83: 27:61:83:94:1d:c7:1e:50:42:d6:57:c6:fd:db:11:92:06:46: d3:b1:80:eb:df:d2:00:c3:68:9a:a5:c3:f5:cd:a1:bd:0e:f1: be:1d:ab:bf:68:f5:8a:10:ec:45:f2:19:19:1a:3f:e5:92:cc: 4a:d5:e9:3c:65:ce:9d:db:ee:2a:e2:1d:22:ce:30:c0:92:aa: 59:42:e9:4b:75:6f:7d:bf:21:d7:56:5b:48:07:a3:0e:d0:26: 49:d4:16:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoPz36iFvQqHfQngO6DiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTdhOTE1MzYwYTQ4N2Q1Y2Y1ZDVjNjY1ZTViZmUxZmZm NTM2OWYwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD EygwOTY1ZDdjN2ExNWVlYzhjYjRjMDVmNTc3Yjc2NzJiMTU0N2EwNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueZn0YALfidfzkgtlVyxpB/TnWIx oJG7R0yXMKfw/LrZSKOE85Vtd5nPUshgOr0cE3Ha5nFbjo84hYqAlLml2gOieVbJ DPl8yVq25pGISt4eHUUUMT/js3XjcM2xWUzWZYfqJiKvTqnozYW+OCWA4SXXHgbm g52XN22OLMwepGka2WvSeRk9CilSKljGxrTG89BxN7ofNpka6RqfSFCu+lEDoAvK 1NQKSSUqcWQheTSCN29yGNToQAerIgoIFaJrluFOKOGjTdxzFFZeYgB2GmL6qRER oI08KEvsdwkxqa8Op8SpCXUa0gj+7I3OxtOl7hBHwRGvAyBd5TUfONeRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAll18ehXuyMtMBfV3t2crFUegTDMB8GA1UdIwQY MBaAFIuXqRU2Ckh9XPXVxmXlv+H/9TafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjct ZDg3YjM2MWFjZDg5LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjctZDg3YjM2MWFjZDg5 LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYczo+dV BSDvK+kstC6YnCI/iVzix0WG5N/P3pn+8wzxykTnnGExoADiXZ52WWxjKsu4+P8R UtpvCA1tC8rKzXvOakp7dFdR9/OFcpsuXeCAmSMVpXVLiZLdom/KfCIRESyVHo8g hBUdnNi/xGm8ix/Yy6QqTmwFEhC7FTvPhD78Ky/eykFWV36C2nqlO0Hm3lAAEmlp cC8xJzxV00NCg9SDJ2GDlB3HHlBC1lfG/dsRkgZG07GA69/SAMNomqXD9c2hvQ7x vh2rv2j1ihDsRfIZGRo/5ZLMStXpPGXOndvuKuIdIs4wwJKqWULpS3Vvfb8h11Zb SAejDtAmSdQWlw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:07 2026 by rpki-client