This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json) Hash identifier: SZR2U3p52XxV6UJSXNfQFsHiiMM1kjwlCrRKQBUUe/4= Subject key identifier: 17:4D:9C:19:E8:93:1C:91:8F:19:CB:31:7A:65:3C:82:D6:47:D0:66 Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04 Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904 Certificate serial: 019C4358D0444399332BF7B70D343D1C9463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft Manifest number: 152F Signing time: Mon 09 Feb 2026 17:00:19 +0000 Manifest this update: Mon 09 Feb 2026 17:00:19 +0000 Manifest next update: Tue 10 Feb 2026 17:00:19 +0000 Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: He0pLCn8R+CIympZvIRgEqFkgbQjVmMxf+y0f+3vknY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d0:44:43:99:33:2b:f7:b7:0d:34:3d:1c:94:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904 Validity Not Before: Feb 9 17:00:19 2026 GMT Not After : Feb 10 17:00:19 2026 GMT Subject: CN=174d9c19e8931c918f19cb317a653c82d647d066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:53:43:e1:42:14:92:9c:ac:7f:05:7a:2d: 72:f5:95:58:ba:88:74:6e:8c:3e:8e:70:e2:3e:47: 93:ec:2e:5e:bd:04:9a:41:c1:fa:ba:91:73:0d:33: 29:37:38:c5:43:6b:ac:c4:3d:29:62:09:bc:ed:d0: 00:06:df:34:ee:12:ef:17:27:6f:54:e5:14:f9:17: b0:4f:da:9f:7f:d6:21:77:83:b1:09:73:a9:31:63: 2d:9b:1e:3e:0e:b0:6c:dc:88:f0:a2:d0:29:2d:93: 72:c6:34:57:67:c1:dc:8d:4f:34:dd:7d:4a:b7:8f: fa:c6:34:e5:1f:7c:fd:0e:e1:2b:72:e4:53:8b:79: 34:21:28:8f:d0:1b:1e:7c:33:f1:b7:ba:cc:ca:5a: 76:b1:07:20:b5:40:bd:f7:ba:4c:9f:03:a5:1d:31: 76:c1:9b:67:45:a9:98:90:9d:ea:0c:b5:3d:c8:74: f5:f7:b8:d3:a2:6d:6d:ac:ac:fa:cd:ee:ed:cb:f0: ab:e8:cf:84:29:05:45:e0:3a:85:1d:12:86:4f:d2: fd:5c:e5:95:e1:6d:a0:90:85:fe:1c:3a:dd:4b:2a: fb:69:f4:3c:01:97:a7:ac:53:52:b6:5c:c4:df:d3: 95:5b:75:77:9f:86:33:51:75:b8:7a:fe:02:b7:ad: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4D:9C:19:E8:93:1C:91:8F:19:CB:31:7A:65:3C:82:D6:47:D0:66 X509v3 Authority Key Identifier: keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:19:36:40:90:98:3d:7d:8c:1b:bf:d7:43:8b:c6:e4:cf:f2: 86:c3:45:28:85:50:b2:73:a0:2f:f0:32:90:e1:1f:0e:6b:df: 7b:51:86:b2:ee:a1:e2:5c:db:08:06:75:e6:50:92:84:8e:c9: 4c:f4:af:43:7e:79:e9:1d:03:38:db:87:38:d3:32:80:e1:36: 93:49:76:20:e0:b3:20:f5:b3:2b:6d:58:e7:c2:7b:c0:d7:78: 01:23:c7:8a:ae:3f:a4:97:5e:d6:3b:8d:44:fb:86:df:4e:0e: d6:7d:ea:3d:7b:e8:f8:05:77:99:87:01:21:a9:de:8c:7c:48: ab:19:8f:70:ae:56:96:36:c6:7f:17:56:39:03:ee:ea:51:84: 98:c5:6a:b0:12:c9:7f:cb:6d:2e:1f:94:23:80:68:71:26:4b: c3:f3:79:0d:c6:e5:49:70:53:db:d6:06:61:e9:9f:ba:b4:da: 91:69:4e:68:b1:60:2c:59:94:79:01:aa:e9:b8:57:43:81:73: 18:4c:b8:2f:1f:d1:cb:e1:a2:c8:74:15:b7:ae:2d:c4:81:af: ab:0b:c2:5c:0c:38:af:1a:e5:18:ee:5f:a4:b8:ea:e1:b3:68: d6:5e:e9:ed:4d:70:ab:c2:cb:33:c5:b7:fa:b8:e7:b4:e4:8b: 91:64:60:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNBEQ5kzK/e3DTQ9HJRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNTFjNTJkMjM3M2Y1YTViNzJkYzZkZDEyYTc1ZDEzYjI2 NWI5MDQwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD EygxNzRkOWMxOWU4OTMxYzkxOGYxOWNiMzE3YTY1M2M4MmQ2NDdkMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFTQ+FCFJKcrH8Fei1y9ZVYuoh0 bow+jnDiPkeT7C5evQSaQcH6upFzDTMpNzjFQ2usxD0pYgm87dAABt807hLvFydv VOUU+RewT9qff9Yhd4OxCXOpMWMtmx4+DrBs3IjwotApLZNyxjRXZ8HcjU803X1K t4/6xjTlH3z9DuErcuRTi3k0ISiP0BsefDPxt7rMylp2sQcgtUC997pMnwOlHTF2 wZtnRamYkJ3qDLU9yHT197jTom1trKz6ze7ty/Cr6M+EKQVF4DqFHRKGT9L9XOWV 4W2gkIX+HDrdSyr7afQ8AZenrFNStlzE39OVW3V3n4YzUXW4ev4Ct63rYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdNnBnokxyRjxnLMXplPILWR9BmMB8GA1UdIwQY MBaAFCNRxS0jc/Wlty3G3RKnXROyZbkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgt OTg3M2FmYTczZTdlLzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgtOTg3M2FmYTczZTdl LzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxk2QJCY PX2MG7/XQ4vG5M/yhsNFKIVQsnOgL/AykOEfDmvfe1GGsu6h4lzbCAZ15lCShI7J TPSvQ3556R0DONuHONMygOE2k0l2IOCzIPWzK21Y58J7wNd4ASPHiq4/pJde1juN RPuG304O1n3qPXvo+AV3mYcBIanejHxIqxmPcK5WljbGfxdWOQPu6lGEmMVqsBLJ f8ttLh+UI4BocSZLw/N5DcblSXBT29YGYemfurTakWlOaLFgLFmUeQGq6bhXQ4Fz GEy4Lx/Ry+GiyHQVt64txIGvqwvCXAw4rxrlGO5fpLjq4bNo1l7p7U1wq8LLM8W3 +rjntOSLkWRgCw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:33 2026 by rpki-client