This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft File: 17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json) Hash identifier: NhEvIGY/+wxri9dnSYGT75hSlPkcbV/mpRBG1hJA4Oc= Subject key identifier: 4C:5F:8C:B0:27:0E:94:A2:7F:76:28:AB:39:C0:A8:C6:CB:C5:78:E0 Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D Certificate issuer: /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d Certificate serial: 019C420FAFE148D2BF12FF835886EB84EB22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft Manifest number: 5A Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: L81sSIuax2nkHT6qiRyrJFAY05yZ8S8QpvufYvVek68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:af:e1:48:d2:bf:12:ff:83:58:86:eb:84:eb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=4c5f8cb0270e94a27f7628ab39c0a8c6cbc578e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:24:ee:45:dd:e5:5f:9e:eb:ed:58:99:08: 62:12:5a:49:bf:2d:0c:4d:10:d2:eb:f0:89:fc:0b: 6e:33:73:75:3d:b3:a2:77:de:20:c0:48:05:13:a3: 26:20:a9:58:1e:cb:ab:ec:7b:2b:2e:4e:00:77:bc: 57:58:cd:1d:55:2b:34:c7:90:f7:48:e6:bc:0e:0e: 8d:4d:bc:9a:10:2d:bc:7c:46:6f:66:93:ea:46:63: 55:13:bf:b1:fb:fe:a1:a9:bc:26:85:32:01:bb:25: 96:3a:0a:0a:66:fc:56:9b:ce:69:92:bd:15:fa:0d: 44:6d:1f:96:9c:9f:50:3f:e4:ad:7a:e9:18:14:de: c8:90:08:90:77:5d:72:cf:e9:83:91:f3:1d:5e:7e: b8:a4:aa:30:5f:18:3f:25:75:ff:69:c4:05:7d:49: 1e:fd:41:10:36:2e:91:f6:7c:52:84:1b:68:3e:22: c9:ee:26:20:e6:86:43:ff:ad:0b:cb:a5:1b:a6:fd: 0d:ea:bc:df:5b:50:cf:c8:cf:4f:1d:aa:58:50:80: 7a:e9:f1:9d:f4:e5:c8:8e:3d:2d:d1:71:6c:29:b0: 6b:1d:04:db:1e:7f:f9:48:03:db:88:2b:b3:f5:f8: bd:dc:47:0d:89:40:ec:84:1c:56:67:2a:7e:14:f8: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:8C:B0:27:0E:94:A2:7F:76:28:AB:39:C0:A8:C6:CB:C5:78:E0 X509v3 Authority Key Identifier: keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:08:c3:68:df:2a:a3:c7:eb:9c:ea:67:05:2f:98:14:3d:cf: d6:44:84:83:28:44:c0:04:db:01:d4:2f:8c:79:bf:7a:5b:59: 90:c9:06:5c:e7:b6:ea:8b:14:99:2e:c5:52:9e:8e:19:32:50: bc:01:9e:1e:6c:c7:96:65:50:71:cd:ae:78:84:a9:4a:ff:ee: 59:ed:69:39:90:50:ee:99:53:9c:5a:78:6b:64:42:e6:2a:5e: 90:81:64:9f:3d:25:e5:99:53:8b:90:6c:f7:88:cc:89:88:33: 62:36:f8:8c:36:fc:de:e6:5b:d5:91:65:74:1b:8c:b2:05:dc: 0b:b0:50:e9:09:11:5d:59:e3:d4:30:45:4e:bd:98:c8:23:ad: cb:54:6e:c8:35:d9:f6:60:a6:b7:27:3e:ca:e4:7d:9a:0b:f9: f5:42:50:fc:c5:2e:54:6d:82:a6:b8:00:62:5f:0c:7c:19:78: 63:45:65:58:6a:51:15:af:b7:e4:5d:9c:1e:1b:08:54:a4:53: f6:c8:d6:ae:72:25:af:0a:f3:ce:c6:ae:86:12:2d:88:b9:5e: 56:da:6c:39:4e:9c:69:d6:80:a0:04:04:87:e6:29:34:c4:d4: d4:18:7d:ca:80:ac:5d:db:bb:61:60:57:d7:bf:d0:18:75:da: f2:26:9c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6/hSNK/Ev+DWIbrhOsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YjIxMjJjNGNmMzBhYTY1MzllYzljN2U2ODhkYjg3NTA2 YWE5NWQwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD Eyg0YzVmOGNiMDI3MGU5NGEyN2Y3NjI4YWIzOWMwYThjNmNiYzU3OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wk7kXd5V+e6+1YmQhiElpJvy0M TRDS6/CJ/AtuM3N1PbOid94gwEgFE6MmIKlYHsur7HsrLk4Ad7xXWM0dVSs0x5D3 SOa8Dg6NTbyaEC28fEZvZpPqRmNVE7+x+/6hqbwmhTIBuyWWOgoKZvxWm85pkr0V +g1EbR+WnJ9QP+SteukYFN7IkAiQd11yz+mDkfMdXn64pKowXxg/JXX/acQFfUke /UEQNi6R9nxShBtoPiLJ7iYg5oZD/60Ly6Ubpv0N6rzfW1DPyM9PHapYUIB66fGd 9OXIjj0t0XFsKbBrHQTbHn/5SAPbiCuz9fi93EcNiUDshBxWZyp+FPjWIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExfjLAnDpSif3YoqznAqMbLxXjgMB8GA1UdIwQY MBaAFNeyEixM8wqmU57Jx+aI24dQaqldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMt Yzk0ZDlkNmEyMDdiLzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMtYzk0ZDlkNmEyMDdi LzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAjDaN8q o8frnOpnBS+YFD3P1kSEgyhEwATbAdQvjHm/eltZkMkGXOe26osUmS7FUp6OGTJQ vAGeHmzHlmVQcc2ueISpSv/uWe1pOZBQ7plTnFp4a2RC5ipekIFknz0l5ZlTi5Bs 94jMiYgzYjb4jDb83uZb1ZFldBuMsgXcC7BQ6QkRXVnj1DBFTr2YyCOty1RuyDXZ 9mCmtyc+yuR9mgv59UJQ/MUuVG2CprgAYl8MfBl4Y0VlWGpRFa+35F2cHhsIVKRT 9sjWrnIlrwrzzsauhhItiLleVtpsOU6cadaAoAQEh+YpNMTU1Bh9yoCsXdu7YWBX 17/QGHXa8iacmg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:42 2026 by rpki-client