This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json) Hash identifier: MdV6Luy8IFj5Sn41YDBag4mE22Jv5O1aCzlmGtP8Wq0= Subject key identifier: BE:32:0F:25:67:7C:52:BF:27:38:E2:78:1E:AD:9A:F2:B3:22:A5:C7 Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a Certificate serial: 019C41A190B462180E0278FEB0CF6093BC43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft Manifest number: 02C5 Signing time: Mon 09 Feb 2026 09:00:33 +0000 Manifest this update: Mon 09 Feb 2026 09:00:33 +0000 Manifest next update: Tue 10 Feb 2026 09:00:33 +0000 Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: flLP96aSKNSqhum5wRbID++IDYZk6qabLJkLRL+k+ng=) 2: LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa (hash: 9dyJy9KVa6+GZ+Ne1KA1oy9opcxU4ZQ1lYWYUM4EkwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:90:b4:62:18:0e:02:78:fe:b0:cf:60:93:bc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a Validity Not Before: Feb 9 09:00:33 2026 GMT Not After : Feb 10 09:00:33 2026 GMT Subject: CN=be320f25677c52bf2738e2781ead9af2b322a5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:b2:50:0e:87:f2:6e:b2:29:94:62:a7:87: d3:1e:14:91:fb:b0:a7:96:fc:5f:c3:38:f2:b3:2e: ee:66:60:bd:d2:c2:d2:c9:2d:d3:14:00:f8:1f:05: 61:79:9c:7f:13:b2:be:b5:ca:fc:ee:02:62:12:55: 7f:ab:11:93:a3:72:4c:21:ed:89:47:36:90:f9:e3: 8a:25:6f:6c:5b:ac:a7:28:8e:5b:ef:9c:8b:8b:d0: 18:c2:9c:ad:60:27:30:8c:69:d5:79:50:f6:ad:23: f5:ec:6e:ca:d2:a8:ab:e3:5b:e3:12:df:a5:3d:48: 4f:c6:c9:d9:0a:3c:1a:0a:40:d4:af:b1:42:f5:5e: fd:88:2c:b5:7b:5d:12:50:57:90:10:d8:df:e1:1b: 8b:fe:4d:00:c2:ec:9f:fb:96:da:1e:70:95:7f:7b: 7c:34:9b:f9:71:d6:99:1f:15:fe:a1:5a:2a:09:35: 13:4c:56:85:15:b7:c9:ca:73:4e:83:23:eb:1c:ff: df:c9:93:13:e4:4b:64:ea:12:a5:f3:e4:57:4e:23: 9b:93:96:d3:ce:a0:04:db:bc:ae:e0:59:69:b8:51: b8:63:30:e1:e6:04:99:11:32:e5:1d:55:32:3e:b4: 09:a3:8d:03:89:9c:eb:ca:a6:e2:4f:0c:bb:1c:a6: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:32:0F:25:67:7C:52:BF:27:38:E2:78:1E:AD:9A:F2:B3:22:A5:C7 X509v3 Authority Key Identifier: keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:14:a7:94:60:fe:a4:f9:a6:0b:49:41:97:cd:9d:9f:ba:3b: af:4c:16:c8:e9:ae:a9:4e:e5:17:6e:92:f7:b7:07:93:65:fa: 55:f5:46:16:d1:1e:96:9f:16:c1:af:db:ea:be:5d:95:5c:d8: 87:f7:75:02:eb:c9:f4:f5:80:76:1b:b4:b4:83:57:10:5d:e7: a1:44:04:4c:88:f7:9b:48:82:2f:2c:07:47:9d:28:03:e5:b6: c4:3b:57:44:71:55:0a:41:d0:d3:27:b5:79:10:b6:61:aa:81: 40:16:23:62:9b:0f:9a:3f:f5:2d:02:42:02:53:70:6f:bd:e0: a2:ab:e3:a0:e3:8b:f1:f4:27:c8:06:06:b6:d4:af:06:74:40: 9a:cd:48:1a:4b:82:a3:16:fa:87:0d:bb:95:c7:e5:01:48:75: a0:2c:97:5f:e4:40:7a:03:57:dc:83:1f:6d:fd:f3:24:5f:1a: 2f:d7:20:a5:dc:d0:93:0d:28:c1:90:e8:de:49:f4:d2:da:b4: 82:03:ba:c9:9b:f5:ef:98:42:19:cf:0e:f2:be:ff:f5:31:4d: bc:21:22:04:57:0c:d8:db:c3:c9:0f:11:85:32:0f:18:56:e6: c2:ae:bc:c9:21:2a:de:65:eb:d6:25:be:f6:a3:ec:15:24:5d: 82:9c:f0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZC0YhgOAnj+sM9gk7xDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZGVhMmMxNTk5M2Q2ODMxNzUwYWE2MzBlMGU2ODBkOWVl Zjg4OGEwHhcNMjYwMjA5MDkwMDMzWhcNMjYwMjEwMDkwMDMzWjAzMTEwLwYDVQQD EyhiZTMyMGYyNTY3N2M1MmJmMjczOGUyNzgxZWFkOWFmMmIzMjJhNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEGyUA6H8m6yKZRip4fTHhSR+7Cn lvxfwzjysy7uZmC90sLSyS3TFAD4HwVheZx/E7K+tcr87gJiElV/qxGTo3JMIe2J RzaQ+eOKJW9sW6ynKI5b75yLi9AYwpytYCcwjGnVeVD2rSP17G7K0qir41vjEt+l PUhPxsnZCjwaCkDUr7FC9V79iCy1e10SUFeQENjf4RuL/k0Awuyf+5baHnCVf3t8 NJv5cdaZHxX+oVoqCTUTTFaFFbfJynNOgyPrHP/fyZMT5Etk6hKl8+RXTiObk5bT zqAE27yu4FlpuFG4YzDh5gSZETLlHVUyPrQJo40DiZzryqbiTwy7HKajbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4yDyVnfFK/JzjieB6tmvKzIqXHMB8GA1UdIwQY MBaAFPfeosFZk9aDF1CqYw4OaA2e74iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYt MzhkOTcxYzEzNDQxLzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYtMzhkOTcxYzEzNDQx LzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBSnlGD+ pPmmC0lBl82dn7o7r0wWyOmuqU7lF26S97cHk2X6VfVGFtEelp8Wwa/b6r5dlVzY h/d1AuvJ9PWAdhu0tINXEF3noUQETIj3m0iCLywHR50oA+W2xDtXRHFVCkHQ0ye1 eRC2YaqBQBYjYpsPmj/1LQJCAlNwb73goqvjoOOL8fQnyAYGttSvBnRAms1IGkuC oxb6hw27lcflAUh1oCyXX+RAegNX3IMfbf3zJF8aL9cgpdzQkw0owZDo3kn00tq0 ggO6yZv175hCGc8O8r7/9TFNvCEiBFcM2NvDyQ8RhTIPGFbmwq68ySEq3mXr1iW+ 9qPsFSRdgpzwxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:45 2026 by rpki-client