This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json) Hash identifier: uVYDDjH/QvVpBGBEaHOgZxGDoU+PRq/BrJnoj84PM6I= Subject key identifier: CF:1B:E7:97:C4:A9:B5:27:23:65:49:47:4B:2A:13:8D:CB:84:54:96 Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00 Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00 Certificate serial: 019C42EB3BD046B41937551B5EF4C08F6936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 15:00:38 +0000 Manifest this update: Mon 09 Feb 2026 15:00:38 +0000 Manifest next update: Tue 10 Feb 2026 15:00:38 +0000 Files and hashes: 1: AcZ8FStQphDwf4rYqOH4PuPnRcU.roa (hash: D5qSvfuIZWoy+nszBYnw8cGDkpXy8F40zHUSNBaMNOE=) 2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: BE5qnNREIqi2SaybPZPO1dORuO7hZpw2hpJmfxN9zkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:3b:d0:46:b4:19:37:55:1b:5e:f4:c0:8f:69:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00 Validity Not Before: Feb 9 15:00:38 2026 GMT Not After : Feb 10 15:00:38 2026 GMT Subject: CN=cf1be797c4a9b527236549474b2a138dcb845496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:36:1d:b3:e8:56:c4:42:e0:e2:49:a3:05: 25:2d:cd:ab:75:e8:9e:c6:91:0f:50:11:95:5c:48: 1c:39:52:3e:0a:74:76:07:2f:7b:ce:52:0d:c3:72: af:bf:95:eb:d8:5a:f7:31:f5:ea:8e:c3:b8:23:ad: 18:6c:cb:3b:18:94:9e:d6:de:6b:22:67:cb:26:7e: 81:94:1b:e9:31:14:9e:bb:29:54:f1:68:ce:09:7a: 02:16:7c:8f:10:bc:61:59:ff:1d:ff:e0:85:47:99: a4:cc:27:b3:41:bc:2f:de:e0:d9:02:8c:3e:e2:ff: 5c:42:cc:74:21:1e:07:7b:75:9f:b6:81:0f:4f:68: ad:1f:02:d2:a6:7c:ef:0c:7c:1c:8c:19:28:c9:9b: 7c:e0:db:21:b2:19:09:79:0a:cb:7d:e5:a5:c0:91: ec:85:57:d1:55:c7:ad:80:c9:75:9e:3f:ed:a0:58: 79:50:81:df:63:37:0d:03:da:a6:12:8a:87:fe:fc: ec:05:f9:0f:ed:27:96:2f:d7:17:7d:a5:6b:f4:b9: 2a:8c:8f:5b:0c:dc:51:f7:7d:17:12:00:da:0a:7e: 50:c7:43:2c:87:b0:da:66:9f:53:39:d6:6f:3c:3d: da:0f:39:a2:9c:6c:7d:e8:8a:27:8b:25:25:b3:94: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:E7:97:C4:A9:B5:27:23:65:49:47:4B:2A:13:8D:CB:84:54:96 X509v3 Authority Key Identifier: keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:12:78:b0:fc:7f:8c:ec:95:12:37:e9:50:d2:df:92:78: 51:6d:00:b6:1b:6f:bc:bf:f4:12:71:6d:51:53:57:02:9a:6c: ff:ed:41:27:da:99:5d:d4:ff:49:c1:24:9e:5b:c5:b4:9a:78: b5:b7:e8:c3:67:49:a6:ef:2d:b0:ef:85:e9:6b:59:4e:6d:91: bd:bc:19:8e:c5:92:f5:1e:45:32:aa:4e:a5:3a:44:94:f5:d5: 93:3c:a2:2f:80:29:1a:67:9f:80:ae:16:7f:64:6a:46:af:0d: 59:6b:e8:e7:05:89:6b:22:04:42:5b:3f:14:f8:e0:39:16:68: 87:ae:e6:77:c8:23:a1:33:2c:e3:73:4b:10:87:93:87:e9:c4: 2e:f7:2a:7f:c8:cc:4b:96:09:7b:9e:66:f0:f5:ac:63:6e:74: 5a:45:8b:de:cc:57:6f:fb:63:81:40:39:25:4d:a7:83:26:4a: 20:7f:2c:24:94:82:eb:3e:7c:ea:c7:f8:1f:e7:d0:40:5c:8c: e7:3d:d5:14:0c:d5:60:0a:4f:dd:73:e0:d5:86:a6:9f:e8:12: 6c:da:91:1f:84:ab:a2:2d:cd:f4:41:33:2e:7f:c4:39:49:46: e9:a5:78:03:25:61:2d:b0:68:f7:92:47:f6:45:ea:a6:65:33: 89:fe:bd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zvQRrQZN1UbXvTAj2k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTJjNTVlOGIzNTk1MDc3NWRmNzYzZTc0OTMwZDUyMjlj OWZhMDAwHhcNMjYwMjA5MTUwMDM4WhcNMjYwMjEwMTUwMDM4WjAzMTEwLwYDVQQD EyhjZjFiZTc5N2M0YTliNTI3MjM2NTQ5NDc0YjJhMTM4ZGNiODQ1NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUQ2HbPoVsRC4OJJowUlLc2rdeie xpEPUBGVXEgcOVI+CnR2By97zlINw3Kvv5Xr2Fr3MfXqjsO4I60YbMs7GJSe1t5r ImfLJn6BlBvpMRSeuylU8WjOCXoCFnyPELxhWf8d/+CFR5mkzCezQbwv3uDZAow+ 4v9cQsx0IR4He3WftoEPT2itHwLSpnzvDHwcjBkoyZt84NshshkJeQrLfeWlwJHs hVfRVcetgMl1nj/toFh5UIHfYzcNA9qmEoqH/vzsBfkP7SeWL9cXfaVr9LkqjI9b DNxR930XEgDaCn5Qx0Msh7DaZp9TOdZvPD3aDzminGx96IoniyUls5RbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8b55fEqbUnI2VJR0sqE43LhFSWMB8GA1UdIwQY MBaAFIuSxV6LNZUHdd92PnSTDVIpyfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMt YmViYmU0YWE3Y2FiLzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMtYmViYmU0YWE3Y2Fi LzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+gSeLD8 f4zslRI36VDS35J4UW0AthtvvL/0EnFtUVNXApps/+1BJ9qZXdT/ScEknlvFtJp4 tbfow2dJpu8tsO+F6WtZTm2RvbwZjsWS9R5FMqpOpTpElPXVkzyiL4ApGmefgK4W f2RqRq8NWWvo5wWJayIEQls/FPjgORZoh67md8gjoTMs43NLEIeTh+nELvcqf8jM S5YJe55m8PWsY250WkWL3sxXb/tjgUA5JU2ngyZKIH8sJJSC6z586sf4H+fQQFyM 5z3VFAzVYApP3XPg1Yamn+gSbNqRH4Sroi3N9EEzLn/EOUlG6aV4AyVhLbBo95JH 9kXqpmUzif69rQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:03 2026 by rpki-client