This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json) Hash identifier: CeB6COhuXq952KPcabh4uBXwZxsuA/e6CqsLTxFK77s= Subject key identifier: 96:BF:E8:44:D3:56:21:9C:61:0A:62:93:45:9B:A0:12:6E:6C:A3:92 Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0 Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0 Certificate serial: 019C420F63E797EFE18F79A45303143E673B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft Manifest number: 165C Signing time: Mon 09 Feb 2026 11:00:30 +0000 Manifest this update: Mon 09 Feb 2026 11:00:30 +0000 Manifest next update: Tue 10 Feb 2026 11:00:30 +0000 Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: MdGp5aHTntu9Kgp+hoNeLb+uIPHa9TeWZcpAGW5P3uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:63:e7:97:ef:e1:8f:79:a4:53:03:14:3e:67:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0 Validity Not Before: Feb 9 11:00:30 2026 GMT Not After : Feb 10 11:00:30 2026 GMT Subject: CN=96bfe844d356219c610a6293459ba0126e6ca392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:35:82:21:bb:33:de:3c:23:90:70:73:92: aa:0f:8b:b8:00:c7:9b:1b:b9:cc:e9:ba:42:66:27: 15:2e:66:3b:77:c8:aa:3a:32:04:82:c4:04:47:a4: db:21:54:04:e2:0b:6f:f1:68:54:33:48:fd:1f:47: 64:6b:23:ae:44:74:c3:1b:2d:7c:d7:29:c9:d7:28: 10:d2:57:88:e8:c8:8e:26:89:9f:1a:0b:1c:f7:82: de:38:41:21:a2:0f:77:2f:17:c4:58:7b:9f:e0:6e: ed:27:37:94:0e:c6:20:c5:a4:ae:91:8e:93:94:e7: 5a:36:d7:03:d5:dc:f4:c3:77:3b:0b:10:77:c7:f3: 14:c5:e4:33:5b:18:f5:c8:2a:57:8d:d4:1f:6d:16: ea:20:dc:42:95:06:dd:e6:e2:b2:ea:73:a0:5a:8d: 92:d1:02:77:23:55:10:c2:d7:5c:58:21:1c:51:b7: aa:ac:de:e5:13:00:a2:94:85:8f:ee:ff:24:f3:60: c2:bc:10:77:92:4d:1e:75:29:7c:dc:f1:51:01:0e: 85:75:40:e1:ed:80:8e:c1:2e:4a:0e:38:d8:02:a1: cc:10:34:14:d1:66:2c:2c:0f:9b:56:de:58:d6:3c: ce:35:86:8c:bc:37:a4:a2:54:32:41:27:00:c6:ba: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:E8:44:D3:56:21:9C:61:0A:62:93:45:9B:A0:12:6E:6C:A3:92 X509v3 Authority Key Identifier: keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d6:a7:a8:dc:3b:d0:9d:2e:27:05:60:82:8b:cc:4c:83:3d: 0b:44:4c:e4:42:e8:8c:0a:5e:ca:7f:01:75:79:ca:74:bf:05: 73:f4:5f:7a:a7:8e:6c:0e:12:a7:7e:6b:6c:b0:65:80:0a:6e: 73:e2:32:4f:09:be:c1:a8:f7:81:cf:92:20:78:52:e7:3d:77: a8:2b:26:ce:e3:f7:ff:ff:c7:e4:a2:0d:99:3e:19:5c:03:71: 6f:77:9a:44:55:e7:b1:27:9a:70:86:6d:21:56:7c:63:fe:e3: 68:e3:11:15:47:d0:bd:80:0f:ec:a1:79:22:df:dd:7f:04:fa: 49:30:26:9f:c4:79:7c:b8:65:26:20:36:bd:08:80:05:fe:c4: a0:84:53:45:6a:b6:77:32:13:af:b1:3f:65:ed:fc:79:38:1b: 0e:94:34:c4:c8:c8:45:f6:95:ac:d3:57:21:5f:6b:12:50:f9: ad:3f:01:b4:3f:24:a3:06:5e:32:22:79:1c:f7:ba:b5:19:30: 28:5b:34:fd:f1:9d:b9:e3:ab:7a:53:b5:c9:07:35:0b:1c:ea: 92:c0:58:15:9f:8a:71:ff:90:04:9a:45:23:74:99:2d:66:d3: 54:25:ad:af:07:18:ec:22:11:a8:b8:f2:a0:3a:06:63:bc:d0: 99:68:d2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2Pnl+/hj3mkUwMUPmc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4 NDE4YzAwHhcNMjYwMjA5MTEwMDMwWhcNMjYwMjEwMTEwMDMwWjAzMTEwLwYDVQQD Eyg5NmJmZTg0NGQzNTYyMTljNjEwYTYyOTM0NTliYTAxMjZlNmNhMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoI1giG7M948I5Bwc5KqD4u4AMeb G7nM6bpCZicVLmY7d8iqOjIEgsQER6TbIVQE4gtv8WhUM0j9H0dkayOuRHTDGy18 1ynJ1ygQ0leI6MiOJomfGgsc94LeOEEhog93LxfEWHuf4G7tJzeUDsYgxaSukY6T lOdaNtcD1dz0w3c7CxB3x/MUxeQzWxj1yCpXjdQfbRbqINxClQbd5uKy6nOgWo2S 0QJ3I1UQwtdcWCEcUbeqrN7lEwCilIWP7v8k82DCvBB3kk0edSl83PFRAQ6FdUDh 7YCOwS5KDjjYAqHMEDQU0WYsLA+bVt5Y1jzONYaMvDekolQyQScAxrobnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa/6ETTViGcYQpik0WboBJubKOSMB8GA1UdIwQY MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0 LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9anqNw7 0J0uJwVggovMTIM9C0RM5ELojApeyn8BdXnKdL8Fc/RfeqeObA4Sp35rbLBlgApu c+IyTwm+waj3gc+SIHhS5z13qCsmzuP3///H5KINmT4ZXANxb3eaRFXnsSeacIZt IVZ8Y/7jaOMRFUfQvYAP7KF5It/dfwT6STAmn8R5fLhlJiA2vQiABf7EoIRTRWq2 dzITr7E/Ze38eTgbDpQ0xMjIRfaVrNNXIV9rElD5rT8BtD8kowZeMiJ5HPe6tRkw KFs0/fGdueOrelO1yQc1CxzqksBYFZ+Kcf+QBJpFI3SZLWbTVCWtrwcY7CIRqLjy oDoGY7zQmWjS1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:53 2026 by rpki-client