This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json) Hash identifier: PrW14Icnkt0N8oht+oeNoKsffSWqW7eg78bR5IZ/JaA= Subject key identifier: 0F:DC:B5:27:AA:D8:31:CF:4F:4A:13:E2:A2:F2:91:5D:33:48:6B:3E Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a Certificate serial: 019C416ADA96DABE1A9BDC43485CD6810B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft Manifest number: 0C36 Signing time: Mon 09 Feb 2026 08:00:47 +0000 Manifest this update: Mon 09 Feb 2026 08:00:47 +0000 Manifest next update: Tue 10 Feb 2026 08:00:47 +0000 Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: YYGz0XrZ1c3ECLz97mDbdL6Kgni/C5RCwIUt/S3O9M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:da:96:da:be:1a:9b:dc:43:48:5c:d6:81:0b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a Validity Not Before: Feb 9 08:00:47 2026 GMT Not After : Feb 10 08:00:47 2026 GMT Subject: CN=0fdcb527aad831cf4f4a13e2a2f2915d33486b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:e4:87:8b:25:ed:52:4c:4a:0d:9d:3a:55: d5:90:3d:9d:02:03:93:d5:95:79:49:04:0c:b6:bc: 3f:1e:b8:47:c3:7b:c7:d2:ef:eb:69:df:dc:fb:03: 48:0f:e9:92:c5:cd:8d:78:8c:04:25:8b:5a:b1:75: 5e:a6:f1:fb:6a:c1:1b:39:32:7a:11:15:43:de:6d: 5a:0a:29:b3:6e:69:07:b2:7c:90:3f:12:65:4e:2f: b1:09:77:d6:09:02:8b:71:42:ea:62:75:70:73:3a: ea:ab:b3:1f:f4:66:e3:df:f3:fe:a4:08:e3:bd:04: 12:df:df:54:c3:92:25:46:21:02:97:48:ef:a1:01: 2a:76:26:cc:44:77:ee:e7:b1:03:bf:0f:52:4d:04: 99:9c:7e:78:26:56:06:b6:c4:bb:f5:69:2e:0d:4b: f1:f2:f9:1d:01:65:7b:de:0f:e9:5f:1f:77:83:5b: 79:33:8d:7b:99:b5:fa:09:e6:ce:4d:86:93:fe:0e: e1:2d:22:9c:17:60:1d:15:ed:8f:7f:69:95:9c:91: c3:ce:b0:89:a2:5b:de:a8:41:64:82:3e:45:66:1e: b0:58:85:30:10:23:f0:2e:79:1b:e4:04:81:23:95: e1:4a:22:13:3f:51:2d:36:8b:de:54:db:e5:4c:94: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DC:B5:27:AA:D8:31:CF:4F:4A:13:E2:A2:F2:91:5D:33:48:6B:3E X509v3 Authority Key Identifier: keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:92:eb:18:1f:4a:a6:b9:d6:07:68:42:ce:40:e6:eb:ea:08: 08:73:1a:d7:93:c5:d2:33:b0:13:69:90:5d:89:95:86:55:6f: 34:85:6d:bb:af:a7:19:b4:1c:9f:20:a2:28:a7:f2:45:1c:7e: 66:16:16:ee:cd:75:6b:f2:fb:70:2b:a4:da:4a:5d:b0:ef:04: f3:db:2f:37:76:af:a1:ff:f9:20:40:7e:e6:1b:c1:76:3d:d4: b9:28:5b:99:e5:88:8d:4e:15:36:91:72:ea:4c:02:25:2f:fb: 0a:d9:1e:30:d2:09:9f:0b:44:dd:76:95:19:01:c1:83:7b:eb: 60:ec:eb:a7:3b:c5:1d:20:2f:1c:9d:03:0c:11:5c:dc:fa:f0: dd:bc:da:c2:05:8e:0e:23:5f:ab:c4:5f:0c:17:8a:ad:8b:63: d8:6b:ed:6d:93:63:0a:8d:8a:95:a3:2c:37:d1:53:07:6e:3b: f3:46:20:a1:17:da:93:fb:cf:df:a5:a0:92:b8:3d:51:98:e7: a7:d1:53:da:14:76:d2:7b:5d:21:4d:28:88:8c:38:62:4b:2b: 70:a9:44:06:74:49:ae:3f:cb:80:31:d8:51:d1:e5:2a:69:77: d7:db:14:1b:56:28:04:ed:78:17:88:21:5d:b5:0f:5f:5e:75: 5a:a1:97:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBatqW2r4am9xDSFzWgQs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1 MzRiMGEwHhcNMjYwMjA5MDgwMDQ3WhcNMjYwMjEwMDgwMDQ3WjAzMTEwLwYDVQQD EygwZmRjYjUyN2FhZDgzMWNmNGY0YTEzZTJhMmYyOTE1ZDMzNDg2YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZPkh4sl7VJMSg2dOlXVkD2dAgOT 1ZV5SQQMtrw/HrhHw3vH0u/rad/c+wNID+mSxc2NeIwEJYtasXVepvH7asEbOTJ6 ERVD3m1aCimzbmkHsnyQPxJlTi+xCXfWCQKLcULqYnVwczrqq7Mf9Gbj3/P+pAjj vQQS399Uw5IlRiECl0jvoQEqdibMRHfu57EDvw9STQSZnH54JlYGtsS79WkuDUvx 8vkdAWV73g/pXx93g1t5M417mbX6CebOTYaT/g7hLSKcF2AdFe2Pf2mVnJHDzrCJ olveqEFkgj5FZh6wWIUwECPwLnkb5ASBI5XhSiITP1EtNoveVNvlTJRYowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/ctSeq2DHPT0oT4qLykV0zSGs+MB8GA1UdIwQY MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZLrGB9K prnWB2hCzkDm6+oICHMa15PF0jOwE2mQXYmVhlVvNIVtu6+nGbQcnyCiKKfyRRx+ ZhYW7s11a/L7cCuk2kpdsO8E89svN3avof/5IEB+5hvBdj3UuShbmeWIjU4VNpFy 6kwCJS/7CtkeMNIJnwtE3XaVGQHBg3vrYOzrpzvFHSAvHJ0DDBFc3Prw3bzawgWO DiNfq8RfDBeKrYtj2GvtbZNjCo2KlaMsN9FTB24780YgoRfak/vP36Wgkrg9UZjn p9FT2hR20ntdIU0oiIw4YksrcKlEBnRJrj/LgDHYUdHlKml319sUG1YoBO14F4gh XbUPX151WqGX7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:52 2026 by rpki-client