This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json) Hash identifier: fcgr2SrlApG/JsO0ee42q6ULbB12l5gaWjpYjfp6Nr4= Subject key identifier: 99:1D:DD:BB:12:0A:5B:0F:5D:9E:7F:86:78:CB:FD:7E:65:B3:D3:C9 Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e Certificate serial: 019C432229EC14C222670EDAB51BCA62681C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: /cQ2VDTMGD4iWdRHcdhwpIWoJD+tED6Fc1q4JBzo+dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:29:ec:14:c2:22:67:0e:da:b5:1b:ca:62:68:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=991dddbb120a5b0f5d9e7f8678cbfd7e65b3d3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:7c:70:42:83:68:89:08:c2:b8:08:08:1d: 64:cf:16:b7:32:3b:ac:76:32:09:48:53:8b:9b:e8: c1:a4:ec:29:4c:24:44:dc:74:47:89:33:94:32:1f: 4a:f5:be:ac:63:b9:db:4d:99:c9:06:ca:0a:07:d0: 22:3f:50:43:a9:55:da:23:a8:c6:6a:84:fc:af:e2: bd:40:e0:70:92:79:75:04:67:2b:cc:ec:79:87:ae: 48:97:a6:d6:30:d1:43:1d:21:8f:c8:17:84:74:1e: 74:81:eb:b5:34:c3:74:54:bd:7c:92:d6:17:be:f5: fa:6d:0f:8f:9a:2d:d0:59:58:c4:4a:d5:d2:f3:90: 19:c8:65:90:ab:4b:38:5c:10:1b:57:05:fb:69:be: a6:7c:ca:44:2d:d9:7f:ac:60:43:b7:9e:7e:44:8f: 11:6a:2a:68:41:44:cc:68:eb:dc:47:56:93:dc:c4: 09:d5:81:8a:56:1f:36:a2:12:74:00:35:97:be:ca: c6:90:a7:37:ff:f4:9c:22:4e:61:e3:9b:11:e3:f9: b3:f9:17:b8:cb:38:bc:fd:6a:8d:35:d7:73:24:15: e3:0d:39:dd:bf:07:1c:e2:cf:05:1e:12:13:ad:15: 96:3c:af:a2:c4:f3:8e:3d:0f:f0:ed:57:70:3f:9b: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1D:DD:BB:12:0A:5B:0F:5D:9E:7F:86:78:CB:FD:7E:65:B3:D3:C9 X509v3 Authority Key Identifier: keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:b7:ae:c3:31:36:eb:23:3e:4e:46:bb:64:21:9e:eb:0c: fb:83:82:f1:96:0c:0a:1c:b7:4b:6a:17:8a:fb:5c:72:8c:fc: be:88:26:3b:9d:15:22:74:46:d4:78:5d:50:e7:9d:b7:28:4a: a3:93:55:3c:5b:9a:42:c0:c6:de:66:ad:9c:87:ad:64:cc:4c: d8:28:75:39:88:a6:31:89:39:0f:9a:a7:7a:c5:5a:38:25:a2: a0:fb:23:65:49:7a:ea:b6:5d:1a:00:0a:3a:8d:10:d1:9e:44: b0:a0:0f:7d:de:9c:45:56:dc:23:17:25:9c:88:41:6d:5c:24: 0c:d6:86:0b:43:3d:03:d0:1f:cc:2b:1d:95:de:83:1c:2b:cc: 84:ee:8e:d2:b6:ef:cf:fa:24:87:03:0c:98:77:f0:72:7b:81: 34:dd:7b:56:8f:10:dd:ff:75:52:0b:43:c8:a2:b6:d8:a3:4c: 3b:27:48:bb:f6:51:1b:22:66:dd:f6:9f:06:30:1b:3b:70:22: f8:51:7f:2b:cf:a2:34:32:65:ab:95:d6:88:6c:ef:ca:ec:17: a8:45:e6:17:ba:f5:54:65:61:d4:4f:5d:6d:c2:f2:86:42:ae: 99:50:86:18:8c:e8:9c:a5:3f:d5:2f:07:4e:52:1f:cf:31:35: a7:b4:68:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIinsFMIiZw7atRvKYmgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl NjYwMmUwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD Eyg5OTFkZGRiYjEyMGE1YjBmNWQ5ZTdmODY3OGNiZmQ3ZTY1YjNkM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvV8cEKDaIkIwrgICB1kzxa3Mjus djIJSFOLm+jBpOwpTCRE3HRHiTOUMh9K9b6sY7nbTZnJBsoKB9AiP1BDqVXaI6jG aoT8r+K9QOBwknl1BGcrzOx5h65Il6bWMNFDHSGPyBeEdB50geu1NMN0VL18ktYX vvX6bQ+Pmi3QWVjEStXS85AZyGWQq0s4XBAbVwX7ab6mfMpELdl/rGBDt55+RI8R aipoQUTMaOvcR1aT3MQJ1YGKVh82ohJ0ADWXvsrGkKc3//ScIk5h45sR4/mz+Re4 yzi8/WqNNddzJBXjDTndvwcc4s8FHhITrRWWPK+ixPOOPQ/w7VdwP5v7dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkd3bsSClsPXZ5/hnjL/X5ls9PJMB8GA1UdIwQY MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfa3rsMx NusjPk5Gu2QhnusM+4OC8ZYMChy3S2oXivtccoz8vogmO50VInRG1HhdUOedtyhK o5NVPFuaQsDG3matnIetZMxM2Ch1OYimMYk5D5qnesVaOCWioPsjZUl66rZdGgAK Oo0Q0Z5EsKAPfd6cRVbcIxclnIhBbVwkDNaGC0M9A9AfzCsdld6DHCvMhO6O0rbv z/okhwMMmHfwcnuBNN17Vo8Q3f91UgtDyKK22KNMOydIu/ZRGyJm3fafBjAbO3Ai +FF/K8+iNDJlq5XWiGzvyuwXqEXmF7r1VGVh1E9dbcLyhkKumVCGGIzonKU/1S8H TlIfzzE1p7RoYw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:34 2026 by rpki-client