This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json) Hash identifier: liVUy0lEgKD+N7GNXDSdo+Q4LGwnfMK82Kcf1VZdVcg= Subject key identifier: 47:01:BB:FF:F7:1B:6D:2C:0B:9F:95:92:ED:31:B3:2F:49:2D:F6:4F Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f Certificate serial: 019C4358B7D820DF00678F4E89B6478D33DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft Manifest number: 0492 Signing time: Mon 09 Feb 2026 17:00:13 +0000 Manifest this update: Mon 09 Feb 2026 17:00:13 +0000 Manifest next update: Tue 10 Feb 2026 17:00:13 +0000 Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: VB6VxEkz8ynFB72Dmgmhc+3KW1l+sAy9V24SGPnZhgA=) 2: RIbu27-D1A3-MonubZ_zZNoyyNM.roa (hash: /mnXw1tu71r9fbtUEEZDR8gD0rD8atHLNSZPRm849T8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:b7:d8:20:df:00:67:8f:4e:89:b6:47:8d:33:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f Validity Not Before: Feb 9 17:00:13 2026 GMT Not After : Feb 10 17:00:13 2026 GMT Subject: CN=4701bbfff71b6d2c0b9f9592ed31b32f492df64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:72:8d:79:38:37:81:cc:5f:4d:be:29:41: a8:70:b9:ff:0e:dc:fd:db:e5:d0:31:f5:5a:73:3f: 02:b6:54:e3:37:0f:80:61:cc:fd:b7:00:8e:0f:94: 49:05:a1:bc:b3:87:bd:89:68:58:5e:58:8d:34:5e: d0:08:b7:ec:17:3a:17:61:60:28:20:7f:7a:e0:0f: c2:b0:3d:ac:29:d4:d2:c1:87:4d:c3:dc:6a:69:09: e1:7b:e1:b7:8c:26:c3:83:0b:33:5e:1f:70:7b:2f: de:b2:77:e9:f9:98:fd:4f:d2:b9:ed:23:f3:1d:76: c6:e5:40:f5:21:89:59:6a:43:7a:a7:06:0b:9d:c9: 41:9d:14:dc:a0:8e:dc:45:3f:a1:73:65:e3:49:59: 53:c1:c8:dd:47:7e:d1:71:f0:5a:b4:d4:35:d1:4a: a8:36:31:50:15:1a:10:38:f3:3f:3d:80:e2:27:d0: 80:0b:e3:a9:fd:7d:af:bc:42:53:c6:a2:c8:a8:99: 45:4e:59:57:b1:39:96:5a:f3:23:1a:0f:ce:12:fa: c1:17:3d:cb:3b:77:2b:84:5b:99:8b:a9:c3:04:70: b4:ba:72:54:f5:3d:3e:62:19:2f:63:6e:4c:15:54: 5a:2a:5d:fe:f7:47:dd:ea:1e:50:8f:e5:8a:5e:a6: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:BB:FF:F7:1B:6D:2C:0B:9F:95:92:ED:31:B3:2F:49:2D:F6:4F X509v3 Authority Key Identifier: keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:fd:50:5a:cb:18:42:69:55:79:ca:e5:26:50:0c:e4:bc: ec:bb:b2:6a:8c:ba:ba:83:45:e1:61:d2:00:01:22:6b:be:f0: 6d:62:59:3d:f2:06:7e:df:37:f7:cc:ff:27:62:aa:92:7d:c6: bc:32:0c:15:5c:a3:45:ed:cf:2e:af:56:85:be:c9:d1:35:17: ce:c2:fd:9b:9e:88:0d:fa:a6:27:33:ab:47:51:ae:ca:05:7e: 24:73:ef:f8:c2:ed:3a:16:04:c3:8e:2b:03:74:69:fc:00:a5: bc:f9:59:28:9d:bc:68:c7:cf:96:48:22:d6:70:38:7e:07:ad: a9:ab:69:fd:02:8f:84:59:80:2f:71:6e:ac:99:0b:11:1e:2e: 0f:7a:ed:57:bf:5b:8c:85:b8:74:20:9d:4e:c4:14:30:7d:1f: c9:7f:10:11:82:87:92:88:bf:32:79:d8:bd:5e:81:bb:c5:5e: 30:7c:71:36:df:aa:f5:78:5a:3d:4d:d7:a0:aa:84:4a:36:5a: 23:70:04:a1:35:d0:bf:68:b1:aa:23:dd:de:a9:61:56:6d:fb: 21:3c:62:eb:45:0d:90:e1:fd:50:6d:35:28:76:0d:61:61:f4: 89:90:da:4c:17:6e:39:95:36:a8:50:c5:02:64:d9:83:93:76: 68:f3:12:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLfYIN8AZ49OibZHjTPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDE0YWZlODc1MDIxM2MyODBlNWI2OGJlZmIxODg2NmY3 OTQ5N2YwHhcNMjYwMjA5MTcwMDEzWhcNMjYwMjEwMTcwMDEzWjAzMTEwLwYDVQQD Eyg0NzAxYmJmZmY3MWI2ZDJjMGI5Zjk1OTJlZDMxYjMyZjQ5MmRmNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YFyjXk4N4HMX02+KUGocLn/Dtz9 2+XQMfVacz8CtlTjNw+AYcz9twCOD5RJBaG8s4e9iWhYXliNNF7QCLfsFzoXYWAo IH964A/CsD2sKdTSwYdNw9xqaQnhe+G3jCbDgwszXh9wey/esnfp+Zj9T9K57SPz HXbG5UD1IYlZakN6pwYLnclBnRTcoI7cRT+hc2XjSVlTwcjdR37RcfBatNQ10Uqo NjFQFRoQOPM/PYDiJ9CAC+Op/X2vvEJTxqLIqJlFTllXsTmWWvMjGg/OEvrBFz3L O3crhFuZi6nDBHC0unJU9T0+YhkvY25MFVRaKl3+90fd6h5Qj+WKXqaBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcBu//3G20sC5+Vku0xsy9JLfZPMB8GA1UdIwQY MBaAFCPRSv6HUCE8KA5baL77GIZveUl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2Qt ODQ3MmNhNDBmN2E3LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2QtODQ3MmNhNDBmN2E3 LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/P9UFrL GEJpVXnK5SZQDOS87Luyaoy6uoNF4WHSAAEia77wbWJZPfIGft8398z/J2Kqkn3G vDIMFVyjRe3PLq9Whb7J0TUXzsL9m56IDfqmJzOrR1GuygV+JHPv+MLtOhYEw44r A3Rp/AClvPlZKJ28aMfPlkgi1nA4fgetqatp/QKPhFmAL3FurJkLER4uD3rtV79b jIW4dCCdTsQUMH0fyX8QEYKHkoi/MnnYvV6Bu8VeMHxxNt+q9XhaPU3XoKqESjZa I3AEoTXQv2ixqiPd3qlhVm37ITxi60UNkOH9UG01KHYNYWH0iZDaTBduOZU2qFDF AmTZg5N2aPMS+g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:17 2026 by rpki-client