This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json) Hash identifier: yAVM3R1td9aOEdOm8EASca/xdwo/oxcvSzUyB4+JgvE= Subject key identifier: 1F:1B:25:BC:24:1C:5F:47:E3:28:71:91:E4:5C:CA:BC:47:C8:A3:AC Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Certificate serial: 019C427E19ACB73FF62B08EFD2B13934641A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft Manifest number: 12CE Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: 6XRsIhKh6Z2UX1C7Qh6fbkg8z7tYdTHB2If4madc1MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:19:ac:b7:3f:f6:2b:08:ef:d2:b1:39:34:64:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=1f1b25bc241c5f47e3287191e45ccabc47c8a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:42:4a:51:87:70:4e:14:70:8a:79:52:a8: d3:98:03:dc:be:e5:21:11:7d:bc:67:e2:b3:66:80: 34:f1:91:fa:aa:99:1e:5e:09:fd:0a:d9:27:02:0c: 46:62:54:19:a5:12:7c:b7:8f:78:77:f9:33:05:8c: 4e:e5:92:d7:80:4b:c1:23:4f:3b:5e:b0:18:e2:88: 37:4d:a5:e4:75:25:35:fe:a3:04:8a:00:a6:5e:8c: 42:a8:76:95:5c:0d:9e:f3:2c:f0:a5:87:aa:c4:4f: 7f:58:05:01:e0:a6:e9:ea:ba:3f:b5:fb:11:c6:98: 30:8b:12:75:d1:8e:c9:b6:2c:98:ca:4e:5f:81:9b: b0:a2:97:2e:d7:86:69:95:88:35:42:de:76:f0:01: 89:36:91:65:78:25:da:2b:e1:ef:1f:d2:14:f6:c5: 39:ce:75:b4:fa:e6:30:a0:f2:73:f3:c7:c2:45:a1: 08:4b:e9:85:92:4a:44:fb:02:35:b3:b3:46:e7:86: e6:c3:71:ab:aa:82:04:2b:c8:53:35:ce:a7:19:dc: 4d:44:21:88:a3:e2:8c:67:06:5e:81:32:af:88:e5: e9:43:25:f2:07:5d:d6:59:c3:ed:54:35:8c:6d:6e: 21:c6:ce:ad:1d:a5:53:8e:b0:a1:4e:6d:dc:c1:80: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:25:BC:24:1C:5F:47:E3:28:71:91:E4:5C:CA:BC:47:C8:A3:AC X509v3 Authority Key Identifier: keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:70:41:4d:c3:eb:c5:87:8c:3c:1c:cd:06:38:7e:7d:a6:e3: e4:08:e4:6b:73:09:32:0d:34:c4:43:98:55:1a:44:3a:05:6f: e8:62:00:5a:67:b3:8c:8f:f1:e3:fe:1a:84:2c:71:29:86:6c: 23:b3:90:ff:02:6a:a6:3b:8e:9a:68:03:42:99:c7:64:52:e7: f9:4a:01:2e:c2:e9:07:3e:bf:5e:66:fa:e0:4d:43:a9:87:10: fd:93:57:1c:f9:68:d9:05:63:92:3c:22:1b:34:f8:a7:e4:68: 6a:1c:07:fc:f7:df:a1:f7:32:69:6e:71:74:33:bf:06:24:e3: 9c:37:29:06:80:66:a6:80:82:2a:d8:77:d9:b2:fd:d7:58:a7: 40:72:af:b1:d7:e3:c1:f1:93:58:92:59:f5:69:db:89:27:b4: a7:a4:45:3b:d1:05:ab:16:f0:c5:31:d5:5f:02:80:36:10:2e: ac:28:ba:e2:ee:8d:f2:b4:50:4d:08:03:99:4d:57:2a:c5:95: ae:f8:0e:57:5f:15:67:6a:b1:97:e9:0c:bb:0d:5a:71:5f:bf: 5f:ff:65:23:8d:ea:53:2c:b5:a7:48:ea:f4:d8:5b:53:ec:7f: 5a:ea:4f:0b:5c:cc:5b:7b:b4:8a:78:29:ce:ac:7c:20:a7:2a: 34:41:fc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhmstz/2Kwjv0rE5NGQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTU4MTI3ZTk4N2ZlMDM3MTFiN2E5N2Q0Y2E5ZGZhMDAw NjUyOGMwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD EygxZjFiMjViYzI0MWM1ZjQ3ZTMyODcxOTFlNDVjY2FiYzQ3YzhhM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0xCSlGHcE4UcIp5UqjTmAPcvuUh EX28Z+KzZoA08ZH6qpkeXgn9CtknAgxGYlQZpRJ8t494d/kzBYxO5ZLXgEvBI087 XrAY4og3TaXkdSU1/qMEigCmXoxCqHaVXA2e8yzwpYeqxE9/WAUB4Kbp6ro/tfsR xpgwixJ10Y7JtiyYyk5fgZuwopcu14ZplYg1Qt528AGJNpFleCXaK+HvH9IU9sU5 znW0+uYwoPJz88fCRaEIS+mFkkpE+wI1s7NG54bmw3GrqoIEK8hTNc6nGdxNRCGI o+KMZwZegTKviOXpQyXyB13WWcPtVDWMbW4hxs6tHaVTjrChTm3cwYBO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8bJbwkHF9H4yhxkeRcyrxHyKOsMB8GA1UdIwQY MBaAFIsVgSfph/4DcRt6l9TKnfoABlKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQt OGI1ZWY2OGI0MWJkLzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQtOGI1ZWY2OGI0MWJk LzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHBBTcPr xYeMPBzNBjh+fabj5Ajka3MJMg00xEOYVRpEOgVv6GIAWmezjI/x4/4ahCxxKYZs I7OQ/wJqpjuOmmgDQpnHZFLn+UoBLsLpBz6/Xmb64E1DqYcQ/ZNXHPlo2QVjkjwi GzT4p+RoahwH/PffofcyaW5xdDO/BiTjnDcpBoBmpoCCKth32bL911inQHKvsdfj wfGTWJJZ9WnbiSe0p6RFO9EFqxbwxTHVXwKANhAurCi64u6N8rRQTQgDmU1XKsWV rvgOV18VZ2qxl+kMuw1acV+/X/9lI43qUyy1p0jq9NhbU+x/WupPC1zMW3u0ingp zqx8IKcqNEH8xA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:29 2026 by rpki-client