This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json) Hash identifier: JHD/zdcWr66THgb0YXokZfxJjOHQYId7e6FbUclOMSo= Subject key identifier: 24:EE:B2:FC:90:07:C6:B5:8F:C5:ED:67:2E:A5:DA:E8:E8:73:D2:EC Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3 Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3 Certificate serial: 019C41339CCE42E7F839B8128FCB94A291AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft Manifest number: 1433 Signing time: Mon 09 Feb 2026 07:00:27 +0000 Manifest this update: Mon 09 Feb 2026 07:00:27 +0000 Manifest next update: Tue 10 Feb 2026 07:00:27 +0000 Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: hReUbcaCTO0nW9ciJG9/+oIEpxGM+CmqNyz1LXEgJjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:9c:ce:42:e7:f8:39:b8:12:8f:cb:94:a2:91:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3 Validity Not Before: Feb 9 07:00:27 2026 GMT Not After : Feb 10 07:00:27 2026 GMT Subject: CN=24eeb2fc9007c6b58fc5ed672ea5dae8e873d2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:bc:79:c7:e0:77:81:ec:61:ea:27:48:9f: ba:f4:4a:bb:22:ee:83:4e:9a:65:54:ee:cb:72:e5: 0a:af:7d:68:69:32:8e:21:51:4e:9b:f9:c2:47:61: 94:1e:8d:c7:f7:d7:af:15:6b:d6:82:5c:00:99:b6: 1c:17:b0:9f:f6:5d:97:c1:5b:a1:44:d1:2a:dd:74: 1f:51:55:cc:8e:5d:95:d9:3e:c0:15:37:9d:b5:3c: 26:bd:6a:f5:72:d7:e3:a6:05:76:9a:17:46:0b:b2: 77:a0:ca:cc:8d:b2:f1:29:73:b8:80:fa:93:32:1f: c0:af:90:87:6b:5c:ca:a1:35:ad:76:11:6f:a5:1d: 3a:7c:30:0e:7f:e5:4e:ed:91:23:fb:73:41:43:24: a3:c2:4a:e2:6a:98:3d:16:c4:44:f5:f9:a7:29:f5: f2:62:c4:72:cc:f3:ef:0d:51:47:d3:81:0b:3e:c4: 26:b3:a6:df:04:20:50:01:50:d0:1d:4c:9f:7a:e7: 60:2c:24:05:29:38:ab:31:12:68:0b:6e:95:b1:aa: 33:f1:ee:24:6d:69:f2:c1:bf:8c:ce:84:f0:ac:0d: c1:11:ea:34:79:7f:dd:c3:2d:ad:46:3b:21:f7:1d: c1:4d:36:09:09:d5:f9:56:03:f7:ee:73:8f:e2:dd: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:B2:FC:90:07:C6:B5:8F:C5:ED:67:2E:A5:DA:E8:E8:73:D2:EC X509v3 Authority Key Identifier: keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:89:f5:c9:19:ae:1c:47:e5:47:e4:f7:80:2e:17:e2:1c:75: cd:66:ec:db:f5:27:7b:fc:af:7a:d3:c9:ba:f7:40:03:19:4b: bc:4c:c3:69:64:a6:a6:de:06:6a:bd:28:05:24:34:cf:6f:af: da:3a:6b:6c:18:48:ef:dc:db:35:d7:2e:5b:ea:97:fd:6d:60: 62:51:82:8c:92:26:3b:01:0a:17:9f:f2:af:b0:4a:70:48:47: 6e:45:bf:90:98:b9:f4:9c:64:26:d8:4c:94:3f:e2:a8:bb:79: 69:f0:cd:cd:ca:5c:a4:2f:1c:e8:db:9b:54:db:29:8b:40:13: fd:33:db:54:6d:ba:97:39:f6:84:d4:19:67:7f:52:4e:cd:3f: 25:7b:10:44:18:2d:0f:8d:32:62:72:4d:d1:0a:2b:0f:c5:5f: cb:14:14:48:4b:75:4a:45:f9:dd:73:02:6d:43:c4:5f:5e:ec: cb:29:44:4b:5e:2d:c4:35:06:be:21:f9:24:39:b0:ab:cb:f9: 0b:97:dd:94:61:f3:15:7d:fc:69:13:da:27:90:90:b4:35:f3: 1b:0c:68:4e:b9:35:9a:0b:30:16:cc:f1:83:87:52:a9:11:57: 9f:42:6c:17:f9:e5:67:73:b0:94:a5:2d:c7:69:9e:94:aa:51: 0a:4f:dc:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM5zOQuf4ObgSj8uUopGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWIwY2Q0ZDMzYWY0ZTI4YjdhODZkYjIxMmQ5NTkxYTBi ZTYyZTMwHhcNMjYwMjA5MDcwMDI3WhcNMjYwMjEwMDcwMDI3WjAzMTEwLwYDVQQD EygyNGVlYjJmYzkwMDdjNmI1OGZjNWVkNjcyZWE1ZGFlOGU4NzNkMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn068ecfgd4HsYeonSJ+69Eq7Iu6D TpplVO7LcuUKr31oaTKOIVFOm/nCR2GUHo3H99evFWvWglwAmbYcF7Cf9l2XwVuh RNEq3XQfUVXMjl2V2T7AFTedtTwmvWr1ctfjpgV2mhdGC7J3oMrMjbLxKXO4gPqT Mh/Ar5CHa1zKoTWtdhFvpR06fDAOf+VO7ZEj+3NBQySjwkriapg9FsRE9fmnKfXy YsRyzPPvDVFH04ELPsQms6bfBCBQAVDQHUyfeudgLCQFKTirMRJoC26Vsaoz8e4k bWnywb+MzoTwrA3BEeo0eX/dwy2tRjsh9x3BTTYJCdX5VgP37nOP4t3UsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTusvyQB8a1j8XtZy6l2ujoc9LsMB8GA1UdIwQY MBaAFCDrDNTTOvTii3qG2yEtlZGgvmLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUt NDU5ZDFlNmQwZWU5LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUtNDU5ZDFlNmQwZWU5 LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIn1yRmu HEflR+T3gC4X4hx1zWbs2/Une/yvetPJuvdAAxlLvEzDaWSmpt4Gar0oBSQ0z2+v 2jprbBhI79zbNdcuW+qX/W1gYlGCjJImOwEKF5/yr7BKcEhHbkW/kJi59JxkJthM lD/iqLt5afDNzcpcpC8c6NubVNspi0AT/TPbVG26lzn2hNQZZ39STs0/JXsQRBgt D40yYnJN0QorD8VfyxQUSEt1SkX53XMCbUPEX17syylES14txDUGviH5JDmwq8v5 C5fdlGHzFX38aRPaJ5CQtDXzGwxoTrk1mgswFszxg4dSqRFXn0JsF/nlZ3OwlKUt x2melKpRCk/cPg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:48 2026 by rpki-client