This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft File: iDjoVrInLfF0ulpAqPx9XTAxyso.mft (raw, json) Hash identifier: Mcef42VzKYfTjoh2tbE6scxhnL5WLBQAjzdNjaYxemE= Subject key identifier: 08:33:22:D3:7D:83:E0:1D:F2:A2:35:FC:E1:A9:B8:3B:E7:79:87:D0 Authority key identifier: 88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA Certificate issuer: /CN=8838e856b2272df174ba5a40a8fc7d5d3031caca Certificate serial: 019C42EB50633B2FAB5A24104BD183690EAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft Manifest number: 1179 Signing time: Mon 09 Feb 2026 15:00:43 +0000 Manifest this update: Mon 09 Feb 2026 15:00:43 +0000 Manifest next update: Tue 10 Feb 2026 15:00:43 +0000 Files and hashes: 1: bNXclAMIg3T6s2Uoz_EnoMHtGpo.roa (hash: ZMo0HqpRxUY5NsvyrYlzQ++ahmncMXJuDazn/I+//9I=) 2: iDjoVrInLfF0ulpAqPx9XTAxyso.crl (hash: 88TsNCCqTcu2hujekgU2Qda/W4JvcAFHQ54BzSdCMSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:50:63:3b:2f:ab:5a:24:10:4b:d1:83:69:0e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8838e856b2272df174ba5a40a8fc7d5d3031caca Validity Not Before: Feb 9 15:00:43 2026 GMT Not After : Feb 10 15:00:43 2026 GMT Subject: CN=083322d37d83e01df2a235fce1a9b83be77987d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:af:95:dd:52:07:48:7f:a6:bc:67:c1:4b: b1:f8:62:da:26:4a:65:a2:e9:5b:10:67:d8:9a:17: 59:da:d8:2c:0e:58:a9:0c:8b:e2:b7:30:43:b2:38: 5e:ef:4f:10:f7:94:3b:50:94:6c:68:49:aa:d9:02: 28:36:1d:a7:df:1c:10:0f:83:70:ce:a5:bd:2a:37: 95:45:f4:bc:41:20:eb:a5:d1:e4:43:d5:1a:0f:4a: 15:9b:eb:26:c0:85:85:bf:9f:33:4c:11:23:08:1e: 60:2e:64:9f:08:d1:d3:52:32:d2:28:4c:b6:ed:0d: 7c:3d:3f:b4:9d:27:2e:14:a7:18:e3:2f:fb:e0:47: 22:94:9f:b8:b0:a0:d5:5d:75:2c:49:4b:80:60:99: c6:ff:ae:bc:31:9b:86:9e:c0:13:d4:6f:f1:07:7f: 20:54:ac:4e:ae:64:84:84:b4:1d:9b:78:88:f4:42: 59:90:b8:51:d8:5f:47:73:99:44:6d:70:87:a9:37: 99:9d:67:64:3c:2e:ab:de:82:5b:60:cb:d7:7c:8a: 02:02:d2:5e:7b:05:7e:5b:09:10:13:09:57:ae:61: 84:3e:fd:53:f3:c1:01:07:30:ef:81:42:09:f5:16: 9f:22:56:29:22:41:4c:de:13:f0:84:3b:54:8a:f7: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:33:22:D3:7D:83:E0:1D:F2:A2:35:FC:E1:A9:B8:3B:E7:79:87:D0 X509v3 Authority Key Identifier: keyid:88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:ad:df:26:d4:dc:ef:74:5b:c9:08:9d:4c:7f:79:3d:5f: 0a:de:1f:8b:16:3d:3a:c6:45:9e:00:14:49:93:d2:50:4c:a4: 07:ad:4b:1e:22:7a:66:67:a5:7d:82:e5:f2:50:48:ff:f0:b0: 75:5c:38:e3:7b:4c:82:f6:f3:ae:fb:f9:97:6c:c0:6e:3a:a9: 6c:d0:f9:4e:bd:96:38:04:ee:54:51:c1:11:e3:5b:6f:96:ec: 66:5b:34:03:db:e2:0c:d5:6f:d0:de:6a:ef:20:1a:75:07:b9: 21:16:02:66:ab:37:50:9d:b5:8a:16:1f:c5:b6:36:5c:50:63: ec:7c:b3:9c:93:1a:1a:30:3a:15:67:d5:00:65:a7:6c:d7:29: a6:9a:1c:b1:68:c6:d7:06:99:ed:fe:ad:b4:d9:0e:21:07:dd: ea:bc:88:ca:ab:0b:56:19:e5:94:39:f4:cd:8d:45:93:65:72: 8c:67:64:0e:66:18:fe:6c:4a:f8:b5:52:6a:35:8e:e3:44:30: f3:12:fa:8a:8c:68:7a:cd:f2:71:a2:8e:b7:11:b3:c3:0c:4b: b2:32:67:33:27:d1:a3:ca:d9:c4:fb:9b:e0:0b:84:c9:90:a7: 02:ea:e9:73:c1:46:08:52:a9:c3:d8:90:9f:44:43:39:85:c8: 18:62:5c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61BjOy+rWiQQS9GDaQ6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzhlODU2YjIyNzJkZjE3NGJhNWE0MGE4ZmM3ZDVkMzAz MWNhY2EwHhcNMjYwMjA5MTUwMDQzWhcNMjYwMjEwMTUwMDQzWjAzMTEwLwYDVQQD EygwODMzMjJkMzdkODNlMDFkZjJhMjM1ZmNlMWE5YjgzYmU3Nzk4N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vavld1SB0h/prxnwUux+GLaJkpl oulbEGfYmhdZ2tgsDlipDIvitzBDsjhe708Q95Q7UJRsaEmq2QIoNh2n3xwQD4Nw zqW9KjeVRfS8QSDrpdHkQ9UaD0oVm+smwIWFv58zTBEjCB5gLmSfCNHTUjLSKEy2 7Q18PT+0nScuFKcY4y/74EcilJ+4sKDVXXUsSUuAYJnG/668MZuGnsAT1G/xB38g VKxOrmSEhLQdm3iI9EJZkLhR2F9Hc5lEbXCHqTeZnWdkPC6r3oJbYMvXfIoCAtJe ewV+WwkQEwlXrmGEPv1T88EBBzDvgUIJ9RafIlYpIkFM3hPwhDtUivfNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgzItN9g+Ad8qI1/OGpuDvneYfQMB8GA1UdIwQY MBaAFIg46FayJy3xdLpaQKj8fV0wMcrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWIt MDc5ZTExMWVkYmY5LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWItMDc5ZTExMWVkYmY5 LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1yt3ybU 3O90W8kInUx/eT1fCt4fixY9OsZFngAUSZPSUEykB61LHiJ6ZmelfYLl8lBI//Cw dVw443tMgvbzrvv5l2zAbjqpbND5Tr2WOATuVFHBEeNbb5bsZls0A9viDNVv0N5q 7yAadQe5IRYCZqs3UJ21ihYfxbY2XFBj7HyznJMaGjA6FWfVAGWnbNcpppocsWjG 1waZ7f6ttNkOIQfd6ryIyqsLVhnllDn0zY1Fk2VyjGdkDmYY/mxK+LVSajWO40Qw 8xL6ioxoes3ycaKOtxGzwwxLsjJnMyfRo8rZxPub4AuEyZCnAurpc8FGCFKpw9iQ n0RDOYXIGGJcEA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:21 2026 by rpki-client