This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json) Hash identifier: 1rt/I7qL/ICkNXORtWZgZU/CN0glBVODJDOTOm4zYrE= Subject key identifier: 74:84:15:13:E9:C7:BF:34:17:67:88:EA:82:A1:1C:E2:B5:2F:21:61 Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb Certificate serial: 019C438FEF9F7881155AD8AB9612EE1CA9D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft Manifest number: 1500 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: kfmTuPN603jVWL9P1JygYBMecrYwJypjWvqoVcgUUAM=) 2: h1EMUyyZAAzRRRYxM5oEAQyKbqc.roa (hash: ab51Arxngi98phPFWNZggcRVUoPdKMJSwBp4EQAAf+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ef:9f:78:81:15:5a:d8:ab:96:12:ee:1c:a9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=74841513e9c7bf34176788ea82a11ce2b52f2161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:60:f8:25:27:78:cc:3e:0c:b7:1c:d4:35: 15:36:be:cf:bc:81:6a:05:a5:60:c6:4a:76:4a:ad: 7b:fd:b2:32:fd:c3:9f:9d:26:b9:4a:19:5d:99:73: 0d:ad:d7:6c:1f:4c:41:9c:0d:7a:80:37:55:72:8a: 4e:d0:a1:29:1d:2d:1a:0d:89:97:2e:83:76:48:f5: 91:b6:84:4e:12:a4:82:14:c9:b4:a1:b4:19:e1:61: 95:4c:f5:5f:9d:94:88:0a:e6:c8:68:4a:2e:a6:50: 0f:2f:1b:e0:00:dc:60:0c:01:7b:a1:2c:93:29:d0: fb:ac:3e:fc:d5:a5:0e:a3:66:42:40:cf:76:d5:22: 45:e8:fc:6b:d5:89:42:ab:90:99:26:72:f4:88:55: a7:48:96:c6:67:b4:df:ae:db:91:8a:7a:41:22:9a: 83:dc:fb:2e:1e:23:c3:53:61:84:a9:19:5b:2d:43: db:ca:05:3d:bb:00:41:78:c6:a9:23:cb:99:6c:77: da:94:b6:a7:18:5b:70:9f:38:8d:67:ef:19:a0:68: a3:82:73:fe:92:60:68:fe:1d:3a:c5:e5:a6:13:0f: 5a:54:4d:ce:d5:ff:61:f2:63:b3:59:fc:3a:11:5f: 47:c9:31:0e:3b:2a:35:27:b3:18:58:53:65:58:72: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:84:15:13:E9:C7:BF:34:17:67:88:EA:82:A1:1C:E2:B5:2F:21:61 X509v3 Authority Key Identifier: keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cb:f0:93:97:4d:26:4e:b2:64:56:16:6c:9d:18:79:74:35: 55:ce:b8:fa:94:7a:42:44:92:33:e1:e0:51:13:04:36:18:6b: ad:f3:40:89:d9:8a:e1:09:b3:5f:7a:0b:6f:3e:04:a7:23:09: e2:6c:cf:96:c8:a7:66:62:e5:25:7b:2a:de:37:6d:2d:bb:4f: 02:92:cb:74:24:79:d3:1a:c0:5b:df:c8:24:9d:19:ee:f0:a1: 59:e2:f5:7f:9e:15:53:c1:41:ad:0e:96:6b:76:16:71:83:bf: 98:e3:eb:4d:e8:e2:f9:13:fd:e5:75:dd:a9:6a:59:10:b9:2e: 2d:02:7d:58:82:8e:17:68:1b:2f:ce:e5:a8:72:42:16:13:c4: fe:e2:b3:6b:0d:03:67:16:c7:bb:b8:fd:90:1b:98:78:f1:0d: f9:02:26:21:6d:3f:fe:2a:35:be:96:a6:bf:0c:36:a6:45:0b: 80:99:fb:9a:83:72:43:62:8c:e1:bf:ce:ef:17:5f:33:ed:f0: d0:28:af:40:fa:8e:9b:67:ba:54:3a:85:b3:6d:70:26:24:57: 22:00:0e:c2:34:76:97:31:f8:f9:dd:ba:8c:58:f3:4a:7b:a6: 9a:8f:e9:95:ec:be:da:57:27:42:33:14:93:f3:c0:4a:48:4a: f1:26:8c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj++feIEVWtirlhLuHKnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz NTdiZmIwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD Eyg3NDg0MTUxM2U5YzdiZjM0MTc2Nzg4ZWE4MmExMWNlMmI1MmYyMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumJg+CUneMw+DLcc1DUVNr7PvIFq BaVgxkp2Sq17/bIy/cOfnSa5ShldmXMNrddsH0xBnA16gDdVcopO0KEpHS0aDYmX LoN2SPWRtoROEqSCFMm0obQZ4WGVTPVfnZSICubIaEouplAPLxvgANxgDAF7oSyT KdD7rD781aUOo2ZCQM921SJF6Pxr1YlCq5CZJnL0iFWnSJbGZ7TfrtuRinpBIpqD 3PsuHiPDU2GEqRlbLUPbygU9uwBBeMapI8uZbHfalLanGFtwnziNZ+8ZoGijgnP+ kmBo/h06xeWmEw9aVE3O1f9h8mOzWfw6EV9HyTEOOyo1J7MYWFNlWHJzLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSEFRPpx780F2eI6oKhHOK1LyFhMB8GA1UdIwQY MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1 LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsvwk5dN Jk6yZFYWbJ0YeXQ1Vc64+pR6QkSSM+HgURMENhhrrfNAidmK4QmzX3oLbz4EpyMJ 4mzPlsinZmLlJXsq3jdtLbtPApLLdCR50xrAW9/IJJ0Z7vChWeL1f54VU8FBrQ6W a3YWcYO/mOPrTeji+RP95XXdqWpZELkuLQJ9WIKOF2gbL87lqHJCFhPE/uKzaw0D ZxbHu7j9kBuYePEN+QImIW0//io1vpamvww2pkULgJn7moNyQ2KM4b/O7xdfM+3w 0CivQPqOm2e6VDqFs21wJiRXIgAOwjR2lzH4+d26jFjzSnummo/pley+2lcnQjMU k/PASkhK8SaMTg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:07 2026 by rpki-client