This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json) Hash identifier: IIYyf11EDtPSCMW3oXCrACtomQD1ENrhKVOpf2c/82Y= Subject key identifier: FD:18:98:F8:5E:53:18:48:D3:2F:03:80:0F:51:F5:C3:8B:5F:2C:B2 Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Certificate serial: 019C427D37BD771FBCF0E61D061CA30B62C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft Manifest number: 0966 Signing time: Mon 09 Feb 2026 13:00:28 +0000 Manifest this update: Mon 09 Feb 2026 13:00:28 +0000 Manifest next update: Tue 10 Feb 2026 13:00:28 +0000 Files and hashes: 1: CoFj8wqKTvU7pOYnL2WgDpvdELY.roa (hash: SwwUsyZHkvE2PDZCEhOVTo7T7TrLwZ2CcQ1+6tgDIC0=) 2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: nKYnYaJqFbJpMjUA716EzP3NoNteyNKgE2qSKxdmBWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:37:bd:77:1f:bc:f0:e6:1d:06:1c:a3:0b:62:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Validity Not Before: Feb 9 13:00:28 2026 GMT Not After : Feb 10 13:00:28 2026 GMT Subject: CN=fd1898f85e531848d32f03800f51f5c38b5f2cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:8e:ee:c9:ad:b8:6c:3e:3c:c6:2d:44:21: df:87:d5:de:9f:02:63:ed:d7:12:ea:a7:62:73:14: 3c:27:19:4a:bf:5c:78:41:89:fc:55:32:d2:d8:4c: a6:7d:9a:cd:a5:33:dc:d3:bc:db:84:f9:ca:ac:e3: ad:ed:1c:90:4d:66:8c:e1:7c:da:27:57:1a:89:88: 1f:2c:27:cc:42:ce:46:35:15:bb:b6:6a:04:42:73: 58:fc:f2:80:f3:f2:40:be:a1:8e:98:1e:90:a8:29: ad:9e:d3:8a:dd:a0:8f:a6:c4:d6:a5:24:97:a4:2d: c9:e0:d8:59:99:5b:e6:c8:f3:9a:f3:ce:83:59:13: 41:73:bd:d3:ff:07:9f:03:61:fa:3a:31:16:b6:97: 30:0a:74:aa:bf:e1:62:5f:96:ca:b1:e6:77:1d:9c: 72:34:e0:b4:2a:bc:6b:82:75:21:27:c2:47:09:f6: 78:4d:be:83:c1:30:9a:2e:82:b6:6f:f7:61:ba:3b: 51:32:e4:28:4e:d7:33:21:69:2b:27:e6:4b:38:21: 91:fa:46:4d:c2:fc:9b:49:e2:b1:1a:f1:98:0d:a3: 85:99:a2:31:74:29:4a:7b:30:43:26:62:83:97:da: 14:36:a3:9b:d7:f4:be:02:b0:8f:62:b9:7c:13:8d: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:98:F8:5E:53:18:48:D3:2F:03:80:0F:51:F5:C3:8B:5F:2C:B2 X509v3 Authority Key Identifier: keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0b:ee:60:02:aa:bd:87:a4:d2:25:34:b1:98:ef:04:64:df: e1:6d:80:fa:1d:9c:77:9c:5b:83:95:dd:90:c8:a8:95:70:4b: 8a:37:49:d3:8f:ba:b2:dd:ab:25:1b:8d:43:d5:4d:63:66:c5: 69:84:18:e5:85:33:6b:40:0f:15:91:37:0a:cb:c7:97:7f:56: cb:58:f0:30:d0:34:f5:d3:95:d6:9b:22:2d:e4:19:7a:31:76: f4:18:3a:8e:0a:4b:35:23:c6:ba:20:89:8c:11:fe:33:55:cb: 47:2d:c2:cd:7e:c0:32:1d:82:e7:ef:31:6b:f2:7b:17:92:f2: 31:83:8b:29:ae:a8:46:6b:83:d6:99:4a:6c:25:8a:5e:3e:6d: 36:3e:45:ae:de:e6:7b:21:12:4f:f5:98:18:ca:6d:da:e6:75: bb:09:f5:c0:f8:be:d6:d6:de:a8:90:78:31:85:6e:63:c1:9a: 6f:bb:a8:a5:b7:37:32:2c:49:a2:c5:49:da:51:f6:f3:d6:bd: 5d:67:94:db:6d:94:92:94:f6:f3:09:a7:e4:4f:6f:5d:ae:0f: 56:42:c5:36:ce:a0:99:c6:a2:d7:d2:99:a4:55:c1:5e:26:de: 7a:3f:a9:e8:8f:3c:cb:2f:86:6f:5c:58:dd:fb:36:2f:cf:d9: c2:e5:96:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTe9dx+88OYdBhyjC2LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl NTQ0ODYwHhcNMjYwMjA5MTMwMDI4WhcNMjYwMjEwMTMwMDI4WjAzMTEwLwYDVQQD EyhmZDE4OThmODVlNTMxODQ4ZDMyZjAzODAwZjUxZjVjMzhiNWYyY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxqO7smtuGw+PMYtRCHfh9XenwJj 7dcS6qdicxQ8JxlKv1x4QYn8VTLS2EymfZrNpTPc07zbhPnKrOOt7RyQTWaM4Xza J1caiYgfLCfMQs5GNRW7tmoEQnNY/PKA8/JAvqGOmB6QqCmtntOK3aCPpsTWpSSX pC3J4NhZmVvmyPOa886DWRNBc73T/wefA2H6OjEWtpcwCnSqv+FiX5bKseZ3HZxy NOC0KrxrgnUhJ8JHCfZ4Tb6DwTCaLoK2b/dhujtRMuQoTtczIWkrJ+ZLOCGR+kZN wvybSeKxGvGYDaOFmaIxdClKezBDJmKDl9oUNqOb1/S+ArCPYrl8E42Z+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0YmPheUxhI0y8DgA9R9cOLXyyyMB8GA1UdIwQY MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4 LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQvuYAKq vYek0iU0sZjvBGTf4W2A+h2cd5xbg5XdkMiolXBLijdJ04+6st2rJRuNQ9VNY2bF aYQY5YUza0APFZE3CsvHl39Wy1jwMNA09dOV1psiLeQZejF29Bg6jgpLNSPGuiCJ jBH+M1XLRy3CzX7AMh2C5+8xa/J7F5LyMYOLKa6oRmuD1plKbCWKXj5tNj5Frt7m eyEST/WYGMpt2uZ1uwn1wPi+1tbeqJB4MYVuY8Gab7uopbc3MixJosVJ2lH289a9 XWeU222UkpT28wmn5E9vXa4PVkLFNs6gmcai19KZpFXBXibeej+p6I88yy+Gb1xY 3fs2L8/ZwuWW9g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:13 2026 by rpki-client