This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json) Hash identifier: kXz/kq8D25/RhIIXaAUlB4i//TBWGheN9xK8FLuUnfY= Subject key identifier: FC:97:B5:61:E5:87:7A:BD:A5:4F:52:E8:FB:5E:75:B1:EA:67:7A:31 Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Certificate serial: 019C4358C8DE08346DB1A7C7FA2DFA6E30C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft Manifest number: 0CC5 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=) 2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: oY+pn/afZfOGlECC6HeLqfGneEsKeLv4j1yCMXm4FTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c8:de:08:34:6d:b1:a7:c7:fa:2d:fa:6e:30:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=fc97b561e5877abda54f52e8fb5e75b1ea677a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:3f:b4:f7:db:4e:18:08:7d:6c:07:9a:b7: 0d:e2:1d:ce:8a:f9:e8:4b:49:ff:2a:13:bb:03:56: 61:6c:96:07:16:5b:12:79:c5:58:06:5b:d0:52:2f: 6c:94:42:f6:75:4d:04:25:e1:44:a6:39:2a:2a:5a: 19:46:51:2f:d8:9d:47:05:4e:6a:cf:0b:c7:f5:cd: 9d:9e:e3:b5:50:38:67:96:4d:7c:97:5d:9c:be:76: 8c:11:9c:51:60:2c:f2:81:5a:e1:7e:ea:4a:35:3d: da:6e:1e:0f:79:d5:ac:5a:1d:3c:7b:6b:ea:09:46: 70:5f:f0:9e:b7:5a:e3:b4:90:db:e3:70:ac:e1:00: 3f:a3:84:3d:69:36:39:15:7c:1e:32:5f:86:14:3a: 0b:47:1d:b1:4d:2a:a1:da:28:45:e0:98:94:ee:a7: b1:99:30:fc:a9:c5:c6:27:e8:5d:5a:40:c1:41:ba: 32:d4:df:98:a1:ce:b0:3d:97:3a:ff:f7:60:77:57: 21:72:dc:bb:fb:79:d8:3b:11:c0:b0:f0:72:3c:d8: 44:ad:0f:8a:85:1e:22:64:c9:b5:47:3c:f4:67:cb: 59:ac:06:98:37:ad:53:58:02:90:11:f7:36:b0:2b: 6a:20:e7:fe:0c:bb:36:09:54:cf:72:3b:a4:a4:c0: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:B5:61:E5:87:7A:BD:A5:4F:52:E8:FB:5E:75:B1:EA:67:7A:31 X509v3 Authority Key Identifier: keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ee:91:bb:d8:04:e5:4e:64:af:58:5a:23:a8:bf:49:71:e1: 6d:6d:00:45:dd:55:2a:35:c0:cd:d7:d4:77:b1:c4:1c:29:0e: dc:8c:db:cd:e3:be:64:0b:87:a0:50:33:01:12:49:08:a6:b5: c5:af:c1:a4:28:7b:a9:39:a5:62:76:08:68:7a:a9:4c:26:01: 16:b5:f6:79:3f:ab:48:89:3f:e3:40:ee:09:12:2b:01:9e:bc: 06:3d:91:4e:5e:83:40:64:99:37:39:a9:d1:24:a0:aa:2d:19: a1:70:1d:6b:d3:96:8b:ed:45:6a:57:4b:25:69:17:7d:a6:0c: 86:e2:98:82:34:bc:13:f1:91:2d:67:80:5a:fa:b4:66:ed:c0: 93:b9:dd:08:c4:11:a5:ea:69:3f:9c:33:38:db:00:68:15:90: c7:b5:51:e7:67:db:38:97:9f:e0:46:50:38:30:0c:ae:a7:67: 85:2b:47:82:78:d9:4b:34:b7:f3:11:84:c8:38:a6:cd:a9:53: ef:4c:38:65:54:37:49:fd:3a:5c:9d:5a:37:a9:e5:ec:57:7b: 0b:d2:d3:de:03:08:61:a4:a1:11:8a:94:e8:f1:17:d4:d0:8b: 76:d2:fe:d9:41:57:50:24:5d:b7:51:dc:06:3c:34:7a:92:83: d2:2d:66:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMjeCDRtsafH+i36bjDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw YTJhMzkwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD EyhmYzk3YjU2MWU1ODc3YWJkYTU0ZjUyZThmYjVlNzViMWVhNjc3YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yE/tPfbThgIfWwHmrcN4h3Oivno S0n/KhO7A1ZhbJYHFlsSecVYBlvQUi9slEL2dU0EJeFEpjkqKloZRlEv2J1HBU5q zwvH9c2dnuO1UDhnlk18l12cvnaMEZxRYCzygVrhfupKNT3abh4PedWsWh08e2vq CUZwX/Cet1rjtJDb43Cs4QA/o4Q9aTY5FXweMl+GFDoLRx2xTSqh2ihF4JiU7qex mTD8qcXGJ+hdWkDBQboy1N+Yoc6wPZc6//dgd1chcty7+3nYOxHAsPByPNhErQ+K hR4iZMm1Rzz0Z8tZrAaYN61TWAKQEfc2sCtqIOf+DLs2CVTPcjukpMABDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyXtWHlh3q9pU9S6PtedbHqZ3oxMB8GA1UdIwQY MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3 LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEu6Ru9gE 5U5kr1haI6i/SXHhbW0ARd1VKjXAzdfUd7HEHCkO3IzbzeO+ZAuHoFAzARJJCKa1 xa/BpCh7qTmlYnYIaHqpTCYBFrX2eT+rSIk/40DuCRIrAZ68Bj2RTl6DQGSZNzmp 0SSgqi0ZoXAda9OWi+1FaldLJWkXfaYMhuKYgjS8E/GRLWeAWvq0Zu3Ak7ndCMQR peppP5wzONsAaBWQx7VR52fbOJef4EZQODAMrqdnhStHgnjZSzS38xGEyDimzalT 70w4ZVQ3Sf06XJ1aN6nl7Fd7C9LT3gMIYaShEYqU6PEX1NCLdtL+2UFXUCRdt1Hc Bjw0epKD0i1mVQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:20 2026 by rpki-client