This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json) Hash identifier: O5eYG5o+FQPCIo9QcqyK0A9nJ5mfRqirnfwrm3kyYx4= Subject key identifier: CB:71:DD:DB:F1:FD:F0:AC:BD:FF:DF:40:03:69:4C:AB:69:D5:D5:85 Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019C42100D27210489D80DDC3510221F0B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft Manifest number: 0529 Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: gf6gS9X6/MxqYZE72eR/dMs/6BOLc1laLO2AXSvNLJU=) 2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0d:27:21:04:89:d8:0d:dc:35:10:22:1f:0b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=cb71dddbf1fdf0acbdffdf4003694cab69d5d585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:0b:4c:52:2d:07:6b:49:68:35:96:ef:b5: 2a:26:e2:b1:ed:b8:5b:31:2a:09:bf:53:b4:ff:64: 4e:c2:03:e8:24:92:cc:7d:15:45:5d:a3:60:eb:93: 22:8e:a8:6b:78:45:3b:7e:8c:6a:6c:99:c3:d5:ae: d2:d1:72:a5:13:b9:f8:99:98:8e:90:c2:32:db:96: 5a:71:0d:90:e0:13:50:93:a6:30:17:e2:8b:39:5c: 49:4d:ec:df:9b:26:7b:f3:c1:1f:4a:73:87:04:40: b0:41:83:7e:1f:45:23:30:18:dd:dd:63:14:b0:ed: 5f:8f:ba:8b:84:0e:4e:86:5e:66:e3:53:72:cf:f9: 1c:88:26:ca:3f:2a:e9:57:ff:d6:74:ea:b9:88:66: d5:8d:84:ee:22:01:8b:91:3d:3f:4a:d6:66:fd:c2: d7:cb:31:79:55:c6:fb:1b:6d:85:d5:9c:e0:a2:89: ab:af:28:b7:17:8e:dd:0f:13:d7:05:8e:6c:32:c2: 80:eb:0d:b8:35:7b:6c:96:68:24:f4:00:3d:d3:65: 4c:83:05:e6:f3:ee:7e:03:4d:0a:c5:98:85:de:10: fb:72:26:15:29:4c:cc:8b:38:e8:ea:2a:a0:75:42: 7f:00:56:ae:73:55:a5:7c:1b:93:3d:45:9a:80:37: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:71:DD:DB:F1:FD:F0:AC:BD:FF:DF:40:03:69:4C:AB:69:D5:D5:85 X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8e:f0:f9:42:21:c5:cb:50:f1:15:41:a4:bf:a8:56:d3:8e: d6:f0:55:a5:e1:77:54:16:a4:0e:3f:d5:a6:bc:bf:5a:98:99: a4:0e:da:74:84:e0:98:cb:ac:bb:3b:90:b5:08:b6:a5:12:43: 9f:ba:9b:bf:4f:4c:5c:51:1a:32:9a:f5:b6:ea:fe:a7:f4:17: b3:45:ac:79:00:9b:a9:07:3c:b7:7f:ec:80:1a:83:45:e6:66: e6:5b:bc:ad:7a:0c:9c:c5:8e:4a:bc:87:ec:83:9a:95:e3:99: f2:72:bb:6a:31:d0:33:66:41:1a:a7:ac:42:ab:53:55:48:ce: 9a:66:a9:56:1e:10:cb:6e:82:10:0a:34:e9:cf:7b:d8:98:eb: f4:8c:d3:f2:56:ef:55:f6:85:72:4a:0d:f4:c0:68:79:e1:04: 78:19:ae:f6:cf:31:69:4f:80:d6:95:7b:1a:6f:90:50:e3:ed: a0:5d:88:9f:23:8d:b0:92:bb:38:ed:e1:d9:70:c4:56:56:68: d3:07:38:6a:3a:08:23:00:b4:26:44:32:67:f6:85:c5:3a:ca: b2:86:4c:55:ac:91:5c:af:c4:8a:75:36:9d:f1:fc:32:97:fd: 11:db:9e:2f:a0:50:f2:64:2a:c2:da:1a:4d:3a:8a:a6:70:4a: e6:fd:6f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEA0nIQSJ2A3cNRAiHwuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD EyhjYjcxZGRkYmYxZmRmMGFjYmRmZmRmNDAwMzY5NGNhYjY5ZDVkNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VoLTFItB2tJaDWW77UqJuKx7bhb MSoJv1O0/2ROwgPoJJLMfRVFXaNg65MijqhreEU7foxqbJnD1a7S0XKlE7n4mZiO kMIy25ZacQ2Q4BNQk6YwF+KLOVxJTezfmyZ788EfSnOHBECwQYN+H0UjMBjd3WMU sO1fj7qLhA5Ohl5m41Nyz/kciCbKPyrpV//WdOq5iGbVjYTuIgGLkT0/StZm/cLX yzF5Vcb7G22F1Zzgoomrryi3F47dDxPXBY5sMsKA6w24NXtslmgk9AA902VMgwXm 8+5+A00KxZiF3hD7ciYVKUzMizjo6iqgdUJ/AFauc1WlfBuTPUWagDfuZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtx3dvx/fCsvf/fQANpTKtp1dWFMB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB47w+UIh xctQ8RVBpL+oVtOO1vBVpeF3VBakDj/Vpry/WpiZpA7adITgmMusuzuQtQi2pRJD n7qbv09MXFEaMpr1tur+p/QXs0WseQCbqQc8t3/sgBqDReZm5lu8rXoMnMWOSryH 7IOaleOZ8nK7ajHQM2ZBGqesQqtTVUjOmmapVh4Qy26CEAo06c972Jjr9IzT8lbv VfaFckoN9MBoeeEEeBmu9s8xaU+A1pV7Gm+QUOPtoF2InyONsJK7OO3h2XDEVlZo 0wc4ajoIIwC0JkQyZ/aFxTrKsoZMVayRXK/EinU2nfH8Mpf9EdueL6BQ8mQqwtoa TTqKpnBK5v1vrg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:25 2026 by rpki-client