This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json) Hash identifier: 5WO2bDaGLOshZPWPMG2iQKsMe9xmt1mBuImjLDDUado= Subject key identifier: 17:38:62:27:0C:38:A2:FC:5E:9D:9F:4C:AF:6A:8C:A0:84:E9:91:55 Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82 Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82 Certificate serial: 019C420FD64466E0FF19E50F74B75BA33C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft Manifest number: 0C1D Signing time: Mon 09 Feb 2026 11:00:59 +0000 Manifest this update: Mon 09 Feb 2026 11:00:59 +0000 Manifest next update: Tue 10 Feb 2026 11:00:59 +0000 Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: Agxzj7pcWdFytk1Z4B+4jHGn4XdCSMvi8PVrY/PX6bI=) 2: sohnlsGgCKHLAm9KP5jtzcQ4zgc.roa (hash: A8SuN+TdWXRmsPs52vkKLZkMKVRrAI+hpLud4HRnOAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d6:44:66:e0:ff:19:e5:0f:74:b7:5b:a3:3c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82 Validity Not Before: Feb 9 11:00:59 2026 GMT Not After : Feb 10 11:00:59 2026 GMT Subject: CN=173862270c38a2fc5e9d9f4caf6a8ca084e99155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:7b:43:40:e9:55:f4:8d:a1:6c:5c:63:aa: c6:ba:8c:95:99:42:fa:2c:0a:33:e8:2f:e2:ce:3a: a3:60:c1:0a:32:ec:84:9e:e8:dd:36:63:61:d1:d3: 45:7f:06:4e:a0:23:7d:81:04:58:52:56:69:db:2e: 51:0d:c0:4a:5b:bd:5c:25:00:5a:4a:25:d7:19:13: 42:70:31:a5:43:ec:ba:aa:3a:f9:cf:cd:a0:0b:d2: 36:39:af:b9:e6:19:7f:4f:e7:88:8c:7e:0b:9a:1b: f8:c8:d0:1a:af:26:7c:b0:80:a8:49:f9:14:a5:d5: aa:50:3a:89:1f:fe:92:a3:b5:f7:cb:89:eb:85:80: b2:d3:23:e1:98:a6:94:de:f5:3b:7d:45:a0:5c:25: 76:1a:e7:a1:90:2b:b0:ce:1b:37:02:6c:5e:3e:f2: bd:a9:af:8a:f1:d1:a8:96:00:40:71:d5:71:bb:55: bc:da:ca:a1:26:82:8f:8a:25:f2:14:d2:5f:ec:0e: 88:3b:e6:67:db:7a:1d:c0:73:b8:89:13:ab:75:0e: 3b:f3:b8:9c:65:07:9f:ca:1c:c6:f8:d3:55:f6:01: 21:e4:94:3f:c6:05:7e:e4:f8:83:66:6b:bb:20:42: 7d:0e:55:77:5b:01:57:ab:5e:37:bc:cb:2c:e4:fe: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:38:62:27:0C:38:A2:FC:5E:9D:9F:4C:AF:6A:8C:A0:84:E9:91:55 X509v3 Authority Key Identifier: keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:cb:b7:76:a6:d6:56:e8:68:63:bd:9b:cc:e3:9d:66:d6: a4:08:17:74:c9:1a:e6:4c:08:c3:bd:f2:fa:54:de:1c:8d:38: 37:18:ee:fd:5c:f1:83:9a:c5:f3:58:12:fc:b3:99:a7:8c:94: 35:dd:1f:64:af:5b:8d:33:13:f6:74:81:c6:37:11:6e:67:e3: e1:75:e5:a4:63:2b:15:ff:9a:bf:ee:b2:d0:92:da:4c:d2:16: ae:fa:86:9f:79:43:81:5c:7c:45:b6:61:62:c2:68:75:db:1d: 21:05:ad:21:63:6d:f6:37:80:ac:5c:5a:9c:d2:bd:b7:13:24: 37:c4:f7:2c:70:84:4b:b3:ac:18:68:71:cb:6e:3a:af:26:5a: c9:e1:73:f0:fd:5f:05:9b:d3:2c:9e:90:fe:8c:c1:2e:e8:1e: 2d:2d:84:20:d6:b0:56:2e:d1:22:e4:f4:b2:30:47:58:96:4b: 6c:0a:bc:8f:92:31:b6:7f:44:e6:fa:96:a6:1b:fe:95:20:b7: 77:f0:d3:d6:46:29:e9:ea:96:b1:21:29:77:4b:1e:83:ed:0b: 6b:a7:16:55:cb:c7:70:56:80:e0:05:a6:20:71:b0:c8:38:4f: 53:2d:f7:12:3b:6e:14:30:2b:85:12:ef:df:82:d3:ec:10:f3: 60:17:77:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9ZEZuD/GeUPdLdbozyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz NjhjODIwHhcNMjYwMjA5MTEwMDU5WhcNMjYwMjEwMTEwMDU5WjAzMTEwLwYDVQQD EygxNzM4NjIyNzBjMzhhMmZjNWU5ZDlmNGNhZjZhOGNhMDg0ZTk5MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ER7Q0DpVfSNoWxcY6rGuoyVmUL6 LAoz6C/izjqjYMEKMuyEnujdNmNh0dNFfwZOoCN9gQRYUlZp2y5RDcBKW71cJQBa SiXXGRNCcDGlQ+y6qjr5z82gC9I2Oa+55hl/T+eIjH4Lmhv4yNAaryZ8sICoSfkU pdWqUDqJH/6So7X3y4nrhYCy0yPhmKaU3vU7fUWgXCV2GuehkCuwzhs3AmxePvK9 qa+K8dGolgBAcdVxu1W82sqhJoKPiiXyFNJf7A6IO+Zn23odwHO4iROrdQ4787ic ZQefyhzG+NNV9gEh5JQ/xgV+5PiDZmu7IEJ9DlV3WwFXq143vMss5P4QiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc4YicMOKL8Xp2fTK9qjKCE6ZFVMB8GA1UdIwQY MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt ZTkxZmY1ZmU2YzI2LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2 LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4vLt3am 1lboaGO9m8zjnWbWpAgXdMka5kwIw73y+lTeHI04Nxju/Vzxg5rF81gS/LOZp4yU Nd0fZK9bjTMT9nSBxjcRbmfj4XXlpGMrFf+av+6y0JLaTNIWrvqGn3lDgVx8RbZh YsJoddsdIQWtIWNt9jeArFxanNK9txMkN8T3LHCES7OsGGhxy246ryZayeFz8P1f BZvTLJ6Q/ozBLugeLS2EINawVi7RIuT0sjBHWJZLbAq8j5Ixtn9E5vqWphv+lSC3 d/DT1kYp6eqWsSEpd0seg+0La6cWVcvHcFaA4AWmIHGwyDhPUy33EjtuFDArhRLv 34LT7BDzYBd3Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:38 2026 by rpki-client