This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json) Hash identifier: 4mxNc+wTYunDg7QsjhvrM4dPcns7YT39o+Cx9RnqL+s= Subject key identifier: A2:32:A1:31:13:45:D0:11:2D:40:04:9C:BE:DC:87:B0:81:37:43:7D Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Certificate serial: 019C438FEF6593F5AFA47DE8E41E3C58CFD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft Manifest number: 150C Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=) 2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: Xzhbr30dp9VYJPIoDBeZEgIO9p9Lo8GhKbLTYBkSOTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ef:65:93:f5:af:a4:7d:e8:e4:1e:3c:58:cf:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=a232a1311345d0112d40049cbedc87b08137437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:a3:cd:cd:3f:ae:9f:b0:67:2a:ec:78:26: bd:66:29:31:1c:38:20:28:b7:0b:bc:91:e2:ae:ef: b7:84:49:00:cf:60:1e:3e:d5:5e:2a:89:bd:8c:ce: 36:8d:39:80:33:c4:d1:15:b8:99:1b:da:35:4d:26: a7:07:93:4d:a5:4f:af:78:f0:3b:df:46:69:5a:5e: 4f:c2:1f:84:3e:37:4a:c3:4b:40:14:26:da:f2:a4: 72:e2:11:a4:5e:8e:24:a1:8e:0e:46:29:52:6e:2a: 5d:96:d5:03:a2:57:b8:50:b0:d0:5e:fd:9d:3f:de: 46:84:b8:e6:62:a6:61:a4:e9:ee:46:bc:06:67:fb: 54:db:2e:03:23:0c:81:a7:4e:c6:e1:1b:37:99:f1: a7:7a:95:22:ee:0f:8b:d5:6a:5a:ce:f2:c9:ec:b0: 8b:2c:95:64:1e:01:ef:38:a2:1b:85:5d:e8:e7:e5: cc:45:6f:fa:1e:70:01:88:6b:28:93:54:46:e6:f4: 46:6b:1e:f6:8e:4b:b8:1b:96:af:26:82:00:d2:72: 04:cc:8b:a1:a6:98:34:73:4c:9f:92:4c:29:cd:a0: 87:1c:e1:d0:a5:d4:51:c8:75:c3:b2:58:89:00:69: 26:98:1a:4f:e1:1e:31:58:03:5a:ff:d3:e6:0f:17: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:32:A1:31:13:45:D0:11:2D:40:04:9C:BE:DC:87:B0:81:37:43:7D X509v3 Authority Key Identifier: keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:d9:0f:99:b6:17:31:92:da:de:fb:e3:bc:c3:12:19:cc: 59:51:84:b8:50:0c:13:4a:8b:dd:2c:bb:4d:2d:38:5c:22:66: c2:2e:d5:90:60:92:35:99:e2:7a:e7:20:31:53:66:9b:90:cd: 43:74:20:0e:fd:fe:98:fa:a3:66:75:95:55:29:26:cb:e0:19: d0:72:16:2d:fd:cd:27:14:38:ab:49:e1:40:68:11:0c:62:34: 68:a9:06:89:19:7c:cf:6d:4e:e7:4b:bc:97:b3:d7:73:28:84: d9:f9:88:57:48:76:79:e2:45:8d:e4:f5:51:3f:77:1b:11:3a: 70:93:1b:e2:0b:7c:05:78:0a:e5:fe:1a:13:64:35:75:cb:40: d5:1a:07:42:30:1a:1b:7d:c1:43:b4:5d:44:20:98:c7:f4:95: 07:f2:25:e7:0c:24:24:ad:dc:80:17:dc:a4:ae:0b:1e:0d:3d: 3b:31:63:2f:51:b2:dd:71:2a:5f:7f:3e:81:b9:5f:b9:86:63: 24:fc:24:3e:6f:26:b4:08:19:45:4c:d2:52:09:2e:cc:81:6c: 0b:a2:e0:43:7a:57:cc:2f:b1:0b:fd:ec:51:eb:3e:2f:60:4d: 25:5e:24:24:5e:8b:bd:83:91:fb:40:1e:b1:43:bb:d8:34:f5: 12:4f:85:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+9lk/WvpH3o5B48WM/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi YzhmNWQwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD EyhhMjMyYTEzMTEzNDVkMDExMmQ0MDA0OWNiZWRjODdiMDgxMzc0MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucajzc0/rp+wZyrseCa9ZikxHDgg KLcLvJHiru+3hEkAz2AePtVeKom9jM42jTmAM8TRFbiZG9o1TSanB5NNpU+vePA7 30ZpWl5Pwh+EPjdKw0tAFCba8qRy4hGkXo4koY4ORilSbipdltUDole4ULDQXv2d P95GhLjmYqZhpOnuRrwGZ/tU2y4DIwyBp07G4Rs3mfGnepUi7g+L1WpazvLJ7LCL LJVkHgHvOKIbhV3o5+XMRW/6HnABiGsok1RG5vRGax72jku4G5avJoIA0nIEzIuh ppg0c0yfkkwpzaCHHOHQpdRRyHXDsliJAGkmmBpP4R4xWANa/9PmDxeUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIyoTETRdARLUAEnL7ch7CBN0N9MB8GA1UdIwQY MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsnZD5m2 FzGS2t7747zDEhnMWVGEuFAME0qL3Sy7TS04XCJmwi7VkGCSNZnieucgMVNmm5DN Q3QgDv3+mPqjZnWVVSkmy+AZ0HIWLf3NJxQ4q0nhQGgRDGI0aKkGiRl8z21O50u8 l7PXcyiE2fmIV0h2eeJFjeT1UT93GxE6cJMb4gt8BXgK5f4aE2Q1dctA1RoHQjAa G33BQ7RdRCCYx/SVB/Il5wwkJK3cgBfcpK4LHg09OzFjL1Gy3XEqX38+gblfuYZj JPwkPm8mtAgZRUzSUgkuzIFsC6LgQ3pXzC+xC/3sUes+L2BNJV4kJF6LvYOR+0Ae sUO72DT1Ek+Fsw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:13:29 2026 by rpki-client