This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json) Hash identifier: ONkyQ8IGLSu0L3eew5Og4nnPidYwPsYFElD7mjuAKzo= Subject key identifier: 64:37:84:2D:43:82:D3:84:17:0A:F5:1C:46:A7:40:29:F0:CE:91:7A Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91 Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691 Certificate serial: 019C42EAD809CC93B99C1263A8CBCE2428CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 15:00:12 +0000 Manifest this update: Mon 09 Feb 2026 15:00:12 +0000 Manifest next update: Tue 10 Feb 2026 15:00:12 +0000 Files and hashes: 1: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: +mK33MVREgPwY/MuorARDoWMj0JmpX7rdaD8Jvdox70=) 2: oKbMR38c6g5Sb8f_q8_DP98D8vc.roa (hash: QbHsSOABpHInSeNj8NMGYtmUXI4ZAi0ELzxa77Y6VMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:d8:09:cc:93:b9:9c:12:63:a8:cb:ce:24:28:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691 Validity Not Before: Feb 9 15:00:12 2026 GMT Not After : Feb 10 15:00:12 2026 GMT Subject: CN=6437842d4382d384170af51c46a74029f0ce917a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:59:ad:04:4b:20:f7:7d:13:f1:7e:df:f2: c5:a6:2b:9e:70:a5:89:e0:ae:20:50:03:40:c1:81: c3:ca:84:f9:be:73:e0:7e:21:2a:f8:5d:59:a5:3e: dc:b4:69:73:d8:d3:54:f1:87:5a:ad:f7:7f:3e:cb: 44:d9:b4:23:34:7d:a8:dd:7a:21:02:52:dd:ca:d5: 8e:c7:36:fc:98:d3:50:93:ea:80:af:ab:36:a0:f4: 20:57:99:0a:89:74:40:51:ae:91:1b:61:40:51:1c: 01:6b:83:cc:17:41:f2:e3:ba:b4:e9:bd:29:97:d8: de:ee:33:33:b7:50:9f:a2:cb:e3:bd:e7:06:96:dd: 49:0d:e3:75:0c:13:3f:c0:c6:c9:1c:85:b0:b9:96: ef:cf:06:0f:c2:d3:54:4d:27:78:16:dd:1f:50:69: fb:b1:30:af:b9:1d:f3:f2:5a:6a:2c:a2:e8:66:65: ab:b2:7b:8d:00:c7:9c:01:e0:78:f3:5f:41:96:d2: 82:c8:33:34:e1:49:ba:3f:9e:6a:bd:f9:52:e0:a6: a9:78:3e:7d:1b:d4:d5:99:97:ad:b7:b0:6f:02:44: a0:f1:da:8d:b9:49:8b:d5:57:c1:b8:8e:76:24:64: fe:19:e8:f9:88:a6:84:cc:3a:a9:2d:fe:76:f7:c4: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:84:2D:43:82:D3:84:17:0A:F5:1C:46:A7:40:29:F0:CE:91:7A X509v3 Authority Key Identifier: keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:54:66:1a:cf:b7:ba:e3:af:8a:a7:8a:32:81:f1:12:7f:c4: 90:31:fb:93:6b:b9:3b:7d:93:92:90:26:c2:81:d7:be:84:d0: 6d:cd:ab:74:a0:c1:cf:94:0e:c5:ac:ff:65:a4:7a:af:84:c6: a3:44:d9:61:cd:1c:8d:52:57:0d:dd:98:cd:e6:d5:f7:f5:9d: 5d:1d:de:df:79:1d:2f:24:e2:80:64:85:4f:d2:7d:c3:53:5a: 2e:70:f3:ea:b7:dc:c5:28:92:07:34:64:62:59:c8:e5:61:9e: 02:c0:5f:cb:3a:0d:7d:bc:a1:e2:c8:07:63:31:76:8b:38:7f: 67:a8:70:99:3b:20:b4:fd:7f:d1:16:79:7b:6d:b3:cf:f8:eb: a5:87:02:f4:b3:07:fc:54:5d:47:2c:85:91:ad:bf:75:0c:7c: 1e:17:6a:0a:b3:d5:ce:04:e5:20:c4:db:59:c9:5f:af:30:ef: 9e:00:f8:0d:3e:d1:ea:9a:41:6d:19:29:1f:74:f2:14:16:19: 95:f4:67:6e:33:f6:98:66:98:60:97:cb:ae:74:08:35:9a:61: da:25:59:4a:5c:74:5c:41:1d:2a:85:e6:b4:85:2b:38:13:15: 72:6b:3f:3c:a0:1f:63:1a:ec:1d:e6:84:dc:b5:41:63:ea:c1: c4:96:45:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6tgJzJO5nBJjqMvOJCjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0 YmY2OTEwHhcNMjYwMjA5MTUwMDEyWhcNMjYwMjEwMTUwMDEyWjAzMTEwLwYDVQQD Eyg2NDM3ODQyZDQzODJkMzg0MTcwYWY1MWM0NmE3NDAyOWYwY2U5MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWNZrQRLIPd9E/F+3/LFpiuecKWJ 4K4gUANAwYHDyoT5vnPgfiEq+F1ZpT7ctGlz2NNU8Ydarfd/PstE2bQjNH2o3Xoh AlLdytWOxzb8mNNQk+qAr6s2oPQgV5kKiXRAUa6RG2FAURwBa4PMF0Hy47q06b0p l9je7jMzt1CfosvjvecGlt1JDeN1DBM/wMbJHIWwuZbvzwYPwtNUTSd4Ft0fUGn7 sTCvuR3z8lpqLKLoZmWrsnuNAMecAeB4819BltKCyDM04Um6P55qvflS4KapeD59 G9TVmZett7BvAkSg8dqNuUmL1VfBuI52JGT+Gej5iKaEzDqpLf5298S4lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ3hC1DgtOEFwr1HEanQCnwzpF6MB8GA1UdIwQY MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt YzUxMjUxNDJhZTU4LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4 LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFRmGs+3 uuOviqeKMoHxEn/EkDH7k2u5O32TkpAmwoHXvoTQbc2rdKDBz5QOxaz/ZaR6r4TG o0TZYc0cjVJXDd2YzebV9/WdXR3e33kdLyTigGSFT9J9w1NaLnDz6rfcxSiSBzRk YlnI5WGeAsBfyzoNfbyh4sgHYzF2izh/Z6hwmTsgtP1/0RZ5e22zz/jrpYcC9LMH /FRdRyyFka2/dQx8HhdqCrPVzgTlIMTbWclfrzDvngD4DT7R6ppBbRkpH3TyFBYZ lfRnbjP2mGaYYJfLrnQINZph2iVZSlx0XEEdKoXmtIUrOBMVcms/PKAfYxrsHeaE 3LVBY+rBxJZFOw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:04 2026 by rpki-client