This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json) Hash identifier: PwXBvQIqLQoq3KGQG9+GMBAp9ZK6qOz5Oe2Mlppdvd4= Subject key identifier: C8:D1:A2:EE:CE:6B:ED:14:2F:03:97:34:03:CE:C4:5B:0C:A9:31:FB Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019C43225166C8CA4EB2D160C844A732F5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft Manifest number: 1423 Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=) 2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=) 3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: nS+5iafQX4o8ER62Y2eqlTJ8ddO5iH5UtiSaTwUucdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:51:66:c8:ca:4e:b2:d1:60:c8:44:a7:32:f5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=c8d1a2eece6bed142f03973403cec45b0ca931fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:b7:89:ed:e0:23:a3:f7:f1:68:ad:ec:eb: 6c:e7:71:23:5e:b1:99:62:d3:1c:0b:47:92:d5:75: c1:9f:c2:85:03:3d:7d:91:f7:62:31:b9:54:3f:39: 3f:d4:89:c4:0a:3d:0c:2f:48:a5:d1:70:cf:0e:65: e1:aa:cd:23:9a:f5:ca:aa:b8:97:54:5f:6c:43:0c: e3:78:12:e1:0b:0a:2e:d7:3e:2f:a2:0e:29:42:41: c5:85:36:c0:39:89:3f:cc:9b:8c:05:f9:d4:be:eb: 48:3f:05:16:db:55:99:0a:5f:dc:7b:19:47:42:08: 61:0d:01:56:04:b1:34:c3:5e:be:91:2f:47:e9:00: b7:a8:fe:0e:f1:e6:77:2c:10:ce:27:10:5b:e6:75: fd:e1:ef:16:48:4e:c1:7e:e0:57:69:1e:99:80:98: 75:92:c0:dd:93:93:4c:b0:0f:95:d1:1f:5d:36:66: 65:6b:31:eb:d7:70:72:8c:26:13:17:69:40:a0:07: 35:83:6c:22:0e:8e:b5:71:a7:e3:cb:70:78:5e:e7: 95:e1:49:3e:b9:f3:69:4b:d0:5a:a6:db:08:d6:31: 8a:51:15:df:88:28:26:4b:ea:3c:6e:81:2c:b5:f9: f1:48:e2:59:6b:02:bb:1b:18:62:c0:6d:d6:ca:01: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:A2:EE:CE:6B:ED:14:2F:03:97:34:03:CE:C4:5B:0C:A9:31:FB X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:47:a5:09:be:c5:d4:26:76:7d:bf:33:7b:aa:10:69:2b: ca:d7:fe:9c:6e:91:df:89:ac:f5:eb:f3:d1:91:34:43:80:a4: 8b:71:65:cd:ec:98:80:8f:a7:0b:ec:8b:5f:b6:87:17:8e:09: 3a:7e:cb:c1:88:a2:52:7b:de:10:77:aa:26:91:47:d7:21:15: 8e:a6:d3:4c:0d:92:70:64:a6:96:31:59:66:16:2a:34:d5:dd: de:16:b5:98:32:5e:38:d5:0a:27:f0:b6:e3:cf:89:fa:3d:48: 62:f3:36:8e:64:96:b7:51:68:22:38:36:51:45:a3:14:f3:3c: a0:56:eb:68:31:c4:86:d5:43:58:e5:92:46:b4:29:bd:45:99: 0e:18:d8:f9:15:72:1b:58:05:9a:7a:ba:30:68:ec:b2:b0:33: e3:1a:44:b1:2b:7c:21:39:7b:72:47:f8:f4:63:e0:ee:d8:11: 87:45:f9:6b:ec:10:bf:76:7e:5e:bd:71:bb:3e:2c:8f:eb:2c: 26:45:25:1f:39:de:32:ea:03:b4:96:12:5d:6b:66:81:e6:64: 75:24:d2:aa:43:6a:6a:b0:d7:a8:99:fd:60:c8:e8:a7:c0:58: 3e:d5:de:f6:3a:84:4a:d6:a6:eb:a1:70:53:7f:77:09:1b:66: e6:eb:2b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlFmyMpOstFgyESnMvW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD EyhjOGQxYTJlZWNlNmJlZDE0MmYwMzk3MzQwM2NlYzQ1YjBjYTkzMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXi3ie3gI6P38Wit7Ots53EjXrGZ YtMcC0eS1XXBn8KFAz19kfdiMblUPzk/1InECj0ML0il0XDPDmXhqs0jmvXKqriX VF9sQwzjeBLhCwou1z4vog4pQkHFhTbAOYk/zJuMBfnUvutIPwUW21WZCl/cexlH QghhDQFWBLE0w16+kS9H6QC3qP4O8eZ3LBDOJxBb5nX94e8WSE7BfuBXaR6ZgJh1 ksDdk5NMsA+V0R9dNmZlazHr13ByjCYTF2lAoAc1g2wiDo61cafjy3B4XueV4Uk+ ufNpS9BaptsI1jGKURXfiCgmS+o8boEstfnxSOJZawK7GxhiwG3WygEeVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjRou7Oa+0ULwOXNAPOxFsMqTH7MB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq9HpQm+ xdQmdn2/M3uqEGkrytf+nG6R34ms9evz0ZE0Q4Cki3FlzeyYgI+nC+yLX7aHF44J On7LwYiiUnveEHeqJpFH1yEVjqbTTA2ScGSmljFZZhYqNNXd3ha1mDJeONUKJ/C2 48+J+j1IYvM2jmSWt1FoIjg2UUWjFPM8oFbraDHEhtVDWOWSRrQpvUWZDhjY+RVy G1gFmnq6MGjssrAz4xpEsSt8ITl7ckf49GPg7tgRh0X5a+wQv3Z+Xr1xuz4sj+ss JkUlHzneMuoDtJYSXWtmgeZkdSTSqkNqarDXqJn9YMjop8BYPtXe9jqEStam66Fw U393CRtm5usr1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:30 2026 by rpki-client