This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json) Hash identifier: 08aLLungMYJkJEzqpKTSaa5ULltiz+s+HVxRr7O0Ecc= Subject key identifier: 74:E5:2E:06:C4:A6:2D:71:C2:09:67:89:3D:A4:66:DE:E5:73:C0:1F Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019C43FDD409C275BB5940028BB0ECC35408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft Manifest number: 07E5 Signing time: Mon 09 Feb 2026 20:00:34 +0000 Manifest this update: Mon 09 Feb 2026 20:00:34 +0000 Manifest next update: Tue 10 Feb 2026 20:00:34 +0000 Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: XWgCJPDU3YLbF4z7V/RTJ6erChFBVGiwtqVZkPebN5Q=) 2: QEMDPwJ2cNS9ewt5zX-nDeHB4lc.roa (hash: ZAZFuVLV8kzOv/LeKj7q3UVNfSHjw6/4Wpf1tRlJMEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:d4:09:c2:75:bb:59:40:02:8b:b0:ec:c3:54:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Feb 9 20:00:34 2026 GMT Not After : Feb 10 20:00:34 2026 GMT Subject: CN=74e52e06c4a62d71c20967893da466dee573c01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:3e:a2:e3:1a:c2:86:95:20:d9:34:bd:02: 77:8a:14:97:fd:30:b0:2f:8d:a9:65:3b:bf:ff:70: 1d:f3:9b:7f:79:f0:3f:4c:42:d9:c6:b6:79:76:d1: 01:56:5e:30:10:50:e9:4d:17:d8:5c:3b:4e:fd:06: c6:6b:36:45:6a:3e:72:50:8f:80:5c:67:01:7e:69: 8d:91:c7:aa:27:73:30:d3:a5:a0:fa:62:1b:1a:14: 20:05:71:f8:80:c5:f0:95:a2:55:77:f8:74:43:9d: 94:1c:07:ae:f4:2f:87:2e:53:a6:24:a0:f0:0b:97: bb:64:ae:fe:7b:be:fc:49:e7:a1:88:68:c8:9a:5a: d5:05:10:ac:07:50:e5:0b:d6:10:8d:21:d9:c7:a2: d8:d7:70:5f:0e:5f:27:d0:ff:fb:43:e8:77:14:60: ee:f5:54:99:bd:e7:27:b2:f2:f4:c0:e0:4c:96:0e: 3d:f9:dc:85:c4:e6:45:7d:e8:4f:dc:45:e5:80:ff: e3:98:f8:21:42:5c:18:67:e5:fd:9b:5b:c7:3a:88: a9:c3:de:22:cb:db:92:06:56:08:d1:ca:7f:e9:93: a4:25:52:e6:ec:83:71:fb:7b:7d:80:87:b4:0e:75: 71:72:19:97:04:99:0b:5f:5e:d5:ae:61:20:2e:0a: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:2E:06:C4:A6:2D:71:C2:09:67:89:3D:A4:66:DE:E5:73:C0:1F X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:db:92:7b:d4:27:f9:8d:16:af:96:ce:9b:bc:a3:55:95: 9b:69:7f:91:e9:33:24:d4:85:91:43:61:a8:d5:78:1c:a6:fc: 83:64:6d:13:ec:97:c8:62:c6:1c:82:93:6e:71:eb:73:1a:53: 9b:7b:e1:ef:32:54:36:58:03:10:81:1f:e8:11:e0:25:76:21: 40:e4:e3:7b:65:85:dc:b2:f6:db:f6:22:0c:b4:00:32:36:e5: dc:0f:9e:9d:e9:44:a5:f9:59:ad:1a:ce:df:bb:c2:c9:70:7a: 66:d6:cf:63:6a:d0:d1:44:6b:2c:d1:7d:b3:d3:45:6e:71:32: 48:10:50:8a:50:ae:a5:34:ac:54:9b:eb:1d:95:91:f2:d0:34: 73:98:c7:48:fc:f2:7d:be:14:04:f4:b8:7d:3e:7e:44:3d:cd: b6:6a:25:b7:3b:5c:7a:e2:d1:63:aa:04:e7:73:b5:7d:dd:b6: 2b:ac:29:16:33:64:57:45:b4:0d:bf:13:01:24:a9:52:a6:08: 41:e6:48:ca:22:39:1f:1c:af:98:48:5f:1b:e5:74:87:d4:bb: d3:8b:24:90:f3:60:52:1b:55:8a:15:b7:4c:c7:c6:94:d6:95: 07:0d:39:87:95:62:44:8e:ac:e1:7a:f6:81:a1:4e:37:33:88: 52:74:89:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/dQJwnW7WUACi7Dsw1QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjYwMjA5MjAwMDM0WhcNMjYwMjEwMjAwMDM0WjAzMTEwLwYDVQQD Eyg3NGU1MmUwNmM0YTYyZDcxYzIwOTY3ODkzZGE0NjZkZWU1NzNjMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowc+ouMawoaVINk0vQJ3ihSX/TCw L42pZTu//3Ad85t/efA/TELZxrZ5dtEBVl4wEFDpTRfYXDtO/QbGazZFaj5yUI+A XGcBfmmNkceqJ3Mw06Wg+mIbGhQgBXH4gMXwlaJVd/h0Q52UHAeu9C+HLlOmJKDw C5e7ZK7+e778SeehiGjImlrVBRCsB1DlC9YQjSHZx6LY13BfDl8n0P/7Q+h3FGDu 9VSZvecnsvL0wOBMlg49+dyFxOZFfehP3EXlgP/jmPghQlwYZ+X9m1vHOoipw94i y9uSBlYI0cp/6ZOkJVLm7INx+3t9gIe0DnVxchmXBJkLX17VrmEgLgp/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTlLgbEpi1xwglniT2kZt7lc8AfMB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWDbknvU J/mNFq+Wzpu8o1WVm2l/kekzJNSFkUNhqNV4HKb8g2RtE+yXyGLGHIKTbnHrcxpT m3vh7zJUNlgDEIEf6BHgJXYhQOTje2WF3LL22/YiDLQAMjbl3A+enelEpflZrRrO 37vCyXB6ZtbPY2rQ0URrLNF9s9NFbnEySBBQilCupTSsVJvrHZWR8tA0c5jHSPzy fb4UBPS4fT5+RD3NtmoltztceuLRY6oE53O1fd22K6wpFjNkV0W0Db8TASSpUqYI QeZIyiI5HxyvmEhfG+V0h9S704skkPNgUhtVihW3TMfGlNaVBw05h5ViRI6s4Xr2 gaFONzOIUnSJew== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:57 2026 by rpki-client