This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json) Hash identifier: PYUYJBPpHC5sgJfgNijcZ5AqRuKjL+rlJ1kJzFajkaQ= Subject key identifier: BF:41:98:25:16:AD:C3:3C:4C:9C:13:A9:58:4A:BA:AA:CE:A7:48:07 Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Certificate serial: 019C416AC8924F60935F58E65EA3056AEBDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft Manifest number: 0C1D Signing time: Mon 09 Feb 2026 08:00:43 +0000 Manifest this update: Mon 09 Feb 2026 08:00:43 +0000 Manifest next update: Tue 10 Feb 2026 08:00:43 +0000 Files and hashes: 1: MUU8YNa6WcEG9k_BNcyCAU81gbs.roa (hash: iUfmHZuTUmqZJa+o0yYc9bKFcBXasUBUKIVVT3wP+6Y=) 2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: EwTY4hD47SsCG/+TBTzbJ4OO6hq0XaysVRQLf6WZXQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:c8:92:4f:60:93:5f:58:e6:5e:a3:05:6a:eb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Validity Not Before: Feb 9 08:00:43 2026 GMT Not After : Feb 10 08:00:43 2026 GMT Subject: CN=bf41982516adc33c4c9c13a9584abaaacea74807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:d6:17:df:67:6a:77:ae:5e:6e:16:12:71: be:8a:7a:62:97:7e:6a:4f:83:81:67:96:b2:85:1c: 79:cc:9a:7e:c0:b6:04:3e:29:a8:ab:2f:6b:90:4a: 01:f2:07:49:ee:4e:bc:37:d7:2a:82:30:98:99:0f: 47:5b:85:9c:e8:88:90:82:e9:be:69:1c:bf:31:7a: 99:f8:c7:18:ab:10:f5:d1:12:8f:c5:a3:fa:ab:ed: 83:ab:d5:da:1e:57:5c:3a:45:28:45:13:39:5c:5d: 3a:6d:c3:27:65:a8:78:44:36:07:2e:7d:b7:d0:71: 8d:d0:c0:7c:6d:02:c7:3a:e5:7e:fd:4b:e2:c0:72: b0:de:d3:2a:4e:e2:fa:2c:e2:40:e3:06:6b:fa:60: db:40:2d:8b:21:43:30:97:25:cc:06:40:18:4c:a7: e8:39:65:87:a2:eb:ea:02:b1:b2:e2:a8:7f:ac:c1: c3:90:47:38:43:41:c4:20:39:0b:a3:1f:8c:05:29: c0:49:ac:ee:33:b6:72:07:a2:fe:00:91:94:88:f7: 87:5e:79:60:45:67:2e:a2:93:9d:8c:b2:42:23:4a: 7c:ca:e0:8a:53:94:9f:f0:70:5a:ac:a4:60:e5:40: aa:1c:ec:d8:58:4c:de:85:82:24:96:7a:8d:ec:cc: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:41:98:25:16:AD:C3:3C:4C:9C:13:A9:58:4A:BA:AA:CE:A7:48:07 X509v3 Authority Key Identifier: keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:cb:69:95:f0:77:d7:ca:54:b3:47:f9:36:62:8d:bc:60: 82:1d:a7:f2:6d:5e:b9:89:6f:40:99:8c:7c:4b:9f:c1:61:bc: b8:a5:45:47:6a:cf:6d:51:c6:5f:7b:37:d9:45:2e:73:8f:e9: 71:46:69:b4:0a:c3:34:72:31:17:cc:96:b5:87:bb:ab:07:41: 9b:92:c5:59:0a:42:59:f9:44:48:07:98:f0:8c:9c:79:3e:ea: 96:db:23:d6:ba:92:be:b0:9f:22:a4:a9:3c:ee:30:46:87:2e: 26:b3:73:67:7d:a4:f5:d4:44:87:21:1d:aa:4c:2e:6b:38:22: fd:5f:4a:e2:cf:3e:4c:c3:08:77:d2:65:50:fc:82:64:e6:02: 88:9f:7f:e9:f5:52:67:f7:96:11:c1:77:4a:9a:78:ab:43:1b: b6:d3:68:c4:35:27:2d:08:0f:18:8b:53:86:52:71:06:b6:54: 5d:fe:09:25:e0:72:55:61:be:66:a9:82:0a:22:25:f9:4c:e3: f6:6d:f1:d4:e9:19:bb:27:d0:dc:b7:d0:3f:00:fe:d6:b3:da: 81:21:f3:e3:2e:02:ac:48:e0:56:14:7f:13:57:35:87:58:41: 33:0e:48:a7:87:6e:9b:8d:55:33:8d:fe:d1:71:05:9b:d5:62: df:0d:df:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBasiST2CTX1jmXqMFauveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4 MmNhZDMwHhcNMjYwMjA5MDgwMDQzWhcNMjYwMjEwMDgwMDQzWjAzMTEwLwYDVQQD EyhiZjQxOTgyNTE2YWRjMzNjNGM5YzEzYTk1ODRhYmFhYWNlYTc0ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBXWF99naneuXm4WEnG+inpil35q T4OBZ5ayhRx5zJp+wLYEPimoqy9rkEoB8gdJ7k68N9cqgjCYmQ9HW4Wc6IiQgum+ aRy/MXqZ+McYqxD10RKPxaP6q+2Dq9XaHldcOkUoRRM5XF06bcMnZah4RDYHLn23 0HGN0MB8bQLHOuV+/UviwHKw3tMqTuL6LOJA4wZr+mDbQC2LIUMwlyXMBkAYTKfo OWWHouvqArGy4qh/rMHDkEc4Q0HEIDkLox+MBSnASazuM7ZyB6L+AJGUiPeHXnlg RWcuopOdjLJCI0p8yuCKU5Sf8HBarKRg5UCqHOzYWEzehYIklnqN7MyD1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9BmCUWrcM8TJwTqVhKuqrOp0gHMB8GA1UdIwQY MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHTLaZXw d9fKVLNH+TZijbxggh2n8m1euYlvQJmMfEufwWG8uKVFR2rPbVHGX3s32UUuc4/p cUZptArDNHIxF8yWtYe7qwdBm5LFWQpCWflESAeY8IyceT7qltsj1rqSvrCfIqSp PO4wRocuJrNzZ32k9dREhyEdqkwuazgi/V9K4s8+TMMId9JlUPyCZOYCiJ9/6fVS Z/eWEcF3Spp4q0MbttNoxDUnLQgPGItThlJxBrZUXf4JJeByVWG+ZqmCCiIl+Uzj 9m3x1OkZuyfQ3LfQPwD+1rPagSHz4y4CrEjgVhR/E1c1h1hBMw5Ip4dum41VM43+ 0XEFm9Vi3w3fYg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client