This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json) Hash identifier: rb8ZIBCH5q863o1tAMFFdo1nAudFRhKeT6+THWsVp1k= Subject key identifier: E5:3B:69:1D:10:38:B8:B6:43:39:B8:5C:53:0E:E9:41:7E:31:A5:17 Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Certificate serial: 019C427DA2DC8040FA825647C193270528B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft Manifest number: 080D Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (hash: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0=) 2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: wzO8st8eydf96FF2/fUakeMMWscFXZYLNqQs6bUD5m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a2:dc:80:40:fa:82:56:47:c1:93:27:05:28:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=e53b691d1038b8b64339b85c530ee9417e31a517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:fd:25:21:34:e7:c7:3d:09:0f:5f:53:e9: 72:cb:bb:0a:15:6b:3e:21:72:5a:10:bd:bf:70:33: 60:9e:ae:c9:61:06:77:b1:1f:d7:ad:16:43:5c:6b: c1:9f:73:ba:d3:9b:ed:b8:7e:05:ca:b6:dc:1f:dd: a6:fb:b3:8f:6c:b1:dc:e8:2b:00:ba:40:39:be:ad: 8c:59:f4:ed:2b:0f:24:41:1e:9b:76:5d:54:82:3d: b0:f5:9a:4d:2c:a8:7b:b7:d3:86:d5:a9:4e:66:3d: 74:21:77:03:2d:2f:b8:2f:11:2e:68:c7:cd:32:b5: b9:8d:a8:a4:22:b2:23:60:43:d3:c5:19:76:f9:45: 5e:b6:63:54:73:f2:2e:64:ce:c8:dc:1e:e8:ec:a0: 41:89:2b:4e:1d:8b:c2:86:d4:c4:b3:b1:1c:45:38: b9:00:09:b1:b0:8f:a8:67:84:fb:b4:b8:ae:67:73: 72:f6:38:76:03:87:83:5d:29:3d:bb:a4:f2:b4:a9: 12:51:88:a2:30:20:11:f8:d9:0e:da:21:2f:6f:81: f8:fc:7a:50:3a:1f:85:e8:c3:4a:3a:9a:9e:aa:57: 8b:b4:e6:2e:a9:3a:2d:76:21:c7:c4:80:14:78:4d: 4f:d3:81:08:3d:0b:c1:85:da:ab:ef:6a:81:66:f9: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:69:1D:10:38:B8:B6:43:39:B8:5C:53:0E:E9:41:7E:31:A5:17 X509v3 Authority Key Identifier: keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fe:6f:34:d8:32:59:ee:e1:e3:e3:77:e5:8d:42:c5:bc:c7: 38:30:f4:c6:35:ac:95:61:40:e7:11:71:6c:56:d5:4d:b3:04: b8:e4:25:5d:db:6f:cb:7f:32:ee:a3:b8:72:69:8c:32:13:04: 22:04:7a:41:57:a8:7f:c0:e1:4c:3d:f3:ea:33:56:88:ae:f7: 99:8e:df:10:40:7c:66:04:e7:fd:ec:9d:52:34:03:46:d6:8a: 13:b6:68:2b:ef:8e:ed:7f:83:7f:8c:b1:81:32:f0:f2:a1:3d: 49:08:e2:da:0e:7a:a5:64:9e:d7:5b:59:3c:37:c5:51:20:74: 74:76:54:98:56:14:9c:59:25:90:81:7d:07:e2:9c:6d:16:cd: b4:25:cd:59:8b:4a:3b:9b:93:48:ae:4f:76:90:4a:d5:01:25: d3:db:0b:16:a8:e3:8b:fa:29:6f:be:0a:3e:af:27:78:a5:61: 98:88:19:a6:54:4f:87:ac:57:f1:53:c9:6b:74:76:0a:c4:1c: c2:dd:17:54:f1:12:39:df:b1:aa:02:f4:b0:a9:68:44:3b:3d: b8:be:48:0a:4a:a1:81:72:33:e2:d6:db:6b:88:42:8c:11:68: 5a:ca:3f:50:27:b4:c5:d4:ee:88:2f:29:c8:08:4c:b7:f2:58: d2:76:3c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaLcgED6glZHwZMnBSi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh NmU5ZDYwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD EyhlNTNiNjkxZDEwMzhiOGI2NDMzOWI4NWM1MzBlZTk0MTdlMzFhNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcn9JSE058c9CQ9fU+lyy7sKFWs+ IXJaEL2/cDNgnq7JYQZ3sR/XrRZDXGvBn3O605vtuH4FyrbcH92m+7OPbLHc6CsA ukA5vq2MWfTtKw8kQR6bdl1Ugj2w9ZpNLKh7t9OG1alOZj10IXcDLS+4LxEuaMfN MrW5jaikIrIjYEPTxRl2+UVetmNUc/IuZM7I3B7o7KBBiStOHYvChtTEs7EcRTi5 AAmxsI+oZ4T7tLiuZ3Ny9jh2A4eDXSk9u6TytKkSUYiiMCAR+NkO2iEvb4H4/HpQ Oh+F6MNKOpqeqleLtOYuqTotdiHHxIAUeE1P04EIPQvBhdqr72qBZvlewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU7aR0QOLi2Qzm4XFMO6UF+MaUXMB8GA1UdIwQY MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt Zjg1ZjcyMWZiMWI4LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4 LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/5vNNgy We7h4+N35Y1CxbzHODD0xjWslWFA5xFxbFbVTbMEuOQlXdtvy38y7qO4cmmMMhME IgR6QVeof8DhTD3z6jNWiK73mY7fEEB8ZgTn/eydUjQDRtaKE7ZoK++O7X+Df4yx gTLw8qE9SQji2g56pWSe11tZPDfFUSB0dHZUmFYUnFklkIF9B+KcbRbNtCXNWYtK O5uTSK5PdpBK1QEl09sLFqjji/opb74KPq8neKVhmIgZplRPh6xX8VPJa3R2CsQc wt0XVPESOd+xqgL0sKloRDs9uL5ICkqhgXIz4tbba4hCjBFoWso/UCe0xdTuiC8p yAhMt/JY0nY8Vg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:18 2026 by rpki-client