This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json) Hash identifier: ag0CMF5+4HALz0mvKOVLPXV9aIYicNc4mRNo95Jadnc= Subject key identifier: CD:A6:68:CA:91:97:0E:46:C7:14:51:32:56:E3:23:4D:64:42:61:46 Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Certificate serial: 019C427D7232AF07386EC358267D4DF6B970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft Manifest number: 0D68 Signing time: Mon 09 Feb 2026 13:00:43 +0000 Manifest this update: Mon 09 Feb 2026 13:00:43 +0000 Manifest next update: Tue 10 Feb 2026 13:00:43 +0000 Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: rp61ZbtK0MF2JSBzXuOCpphCjGAW1pdyV1c9ot1am88=) 2: LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa (hash: bcLMSmZZ+3fduWbmxkS4mikbivKQ+Mib1eYrxT+UG6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:72:32:af:07:38:6e:c3:58:26:7d:4d:f6:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Validity Not Before: Feb 9 13:00:43 2026 GMT Not After : Feb 10 13:00:43 2026 GMT Subject: CN=cda668ca91970e46c714513256e3234d64426146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:3d:ed:75:20:dd:a3:75:0d:e4:8c:ae:0e: c3:b3:f6:54:05:52:9e:4b:ee:a7:bb:25:f0:05:89: 0c:a3:ae:60:12:ee:d3:53:b6:ec:fa:0a:b4:6f:1c: 41:f0:96:dd:b7:89:f3:c0:c1:9d:25:e6:c0:cc:c2: ad:16:d3:8f:4e:1a:14:87:7c:b5:46:7e:50:ad:67: 92:2b:ba:d8:32:c6:0a:19:38:50:a4:f4:dd:ef:4f: 37:2d:93:62:4e:0f:64:71:00:48:8b:6f:52:57:76: bc:5e:54:81:49:58:b3:29:91:84:54:7a:3d:bf:6f: 09:eb:00:d8:38:7a:57:59:fd:18:dc:76:ef:8b:b1: c0:6b:a4:4f:69:1e:f8:70:5f:78:da:74:40:72:e5: 66:17:ab:d3:42:12:1d:bb:18:da:8b:af:5d:82:95: ec:e2:3f:df:e5:f8:0c:c0:e6:ba:9c:06:33:36:9f: 26:d6:6d:1b:ca:30:94:77:fa:9e:cf:91:a5:98:f5: ec:b6:c5:48:fe:9f:18:7f:c1:7b:34:33:21:8c:0c: 2e:67:24:33:49:b5:67:ed:db:79:a2:04:d2:71:a7: a8:ba:59:f0:f6:31:15:82:5b:90:04:c7:52:94:ae: c8:cc:3e:a6:5d:18:4c:18:18:d3:4c:3a:78:87:9c: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:68:CA:91:97:0E:46:C7:14:51:32:56:E3:23:4D:64:42:61:46 X509v3 Authority Key Identifier: keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:89:67:66:2c:21:63:a9:ea:32:71:5a:2c:6c:a5:10:8c: f5:56:56:7c:71:3b:e0:c5:b2:74:95:66:e5:f0:d5:78:77:02: 57:76:91:a1:bd:b3:67:3c:fc:2e:e6:7d:1b:ed:91:6e:9e:8b: bd:9f:60:7a:2e:ca:0d:07:66:07:f9:c2:c2:40:ee:9e:f8:bb: 86:f7:08:74:21:c2:f9:01:62:d5:f7:e1:87:f7:e8:c3:9d:b3: 0f:c8:a9:5c:16:53:07:74:80:20:71:d4:af:2b:c2:ca:75:22: d9:3a:25:fc:79:00:66:53:3d:48:19:f1:2b:5c:3b:0c:93:a4: d7:ec:49:9e:b5:32:65:aa:2b:7f:5b:fb:e9:0f:ac:75:86:9b: a6:a4:32:90:f3:d0:39:a2:3c:20:7e:4c:aa:61:af:72:da:7b: 65:d4:c2:72:ad:4d:52:1c:4e:f8:90:e2:a1:31:35:07:e9:dd: b1:e8:1e:a8:b4:8a:3b:c4:1b:b1:73:0d:b9:6c:16:9b:fa:71: 6f:78:de:e8:64:fc:e9:3a:87:33:b0:a0:87:1b:99:ff:61:8d: a4:cb:ad:ca:78:1e:c3:cd:91:db:d9:26:56:a7:1a:34:35:09: 99:83:34:69:ed:a2:07:05:2d:33:e5:ae:0a:dd:4a:47:82:84: 1e:52:b9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXIyrwc4bsNYJn1N9rlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy MjhkYmIwHhcNMjYwMjA5MTMwMDQzWhcNMjYwMjEwMTMwMDQzWjAzMTEwLwYDVQQD EyhjZGE2NjhjYTkxOTcwZTQ2YzcxNDUxMzI1NmUzMjM0ZDY0NDI2MTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20I97XUg3aN1DeSMrg7Ds/ZUBVKe S+6nuyXwBYkMo65gEu7TU7bs+gq0bxxB8Jbdt4nzwMGdJebAzMKtFtOPThoUh3y1 Rn5QrWeSK7rYMsYKGThQpPTd7083LZNiTg9kcQBIi29SV3a8XlSBSVizKZGEVHo9 v28J6wDYOHpXWf0Y3Hbvi7HAa6RPaR74cF942nRAcuVmF6vTQhIduxjai69dgpXs 4j/f5fgMwOa6nAYzNp8m1m0byjCUd/qez5GlmPXstsVI/p8Yf8F7NDMhjAwuZyQz SbVn7dt5ogTScaeoulnw9jEVgluQBMdSlK7IzD6mXRhMGBjTTDp4h5xTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2maMqRlw5GxxRRMlbjI01kQmFGMB8GA1UdIwQY MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et N2ZhNWViY2Y1NzRlLzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC6JZ2Ys IWOp6jJxWixspRCM9VZWfHE74MWydJVm5fDVeHcCV3aRob2zZzz8LuZ9G+2Rbp6L vZ9gei7KDQdmB/nCwkDunvi7hvcIdCHC+QFi1ffhh/fow52zD8ipXBZTB3SAIHHU ryvCynUi2Tol/HkAZlM9SBnxK1w7DJOk1+xJnrUyZaorf1v76Q+sdYabpqQykPPQ OaI8IH5MqmGvctp7ZdTCcq1NUhxO+JDioTE1B+ndsegeqLSKO8QbsXMNuWwWm/px b3je6GT86TqHM7CghxuZ/2GNpMutyngew82R29kmVqcaNDUJmYM0ae2iBwUtM+Wu Ct1KR4KEHlK5XA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:43 2026 by rpki-client