This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json) Hash identifier: Yq6XX8hKGZh8jkVB2IKFFfuyPzlskzZMC2SJYEB7/hg= Subject key identifier: CD:5D:6B:F4:13:9C:88:A9:E3:18:D3:23:ED:33:55:92:AD:00:7A:C6 Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d Certificate serial: 019C416B01736B16FAA82C54DF192C82E556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 08:00:57 +0000 Manifest this update: Mon 09 Feb 2026 08:00:57 +0000 Manifest next update: Tue 10 Feb 2026 08:00:57 +0000 Files and hashes: 1: GtLN875AMsU5_ahlkmocxAUh5EM.roa (hash: irtfrvq51uYuMW8qlslsIniYXKoM8xsUWZf7aX7ayYM=) 2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: dJQJNKZOdfr4wWHxzCu8+QNI1XDdJmbLl6s2PvSB0Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6b:01:73:6b:16:fa:a8:2c:54:df:19:2c:82:e5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d Validity Not Before: Feb 9 08:00:57 2026 GMT Not After : Feb 10 08:00:57 2026 GMT Subject: CN=cd5d6bf4139c88a9e318d323ed335592ad007ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:b9:75:e9:de:46:b3:b4:3d:34:11:5d:23: ea:e6:22:d4:bc:be:06:d2:00:0b:02:2f:fb:59:7c: e3:59:5e:93:0c:2c:51:cf:2a:7c:65:55:f4:00:98: 70:49:b7:d6:3d:73:6f:9d:0d:9e:50:ea:34:68:5a: d6:a2:7a:d6:1c:d5:36:28:f5:67:d8:62:06:d6:df: 91:85:46:e6:af:f1:cf:09:52:10:22:ac:f6:56:0e: 80:14:46:a0:d9:7e:37:4b:d1:38:b5:9f:7c:2a:5b: 1d:53:19:5a:85:ee:95:e3:48:5a:f9:ff:8b:17:90: b3:7d:31:fd:c9:c2:ae:ea:28:78:27:27:b4:76:26: a7:af:b7:84:1d:e2:bb:5e:23:c3:09:6c:c6:16:8f: c2:de:c8:f2:95:cf:ad:9f:b9:9a:2a:2e:9a:82:cc: 1f:36:75:e6:a1:c4:98:9b:59:fc:e9:16:e6:e8:13: 96:df:92:fb:d0:82:d1:06:45:35:2c:1a:ac:89:c1: 83:61:7f:ce:15:c9:ee:0a:95:6e:a9:90:29:ea:be: d4:a8:47:64:4c:27:92:66:09:34:80:98:12:41:79: 82:5a:89:e5:1b:d5:b8:64:74:72:c2:e9:37:6c:83: d1:d7:cf:03:fd:46:94:21:a5:b0:24:68:94:24:35: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5D:6B:F4:13:9C:88:A9:E3:18:D3:23:ED:33:55:92:AD:00:7A:C6 X509v3 Authority Key Identifier: keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bf:73:57:41:3a:6b:bc:08:a5:17:0f:57:af:01:a1:6d:0a: 5a:18:4d:5a:a2:b5:da:8a:dd:37:46:88:0b:b7:f0:a7:38:2a: c5:e7:1a:91:d6:aa:90:12:92:55:84:ad:0e:05:da:93:4b:64: 08:d3:67:9a:d7:64:25:a8:3c:35:b1:52:cf:c2:ae:53:50:b5: 88:7e:07:1f:10:dc:16:74:9a:81:70:0a:8a:ea:92:ce:e0:13: aa:85:f6:80:b2:07:ad:1b:de:a4:21:6f:d7:ff:be:fe:fb:64: 1f:b7:13:f8:b6:71:b6:0a:a4:eb:0f:01:f2:4b:e6:cd:f7:88: 40:ee:17:69:99:7e:d6:dd:57:df:ef:55:c2:92:7b:66:9a:41: 00:70:2f:89:e8:57:78:fe:90:e2:82:a1:d4:f8:1e:8a:d5:7e: 56:44:25:3d:7c:fa:3f:ed:81:e7:d0:1d:91:87:82:9d:6a:28: f4:e3:61:e9:66:e2:0d:39:6e:ac:ff:e7:9b:c7:92:f7:1e:9d: ff:c3:7e:b0:fb:9d:56:54:ca:c2:25:96:57:ae:f1:c4:2f:e3: fe:03:a2:36:a7:bd:0d:92:8f:0c:8b:1d:77:d1:11:8e:61:17: 7e:df:84:59:03:50:58:27:bb:22:14:cc:c2:b1:4e:d9:af:9f: 0a:0e:d1:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBawFzaxb6qCxU3xksguVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzdlYWU2NDlkOTU0N2IwYWQwYWIwMDdhYjRlOGE0OGRl ZDRkNWQwHhcNMjYwMjA5MDgwMDU3WhcNMjYwMjEwMDgwMDU3WjAzMTEwLwYDVQQD EyhjZDVkNmJmNDEzOWM4OGE5ZTMxOGQzMjNlZDMzNTU5MmFkMDA3YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8S5deneRrO0PTQRXSPq5iLUvL4G 0gALAi/7WXzjWV6TDCxRzyp8ZVX0AJhwSbfWPXNvnQ2eUOo0aFrWonrWHNU2KPVn 2GIG1t+RhUbmr/HPCVIQIqz2Vg6AFEag2X43S9E4tZ98KlsdUxlahe6V40ha+f+L F5CzfTH9ycKu6ih4Jye0dianr7eEHeK7XiPDCWzGFo/C3sjylc+tn7maKi6agswf NnXmocSYm1n86Rbm6BOW35L70ILRBkU1LBqsicGDYX/OFcnuCpVuqZAp6r7UqEdk TCeSZgk0gJgSQXmCWonlG9W4ZHRywuk3bIPR188D/UaUIaWwJGiUJDWiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1da/QTnIip4xjTI+0zVZKtAHrGMB8GA1UdIwQY MBaAFIrH6uZJ2VR7CtCrAHq06KSN7U1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYt YWMwMWYwYzU2NjJiLzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYtYWMwMWYwYzU2NjJi LzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP79zV0E6 a7wIpRcPV68BoW0KWhhNWqK12ordN0aIC7fwpzgqxecakdaqkBKSVYStDgXak0tk CNNnmtdkJag8NbFSz8KuU1C1iH4HHxDcFnSagXAKiuqSzuATqoX2gLIHrRvepCFv 1/++/vtkH7cT+LZxtgqk6w8B8kvmzfeIQO4XaZl+1t1X3+9VwpJ7ZppBAHAviehX eP6Q4oKh1PgeitV+VkQlPXz6P+2B59AdkYeCnWoo9ONh6WbiDTlurP/nm8eS9x6d /8N+sPudVlTKwiWWV67xxC/j/gOiNqe9DZKPDIsdd9ERjmEXft+EWQNQWCe7IhTM wrFO2a+fCg7RUg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:13 2026 by rpki-client