This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json) Hash identifier: 2aP8+u+jVMEeuIkRZeNBwjakOonmuuhjAA8TVjsrlAo= Subject key identifier: 69:7E:1F:05:A0:32:DC:2B:C4:0A:84:21:FF:5E:C9:C1:28:89:29:96 Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30 Certificate serial: 019C42462AD408FCDBBDD314272B7EA60D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft Manifest number: 0A87 Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: 78kqC8j6LoRWjdngK7kKihALOYk.roa (hash: 7AMmVdZKov3gEwV1YiogGxz3l6UvzVaoKb5Zky6YO88=) 2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: 9+1bfMznHmmyanNpdxC/7U+vNr5Ij5vm4PNBSqXnC0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2a:d4:08:fc:db:bd:d3:14:27:2b:7e:a6:0d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30 Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=697e1f05a032dc2bc40a8421ff5ec9c128892996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:5d:82:48:a3:c7:71:a3:08:b5:83:14:78: b6:30:c0:b0:b8:29:2e:bf:45:83:53:c6:77:c9:69: 89:19:00:f5:11:ef:e7:96:b7:e2:a9:39:66:ce:6f: 29:f9:80:8a:8d:a6:58:94:6d:cc:7f:50:35:15:94: 91:b5:73:5b:49:50:9b:38:d2:df:a9:3c:ba:a2:da: d7:ec:80:ec:29:f0:81:e1:a8:7d:8a:6d:ab:e1:0f: 50:e3:66:03:1c:81:47:1e:56:07:b8:9b:72:75:79: 15:25:66:c5:3f:dd:7d:17:54:cc:59:80:a8:02:1f: fe:4b:ae:48:8e:77:b2:70:d8:99:13:24:ef:b1:75: a9:4b:1e:17:63:12:bd:47:10:54:99:71:84:dc:66: a7:8c:87:f7:8d:4f:42:12:79:df:82:37:e2:2e:09: db:4f:d2:30:aa:96:02:e5:cd:1c:3e:c7:e1:4c:3a: 7b:85:6a:4d:f2:94:4f:be:b0:e3:87:71:78:b4:4f: 12:36:7d:cc:09:2c:17:b2:a6:1f:17:0a:44:d7:40: 78:e0:21:9a:0f:16:52:7c:88:a5:0d:ac:54:f7:0b: a4:d8:94:ef:08:a6:54:ee:9b:94:b1:86:dc:d7:bd: 47:55:5d:bc:db:67:a2:97:ff:f8:ba:15:55:3e:3b: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:1F:05:A0:32:DC:2B:C4:0A:84:21:FF:5E:C9:C1:28:89:29:96 X509v3 Authority Key Identifier: keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:d4:31:91:d1:22:c1:1c:59:7f:9b:e5:a5:e5:9e:ec:2d: 0a:b3:f3:f4:bd:81:e0:94:62:e6:34:fe:1e:6f:d6:0b:fc:f3: a4:a8:f2:4d:98:6e:38:c4:16:04:e4:62:6e:8d:a9:be:ac:09: d7:08:04:ea:27:c6:db:55:f2:fc:01:fa:9b:2b:2c:92:4a:56: 01:4c:27:95:b3:ba:c3:d7:2d:fb:58:68:c0:ec:71:04:6c:f9: 5a:8f:1c:bb:f0:20:a5:82:5a:d1:32:58:b4:f9:0f:5a:0c:81: 56:dd:96:40:15:c9:1d:45:50:57:76:66:35:e8:9e:4c:9c:3b: e3:b5:e7:2e:a2:56:21:ee:b7:45:0e:d1:ce:0f:6e:d4:0d:77: 4f:ce:04:7a:6b:c8:c4:c1:59:d1:17:64:d7:df:c0:35:44:29: 79:e7:27:75:30:82:d3:13:21:6a:7f:e6:a2:c0:64:80:a3:5f: 69:93:f0:61:1d:33:34:ce:31:27:8e:9a:7b:40:53:5d:3b:9b: 6e:e8:60:e1:a2:c6:4e:84:f3:56:aa:ec:b0:a3:05:0a:52:94: 68:87:2b:13:da:32:2e:d0:4c:f9:91:a3:b7:81:e2:be:c2:2a: 76:93:72:d9:67:54:a9:f2:7d:fa:7d:db:e8:c9:9d:7b:00:0f: d4:0c:99:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRirUCPzbvdMUJyt+pg2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi YWFjMzAwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD Eyg2OTdlMWYwNWEwMzJkYzJiYzQwYTg0MjFmZjVlYzljMTI4ODkyOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbVdgkijx3GjCLWDFHi2MMCwuCku v0WDU8Z3yWmJGQD1Ee/nlrfiqTlmzm8p+YCKjaZYlG3Mf1A1FZSRtXNbSVCbONLf qTy6otrX7IDsKfCB4ah9im2r4Q9Q42YDHIFHHlYHuJtydXkVJWbFP919F1TMWYCo Ah/+S65IjneycNiZEyTvsXWpSx4XYxK9RxBUmXGE3GanjIf3jU9CEnnfgjfiLgnb T9IwqpYC5c0cPsfhTDp7hWpN8pRPvrDjh3F4tE8SNn3MCSwXsqYfFwpE10B44CGa DxZSfIilDaxU9wuk2JTvCKZU7puUsYbc171HVV2822eil//4uhVVPjuxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGl+HwWgMtwrxAqEIf9eycEoiSmWMB8GA1UdIwQY MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoXUMZHR IsEcWX+b5aXlnuwtCrPz9L2B4JRi5jT+Hm/WC/zzpKjyTZhuOMQWBORibo2pvqwJ 1wgE6ifG21Xy/AH6mysskkpWAUwnlbO6w9ct+1howOxxBGz5Wo8cu/AgpYJa0TJY tPkPWgyBVt2WQBXJHUVQV3ZmNeieTJw747XnLqJWIe63RQ7Rzg9u1A13T84EemvI xMFZ0Rdk19/ANUQpeecndTCC0xMhan/mosBkgKNfaZPwYR0zNM4xJ46ae0BTXTub buhg4aLGToTzVqrssKMFClKUaIcrE9oyLtBM+ZGjt4HivsIqdpNy2WdUqfJ9+n3b 6MmdewAP1AyZDA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:22 2026 by rpki-client