This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json) Hash identifier: 6uW2wRWvgGw0RcxiDumAHUnUXtYbuTkRU/SLNMlgemQ= Subject key identifier: 8A:76:9D:E5:C9:99:7A:81:FD:ED:4B:97:EA:BA:36:FC:C9:95:3F:F3 Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32 Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032 Certificate serial: 019C42101173B616AF031406A43812C8A9F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft Manifest number: 0941 Signing time: Mon 09 Feb 2026 11:01:15 +0000 Manifest this update: Mon 09 Feb 2026 11:01:15 +0000 Manifest next update: Tue 10 Feb 2026 11:01:15 +0000 Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: 72OQpwFpDcwPqshnJKBlkj4RAtypWa48uB9VsBAUFZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:11:73:b6:16:af:03:14:06:a4:38:12:c8:a9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032 Validity Not Before: Feb 9 11:01:15 2026 GMT Not After : Feb 10 11:01:15 2026 GMT Subject: CN=8a769de5c9997a81fded4b97eaba36fcc9953ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:0f:fb:52:df:ca:fa:ca:70:59:02:e5:83: ec:92:21:fd:f9:ed:c1:ba:ba:7c:42:01:39:30:2e: 73:fc:d4:59:00:dd:f4:4d:f4:9d:8e:54:10:1a:56: 8c:ea:75:bc:67:7f:58:55:fc:25:9a:7c:b4:2a:66: 2b:4d:7a:c0:11:50:6f:82:43:e7:30:bb:38:40:07: 29:67:44:a3:3c:e3:9f:31:bc:12:52:e8:2e:99:fe: 78:38:2a:98:2a:39:81:86:5d:ea:1f:f0:30:fa:c3: ad:63:e7:6a:6b:55:95:cb:f5:9f:4e:61:97:54:da: 88:94:b8:cf:33:b5:d4:63:ae:2f:db:61:e2:b1:23: 14:50:ed:ac:df:f3:7e:6c:b8:9c:18:18:a5:00:5e: 83:9c:2a:7d:13:65:a2:6c:e3:12:41:8e:2c:f6:0e: da:c1:51:a7:07:51:7b:59:f2:19:bb:8a:eb:bf:1d: cb:81:b9:09:7c:c7:74:0f:f2:e2:8e:fa:50:52:8d: 2f:09:ef:4e:96:23:46:24:33:04:72:2a:48:82:26: 22:1f:48:56:23:5a:2e:ed:44:ce:4f:ee:76:48:27: 8b:2b:94:b1:38:d4:b2:df:d0:8d:32:10:71:d1:fc: 82:b5:b6:6b:cb:c1:82:be:2a:f6:43:ad:e8:45:d8: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:9D:E5:C9:99:7A:81:FD:ED:4B:97:EA:BA:36:FC:C9:95:3F:F3 X509v3 Authority Key Identifier: keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:f9:da:7b:40:11:31:6c:da:9a:7c:b8:11:c8:21:b5:ca: 63:11:5a:91:1a:7c:71:17:14:72:7c:75:d9:93:95:01:72:a5: c7:8e:c7:2f:fe:b4:39:cf:df:9d:4b:40:b5:d4:9b:40:a0:ab: e1:c6:3f:7b:80:e3:9a:6a:4f:4d:b1:37:03:22:1d:d8:51:f0: 1e:13:4b:94:5b:f8:66:67:2e:fe:c3:bc:66:70:6e:e0:71:bf: 1d:80:fe:76:84:a4:c9:49:a4:18:8e:20:80:92:aa:b1:87:b0: 82:32:9e:e0:b1:18:15:16:0f:40:df:be:71:8e:67:a2:ab:80: 6d:c6:03:0b:1c:61:36:93:a8:70:2e:4c:e0:4d:3a:d3:bb:de: 09:80:77:3c:b3:25:c4:b9:f7:3a:71:4a:70:51:64:44:fe:d3: f3:14:5f:36:00:36:89:02:96:b1:b2:71:4c:df:03:bf:54:53: 4a:6d:6c:e6:90:7b:7f:d9:8e:c1:b5:d1:c2:7d:4a:41:a4:db: 5b:17:8c:39:79:58:a8:e0:1f:f1:ac:ba:e2:6c:7a:13:03:11: be:ba:1c:80:b4:63:a1:e6:df:d9:69:5c:d5:aa:04:19:a1:0c: ce:96:b3:82:7c:08:16:c7:57:02:f3:cc:ae:d6:03:66:89:3e: 96:f9:4e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBFzthavAxQGpDgSyKn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDIyMzRiYWM2MTcxMjcwM2UzOThhNmQ1YmYwNDhjNWM5 ZjQwMzIwHhcNMjYwMjA5MTEwMTE1WhcNMjYwMjEwMTEwMTE1WjAzMTEwLwYDVQQD Eyg4YTc2OWRlNWM5OTk3YTgxZmRlZDRiOTdlYWJhMzZmY2M5OTUzZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2wP+1LfyvrKcFkC5YPskiH9+e3B urp8QgE5MC5z/NRZAN30TfSdjlQQGlaM6nW8Z39YVfwlmny0KmYrTXrAEVBvgkPn MLs4QAcpZ0SjPOOfMbwSUugumf54OCqYKjmBhl3qH/Aw+sOtY+dqa1WVy/WfTmGX VNqIlLjPM7XUY64v22HisSMUUO2s3/N+bLicGBilAF6DnCp9E2WibOMSQY4s9g7a wVGnB1F7WfIZu4rrvx3LgbkJfMd0D/LijvpQUo0vCe9OliNGJDMEcipIgiYiH0hW I1ou7UTOT+52SCeLK5SxONSy39CNMhBx0fyCtbZry8GCvir2Q63oRdhPywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp2neXJmXqB/e1Ll+q6NvzJlT/zMB8GA1UdIwQY MBaAFK5CI0usYXEnA+OYptW/BIxcn0AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1Yjct ZWUyYmNmMTg2ZjI0LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1YjctZWUyYmNmMTg2ZjI0 LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUar52ntA ETFs2pp8uBHIIbXKYxFakRp8cRcUcnx12ZOVAXKlx47HL/60Oc/fnUtAtdSbQKCr 4cY/e4DjmmpPTbE3AyId2FHwHhNLlFv4Zmcu/sO8ZnBu4HG/HYD+doSkyUmkGI4g gJKqsYewgjKe4LEYFRYPQN++cY5noquAbcYDCxxhNpOocC5M4E0607veCYB3PLMl xLn3OnFKcFFkRP7T8xRfNgA2iQKWsbJxTN8Dv1RTSm1s5pB7f9mOwbXRwn1KQaTb WxeMOXlYqOAf8ay64mx6EwMRvrocgLRjoebf2Wlc1aoEGaEMzpazgnwIFsdXAvPM rtYDZok+lvlOtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:52 2026 by rpki-client