This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json) Hash identifier: USqT5Vz3CsDp/xdui9GC26FdOLg0M5S3fTpesYCMURs= Subject key identifier: B4:90:3A:27:E9:3D:89:31:61:C6:FA:CA:F8:91:47:60:4D:96:6F:1D Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Certificate serial: 019C4210046F13C86DE997194EBB28734DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: fXNcVv9mXSehh90RXQdcBzWyenL6wzbwcQtgRK7ZR3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:04:6f:13:c8:6d:e9:97:19:4e:bb:28:73:4d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=b4903a27e93d893161c6facaf89147604d966f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:14:92:3b:10:e9:6c:a2:ed:4e:fe:59:b2: 04:35:f3:49:fd:31:58:48:15:71:fb:b2:b4:7f:5a: 6c:d3:e4:bf:f6:54:c6:c2:af:74:a3:a2:6a:05:2b: 2d:4c:f7:5f:98:b6:d0:9a:65:b7:cc:ba:f0:49:2e: 35:3e:d8:3d:d6:58:9b:9d:c8:4c:5d:6d:87:ff:84: 29:64:7f:4a:aa:77:97:d9:6c:49:2d:36:ad:16:18: 37:68:0a:d7:d9:49:fe:f0:78:cd:a8:20:3c:ae:0e: 3d:70:6c:e6:23:8b:04:47:e6:20:c8:82:eb:40:6d: 71:af:92:f2:18:4a:a2:50:96:fb:70:90:94:d2:6c: 7f:5a:fb:e6:3c:c9:c9:a7:cc:3d:e6:f0:fa:60:8c: 82:7d:63:86:0f:24:c1:78:08:cb:46:a3:cf:a4:4d: 5e:05:df:7b:41:25:ec:c8:34:88:66:6f:12:da:c8: f3:58:ae:21:aa:85:51:f4:f9:84:15:ef:02:35:98: 72:59:a1:78:c7:9d:64:df:57:63:2e:f3:02:a4:49: 35:0c:97:aa:76:79:22:a7:41:71:60:16:a0:15:76: 85:ea:53:36:2c:78:9a:c3:4e:52:a4:0d:82:d3:1b: d9:9e:9c:fa:2c:d7:ef:90:ed:ad:78:8d:df:72:eb: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:3A:27:E9:3D:89:31:61:C6:FA:CA:F8:91:47:60:4D:96:6F:1D X509v3 Authority Key Identifier: keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:82:af:15:4a:6a:6a:c1:e1:b5:bf:aa:b3:1c:1d:7d:83:8a: 73:a3:52:93:5b:01:80:16:e5:57:e9:f4:70:37:3a:22:bf:c7: 6e:e2:e2:48:65:b2:9a:54:6d:5a:78:b7:13:a0:e9:ab:9c:0a: 59:36:fc:b7:cd:6c:6e:90:19:73:6e:44:52:26:0f:e7:7f:f6: 24:20:12:c2:cc:da:06:61:56:8e:c1:e8:b2:f5:4f:40:10:85: f2:88:ef:5c:4e:77:19:a5:48:34:76:98:34:5c:57:42:6b:03: a7:bf:38:dd:17:6f:48:d2:62:0d:55:41:88:7e:78:a9:a5:78: 17:a9:c1:7c:ea:90:32:cf:3e:56:c0:4b:0c:89:2f:a2:99:7f: 89:dd:70:8c:6f:2f:6a:59:bb:63:95:8e:6d:55:9c:25:71:53: 8e:e4:ea:1b:7c:3b:48:c0:02:2e:44:df:96:48:98:6c:c8:e9: 6a:92:8d:92:b6:40:15:f6:3f:9f:fc:0e:f9:67:c6:3b:80:f7: 58:76:7e:38:30:bc:69:e6:03:10:ca:20:34:ab:2f:07:f9:ed: 6d:ef:aa:af:af:7f:f4:56:46:7b:1e:80:4a:08:da:ca:00:6e: 04:73:69:6a:c3:91:4f:b2:f7:8b:f3:c3:ca:f0:f2:ae:44:66: e5:9c:cb:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEARvE8ht6ZcZTrsoc03QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2MwZDQxNjIxZTlkMzgwODhiOGRkM2U2ZGUxNTU0MWJl ZTFjOGMwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EyhiNDkwM2EyN2U5M2Q4OTMxNjFjNmZhY2FmODkxNDc2MDRkOTY2ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/wUkjsQ6Wyi7U7+WbIENfNJ/TFY SBVx+7K0f1ps0+S/9lTGwq90o6JqBSstTPdfmLbQmmW3zLrwSS41Ptg91libnchM XW2H/4QpZH9KqneX2WxJLTatFhg3aArX2Un+8HjNqCA8rg49cGzmI4sER+YgyILr QG1xr5LyGEqiUJb7cJCU0mx/WvvmPMnJp8w95vD6YIyCfWOGDyTBeAjLRqPPpE1e Bd97QSXsyDSIZm8S2sjzWK4hqoVR9PmEFe8CNZhyWaF4x51k31djLvMCpEk1DJeq dnkip0FxYBagFXaF6lM2LHiaw05SpA2C0xvZnpz6LNfvkO2teI3fcuunAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSQOifpPYkxYcb6yviRR2BNlm8dMB8GA1UdIwQY MBaAFIp8DUFiHp04CIuN0+beFVQb7hyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYt YTFiMjcwM2IwYTllLzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYtYTFiMjcwM2IwYTll LzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYKvFUpq asHhtb+qsxwdfYOKc6NSk1sBgBblV+n0cDc6Ir/HbuLiSGWymlRtWni3E6Dpq5wK WTb8t81sbpAZc25EUiYP53/2JCASwszaBmFWjsHosvVPQBCF8ojvXE53GaVINHaY NFxXQmsDp7843RdvSNJiDVVBiH54qaV4F6nBfOqQMs8+VsBLDIkvopl/id1wjG8v alm7Y5WObVWcJXFTjuTqG3w7SMACLkTflkiYbMjpapKNkrZAFfY/n/wO+WfGO4D3 WHZ+ODC8aeYDEMogNKsvB/ntbe+qr69/9FZGex6ASgjaygBuBHNpasORT7L3i/PD yvDyrkRm5ZzLDw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:09 2026 by rpki-client