This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json) Hash identifier: 1K1z2GWAiC/YLbGB0KQXb69celt/SphE4j3MqwyC7MU= Subject key identifier: 61:74:BA:8B:BA:06:02:D4:88:33:D7:8B:14:49:C5:AC:D5:70:F1:76 Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b Certificate serial: 019C42B45194D87DFD00D8C05AF8FEA3420F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft Manifest number: 01D9 Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: 0HlAY4hFEKQZrUY6P2JEhiNTo8cvRO6rusJ3F0TXS6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:51:94:d8:7d:fd:00:d8:c0:5a:f8:fe:a3:42:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=6174ba8bba0602d48833d78b1449c5acd570f176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:d4:12:8a:a5:59:ad:f5:89:5e:58:c5:35: 62:10:1d:53:65:02:58:2f:f4:e1:12:4a:7d:84:53: 99:82:4f:65:d3:e5:fb:82:b2:23:db:5b:d5:6a:fb: 06:15:5e:f8:b6:b2:af:b9:fa:0c:b0:e1:18:02:0b: 1d:ab:19:df:16:9b:9e:bf:22:a3:19:9c:00:48:d9: aa:27:2a:f0:a7:d4:10:e0:04:35:42:09:0f:3a:ed: 78:64:dd:75:bc:20:9f:b6:85:d7:6e:5c:f4:81:af: 7c:49:29:5a:93:24:c5:06:5c:73:fb:c1:f7:97:cf: 76:21:fc:13:3b:86:62:ba:32:57:a3:66:ad:8e:eb: b6:49:5f:c9:87:bc:9f:9a:e0:92:15:74:92:25:f0: e6:9c:b3:a4:79:3f:80:44:94:34:1a:e4:f8:61:cd: 2b:c4:66:fd:fd:74:a3:8a:25:27:2a:1d:4b:2e:da: b2:db:52:c9:a3:3c:b5:78:21:2f:55:b3:66:33:dc: af:2e:b6:ee:0b:d6:84:74:59:8d:78:4e:93:64:6e: 8e:32:02:e9:87:e1:9f:81:35:91:f5:50:ae:e5:bd: b1:7a:4e:9c:83:5e:e5:1f:2a:1d:a6:83:7a:85:b1: d0:43:e4:26:7b:77:25:19:e8:b3:0d:17:28:fa:c4: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:BA:8B:BA:06:02:D4:88:33:D7:8B:14:49:C5:AC:D5:70:F1:76 X509v3 Authority Key Identifier: keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:d5:9b:82:50:e5:09:d2:df:a7:b7:6b:2c:14:75:a6:47: 9d:bd:04:35:b3:92:b4:7e:db:e6:b5:57:86:73:7e:96:99:e3: 49:eb:0b:a4:9c:cd:fb:81:d6:a4:62:28:30:1f:a1:5a:ca:24: 14:a3:1f:21:59:28:94:9d:7a:ed:c6:79:ce:6a:35:95:1d:2a: c1:d3:a5:7a:2c:c3:58:40:91:ce:30:32:9a:26:20:06:5d:d1: b2:e9:a6:d6:8b:56:3b:3e:30:fe:91:7f:f8:1b:21:3a:57:7b: 42:c2:ad:ac:48:58:73:1e:c5:42:62:28:16:be:4a:2f:4e:a0: a8:70:74:18:da:de:58:2d:38:ed:22:d0:ac:46:91:fc:ec:01: 22:d9:8c:b2:7f:ab:30:5c:14:a6:bd:c3:76:85:bc:f2:e6:b6: 81:71:7e:dd:10:df:cc:be:38:7d:40:f7:02:4c:08:16:e8:8e: d8:3a:ac:ef:85:86:b9:db:32:50:56:22:59:79:54:7b:81:e9: 6f:ca:10:b3:21:7e:8a:95:b2:bd:5a:40:7d:d3:41:e7:20:a3: c8:89:f3:07:8c:41:f5:08:67:c2:57:71:a4:26:a7:56:36:ac: 3a:9d:fa:e5:b5:bc:d5:6a:77:ad:02:5f:0d:94:b4:4a:3f:fe: 26:da:24:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFGU2H39ANjAWvj+o0IPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTExMzVlM2M5NjJlNzQ2ZTRmNTdkMWVhYTQ5NGEwNDlm MDNiMWIwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD Eyg2MTc0YmE4YmJhMDYwMmQ0ODgzM2Q3OGIxNDQ5YzVhY2Q1NzBmMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHUEoqlWa31iV5YxTViEB1TZQJY L/ThEkp9hFOZgk9l0+X7grIj21vVavsGFV74trKvufoMsOEYAgsdqxnfFpuevyKj GZwASNmqJyrwp9QQ4AQ1QgkPOu14ZN11vCCftoXXblz0ga98SSlakyTFBlxz+8H3 l892IfwTO4ZiujJXo2atjuu2SV/Jh7yfmuCSFXSSJfDmnLOkeT+ARJQ0GuT4Yc0r xGb9/XSjiiUnKh1LLtqy21LJozy1eCEvVbNmM9yvLrbuC9aEdFmNeE6TZG6OMgLp h+GfgTWR9VCu5b2xek6cg17lHyodpoN6hbHQQ+Qme3clGeizDRco+sRhmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF0uou6BgLUiDPXixRJxazVcPF2MB8GA1UdIwQY MBaAFCKhE148li50bk9X0eqklKBJ8DsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQt YTViMjk1YWVmYzAwLzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQtYTViMjk1YWVmYzAw LzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwjVm4JQ 5QnS36e3aywUdaZHnb0ENbOStH7b5rVXhnN+lpnjSesLpJzN+4HWpGIoMB+hWsok FKMfIVkolJ167cZ5zmo1lR0qwdOleizDWECRzjAymiYgBl3Rsumm1otWOz4w/pF/ +BshOld7QsKtrEhYcx7FQmIoFr5KL06gqHB0GNreWC047SLQrEaR/OwBItmMsn+r MFwUpr3DdoW88ua2gXF+3RDfzL44fUD3AkwIFuiO2Dqs74WGudsyUFYiWXlUe4Hp b8oQsyF+ipWyvVpAfdNB5yCjyInzB4xB9QhnwldxpCanVjasOp365bW81Wp3rQJf DZS0Sj/+JtokZw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:16 2026 by rpki-client