This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json) Hash identifier: h3L6AWEY7zVD0Ju60IPWSZzW0ZYBpWCI03q5HBKVQ+U= Subject key identifier: CF:21:10:B7:5C:6D:FB:AE:A2:50:6D:4E:A0:41:C5:0F:99:75:FA:95 Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Certificate serial: 019C43229E8CB9509A09115180BB7BB1E5C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft Manifest number: 1246 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: dRuHtag2W48upoirGox3mzp5yls.roa (hash: pcW0qjbXLjHfD/4xJe2tmXXM1DU4kBxoW5dZ8O0Fexc=) 2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: dUPiiJOPsaak+dSh8IIMrs93o1znBcVxXfDUrTkYwUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9e:8c:b9:50:9a:09:11:51:80:bb:7b:b1:e5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=cf2110b75c6dfbaea2506d4ea041c50f9975fa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:af:f2:3f:4a:83:d8:b8:9c:5f:2e:6f:2b: a7:61:8e:c9:04:f4:38:d9:1c:d8:d8:74:7d:95:fd: 23:0b:9e:28:73:aa:a8:9a:5d:d9:e8:42:17:89:18: d2:f2:9a:38:e3:40:bc:50:b1:56:35:f4:42:bd:99: ce:1b:5f:b8:39:dd:fa:76:2c:9b:6f:32:19:54:b6: 6b:74:58:43:ec:d8:82:d8:d9:2e:d5:91:09:f3:9c: 2e:6f:e0:10:cb:1d:ff:7f:9b:a7:e2:8d:26:f2:e3: 2a:0a:22:99:fb:dd:c3:5c:70:ea:86:1b:6a:2d:49: 6d:50:e9:24:c7:c5:6d:18:fb:48:ae:4f:69:db:c2: 7b:91:66:b5:28:e5:43:3b:22:9f:42:22:a0:e1:88: c6:be:9c:e8:a9:5b:20:e8:c1:a3:d2:49:ed:a5:a1: fd:79:52:5d:cd:0e:d0:05:ba:bb:00:99:80:48:49: a5:2c:2f:c9:0c:fb:6f:22:53:cb:89:f7:49:bd:96: 4f:d4:05:fa:f8:4b:78:1b:7d:1b:75:82:4b:5f:9a: bc:eb:db:97:72:78:37:0d:6b:16:4f:72:4c:d8:7b: 31:e8:07:77:d8:ec:d6:ad:50:8b:52:91:6c:02:ee: a2:b0:c8:f0:ee:50:21:82:b5:93:e3:93:37:a0:0e: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:21:10:B7:5C:6D:FB:AE:A2:50:6D:4E:A0:41:C5:0F:99:75:FA:95 X509v3 Authority Key Identifier: keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:03:2c:b5:d3:53:88:15:66:ba:76:23:b1:af:49:08:a6:58: b1:a3:74:89:2e:ae:e6:d8:4f:96:b7:36:30:85:22:45:27:7d: 4b:dd:1e:17:14:7f:10:b6:67:9c:cb:6d:3a:b6:d9:e5:aa:99: 53:12:b3:5f:ca:67:49:f4:4e:fe:f2:7a:22:36:25:11:22:94: 86:cd:51:e7:93:b4:a6:a8:df:cf:30:e0:00:3a:6d:b4:18:41: 11:49:55:f3:82:f0:2e:0b:b0:31:6c:3a:4e:c6:eb:2f:1e:fe: c5:9b:83:b3:3f:43:59:24:26:3b:dc:42:3d:30:4e:d6:6a:05: 33:71:55:36:31:31:37:89:7f:f1:18:6e:48:20:6c:19:dd:fd: 00:b6:db:aa:4e:15:5c:5f:14:22:b9:5e:b4:aa:3f:ac:ac:91: f6:e4:30:ce:41:28:4c:3b:ef:1c:9f:7a:e2:46:39:52:e1:b1: 1a:b7:c1:f6:75:c1:e7:c3:fe:de:77:2f:6b:d9:50:e7:4c:19: 31:c4:8e:f6:c4:81:b5:06:c5:e7:f8:d3:52:72:04:64:5c:40: e9:32:b9:0b:37:14:90:8c:0b:b7:07:0e:43:c9:ae:f9:95:12: ba:a7:ff:f4:02:ef:fc:ad:84:23:a7:41:c1:3b:9e:07:fb:cf: 8f:f4:63:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp6MuVCaCRFRgLt7seXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzI0ZTRjZTc2OTM5YjRkYjU3ZDVkMzUwYzJhZDAwN2I1 OTgwZTEwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD EyhjZjIxMTBiNzVjNmRmYmFlYTI1MDZkNGVhMDQxYzUwZjk5NzVmYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH+v8j9Kg9i4nF8ubyunYY7JBPQ4 2RzY2HR9lf0jC54oc6qoml3Z6EIXiRjS8po440C8ULFWNfRCvZnOG1+4Od36diyb bzIZVLZrdFhD7NiC2Nku1ZEJ85wub+AQyx3/f5un4o0m8uMqCiKZ+93DXHDqhhtq LUltUOkkx8VtGPtIrk9p28J7kWa1KOVDOyKfQiKg4YjGvpzoqVsg6MGj0kntpaH9 eVJdzQ7QBbq7AJmASEmlLC/JDPtvIlPLifdJvZZP1AX6+Et4G30bdYJLX5q869uX cng3DWsWT3JM2Hsx6Ad32OzWrVCLUpFsAu6isMjw7lAhgrWT45M3oA7eBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8hELdcbfuuolBtTqBBxQ+ZdfqVMB8GA1UdIwQY MBaAFIoyTkznaTm021fV01DCrQB7WYDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzIt NjJiYzhmYzc1NWRkLzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzItNjJiYzhmYzc1NWRk LzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwMstdNT iBVmunYjsa9JCKZYsaN0iS6u5thPlrc2MIUiRSd9S90eFxR/ELZnnMttOrbZ5aqZ UxKzX8pnSfRO/vJ6IjYlESKUhs1R55O0pqjfzzDgADpttBhBEUlV84LwLguwMWw6 TsbrLx7+xZuDsz9DWSQmO9xCPTBO1moFM3FVNjExN4l/8RhuSCBsGd39ALbbqk4V XF8UIrletKo/rKyR9uQwzkEoTDvvHJ964kY5UuGxGrfB9nXB58P+3ncva9lQ50wZ McSO9sSBtQbF5/jTUnIEZFxA6TK5CzcUkIwLtwcOQ8mu+ZUSuqf/9ALv/K2EI6dB wTueB/vPj/RjIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:44 2026 by rpki-client