This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json) Hash identifier: 07CsHiKzwkEKLf1lACTNm6Xi3dfmmzcBb2et7hjBBeQ= Subject key identifier: ED:1F:9F:41:97:93:68:94:CA:FD:9E:EA:81:9A:17:63:38:65:8B:91 Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019C427DC0CF99FF03CE6FB4794A9B7E9C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft Manifest number: 1280 Signing time: Mon 09 Feb 2026 13:01:03 +0000 Manifest this update: Mon 09 Feb 2026 13:01:03 +0000 Manifest next update: Tue 10 Feb 2026 13:01:03 +0000 Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: RswcB2nuMSvaNQdq07e3JqxSfDJ27eLYRdFjHzPZzbA=) 2: VCV7HyTUt8tm68B15fKOErx2kfM.roa (hash: nMzsEQ+m4fEfPNGdId/ALdJtSeiEKBWtGdiNADmVhPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c0:cf:99:ff:03:ce:6f:b4:79:4a:9b:7e:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Feb 9 13:01:03 2026 GMT Not After : Feb 10 13:01:03 2026 GMT Subject: CN=ed1f9f4197936894cafd9eea819a176338658b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:bd:3b:88:31:e3:35:79:6a:fc:b2:cd:65: 73:f3:b8:1b:e0:a7:8f:41:29:87:be:58:b4:9c:8d: 22:f8:4c:39:97:34:98:31:69:6e:d9:48:ea:c7:e7: af:17:38:52:ec:06:5c:88:06:78:16:fa:c7:d2:f2: f3:38:ff:02:19:a9:ee:eb:04:5b:24:7d:38:c2:2e: 0f:81:71:d6:ad:8d:b8:2c:5f:0e:e2:d0:2d:63:85: 00:9d:aa:01:46:fc:97:ea:a8:21:6b:e6:35:20:50: 7c:1c:62:de:1e:09:5e:b3:04:3c:a1:b7:f8:e6:fc: bc:42:bb:be:73:a0:95:19:b5:14:02:b1:80:e3:61: a3:4f:38:bf:86:d5:86:4c:0b:30:d9:0b:ae:c5:52: 9c:d4:49:f7:37:c8:58:c1:a9:1a:41:61:31:c7:24: c6:86:0d:1b:85:40:6d:79:12:b5:cd:ba:2c:f0:80: 34:78:b3:9d:f1:8f:fe:76:eb:70:9f:aa:68:cb:5e: e7:68:aa:22:d0:d4:54:d4:7e:cc:38:b3:7a:2f:53: 8a:05:c6:2c:fc:67:41:74:65:33:2a:33:ae:bc:a5: e1:d2:c3:44:18:b5:84:dc:b0:e6:cb:4b:98:8b:6c: e3:95:4c:5d:18:8d:55:16:0b:79:e0:59:bb:cf:74: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1F:9F:41:97:93:68:94:CA:FD:9E:EA:81:9A:17:63:38:65:8B:91 X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:8b:96:a2:d6:b8:84:fc:8e:e3:e2:05:ac:76:55:6f:01:21: bc:67:b3:20:2e:50:cb:bf:76:82:58:22:74:a3:b6:b6:32:dd: 77:3b:96:92:ba:54:2b:9b:b0:17:48:16:3c:dc:76:5f:f3:7e: b4:0c:72:88:99:fc:a0:4d:a2:71:60:9a:de:ea:bb:18:5d:cb: 0d:49:35:24:92:c4:9b:5f:c5:67:37:ed:84:b7:e4:e9:bb:dd: 0e:82:4f:a0:a8:fe:28:af:9a:5c:77:2c:30:a5:61:05:67:7f: 79:3f:b5:6f:a3:74:90:11:db:93:06:74:34:35:39:11:be:b1: 2f:d4:82:01:0e:a4:8f:e9:36:f9:8f:07:dc:4a:f6:0e:fa:a4: 7a:cd:cb:98:b2:b9:12:08:39:27:f8:33:44:1c:b8:b7:25:c0: fb:9a:8f:d3:1a:20:e8:f0:dc:69:58:1e:0d:b9:98:65:61:2c: a4:6d:4c:5d:38:ae:c7:9e:de:1e:fc:2f:7e:08:7a:fa:38:cc: 69:f3:92:24:c3:6f:99:7e:b9:07:65:60:98:50:32:73:bc:e6: 00:42:e7:c6:b8:1d:48:1f:8e:ba:2d:55:6a:38:da:25:b3:97: 7a:d2:10:ac:29:0e:c3:64:74:3f:32:49:de:08:35:41:fa:f8: 4d:b5:a9:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcDPmf8Dzm+0eUqbfpxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjYwMjA5MTMwMTAzWhcNMjYwMjEwMTMwMTAzWjAzMTEwLwYDVQQD EyhlZDFmOWY0MTk3OTM2ODk0Y2FmZDllZWE4MTlhMTc2MzM4NjU4YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU29O4gx4zV5avyyzWVz87gb4KeP QSmHvli0nI0i+Ew5lzSYMWlu2Ujqx+evFzhS7AZciAZ4FvrH0vLzOP8CGanu6wRb JH04wi4PgXHWrY24LF8O4tAtY4UAnaoBRvyX6qgha+Y1IFB8HGLeHgleswQ8obf4 5vy8Qru+c6CVGbUUArGA42GjTzi/htWGTAsw2QuuxVKc1En3N8hYwakaQWExxyTG hg0bhUBteRK1zbos8IA0eLOd8Y/+dutwn6poy17naKoi0NRU1H7MOLN6L1OKBcYs /GdBdGUzKjOuvKXh0sNEGLWE3LDmy0uYi2zjlUxdGI1VFgt54Fm7z3QkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0fn0GXk2iUyv2e6oGaF2M4ZYuRMB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2YuWota4 hPyO4+IFrHZVbwEhvGezIC5Qy792glgidKO2tjLddzuWkrpUK5uwF0gWPNx2X/N+ tAxyiJn8oE2icWCa3uq7GF3LDUk1JJLEm1/FZzfthLfk6bvdDoJPoKj+KK+aXHcs MKVhBWd/eT+1b6N0kBHbkwZ0NDU5Eb6xL9SCAQ6kj+k2+Y8H3Er2Dvqkes3LmLK5 Egg5J/gzRBy4tyXA+5qP0xog6PDcaVgeDbmYZWEspG1MXTiux57eHvwvfgh6+jjM afOSJMNvmX65B2VgmFAyc7zmAELnxrgdSB+Oui1VajjaJbOXetIQrCkOw2R0PzJJ 3gg1Qfr4TbWpkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:51 2026 by rpki-client