This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json) Hash identifier: r1l4ZqumyqsDkeODN6zMDw5Yg01Bfn/pd3Uwpptr5Ec= Subject key identifier: 61:78:72:6E:71:68:51:D8:64:A3:E8:99:D5:19:76:31:22:57:1E:58 Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019C446C74C0EBB86E65CBDEFBE3DD9CFE9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 22:01:24 +0000 Manifest this update: Mon 09 Feb 2026 22:01:24 +0000 Manifest next update: Tue 10 Feb 2026 22:01:24 +0000 Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: eoswJpwQpFV80IlZg1It618/p/FSyeld7Jz6KQE41ME=) 2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:74:c0:eb:b8:6e:65:cb:de:fb:e3:dd:9c:fe:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Feb 9 22:01:24 2026 GMT Not After : Feb 10 22:01:24 2026 GMT Subject: CN=6178726e716851d864a3e899d519763122571e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:7c:81:fd:d8:1a:f2:7f:80:6f:be:64:f8: d8:e9:28:a8:bb:b7:c6:7e:4d:80:8e:cb:8f:0a:ef: 9a:52:16:00:97:23:71:4f:25:a3:88:89:bc:6c:69: 7a:d1:a2:f2:2c:e4:25:de:d4:e2:cd:e1:6e:55:42: 09:8d:6c:7a:96:9e:1a:6b:3b:c6:bf:1f:06:c4:c4: 28:bf:02:6c:5f:52:27:52:3b:62:89:bf:24:56:5b: 90:f4:0d:0b:7c:d8:d1:c1:60:84:88:6f:0d:b2:0e: 97:72:3d:20:52:f2:fe:bb:63:69:4f:b3:c2:b4:84: e3:14:47:06:0a:de:a7:d9:13:60:2c:80:5d:25:26: 17:d5:55:aa:5f:f8:29:a9:26:6f:0a:6e:f7:e3:4d: f8:db:82:fe:07:d4:42:6e:e8:47:6c:8d:d7:2f:f0: ce:7b:53:d1:07:ff:59:be:9d:87:a0:59:c2:7b:48: 42:fc:45:11:66:ca:8d:84:96:64:af:b9:3d:b4:96: 91:52:b0:49:9f:a7:4d:c9:8b:ce:e2:2c:28:96:26: a8:77:05:c8:4d:95:75:7c:d8:7e:7e:07:7c:95:0c: f6:92:59:8f:97:8d:c7:87:4d:fc:b8:17:ba:f7:24: 23:14:62:2d:fe:27:7e:f7:c6:ea:d6:ca:a2:0c:35: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:78:72:6E:71:68:51:D8:64:A3:E8:99:D5:19:76:31:22:57:1E:58 X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:46:1d:d8:90:50:76:f9:2b:22:9c:0b:b7:0e:fc:ca:e9:d0: 32:9d:9e:70:0e:18:9a:a0:ce:05:58:01:90:bd:f6:08:ea:14: 44:60:b0:fb:b2:3e:96:91:65:f9:56:0c:c1:26:2e:2c:a6:06: b1:0f:73:eb:49:76:6c:4e:cf:72:4e:26:e0:d2:c3:1e:5d:27: fa:4b:4c:1a:9f:c4:88:9f:cb:68:43:2f:4f:4b:97:2f:9c:81: 52:58:df:44:1f:a8:fd:74:2c:3b:5c:5b:da:a2:5d:01:7f:ca: ec:c1:2b:bf:96:f2:5e:10:c1:fd:43:ce:50:9e:0c:51:95:57: 90:51:b5:92:ec:d2:fe:32:70:60:9d:03:13:a3:d7:7f:ac:4a: fd:14:f0:ee:7a:10:76:59:81:2a:af:02:16:d5:bd:07:b4:ae: 26:10:dd:f7:e1:52:5d:a6:a9:83:85:2b:c5:95:bf:8e:3b:d6: 5d:f4:62:1a:da:49:28:6a:30:12:e4:35:7e:66:50:8f:40:44: ed:61:b2:b2:4d:7b:0c:14:15:e1:cb:3d:87:aa:6d:c6:3c:fd: 35:61:db:d8:e5:ef:10:bc:63:77:00:5b:99:b5:67:9e:3f:e5: 75:1f:67:26:8f:e6:8b:84:2d:74:3e:9d:f6:57:1b:5d:f9:71: bd:29:a0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHTA67huZcve++PdnP6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjYwMjA5MjIwMTI0WhcNMjYwMjEwMjIwMTI0WjAzMTEwLwYDVQQD Eyg2MTc4NzI2ZTcxNjg1MWQ4NjRhM2U4OTlkNTE5NzYzMTIyNTcxZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qx8gf3YGvJ/gG++ZPjY6Siou7fG fk2AjsuPCu+aUhYAlyNxTyWjiIm8bGl60aLyLOQl3tTizeFuVUIJjWx6lp4aazvG vx8GxMQovwJsX1InUjtiib8kVluQ9A0LfNjRwWCEiG8Nsg6Xcj0gUvL+u2NpT7PC tITjFEcGCt6n2RNgLIBdJSYX1VWqX/gpqSZvCm73403424L+B9RCbuhHbI3XL/DO e1PRB/9Zvp2HoFnCe0hC/EURZsqNhJZkr7k9tJaRUrBJn6dNyYvO4iwoliaodwXI TZV1fNh+fgd8lQz2klmPl43Hh038uBe69yQjFGIt/id+98bq1sqiDDVewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF4cm5xaFHYZKPomdUZdjEiVx5YMB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkYd2JBQ dvkrIpwLtw78yunQMp2ecA4YmqDOBVgBkL32COoURGCw+7I+lpFl+VYMwSYuLKYG sQ9z60l2bE7Pck4m4NLDHl0n+ktMGp/EiJ/LaEMvT0uXL5yBUljfRB+o/XQsO1xb 2qJdAX/K7MErv5byXhDB/UPOUJ4MUZVXkFG1kuzS/jJwYJ0DE6PXf6xK/RTw7noQ dlmBKq8CFtW9B7SuJhDd9+FSXaapg4UrxZW/jjvWXfRiGtpJKGowEuQ1fmZQj0BE 7WGysk17DBQV4cs9h6ptxjz9NWHb2OXvELxjdwBbmbVnnj/ldR9nJo/mi4QtdD6d 9lcbXflxvSmg0A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:51 2026 by rpki-client