This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json) Hash identifier: tBdWtmoxZlC721uuN3WFaTkhw+Ficj+3yRtuq9EmcoI= Subject key identifier: 7D:6C:01:C2:EB:B4:DD:4A:1C:04:5D:8A:A8:37:5B:6B:B6:71:53:F7 Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df Certificate serial: 019C43222247DE102C7EA49152E9CA63276C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft Manifest number: 08B7 Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: jwF3umi49q+cnH8RTSrieEiHbn7LYzYwnBTfj0wYp58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:22:47:de:10:2c:7e:a4:91:52:e9:ca:63:27:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=7d6c01c2ebb4dd4a1c045d8aa8375b6bb67153f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:51:18:70:13:48:24:67:c0:57:67:76:09: 98:79:9d:65:7a:1f:2c:48:9a:bc:f8:e6:ea:cd:eb: 11:5c:96:68:46:70:80:7a:14:56:8c:62:f4:d5:fe: 71:f7:5a:f4:c7:2a:f8:77:26:ef:5c:d6:10:90:d6: 24:14:9d:4f:a8:4a:dc:b9:ef:fd:da:1b:f1:38:72: b2:e7:e7:09:d1:43:d7:42:db:7d:e2:80:4a:ea:5f: 7c:ed:98:ff:80:60:96:5c:07:45:db:26:25:4a:1a: 48:52:b1:e6:43:18:38:96:71:8c:1b:ae:82:82:f3: 40:01:55:a5:a2:72:e0:55:b3:0d:fb:8f:52:5c:ec: 2f:97:3a:bc:d9:8b:fa:66:92:2f:c4:ee:23:27:81: 79:ec:88:5e:d2:1b:d0:73:81:ab:0f:3d:a6:9c:43: b3:77:a0:6a:e3:0f:92:c6:2c:81:17:91:fc:c9:64: 07:cf:94:9c:25:3a:1f:8a:9a:2b:a6:dd:7c:56:90: 74:8e:8e:aa:6f:01:2e:60:11:4f:b1:b9:e1:45:51: b3:f6:cd:31:f7:8b:d4:72:b8:fc:27:94:6c:b2:e1: ca:76:af:64:73:2a:8f:19:57:5a:f0:64:9f:84:36: f3:c3:33:56:9d:9d:67:1d:36:06:b8:10:a4:17:79: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:01:C2:EB:B4:DD:4A:1C:04:5D:8A:A8:37:5B:6B:B6:71:53:F7 X509v3 Authority Key Identifier: keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bf:7c:70:85:f7:53:a4:f5:f8:ff:a3:1a:e7:be:ed:3c:27: ab:cb:d8:88:0e:db:5e:20:b3:0f:e3:e2:8f:b2:74:7b:11:ae: 22:51:63:84:44:cf:9a:91:90:4e:34:cb:c7:66:32:a1:53:02: 65:20:c4:48:26:89:01:78:bd:d6:fb:57:96:88:1e:15:5f:0b: ab:a3:e9:32:2f:aa:b1:c9:01:20:78:05:0f:d4:9f:5b:84:5d: cb:75:5d:8e:fe:03:d1:96:82:10:c7:c0:18:4c:d1:b8:7c:f3: f5:e8:cf:7a:01:48:45:ae:e4:58:94:6c:6d:1c:8b:71:dc:77: 8e:65:a7:70:ef:77:1e:fd:9f:65:bd:21:89:a5:ad:cd:8a:f5: a0:4a:1e:3c:6f:4f:df:7c:e1:24:74:28:a4:39:54:1e:40:16: da:c2:ef:53:5a:68:62:94:86:5b:a5:4c:31:cb:b8:4d:56:38: 38:3c:90:85:13:ae:3e:ad:93:16:90:71:81:3f:e2:ca:cd:b9: e0:8b:27:b4:26:c6:7a:61:25:cf:0a:5d:e1:cb:0d:d6:59:6a: be:47:ec:1b:c5:7f:55:8c:c9:2a:a7:92:96:f3:f6:cc:ab:e8: 05:7c:e4:01:f0:14:92:f4:6c:89:57:d2:27:3a:5c:dd:5e:de: bb:9a:f8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiJH3hAsfqSRUunKYydsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMGFmOTZmOTU5ODkyMTMxNzhkMzNkNjVmMDcwZThmYjJm ZTM3ZGYwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg3ZDZjMDFjMmViYjRkZDRhMWMwNDVkOGFhODM3NWI2YmI2NzE1M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6RRGHATSCRnwFdndgmYeZ1leh8s SJq8+ObqzesRXJZoRnCAehRWjGL01f5x91r0xyr4dybvXNYQkNYkFJ1PqErcue/9 2hvxOHKy5+cJ0UPXQtt94oBK6l987Zj/gGCWXAdF2yYlShpIUrHmQxg4lnGMG66C gvNAAVWlonLgVbMN+49SXOwvlzq82Yv6ZpIvxO4jJ4F57Ihe0hvQc4GrDz2mnEOz d6Bq4w+SxiyBF5H8yWQHz5ScJTofiporpt18VpB0jo6qbwEuYBFPsbnhRVGz9s0x 94vUcrj8J5RssuHKdq9kcyqPGVda8GSfhDbzwzNWnZ1nHTYGuBCkF3nGwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1sAcLrtN1KHARdiqg3W2u2cVP3MB8GA1UdIwQY MBaAFIoK+W+VmJITF40z1l8HDo+y/jffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2Et Yjc3YzFmOTcyOWZmLzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2EtYjc3YzFmOTcyOWZm LzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb98cIX3 U6T1+P+jGue+7Twnq8vYiA7bXiCzD+Pij7J0exGuIlFjhETPmpGQTjTLx2YyoVMC ZSDESCaJAXi91vtXlogeFV8Lq6PpMi+qsckBIHgFD9SfW4Rdy3Vdjv4D0ZaCEMfA GEzRuHzz9ejPegFIRa7kWJRsbRyLcdx3jmWncO93Hv2fZb0hiaWtzYr1oEoePG9P 33zhJHQopDlUHkAW2sLvU1poYpSGW6VMMcu4TVY4ODyQhROuPq2TFpBxgT/iys25 4IsntCbGemElzwpd4csN1llqvkfsG8V/VYzJKqeSlvP2zKvoBXzkAfAUkvRsiVfS Jzpc3V7eu5r4Kw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:56 2026 by rpki-client