This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json) Hash identifier: V//FMaiOdah5BPeQoSPuCDx649HzdgsiAIQu/eLj5kg= Subject key identifier: 39:A7:4E:63:7C:7E:A8:3B:DD:D6:F7:21:FE:31:DD:EA:72:4E:D1:37 Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019C42EB029DF05F3AF4DF91AAD0A015D6BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft Manifest number: 12F3 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 1DhLBwlRj9VsluUaUWkCSIdQZNTUCW6DFmprqJpM5F8=) 2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:02:9d:f0:5f:3a:f4:df:91:aa:d0:a0:15:d6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=39a74e637c7ea83bddd6f721fe31ddea724ed137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:0f:67:87:56:da:73:05:21:4a:74:95:f1: 5d:7a:e6:9a:cb:bf:c0:28:69:9d:5d:21:7c:92:2f: e9:d7:87:54:cc:1a:8b:a8:5f:64:5a:a5:90:67:ff: 10:d2:bb:f2:f0:79:64:24:10:f2:66:b0:3f:84:69: a5:73:f8:5e:29:3d:0b:99:02:cd:63:91:66:55:56: e0:92:59:86:01:29:91:3d:9c:4b:3d:d3:91:72:7d: ce:68:8d:ce:98:0d:c0:ba:37:84:5e:9e:0c:f2:e0: ab:db:77:bf:c2:9e:8e:ae:de:30:b1:b2:d8:e3:08: e1:99:fc:31:ee:ab:0c:a8:0b:8b:11:0b:6f:3e:0e: 40:cd:3e:bf:ce:e3:37:42:89:45:b8:96:6f:25:5e: 97:2c:07:44:a6:54:75:92:bc:1a:4e:55:f1:9d:9c: 65:15:11:46:0c:26:6c:ef:09:51:8d:30:d9:17:76: b9:97:dc:79:1e:58:f0:71:94:70:b6:34:79:8f:5b: 1a:08:6a:1e:0e:0c:fc:01:b1:31:4a:ea:68:16:c8: f8:90:cd:78:f2:37:1d:ef:a8:d9:83:82:55:ac:86: 20:0c:d8:f7:f7:4f:96:a0:a1:44:f9:09:c4:e0:d8: 7b:a5:35:1a:a8:16:20:69:f2:10:bd:49:79:50:e4: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A7:4E:63:7C:7E:A8:3B:DD:D6:F7:21:FE:31:DD:EA:72:4E:D1:37 X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bd:1d:69:6f:33:0e:9a:0f:30:54:dc:45:12:45:20:2d:e5: 0d:60:57:0f:51:5f:c5:0f:3d:e1:04:7c:ea:2c:bf:ec:14:9c: 66:b2:73:22:29:3c:1d:41:c2:85:32:b0:9c:4c:92:85:00:09: 82:b2:96:53:c3:a3:96:c2:60:7c:80:db:18:2e:af:7d:b1:21: 54:5d:e2:2f:16:c8:57:9a:13:c0:49:45:52:37:0b:e9:87:6f: 4c:56:c1:d5:09:6a:e5:6e:82:85:94:00:41:95:cf:de:5a:f6: 3d:f1:1d:9f:14:72:52:29:f4:54:9f:13:6e:1d:6e:6f:28:57: 9b:99:f1:6b:26:bc:b2:2f:e4:4b:d0:0f:a6:da:01:a3:25:93: 54:fe:58:9c:c9:63:f7:a4:f3:5a:ad:cb:ad:f6:ba:a2:6d:55: 47:4c:35:e9:c3:81:6c:9c:65:a0:7a:f5:48:75:5d:45:2b:67: 39:8d:40:e3:9c:a4:ab:b8:82:9e:ae:fc:27:85:a9:56:f5:a2: 1d:18:a1:a5:ee:94:6f:ff:16:22:5a:ee:f7:0c:61:8d:27:43: 17:b2:52:13:55:21:20:83:ac:0f:42:81:b8:1d:a6:a1:7c:e3: e7:47:ca:89:94:8c:7f:83:23:b5:59:0e:fe:c7:83:b8:38:6b: 73:10:6c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wKd8F869N+RqtCgFda9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD EygzOWE3NGU2MzdjN2VhODNiZGRkNmY3MjFmZTMxZGRlYTcyNGVkMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVgPZ4dW2nMFIUp0lfFdeuaay7/A KGmdXSF8ki/p14dUzBqLqF9kWqWQZ/8Q0rvy8HlkJBDyZrA/hGmlc/heKT0LmQLN Y5FmVVbgklmGASmRPZxLPdORcn3OaI3OmA3AujeEXp4M8uCr23e/wp6Ort4wsbLY 4wjhmfwx7qsMqAuLEQtvPg5AzT6/zuM3QolFuJZvJV6XLAdEplR1krwaTlXxnZxl FRFGDCZs7wlRjTDZF3a5l9x5HljwcZRwtjR5j1saCGoeDgz8AbExSupoFsj4kM14 8jcd76jZg4JVrIYgDNj390+WoKFE+QnE4Nh7pTUaqBYgafIQvUl5UOSqbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmnTmN8fqg73db3If4x3epyTtE3MB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL0daW8z DpoPMFTcRRJFIC3lDWBXD1FfxQ894QR86iy/7BScZrJzIik8HUHChTKwnEyShQAJ grKWU8OjlsJgfIDbGC6vfbEhVF3iLxbIV5oTwElFUjcL6YdvTFbB1Qlq5W6ChZQA QZXP3lr2PfEdnxRyUin0VJ8Tbh1ubyhXm5nxaya8si/kS9APptoBoyWTVP5YnMlj 96TzWq3Lrfa6om1VR0w16cOBbJxloHr1SHVdRStnOY1A45ykq7iCnq78J4WpVvWi HRihpe6Ub/8WIlru9wxhjSdDF7JSE1UhIIOsD0KBuB2moXzj50fKiZSMf4MjtVkO /seDuDhrcxBsRw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:01 2026 by rpki-client