This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json) Hash identifier: s8Zj+qXBMi2gDfueJdq3toJydInDcUZnB3fo4pwECu0= Subject key identifier: AD:E5:E4:7E:BB:C7:7B:52:37:9A:16:F8:A2:66:F6:CB:FF:3C:BC:12 Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Certificate serial: 019C43C6B1F5CB674AFA8F6CB26C09E3FB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft Manifest number: 1769 Signing time: Mon 09 Feb 2026 19:00:21 +0000 Manifest this update: Mon 09 Feb 2026 19:00:21 +0000 Manifest next update: Tue 10 Feb 2026 19:00:21 +0000 Files and hashes: 1: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=) 2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: xZp+xuwWGggh1k8zvZGuBL/nOcirPvxPHYwCnH+R+ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b1:f5:cb:67:4a:fa:8f:6c:b2:6c:09:e3:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Validity Not Before: Feb 9 19:00:21 2026 GMT Not After : Feb 10 19:00:21 2026 GMT Subject: CN=ade5e47ebbc77b52379a16f8a266f6cbff3cbc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:50:88:3e:6d:e0:5b:19:c1:e2:d8:10:49: e1:3a:17:ef:8e:13:2a:34:26:f8:e5:10:5d:04:ce: 03:34:e4:4f:e7:22:7b:4f:f0:ac:80:5c:9e:d0:ac: 43:44:ee:46:0a:d0:bd:1d:af:fc:d5:fd:56:83:68: 1f:d9:de:42:b1:ce:27:db:3e:ee:32:dc:50:2b:15: 00:2a:70:92:99:ec:49:82:9a:b3:02:63:2d:9e:73: ab:c3:42:1b:80:35:cd:28:da:1e:eb:86:8a:6f:f6: 98:08:e5:52:6a:8b:b2:ca:1e:a4:43:55:ae:83:14: c1:f4:cd:ff:16:ed:5b:0d:47:e6:43:aa:76:88:cb: e0:9c:43:0f:aa:b6:b6:f1:d6:ec:85:ec:d7:c0:4a: df:85:ac:50:85:38:cf:48:8b:dd:e6:f0:a6:fb:0c: ff:2d:35:cc:08:0e:21:48:b1:76:95:9b:10:c6:52: d1:79:e7:41:21:cd:98:a6:b5:26:25:80:a7:81:71: a9:a0:cf:d6:33:56:2e:53:9d:af:48:d0:0b:32:72: 61:24:6d:b4:67:b2:d0:cc:78:f7:cf:f4:91:51:54: e8:c9:48:66:f0:3e:58:4e:0d:ee:d5:74:31:fc:50: 76:8a:2e:65:c6:a5:83:5f:a9:72:99:36:11:1b:57: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E5:E4:7E:BB:C7:7B:52:37:9A:16:F8:A2:66:F6:CB:FF:3C:BC:12 X509v3 Authority Key Identifier: keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:28:bd:ab:c2:7d:a4:2c:6d:9d:44:1b:8e:8c:7f:a7:01: cc:7f:de:08:0a:8a:a5:17:1b:a7:14:50:32:f3:80:44:3d:03: 9a:13:e2:1c:c8:85:5e:a6:2b:87:16:f8:a8:d5:45:1f:e2:2d: 41:26:94:09:ba:9e:d2:67:5a:9c:4d:58:c4:64:71:dc:1f:9a: f5:d4:c3:f1:54:ea:73:01:56:58:d3:4f:b4:33:19:22:6a:22: 0f:13:0c:0b:ae:49:8e:d1:87:1c:fd:3d:70:21:a6:2c:50:1d: 84:cc:14:c9:15:39:db:33:4d:34:95:82:13:96:6a:e4:1d:b9: b1:07:68:fa:2d:83:a7:fc:2e:c3:78:0a:15:49:ef:20:2f:a7: a4:20:9a:20:95:c8:b0:4a:c2:c0:ef:c8:24:b8:08:3e:7c:bb: 95:b7:bd:d7:a7:db:eb:f3:a3:0a:a8:e9:90:9f:5d:7e:22:e9: 0e:92:ab:77:dc:0b:8d:95:6e:8e:ae:24:36:8f:ca:c1:57:1c: cb:c1:de:b5:46:6f:81:7e:b8:25:b4:d4:9d:e6:ad:6a:06:eb: 1a:87:61:16:96:30:1f:00:80:ef:be:b8:5c:38:7d:d4:f9:78: 95:56:0d:39:8a:79:16:4a:95:51:5d:ee:c0:b9:2a:5f:6b:d4: 8d:21:02:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrH1y2dK+o9ssmwJ4/s2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5 YjQ2NTEwHhcNMjYwMjA5MTkwMDIxWhcNMjYwMjEwMTkwMDIxWjAzMTEwLwYDVQQD EyhhZGU1ZTQ3ZWJiYzc3YjUyMzc5YTE2ZjhhMjY2ZjZjYmZmM2NiYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnhQiD5t4FsZweLYEEnhOhfvjhMq NCb45RBdBM4DNORP5yJ7T/CsgFye0KxDRO5GCtC9Ha/81f1Wg2gf2d5Csc4n2z7u MtxQKxUAKnCSmexJgpqzAmMtnnOrw0IbgDXNKNoe64aKb/aYCOVSaouyyh6kQ1Wu gxTB9M3/Fu1bDUfmQ6p2iMvgnEMPqra28dbshezXwErfhaxQhTjPSIvd5vCm+wz/ LTXMCA4hSLF2lZsQxlLReedBIc2YprUmJYCngXGpoM/WM1YuU52vSNALMnJhJG20 Z7LQzHj3z/SRUVToyUhm8D5YTg3u1XQx/FB2ii5lxqWDX6lymTYRG1ceAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3l5H67x3tSN5oW+KJm9sv/PLwSMB8GA1UdIwQY MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1 LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKoovavC faQsbZ1EG46Mf6cBzH/eCAqKpRcbpxRQMvOARD0DmhPiHMiFXqYrhxb4qNVFH+It QSaUCbqe0mdanE1YxGRx3B+a9dTD8VTqcwFWWNNPtDMZImoiDxMMC65JjtGHHP09 cCGmLFAdhMwUyRU52zNNNJWCE5Zq5B25sQdo+i2Dp/wuw3gKFUnvIC+npCCaIJXI sErCwO/IJLgIPny7lbe916fb6/OjCqjpkJ9dfiLpDpKrd9wLjZVujq4kNo/KwVcc y8HetUZvgX64JbTUneatagbrGodhFpYwHwCA7764XDh91Pl4lVYNOYp5FkqVUV3u wLkqX2vUjSEC3A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:14 2026 by rpki-client