This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json) Hash identifier: tFIuP/h9PSQrSs7MBoR/SymGqU5bTXcn4lu0uR0elEI= Subject key identifier: 11:84:FF:9F:7F:B5:68:82:68:10:B7:97:5F:DD:91:7B:2C:56:8C:A9 Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9 Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9 Certificate serial: 019C44DA0DC105CC1C860FE3C92B9D2F7306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft Manifest number: 14B2 Signing time: Tue 10 Feb 2026 00:01:06 +0000 Manifest this update: Tue 10 Feb 2026 00:01:06 +0000 Manifest next update: Wed 11 Feb 2026 00:01:06 +0000 Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: uTOKRKhB0zhdad+KqRcFqzjvUiP+TTmiIAeQvX0JeY0=) 2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:0d:c1:05:cc:1c:86:0f:e3:c9:2b:9d:2f:73:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9 Validity Not Before: Feb 10 00:01:06 2026 GMT Not After : Feb 11 00:01:06 2026 GMT Subject: CN=1184ff9f7fb568826810b7975fdd917b2c568ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:2b:8b:bd:a3:1c:5c:4a:e2:64:c0:cb:3b: 55:23:24:f8:84:28:07:ab:c3:d0:47:64:3e:4c:17: 0b:68:d9:7f:ab:50:b4:d2:a3:13:66:a9:e3:2b:5a: fe:aa:94:7e:13:65:6d:4c:bf:d7:1a:f2:e0:f5:65: de:5e:18:44:57:92:87:d8:70:02:56:5a:02:83:2c: 0c:ad:ff:4a:55:3e:09:b6:a8:65:5b:0c:b6:cc:f1: 43:89:15:e4:74:7d:73:81:ea:2f:82:ca:75:f1:6f: f3:b1:9d:81:c3:51:f0:94:7d:4f:bf:f2:d4:6d:29: ea:84:5d:46:00:ed:45:ed:60:9c:ae:e8:fd:4f:5a: 89:e2:f9:40:0f:a6:76:b7:a1:8a:46:18:a1:cd:6b: 9c:0f:93:e4:87:1b:65:bd:14:5a:cd:ab:01:56:ed: 41:f0:75:05:a2:00:25:a8:2d:bb:7b:c7:31:90:03: b2:bd:ee:ee:9b:7e:85:9e:f3:1d:29:c3:23:ad:2a: 10:54:49:2e:b8:fd:5d:0c:87:e8:77:75:da:b6:9a: e0:27:6a:01:0c:e3:36:01:70:79:32:87:4f:12:17: e9:e1:ec:d2:20:e7:bc:db:db:20:cc:cb:49:4c:0c: 3c:93:8a:87:07:6e:e2:49:98:17:4e:bb:28:81:87: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:FF:9F:7F:B5:68:82:68:10:B7:97:5F:DD:91:7B:2C:56:8C:A9 X509v3 Authority Key Identifier: keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5e:ba:aa:60:25:62:dd:ac:ca:e4:3e:89:fa:f8:c0:fb:21: cf:dc:6e:1f:ea:a2:9a:3f:6f:ec:7b:c1:d7:27:1a:29:23:5b: 4c:89:05:1b:db:fb:dc:3c:93:d7:f9:1a:1f:8e:69:fa:f2:bf: 65:fd:8c:f6:7f:99:3f:17:f3:69:c2:04:43:32:b0:f7:b7:ea: 0b:39:00:dc:a6:cb:25:97:e4:c6:be:5b:7f:b3:8f:b3:c6:a7: ec:8c:7b:5b:ad:ca:a6:0e:66:f7:58:e3:fb:f0:07:db:5b:02: 68:de:09:56:2f:27:1b:06:e5:64:ed:5f:04:e6:88:1a:ea:c9: f1:20:d9:52:08:e1:49:48:05:c6:6b:cf:e8:43:ee:8a:54:a0: 72:c1:13:86:d8:27:52:74:5b:23:90:ec:52:71:60:8c:d3:7d: 3f:c6:11:18:6b:97:2b:2c:81:41:1d:2a:8a:b3:42:97:9e:a3: 61:07:20:11:5c:ff:8c:7b:60:79:e9:c4:13:de:fc:2b:99:77: aa:53:c7:50:7f:76:fb:d4:f2:23:6c:91:b3:9e:fc:32:fb:db: 19:01:e6:bb:37:2b:64:af:e6:0a:ee:d9:28:ff:dd:15:e9:e0: 8b:fc:64:d4:e2:10:02:f4:aa:5c:1a:9a:95:66:a7:b9:0c:5f: cd:21:ca:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2g3BBcwchg/jySudL3MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDRkNjI5MzI3NDM5NmY1YThkNjkxNDg1ZDY4NzZhMGEy MDcxZDkwHhcNMjYwMjEwMDAwMTA2WhcNMjYwMjExMDAwMTA2WjAzMTEwLwYDVQQD EygxMTg0ZmY5ZjdmYjU2ODgyNjgxMGI3OTc1ZmRkOTE3YjJjNTY4Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uAri72jHFxK4mTAyztVIyT4hCgH q8PQR2Q+TBcLaNl/q1C00qMTZqnjK1r+qpR+E2VtTL/XGvLg9WXeXhhEV5KH2HAC VloCgywMrf9KVT4JtqhlWwy2zPFDiRXkdH1zgeovgsp18W/zsZ2Bw1HwlH1Pv/LU bSnqhF1GAO1F7WCcruj9T1qJ4vlAD6Z2t6GKRhihzWucD5PkhxtlvRRazasBVu1B 8HUFogAlqC27e8cxkAOyve7um36FnvMdKcMjrSoQVEkuuP1dDIfod3XatprgJ2oB DOM2AXB5ModPEhfp4ezSIOe829sgzMtJTAw8k4qHB27iSZgXTrsogYdNzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGE/59/tWiCaBC3l1/dkXssVoypMB8GA1UdIwQY MBaAFCAE1ikydDlvWo1pFIXWh2oKIHHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzIt NGVmOWNjNzUxNTE3LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzItNGVmOWNjNzUxNTE3 LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF66qmAl Yt2syuQ+ifr4wPshz9xuH+qimj9v7HvB1ycaKSNbTIkFG9v73DyT1/kaH45p+vK/ Zf2M9n+ZPxfzacIEQzKw97fqCzkA3KbLJZfkxr5bf7OPs8an7Ix7W63Kpg5m91jj +/AH21sCaN4JVi8nGwblZO1fBOaIGurJ8SDZUgjhSUgFxmvP6EPuilSgcsEThtgn UnRbI5DsUnFgjNN9P8YRGGuXKyyBQR0qirNCl56jYQcgEVz/jHtgeenEE978K5l3 qlPHUH92+9TyI2yRs578MvvbGQHmuzcrZK/mCu7ZKP/dFengi/xk1OIQAvSqXBqa lWanuQxfzSHK0w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:10 2026 by rpki-client