This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft File: iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft (raw, json) Hash identifier: o5HyIwGNkBZIQzxo0pj78q6j/FKiGLeMTXXDtkHItS4= Subject key identifier: 05:04:1D:7C:00:D2:E7:48:27:4F:BC:04:3C:36:58:9D:E7:C0:AE:6B Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3 Certificate serial: 019C43FE001A45228DC3F34DFD6382903247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft Manifest number: 1693 Signing time: Mon 09 Feb 2026 20:00:45 +0000 Manifest this update: Mon 09 Feb 2026 20:00:45 +0000 Manifest next update: Tue 10 Feb 2026 20:00:45 +0000 Files and hashes: 1: OdO1hcbdWYz_Iw6xZ112ZRiYkk8.roa (hash: 4Z+DfcMImSYQjotfAvXCJO8hXTfYciHRXkQJqaBymoc=) 2: iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl (hash: j/xm1M0xpYVbs4IsZjxCTSdR3vRlauNoGLrTVdd9McY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:00:1a:45:22:8d:c3:f3:4d:fd:63:82:90:32:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3 Validity Not Before: Feb 9 20:00:45 2026 GMT Not After : Feb 10 20:00:45 2026 GMT Subject: CN=05041d7c00d2e748274fbc043c36589de7c0ae6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:72:46:be:f2:27:58:6b:fc:27:f7:b0:02: 30:3c:66:c8:53:29:62:67:5b:38:1a:1b:7a:ad:25: a0:42:e0:3b:17:7b:58:c4:c8:c5:2e:b4:aa:ab:d1: da:29:f7:e4:a0:5f:03:f8:81:0b:92:92:01:4d:b0: 9c:59:55:52:fd:e0:72:dd:f6:e3:51:8f:d5:1d:f1: bb:d0:3c:72:d7:35:67:8f:7b:2e:5c:f9:2a:65:85: 44:bb:ea:9d:cb:63:5a:be:19:90:0a:17:bc:6d:25: d6:83:bf:ec:8c:9f:41:07:e2:2a:f9:20:fe:99:42: 6a:be:b8:96:72:48:72:00:f4:bb:6e:62:e1:e3:9b: 45:ce:0e:4a:06:05:fe:1e:31:66:8e:f9:66:94:5e: aa:b7:b3:c5:70:d2:20:87:8e:1f:91:5e:a4:d5:dd: 6b:52:1d:bf:10:f0:60:e7:0a:9c:5d:78:13:d4:31: ab:df:e9:df:5a:a5:46:b1:84:b7:39:c6:55:a2:0f: 6c:af:f4:f0:ce:5f:d1:00:7f:ea:f1:ce:0c:df:81: 13:64:65:85:7e:2e:59:a9:76:ed:57:c5:51:be:41: 17:43:aa:aa:ee:e7:ec:72:50:32:56:5b:12:76:02: e9:08:8a:18:f8:90:bc:a1:39:8a:59:18:a6:9b:2e: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:1D:7C:00:D2:E7:48:27:4F:BC:04:3C:36:58:9D:E7:C0:AE:6B X509v3 Authority Key Identifier: keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:51:f1:3d:12:b3:ad:37:64:28:1a:68:84:84:d2:c4:e3:17: 80:7e:13:30:47:e0:ee:3e:84:11:17:59:30:30:ec:16:fe:2f: bd:28:ea:04:09:79:7d:c2:f6:6f:39:ef:cc:35:6c:35:38:73: a8:e0:d7:4f:09:5b:d6:d0:b6:82:c5:e7:37:04:58:5f:86:8c: 70:78:19:9d:d9:e6:e2:a4:24:c1:51:c4:67:ee:c7:04:58:ee: 01:be:1b:1e:c6:19:94:c7:9a:52:3d:ec:0e:96:24:74:58:b7: b3:26:3b:b2:9e:7a:d7:6c:0d:8a:d3:a6:b5:ad:aa:7c:da:a7: 0d:bd:69:a7:18:62:cf:d1:18:a3:ac:50:24:38:17:a3:28:02: 41:24:26:fe:7c:d7:90:cb:06:77:44:d2:0c:fe:8a:43:0b:54: b7:08:94:7a:f1:38:d6:de:df:78:49:82:16:1c:42:f3:d3:74: 4c:e7:f5:9b:cb:aa:72:06:e5:ad:56:ae:d4:87:0a:73:ec:7d: 5d:db:07:5a:2f:17:19:30:4c:7b:7e:44:4e:71:a6:77:a8:88: 3c:12:2f:27:1b:03:4b:9a:d4:51:2e:b2:a0:ff:0e:94:b3:b9: 5f:1c:13:18:06:b7:25:dd:12:22:38:99:ea:02:31:17:a8:cd: 52:ab:6b:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/gAaRSKNw/NN/WOCkDJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODgyNWQyZjA2NDk4OWIzOGM3ODFmMmE4NTM1MTg5YTI2 OTI4YzMwHhcNMjYwMjA5MjAwMDQ1WhcNMjYwMjEwMjAwMDQ1WjAzMTEwLwYDVQQD EygwNTA0MWQ3YzAwZDJlNzQ4Mjc0ZmJjMDQzYzM2NTg5ZGU3YzBhZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ipyRr7yJ1hr/Cf3sAIwPGbIUyli Z1s4Ght6rSWgQuA7F3tYxMjFLrSqq9HaKffkoF8D+IELkpIBTbCcWVVS/eBy3fbj UY/VHfG70Dxy1zVnj3suXPkqZYVEu+qdy2NavhmQChe8bSXWg7/sjJ9BB+Iq+SD+ mUJqvriWckhyAPS7bmLh45tFzg5KBgX+HjFmjvlmlF6qt7PFcNIgh44fkV6k1d1r Uh2/EPBg5wqcXXgT1DGr3+nfWqVGsYS3OcZVog9sr/Twzl/RAH/q8c4M34ETZGWF fi5ZqXbtV8VRvkEXQ6qq7ufsclAyVlsSdgLpCIoY+JC8oTmKWRimmy7Y9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUEHXwA0udIJ0+8BDw2WJ3nwK5rMB8GA1UdIwQY MBaAFImIJdLwZJibOMeB8qhTUYmiaSjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgt ZWNhZTQxNDQ2Yjc3LzEvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgtZWNhZTQxNDQ2Yjc3 LzEvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVHxPRKz rTdkKBpohITSxOMXgH4TMEfg7j6EERdZMDDsFv4vvSjqBAl5fcL2bznvzDVsNThz qODXTwlb1tC2gsXnNwRYX4aMcHgZndnm4qQkwVHEZ+7HBFjuAb4bHsYZlMeaUj3s DpYkdFi3syY7sp5612wNitOmta2qfNqnDb1ppxhiz9EYo6xQJDgXoygCQSQm/nzX kMsGd0TSDP6KQwtUtwiUevE41t7feEmCFhxC89N0TOf1m8uqcgblrVau1IcKc+x9 XdsHWi8XGTBMe35ETnGmd6iIPBIvJxsDS5rUUS6yoP8OlLO5XxwTGAa3Jd0SIjiZ 6gIxF6jNUqtrWw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:04 2026 by rpki-client