This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft File: irxd5yn5l1idW-dpw3gkL3VFu4o.mft (raw, json) Hash identifier: uFUJRK4oJRWsIWFLGoNCE+Umb6XZj2hGhqns9WXdfkQ= Subject key identifier: 78:58:F3:51:88:B7:5B:33:37:60:96:8B:10:AB:39:9B:D4:9E:7D:86 Authority key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A Certificate issuer: /CN=8abc5de729f997589d5be769c378242f7545bb8a Certificate serial: 019C4321FFF565DDE64B1A2DED86310F8E38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft Manifest number: 014E Signing time: Mon 09 Feb 2026 16:00:27 +0000 Manifest this update: Mon 09 Feb 2026 16:00:27 +0000 Manifest next update: Tue 10 Feb 2026 16:00:27 +0000 Files and hashes: 1: irxd5yn5l1idW-dpw3gkL3VFu4o.crl (hash: od1FZ6NtHbiuZEPOB04Q+9p35UFGD6ZwCa9VTCz3OGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ff:f5:65:dd:e6:4b:1a:2d:ed:86:31:0f:8e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abc5de729f997589d5be769c378242f7545bb8a Validity Not Before: Feb 9 16:00:27 2026 GMT Not After : Feb 10 16:00:27 2026 GMT Subject: CN=7858f35188b75b333760968b10ab399bd49e7d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:b7:5a:ab:3c:2b:42:0d:26:e0:68:8d:55: fc:f1:7d:ad:38:6a:74:4b:2c:c6:2f:93:78:86:af: db:06:e9:18:98:56:9f:ca:81:f6:78:ba:6a:1d:aa: 79:9f:30:03:e3:20:3c:f7:9a:8c:f1:2e:17:3c:22: fc:ee:7c:4c:df:4b:6a:09:8e:9e:91:35:18:5a:5d: 3a:60:97:b1:20:f7:49:2c:ba:ad:71:66:ee:a1:aa: c9:8b:5e:27:f5:5c:b7:ea:80:3a:61:5a:5f:c8:ca: 93:44:df:9e:42:05:c5:45:a8:3b:ab:98:05:e7:a6: 5d:35:66:68:ba:ec:b3:21:2c:44:90:32:6e:a8:09: 39:02:89:7a:23:69:6a:29:20:09:0a:b4:8a:dc:74: 95:5e:8d:91:44:88:41:d0:e7:a9:8d:9c:f3:36:45: e9:4e:4d:71:3e:44:d3:78:cc:92:20:10:6c:76:77: 6b:62:fe:5a:0a:09:80:20:1a:59:8e:7a:54:a5:77: 51:7b:9b:c8:49:17:fd:7b:71:9c:4a:a4:74:f5:88: 93:1d:9a:b5:c8:51:01:32:43:eb:2b:70:b6:7c:6b: 9c:5e:eb:4d:14:e5:3c:77:aa:fb:b4:27:89:92:ad: 57:64:3a:39:65:0b:3e:2b:cb:0e:a3:a6:98:5b:34: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:F3:51:88:B7:5B:33:37:60:96:8B:10:AB:39:9B:D4:9E:7D:86 X509v3 Authority Key Identifier: keyid:8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:f6:83:cc:b6:84:08:6c:5f:ef:dc:c6:bd:ef:53:7e:12: ec:e3:de:7f:f2:24:12:a5:6f:8f:80:4b:41:a0:07:a7:b7:d7: 33:81:d7:af:35:ab:a9:2a:dc:78:c5:b4:f4:83:ff:47:00:fd: 1f:5b:f3:1a:ac:f1:59:10:06:cc:2d:1a:f8:f5:f8:04:14:57: 63:cf:63:28:5d:9f:cb:29:4e:bd:92:c0:3c:75:8d:bb:4e:a0: 0d:bc:fc:60:90:c5:e9:a0:d6:74:cf:06:43:d5:f4:6e:3f:76: e9:90:4c:cc:0a:0d:40:45:0e:bb:03:02:70:3f:7d:5d:2a:6e: 52:19:98:75:bd:4e:e5:a1:d1:7c:ec:d7:63:df:56:c1:9e:14: 07:11:f4:43:4e:10:e4:1e:7f:57:61:34:06:23:5d:a5:01:da: 07:98:9f:cf:79:01:f0:2d:4a:27:b7:8f:e4:40:52:96:dd:52: e8:89:a4:b1:1c:98:be:fe:2d:4e:1b:4a:21:68:1c:3f:58:aa: 31:d4:c9:c2:d7:57:db:6e:4a:ba:45:a2:3f:6b:e2:a3:d6:8f: 97:8f:59:16:bf:e8:41:56:84:b5:02:2d:03:d7:a0:07:10:e7: 26:1e:d9:31:87:43:bf:67:1f:08:67:7e:ae:76:bb:95:a7:85: d9:32:be:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf/1Zd3mSxot7YYxD444MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYmM1ZGU3MjlmOTk3NTg5ZDViZTc2OWMzNzgyNDJmNzU0 NWJiOGEwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD Eyg3ODU4ZjM1MTg4Yjc1YjMzMzc2MDk2OGIxMGFiMzk5YmQ0OWU3ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHK3Wqs8K0INJuBojVX88X2tOGp0 SyzGL5N4hq/bBukYmFafyoH2eLpqHap5nzAD4yA895qM8S4XPCL87nxM30tqCY6e kTUYWl06YJexIPdJLLqtcWbuoarJi14n9Vy36oA6YVpfyMqTRN+eQgXFRag7q5gF 56ZdNWZouuyzISxEkDJuqAk5Aol6I2lqKSAJCrSK3HSVXo2RRIhB0OepjZzzNkXp Tk1xPkTTeMySIBBsdndrYv5aCgmAIBpZjnpUpXdRe5vISRf9e3GcSqR09YiTHZq1 yFEBMkPrK3C2fGucXutNFOU8d6r7tCeJkq1XZDo5ZQs+K8sOo6aYWzRW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhY81GIt1szN2CWixCrOZvUnn2GMB8GA1UdIwQY MBaAFIq8Xecp+ZdYnVvnacN4JC91RbuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDct N2VkM2I5MTg1OTkwLzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDctN2VkM2I5MTg1OTkw LzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsf2g8y2 hAhsX+/cxr3vU34S7OPef/IkEqVvj4BLQaAHp7fXM4HXrzWrqSrceMW09IP/RwD9 H1vzGqzxWRAGzC0a+PX4BBRXY89jKF2fyylOvZLAPHWNu06gDbz8YJDF6aDWdM8G Q9X0bj926ZBMzAoNQEUOuwMCcD99XSpuUhmYdb1O5aHRfOzXY99WwZ4UBxH0Q04Q 5B5/V2E0BiNdpQHaB5ifz3kB8C1KJ7eP5EBSlt1S6ImksRyYvv4tThtKIWgcP1iq MdTJwtdX225KukWiP2vio9aPl49ZFr/oQVaEtQItA9egBxDnJh7ZMYdDv2cfCGd+ rna7laeF2TK+Ig== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:31 2026 by rpki-client