This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json) Hash identifier: 8wzdkXm/YHfzanyaNjLk3XXzCmPJAG5hF4Ymn7+BPzo= Subject key identifier: DA:9B:F5:C0:2E:43:18:AF:CE:E8:54:5C:56:67:C9:E6:32:D5:6E:FE Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10 Certificate serial: 019C42B47ED02F031F831C4E71D45A72E68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft Manifest number: 01FA Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: cRCOj2tH/Dw8W/0sYXa5xCckWzCH9t4wTPWgDKEVvRQ=) 2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7e:d0:2f:03:1f:83:1c:4e:71:d4:5a:72:e6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10 Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=da9bf5c02e4318afcee8545c5667c9e632d56efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:61:c9:8f:cb:2d:98:0f:14:f5:02:34:d6: 24:7b:b3:83:c5:65:10:fc:2a:59:68:48:73:94:00: 9b:93:a7:60:a3:4c:35:d5:0a:70:fe:b3:6d:33:09: 84:9d:92:52:37:22:70:10:0a:ec:af:3b:41:6c:67: 23:0b:0d:6b:69:5b:99:d9:61:fc:78:fd:ca:d0:e5: c1:2d:af:81:58:c7:f2:70:4a:8b:f6:97:47:3b:18: 53:12:7a:08:16:25:35:53:ba:f1:89:a0:92:c5:62: 1b:f9:2d:94:d4:b2:06:50:07:c7:b6:18:0a:77:44: 20:51:84:21:40:04:a2:9c:91:9e:79:e4:78:4f:cd: 2b:23:ae:f3:5d:ec:e0:55:c7:c1:ae:d6:89:9c:39: 66:e0:83:e5:6f:da:9f:78:f6:f7:76:d4:b9:88:54: f6:11:76:0c:bc:26:b8:bf:59:72:ab:8b:30:85:1f: 08:85:49:5f:df:da:40:af:77:fc:5c:b4:43:32:32: 05:fc:28:39:18:ec:69:e9:e8:ea:3c:70:42:9b:13: 17:b1:10:0b:83:f6:78:ea:74:b7:d8:fa:8b:ca:3b: c3:dc:b8:0d:23:d8:9c:52:8d:0d:2c:c8:50:5d:c3: 5e:85:51:85:0e:81:c1:a3:15:5a:bc:da:8e:a9:b4: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9B:F5:C0:2E:43:18:AF:CE:E8:54:5C:56:67:C9:E6:32:D5:6E:FE X509v3 Authority Key Identifier: keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a7:c6:c8:ec:98:4a:ae:26:5f:da:e5:b5:b5:9e:ce:73:f2: c7:f7:14:9b:7a:0b:4d:f3:fd:d7:8d:41:58:ec:fb:8f:11:16: 5b:11:4f:2f:20:f6:88:4a:8b:4e:46:b2:f5:1b:5b:e5:ab:7c: 61:cd:0a:c3:91:7e:18:ca:e7:01:3e:ae:40:30:83:fd:7c:cb: bb:ed:bb:4d:69:a0:15:9d:2a:01:53:1f:28:6e:ce:31:ff:23: e9:7e:58:6b:f5:b8:aa:7b:34:fd:9e:23:14:25:33:43:b2:a2: 9d:aa:fa:15:f5:fb:49:73:fd:09:4c:e8:27:9e:d3:c2:77:84: 6c:b8:ec:1b:e0:97:46:90:6d:d5:f3:39:59:15:dd:08:cd:3b: a8:85:b0:23:e1:76:9f:7c:7d:b9:20:b8:26:aa:2a:01:16:fa: 2d:4d:47:a2:94:8f:7a:82:4c:26:6c:d3:e2:87:d0:5c:28:d8: 5d:85:44:c2:23:50:12:28:f0:52:ce:5a:a9:bf:9b:94:24:41: 04:ba:3d:31:27:a8:24:18:3b:a2:0b:43:87:81:cd:41:a8:6d: 43:06:68:b0:0c:2e:5f:a0:17:9b:81:97:1e:ef:4a:5b:21:12: d4:8b:5f:c5:80:7b:66:ea:19:81:84:e0:41:85:1c:63:34:aa: c4:3d:90:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH7QLwMfgxxOcdRacuaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz MThmMTAwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EyhkYTliZjVjMDJlNDMxOGFmY2VlODU0NWM1NjY3YzllNjMyZDU2ZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa9hyY/LLZgPFPUCNNYke7ODxWUQ /CpZaEhzlACbk6dgo0w11Qpw/rNtMwmEnZJSNyJwEArsrztBbGcjCw1raVuZ2WH8 eP3K0OXBLa+BWMfycEqL9pdHOxhTEnoIFiU1U7rxiaCSxWIb+S2U1LIGUAfHthgK d0QgUYQhQASinJGeeeR4T80rI67zXezgVcfBrtaJnDlm4IPlb9qfePb3dtS5iFT2 EXYMvCa4v1lyq4swhR8IhUlf39pAr3f8XLRDMjIF/Cg5GOxp6ejqPHBCmxMXsRAL g/Z46nS32PqLyjvD3LgNI9icUo0NLMhQXcNehVGFDoHBoxVavNqOqbTHLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqb9cAuQxivzuhUXFZnyeYy1W7+MB8GA1UdIwQY MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKfGyOyY Sq4mX9rltbWeznPyx/cUm3oLTfP9141BWOz7jxEWWxFPLyD2iEqLTkay9Rtb5at8 Yc0Kw5F+GMrnAT6uQDCD/XzLu+27TWmgFZ0qAVMfKG7OMf8j6X5Ya/W4qns0/Z4j FCUzQ7Kinar6FfX7SXP9CUzoJ57TwneEbLjsG+CXRpBt1fM5WRXdCM07qIWwI+F2 n3x9uSC4JqoqARb6LU1HopSPeoJMJmzT4ofQXCjYXYVEwiNQEijwUs5aqb+blCRB BLo9MSeoJBg7ogtDh4HNQahtQwZosAwuX6AXm4GXHu9KWyES1ItfxYB7ZuoZgYTg QYUcYzSqxD2QtA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:27 2026 by rpki-client