This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json) Hash identifier: w2XOQpBwVfdxmTUUJkR1bVE1I6ek4LsRqpVFtuNQgXY= Subject key identifier: 9E:45:FE:8A:95:15:F8:54:24:A2:A3:A5:59:2E:A0:9E:17:B0:E9:98 Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782 Certificate serial: 019C44D9DE104547E21DE0E2F5625197B1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft Manifest number: 0933 Signing time: Tue 10 Feb 2026 00:00:54 +0000 Manifest this update: Tue 10 Feb 2026 00:00:54 +0000 Manifest next update: Wed 11 Feb 2026 00:00:54 +0000 Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: NQIyVIyian/wa78azx8HgxYQWa3kSv4IQX8sXgPozE0=) 2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:de:10:45:47:e2:1d:e0:e2:f5:62:51:97:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782 Validity Not Before: Feb 10 00:00:54 2026 GMT Not After : Feb 11 00:00:54 2026 GMT Subject: CN=9e45fe8a9515f85424a2a3a5592ea09e17b0e998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:23:47:7e:60:02:88:d6:5a:2a:d4:7a:82: ef:05:bc:0d:ad:ca:5f:c1:75:b2:98:50:82:ea:94: e5:58:5f:57:6b:e1:25:af:4d:bd:bf:ff:2c:e3:ba: c5:56:64:ab:a0:55:40:3d:a7:92:54:67:3f:fe:0f: c8:52:ae:06:4a:40:16:85:57:fa:1f:ae:02:ae:0b: c0:8a:c2:af:ef:d4:ef:0e:f1:28:2e:af:08:09:a1: 88:32:5e:a6:b2:e8:77:95:29:a9:04:72:47:73:c5: dd:39:0c:8c:1f:48:20:97:f2:13:82:71:00:20:d8: 20:f6:c4:58:4d:3d:22:1c:08:4e:d6:33:9d:44:d0: f0:a9:29:f9:a0:84:f4:65:57:7e:90:0e:dc:0a:d4: c7:98:48:4e:9b:cd:16:41:2d:9f:27:60:d6:8f:b8: 7c:4f:80:07:42:09:5e:5e:ea:1e:9f:fe:a8:01:bb: ed:f2:b3:b7:5f:cd:22:ba:60:33:05:28:99:06:1f: 1d:f6:1c:11:06:5f:37:54:ac:36:c7:84:02:95:df: 1a:3d:90:3d:e8:59:7e:fd:aa:4f:24:1b:bb:74:f2: 92:ba:a2:6b:bb:0d:91:82:ac:df:3f:1d:0c:dc:11: be:e1:ce:53:2d:71:04:bc:14:0a:a1:89:fe:f8:4c: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:FE:8A:95:15:F8:54:24:A2:A3:A5:59:2E:A0:9E:17:B0:E9:98 X509v3 Authority Key Identifier: keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:63:e4:42:7a:b2:ed:27:1e:90:62:d2:91:d0:97:e1:9a:e0: 34:86:74:51:fc:8c:4e:b5:b2:d0:bd:4b:53:3c:54:25:61:a1: b6:b7:60:61:cd:ee:9c:76:dd:43:d3:6d:b3:71:13:67:a1:f2: 08:4f:57:c4:a9:68:16:68:55:18:2a:92:cb:d6:6c:e0:23:79: 57:32:3f:09:22:3b:c8:2e:5b:1e:19:7e:e1:63:f2:33:b2:2c: e1:05:97:44:32:7d:51:bf:57:6d:bb:5e:87:7c:bd:ce:46:d1: 35:76:76:32:7f:f4:da:fb:4f:d0:d7:73:a6:c9:5d:69:d5:cc: 9f:17:64:92:de:74:98:6c:41:a6:7e:12:9d:7e:ca:3f:d5:ef: 2f:98:68:25:4a:bb:fb:2e:73:fd:c6:d9:3a:30:ed:2f:7b:b6: d3:f0:d2:ee:9c:4c:fb:58:5b:e4:4a:77:ab:40:d1:50:d9:5b: 7f:49:e1:61:88:5b:af:31:af:e1:f3:79:2e:55:f7:ad:eb:0f: 69:f8:07:7d:93:bf:7a:8f:69:21:b9:59:aa:85:ab:41:4e:50: 29:26:b4:32:b3:32:54:ae:73:97:fb:3d:97:8b:53:37:26:95: 7b:7e:18:65:30:ff:a8:e9:28:a7:cb:8f:dd:7e:a9:f0:a9:a7: 7e:0d:23:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2d4QRUfiHeDi9WJRl7HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy OTM3ODIwHhcNMjYwMjEwMDAwMDU0WhcNMjYwMjExMDAwMDU0WjAzMTEwLwYDVQQD Eyg5ZTQ1ZmU4YTk1MTVmODU0MjRhMmEzYTU1OTJlYTA5ZTE3YjBlOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkYjR35gAojWWirUeoLvBbwNrcpf wXWymFCC6pTlWF9Xa+Elr029v/8s47rFVmSroFVAPaeSVGc//g/IUq4GSkAWhVf6 H64CrgvAisKv79TvDvEoLq8ICaGIMl6msuh3lSmpBHJHc8XdOQyMH0ggl/ITgnEA INgg9sRYTT0iHAhO1jOdRNDwqSn5oIT0ZVd+kA7cCtTHmEhOm80WQS2fJ2DWj7h8 T4AHQgleXuoen/6oAbvt8rO3X80iumAzBSiZBh8d9hwRBl83VKw2x4QCld8aPZA9 6Fl+/apPJBu7dPKSuqJruw2RgqzfPx0M3BG+4c5TLXEEvBQKoYn++Ezm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5F/oqVFfhUJKKjpVkuoJ4XsOmYMB8GA1UdIwQY MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2PkQnqy 7ScekGLSkdCX4ZrgNIZ0UfyMTrWy0L1LUzxUJWGhtrdgYc3unHbdQ9Nts3ETZ6Hy CE9XxKloFmhVGCqSy9Zs4CN5VzI/CSI7yC5bHhl+4WPyM7Is4QWXRDJ9Ub9Xbbte h3y9zkbRNXZ2Mn/02vtP0NdzpsldadXMnxdkkt50mGxBpn4SnX7KP9XvL5hoJUq7 +y5z/cbZOjDtL3u20/DS7pxM+1hb5Ep3q0DRUNlbf0nhYYhbrzGv4fN5LlX3resP afgHfZO/eo9pIblZqoWrQU5QKSa0MrMyVK5zl/s9l4tTNyaVe34YZTD/qOkop8uP 3X6p8Kmnfg0jEg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:58 2026 by rpki-client