This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json) Hash identifier: NFMel/Gv9QmoQxwVek6XHwMvmvyO+TEwlIxvwnZcZQQ= Subject key identifier: D4:D3:3F:2D:FB:9F:51:1A:DF:EF:96:51:ED:CB:0D:7F:A0:38:32:28 Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782 Certificate serial: 019C42EAD8E820C8E3B3A8820E184135154F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft Manifest number: 0932 Signing time: Mon 09 Feb 2026 15:00:12 +0000 Manifest this update: Mon 09 Feb 2026 15:00:12 +0000 Manifest next update: Tue 10 Feb 2026 15:00:12 +0000 Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: KkQ3vto+zZmYhkVTHqbXq+kK9O+uqqKivlCZxYsCqYY=) 2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:d8:e8:20:c8:e3:b3:a8:82:0e:18:41:35:15:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782 Validity Not Before: Feb 9 15:00:12 2026 GMT Not After : Feb 10 15:00:12 2026 GMT Subject: CN=d4d33f2dfb9f511adfef9651edcb0d7fa0383228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:52:18:fc:a0:54:78:98:21:b1:62:bd:65: 77:13:a1:0f:e8:75:ab:07:e1:2a:be:a5:dd:25:7c: 91:5f:c7:a1:fd:4d:08:8b:36:80:22:29:d8:5a:e7: c6:c4:6a:3f:35:80:fe:f7:d9:b1:e8:d4:e0:6f:55: 4d:57:ab:67:aa:cd:7b:f1:da:d3:8a:68:a1:6a:af: f9:71:13:2b:33:a0:fc:48:29:b2:b6:55:5b:5c:34: fe:8e:7a:60:e8:34:bc:13:54:ea:f9:51:22:21:ab: b5:d9:50:1e:85:93:8d:a2:e0:db:3c:5c:20:e6:06: 38:3a:c8:f2:7a:f6:fb:cd:87:2f:4c:f7:1e:68:62: d8:f9:d4:85:bc:00:15:11:a6:a7:e6:69:b9:a4:b8: 61:e7:94:66:62:e1:63:61:b8:a3:0e:36:a1:b3:f7: 6d:c8:97:da:6f:a3:0c:5b:ca:b4:4b:df:72:7f:0c: 06:73:22:e8:b1:d9:16:78:fd:5a:d7:15:2d:8e:a0: de:b1:96:e6:2f:61:7c:a2:76:e9:34:7f:50:e9:28: bf:dd:45:46:cb:e1:3c:d8:20:a6:e8:a9:31:bc:96: 34:68:38:82:a0:6f:67:26:2d:98:d9:ac:57:88:c3: 1e:a0:3e:13:62:4e:96:22:04:d6:69:99:f2:22:7d: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D3:3F:2D:FB:9F:51:1A:DF:EF:96:51:ED:CB:0D:7F:A0:38:32:28 X509v3 Authority Key Identifier: keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3f:f8:78:fa:89:71:b9:ce:5c:7c:2f:46:68:1d:65:62:0b: 14:36:10:21:b6:7f:73:07:d2:e5:61:24:c9:8e:b1:9a:3c:89: ec:f9:f0:b3:31:e2:15:74:30:fb:0e:ba:22:ef:7d:28:f2:58: 45:fc:bd:bb:8c:e7:3d:fd:e3:b1:15:e4:d5:67:0b:6d:64:53: 6c:00:f9:f0:94:93:93:2b:99:fb:de:fc:58:e5:39:12:01:e4: 64:62:f7:da:96:32:0c:98:64:5e:01:48:71:0d:12:45:51:f7: 13:d2:a4:49:3d:d5:1f:e2:c1:8c:2b:a2:23:6d:f3:7b:8d:ca: 00:7b:82:02:6d:35:04:d2:23:73:46:17:02:2a:62:6f:ef:7b: aa:21:cd:30:d3:18:ed:dd:d2:a3:4d:4b:8e:d7:33:a1:71:e6: ff:ef:ae:95:62:74:7b:7a:22:9f:31:02:58:e3:e7:b1:87:07: 5f:c0:3f:e1:10:09:10:76:03:07:0d:98:66:8f:d2:6d:f9:c6: fd:f8:1b:cd:fd:2f:f2:10:98:93:d6:fa:3a:cf:88:01:72:21: bb:bb:d5:09:79:dc:f6:90:70:48:2c:c7:59:f9:85:f1:26:f6: 75:7f:6c:8a:f2:9e:76:4d:1a:32:ca:7f:23:68:f8:95:c6:a3: 01:f2:7f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6tjoIMjjs6iCDhhBNRVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy OTM3ODIwHhcNMjYwMjA5MTUwMDEyWhcNMjYwMjEwMTUwMDEyWjAzMTEwLwYDVQQD EyhkNGQzM2YyZGZiOWY1MTFhZGZlZjk2NTFlZGNiMGQ3ZmEwMzgzMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs9SGPygVHiYIbFivWV3E6EP6HWr B+EqvqXdJXyRX8eh/U0IizaAIinYWufGxGo/NYD+99mx6NTgb1VNV6tnqs178drT imihaq/5cRMrM6D8SCmytlVbXDT+jnpg6DS8E1Tq+VEiIau12VAehZONouDbPFwg 5gY4Osjyevb7zYcvTPceaGLY+dSFvAAVEaan5mm5pLhh55RmYuFjYbijDjahs/dt yJfab6MMW8q0S99yfwwGcyLosdkWeP1a1xUtjqDesZbmL2F8onbpNH9Q6Si/3UVG y+E82CCm6KkxvJY0aDiCoG9nJi2Y2axXiMMeoD4TYk6WIgTWaZnyIn3wzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTTPy37n1Ea3++WUe3LDX+gODIoMB8GA1UdIwQY MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHz/4ePqJ cbnOXHwvRmgdZWILFDYQIbZ/cwfS5WEkyY6xmjyJ7PnwszHiFXQw+w66Iu99KPJY Rfy9u4znPf3jsRXk1WcLbWRTbAD58JSTkyuZ+978WOU5EgHkZGL32pYyDJhkXgFI cQ0SRVH3E9KkST3VH+LBjCuiI23ze43KAHuCAm01BNIjc0YXAipib+97qiHNMNMY 7d3So01LjtczoXHm/++ulWJ0e3oinzECWOPnsYcHX8A/4RAJEHYDBw2YZo/SbfnG /fgbzf0v8hCYk9b6Os+IAXIhu7vVCXnc9pBwSCzHWfmF8Sb2dX9sivKedk0aMsp/ I2j4lcajAfJ/tQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:37 2026 by rpki-client