This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json) Hash identifier: kDtCBcWuMV9oVdgmhP2Mff07M8T8j2B/t0uf3ZJH9ZA= Subject key identifier: 66:A2:39:5D:45:2C:10:94:77:B8:45:3B:64:96:76:C1:4B:D4:08:5B Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Certificate serial: 019C446B70589FE5B2B7461A73C97BFEDA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 22:00:17 +0000 Manifest this update: Mon 09 Feb 2026 22:00:17 +0000 Manifest next update: Tue 10 Feb 2026 22:00:17 +0000 Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=) 2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: a4rdCfrAT4gxBDk5/K3W4BQEshndAZRpA6DnEptlTN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:70:58:9f:e5:b2:b7:46:1a:73:c9:7b:fe:da:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Validity Not Before: Feb 9 22:00:17 2026 GMT Not After : Feb 10 22:00:17 2026 GMT Subject: CN=66a2395d452c109477b8453b649676c14bd4085b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:44:25:df:83:e1:b2:99:a9:06:c6:59:85: 7b:a9:07:36:78:bd:43:b0:f8:16:96:1d:e0:9f:73: 90:00:57:bb:79:de:8f:9d:4d:66:af:63:df:29:c9: 8c:11:3c:84:89:c7:0f:5c:44:0e:31:cc:08:2e:6c: bf:2f:e6:c4:9e:f2:53:54:cb:72:ae:d8:9d:72:62: 06:73:7f:05:25:1c:9f:13:04:60:03:fc:70:0c:a2: 56:fc:10:cc:48:bd:24:2e:5a:f2:ae:89:3d:0d:11: 42:05:2a:d5:18:56:f1:7c:56:b1:63:9a:24:58:12: 18:19:06:2e:29:8d:7e:01:9c:9b:4a:f1:ad:73:7c: 77:7a:1f:27:26:bc:1d:cc:b7:77:4c:d1:54:e9:be: d0:19:5c:d6:5f:31:e1:c1:7f:7f:0a:40:3e:95:17: fb:6f:1e:86:aa:2f:f8:df:99:60:8a:ef:5f:51:cd: 9b:59:41:a8:68:34:30:89:3b:e4:bd:ee:3a:63:4b: 74:9d:89:b8:5f:3b:04:c9:19:25:39:68:d3:ea:e0: f8:27:b4:3f:c7:b0:83:28:68:a2:d1:f6:8c:76:81: 7a:c7:38:1c:f1:9a:97:c3:43:20:d3:12:b5:1e:f7: 88:c3:ab:2b:83:77:74:ab:78:8a:68:dc:1e:08:95: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:39:5D:45:2C:10:94:77:B8:45:3B:64:96:76:C1:4B:D4:08:5B X509v3 Authority Key Identifier: keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3d:65:49:dd:c6:bd:c9:22:db:8b:b4:9e:be:ca:6a:7c:25: 22:b9:9c:78:57:63:63:1c:3f:8e:a7:1d:c0:ac:5c:fc:ba:60: 2a:f2:42:55:6a:38:bf:2f:3c:3b:af:80:3c:c9:b7:f8:62:89: fb:f2:c3:37:d1:23:fa:03:9a:51:46:44:d7:80:01:5c:b6:8c: 84:40:33:ad:fd:00:9c:3f:29:8e:20:87:0a:28:57:df:fb:a3: d7:3f:5e:10:b7:16:e7:3c:94:58:df:c7:1b:f7:32:a4:94:d6: af:af:81:17:db:fb:3c:70:62:71:b2:19:89:f5:53:2e:0d:c2: 37:2f:db:3b:3a:40:d0:e4:da:72:7d:80:9c:93:38:5f:cf:25: a1:d4:f8:fa:bb:a9:4e:00:76:4e:36:30:b8:70:fb:43:3c:be: 15:00:b8:b7:a2:9a:b5:90:26:d5:8c:d5:00:49:23:ce:38:da: 31:92:c7:01:c8:c4:01:e6:b6:cf:fa:3b:3e:de:d2:d3:c3:e5: 55:de:cb:32:4f:a8:0f:ba:0d:fb:7c:50:83:7c:bf:d4:c4:55: cb:13:d4:f5:9a:3f:92:ca:f7:07:ec:b9:60:ec:a9:30:2c:a8: a1:0e:e6:3f:43:06:9b:29:a8:c7:cf:0b:ba:55:88:e7:2b:20: 39:34:08:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa3BYn+Wyt0Yac8l7/tpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi MWJiOWUwHhcNMjYwMjA5MjIwMDE3WhcNMjYwMjEwMjIwMDE3WjAzMTEwLwYDVQQD Eyg2NmEyMzk1ZDQ1MmMxMDk0NzdiODQ1M2I2NDk2NzZjMTRiZDQwODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjREJd+D4bKZqQbGWYV7qQc2eL1D sPgWlh3gn3OQAFe7ed6PnU1mr2PfKcmMETyEiccPXEQOMcwILmy/L+bEnvJTVMty rtidcmIGc38FJRyfEwRgA/xwDKJW/BDMSL0kLlryrok9DRFCBSrVGFbxfFaxY5ok WBIYGQYuKY1+AZybSvGtc3x3eh8nJrwdzLd3TNFU6b7QGVzWXzHhwX9/CkA+lRf7 bx6Gqi/435lgiu9fUc2bWUGoaDQwiTvkve46Y0t0nYm4XzsEyRklOWjT6uD4J7Q/ x7CDKGii0faMdoF6xzgc8ZqXw0Mg0xK1HveIw6srg3d0q3iKaNweCJXnXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaiOV1FLBCUd7hFO2SWdsFL1AhbMB8GA1UdIwQY MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz1lSd3G vcki24u0nr7KanwlIrmceFdjYxw/jqcdwKxc/LpgKvJCVWo4vy88O6+APMm3+GKJ +/LDN9Ej+gOaUUZE14ABXLaMhEAzrf0AnD8pjiCHCihX3/uj1z9eELcW5zyUWN/H G/cypJTWr6+BF9v7PHBicbIZifVTLg3CNy/bOzpA0OTacn2AnJM4X88lodT4+rup TgB2TjYwuHD7Qzy+FQC4t6KatZAm1YzVAEkjzjjaMZLHAcjEAea2z/o7Pt7S08Pl Vd7LMk+oD7oN+3xQg3y/1MRVyxPU9Zo/ksr3B+y5YOypMCyooQ7mP0MGmymox88L ulWI5ysgOTQIlA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:51 2026 by rpki-client