This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft File: iT19gAU9AYpRb_UWSNFp8DjIlyo.mft (raw, json) Hash identifier: GYTQ2mkQuBzegdMb2zcWfqojvUhMJM7mXv9vHOUghbw= Subject key identifier: CA:A9:56:52:26:3A:F0:E9:E3:0A:12:8E:D4:C0:CA:09:1B:35:F8:FF Authority key identifier: 89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A Certificate issuer: /CN=893d7d80053d018a516ff51648d169f038c8972a Certificate serial: 019C41A28F10D1DDCE563468A8BEE486CAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft Manifest number: 06 Signing time: Mon 09 Feb 2026 09:01:38 +0000 Manifest this update: Mon 09 Feb 2026 09:01:38 +0000 Manifest next update: Tue 10 Feb 2026 09:01:38 +0000 Files and hashes: 1: iT19gAU9AYpRb_UWSNFp8DjIlyo.crl (hash: al8cKgDlgut2KFS1elo67rqFQNEZBo9Jc+E40nXUw1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:8f:10:d1:dd:ce:56:34:68:a8:be:e4:86:ca:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893d7d80053d018a516ff51648d169f038c8972a Validity Not Before: Feb 9 09:01:38 2026 GMT Not After : Feb 10 09:01:38 2026 GMT Subject: CN=caa95652263af0e9e30a128ed4c0ca091b35f8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:76:99:1d:f6:e9:4d:01:d4:60:dd:d7:a0: 27:57:64:d8:32:d3:db:df:2d:1a:12:fd:ae:7a:a7: fc:08:d0:a3:65:57:47:7a:b2:9b:f5:a1:a9:7b:03: 06:97:66:75:0a:84:24:eb:8e:91:af:00:de:9f:4f: 63:1e:4d:cf:ff:36:d0:ff:f8:8f:6d:b5:20:f1:98: ac:a5:f1:1b:67:0d:f2:a8:76:f1:ef:87:55:55:5d: 97:af:8e:7f:92:17:5c:57:0b:4a:b7:44:cb:a6:6a: 31:65:ad:c7:de:7f:f9:83:51:a3:db:94:5b:11:55: fe:5e:80:08:42:b8:1b:6d:67:ab:b4:04:19:66:b7: 32:aa:f8:55:26:d4:49:fd:0e:04:c2:5d:be:97:8f: 52:10:e6:77:55:b4:4f:e5:a7:89:e9:51:36:04:ce: 3f:c0:7e:b1:e3:20:ed:e6:62:f8:07:10:0f:3f:8c: 7e:ec:b2:95:9a:5b:7c:6e:1f:89:57:42:7e:2b:f5: 7b:4c:43:40:2c:17:61:3c:3e:fd:d1:a0:4d:85:d4: a3:47:a0:d6:0f:cf:91:f5:69:a3:2e:b2:61:c6:05: c6:e7:e3:89:23:a6:75:ba:c2:67:49:55:f1:5d:f9: bc:84:13:f2:31:de:29:0e:ad:87:fe:6c:68:e7:84: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:56:52:26:3A:F0:E9:E3:0A:12:8E:D4:C0:CA:09:1B:35:F8:FF X509v3 Authority Key Identifier: keyid:89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:05:17:00:d8:2b:d6:e5:84:22:70:23:2f:fb:3b:ef:98:a6: 9b:5c:3f:88:5a:55:62:85:0d:ef:04:72:b0:4d:1f:fc:9f:d4: 74:44:85:c1:5c:a6:02:fa:09:df:d0:cf:46:e9:7c:d1:6f:08: 3c:c7:7e:03:86:3d:9d:14:d2:b4:f7:6e:3b:6c:fa:34:b5:1d: b6:5f:c4:cb:be:42:87:89:83:e8:c7:e4:70:d3:57:3c:a9:a0: 73:38:69:e4:30:e8:c5:24:16:ca:97:c9:8b:5d:51:17:3f:a2: 04:62:f6:1d:cb:06:14:0b:bc:b1:66:ae:d1:f0:d6:d7:d0:ac: 0a:2a:0f:35:2b:ee:cd:e7:9e:bf:e5:14:0b:32:e8:33:95:6e: 83:44:9d:cc:7a:1c:25:1b:46:92:ea:f0:81:d6:50:fd:bf:c9: d1:bd:cc:d0:7a:e8:10:b1:28:a1:10:57:3e:dc:49:ee:bb:8d: bc:b2:c7:d7:7f:0e:6d:fb:25:e4:01:a7:1d:1f:13:00:b1:11: 1f:64:ca:d2:fd:61:84:c0:74:db:e1:07:c9:a3:e1:d1:62:5a: 17:e0:8e:74:69:1a:e6:00:0e:1b:81:42:73:9e:f5:c6:86:6e: 0a:97:7a:41:57:af:96:22:b1:cd:f9:38:e4:1d:58:eb:7f:df: ff:0e:f6:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoo8Q0d3OVjRoqL7khsqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2Q3ZDgwMDUzZDAxOGE1MTZmZjUxNjQ4ZDE2OWYwMzhj ODk3MmEwHhcNMjYwMjA5MDkwMTM4WhcNMjYwMjEwMDkwMTM4WjAzMTEwLwYDVQQD EyhjYWE5NTY1MjI2M2FmMGU5ZTMwYTEyOGVkNGMwY2EwOTFiMzVmOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUV2mR326U0B1GDd16AnV2TYMtPb 3y0aEv2ueqf8CNCjZVdHerKb9aGpewMGl2Z1CoQk646RrwDen09jHk3P/zbQ//iP bbUg8ZispfEbZw3yqHbx74dVVV2Xr45/khdcVwtKt0TLpmoxZa3H3n/5g1Gj25Rb EVX+XoAIQrgbbWertAQZZrcyqvhVJtRJ/Q4Ewl2+l49SEOZ3VbRP5aeJ6VE2BM4/ wH6x4yDt5mL4BxAPP4x+7LKVmlt8bh+JV0J+K/V7TENALBdhPD790aBNhdSjR6DW D8+R9WmjLrJhxgXG5+OJI6Z1usJnSVXxXfm8hBPyMd4pDq2H/mxo54RaiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqpVlImOvDp4woSjtTAygkbNfj/MB8GA1UdIwQY MBaAFIk9fYAFPQGKUW/1FkjRafA4yJcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84MjA5ODgtZmIwZC00MGJhLTgyNzIt MzIxMDMzYWE2MzQ4LzEvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84MjA5ODgtZmIwZC00MGJhLTgyNzItMzIxMDMzYWE2MzQ4 LzEvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwUXANgr 1uWEInAjL/s775imm1w/iFpVYoUN7wRysE0f/J/UdESFwVymAvoJ39DPRul80W8I PMd+A4Y9nRTStPduO2z6NLUdtl/Ey75Ch4mD6MfkcNNXPKmgczhp5DDoxSQWypfJ i11RFz+iBGL2HcsGFAu8sWau0fDW19CsCioPNSvuzeeev+UUCzLoM5Vug0SdzHoc JRtGkurwgdZQ/b/J0b3M0HroELEooRBXPtxJ7ruNvLLH138Obfsl5AGnHR8TALER H2TK0v1hhMB02+EHyaPh0WJaF+COdGka5gAOG4FCc571xoZuCpd6QVevliKxzfk4 5B1Y63/f/w72ng== -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:21 2026 by rpki-client