This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json) Hash identifier: LZhKkBgiKgmX1YOI1BOwW9Lj5m7l7LtTHBXtSsBKzi8= Subject key identifier: 69:91:C1:8A:AC:43:59:4E:48:C2:C1:BB:7F:72:72:9F:DB:53:E9:F6 Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10 Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10 Certificate serial: 019C413448799234995818CC34366C05371E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft Manifest number: 0B82 Signing time: Mon 09 Feb 2026 07:01:11 +0000 Manifest this update: Mon 09 Feb 2026 07:01:11 +0000 Manifest next update: Tue 10 Feb 2026 07:01:11 +0000 Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: YXGkIMj0teOkm9ndPhIB4j1h/kOkhYgrARVpIQ48thQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:48:79:92:34:99:58:18:cc:34:36:6c:05:37:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10 Validity Not Before: Feb 9 07:01:11 2026 GMT Not After : Feb 10 07:01:11 2026 GMT Subject: CN=6991c18aac43594e48c2c1bb7f72729fdb53e9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:87:89:31:e2:00:f8:ed:f7:c5:c7:99:00: 81:4e:5c:42:ed:df:44:b5:75:36:c3:bd:1f:b3:b1: 5d:ce:4c:17:5c:82:d0:3e:6c:9a:a2:e1:82:a2:0b: fa:b4:f6:ce:9e:9d:82:ed:82:40:f9:77:13:ec:82: 97:9a:dd:b3:0a:8f:13:24:aa:3c:00:30:c7:8e:7c: 53:bb:66:48:32:3a:5a:41:86:7c:e7:a0:7b:5f:06: 7c:2a:b5:46:18:28:eb:56:e9:6e:b6:d3:49:48:5f: 8e:87:05:9f:99:09:60:be:af:73:45:60:1c:7a:ce: b8:1f:09:84:18:0e:1a:55:05:01:4e:5e:c1:3a:32: 32:a5:cf:5b:71:d7:7d:6a:3a:22:7a:df:7a:52:d3: 2a:f9:ad:8a:79:ee:45:de:ff:e2:12:86:48:eb:ac: 7f:8c:7b:47:2b:6f:7a:28:c3:51:7f:86:71:7b:70: e4:aa:d5:30:9c:bb:33:31:47:54:e6:b5:a6:a7:e2: 95:9e:95:6c:e4:cd:42:62:4e:aa:90:fe:37:25:a0: 3b:97:a7:2f:64:1b:f1:7e:94:7e:af:6a:e0:da:3b: c0:dd:b9:c4:d2:58:71:47:fb:f3:e9:f6:6a:24:39: 8e:38:f5:05:22:c9:35:2a:29:9c:2d:a0:2d:08:71: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:C1:8A:AC:43:59:4E:48:C2:C1:BB:7F:72:72:9F:DB:53:E9:F6 X509v3 Authority Key Identifier: keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c4:8e:e3:bf:5a:65:fb:88:92:0b:bf:ac:6e:d3:e1:e3:6a: 4a:c0:a0:a2:85:c7:97:43:76:67:57:d3:b1:70:e8:71:4d:15: 5d:93:23:28:7e:ab:55:8b:57:00:e8:eb:8f:33:ce:b8:67:5d: 1b:c8:5e:12:88:d6:79:29:9d:a0:8b:62:18:c5:0b:cf:2d:7e: c9:b3:f4:e1:33:59:44:52:18:85:0b:88:a8:14:f5:d6:f6:88: ce:3e:c4:0a:3e:bc:1f:cb:57:03:ed:4b:73:42:92:2f:fe:ff: 3a:00:be:76:c7:e8:43:6c:89:81:ce:00:85:17:37:24:1e:64: 72:65:4c:12:fd:0c:0e:44:d3:33:a2:82:31:29:c3:91:fc:f1: 70:95:68:e9:ff:9f:7d:cb:da:fc:00:74:1d:49:c6:e5:94:14: f1:c4:8a:d6:31:ae:ad:64:cb:30:62:3c:62:71:00:c2:5a:a2: d4:00:7d:cb:a1:c1:b4:d8:7c:90:85:22:a3:c8:1d:26:e4:cb: 07:f9:2f:f3:02:0e:8a:e0:c4:48:f5:b5:50:fb:14:f9:7d:87: 29:ef:c2:3d:4b:bc:da:cc:25:f6:21:24:39:3a:23:97:d2:ca: ce:67:41:65:ba:26:b5:a8:a7:3d:e4:cc:b4:ca:47:3e:77:0e: d9:f3:11:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNEh5kjSZWBjMNDZsBTceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmIxMDFjMTA3MDNhYjYwMzIxZmM2M2RjZDY2OTBhNTI0 ZGJiMTAwHhcNMjYwMjA5MDcwMTExWhcNMjYwMjEwMDcwMTExWjAzMTEwLwYDVQQD Eyg2OTkxYzE4YWFjNDM1OTRlNDhjMmMxYmI3ZjcyNzI5ZmRiNTNlOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApneHiTHiAPjt98XHmQCBTlxC7d9E tXU2w70fs7FdzkwXXILQPmyaouGCogv6tPbOnp2C7YJA+XcT7IKXmt2zCo8TJKo8 ADDHjnxTu2ZIMjpaQYZ856B7XwZ8KrVGGCjrVuluttNJSF+OhwWfmQlgvq9zRWAc es64HwmEGA4aVQUBTl7BOjIypc9bcdd9ajoiet96UtMq+a2Kee5F3v/iEoZI66x/ jHtHK296KMNRf4Zxe3DkqtUwnLszMUdU5rWmp+KVnpVs5M1CYk6qkP43JaA7l6cv ZBvxfpR+r2rg2jvA3bnE0lhxR/vz6fZqJDmOOPUFIsk1KimcLaAtCHG8KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmRwYqsQ1lOSMLBu39ycp/bU+n2MB8GA1UdIwQY MBaAFCArEBwQcDq2AyH8Y9zWaQpSTbsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOThhZGMtZWRlMC00YzJhLThjNTYt YTQ0YzhlNjU0ZGY2LzEvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iOThhZGMtZWRlMC00YzJhLThjNTYtYTQ0YzhlNjU0ZGY2 LzEvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacSO479a ZfuIkgu/rG7T4eNqSsCgooXHl0N2Z1fTsXDocU0VXZMjKH6rVYtXAOjrjzPOuGdd G8heEojWeSmdoItiGMULzy1+ybP04TNZRFIYhQuIqBT11vaIzj7ECj68H8tXA+1L c0KSL/7/OgC+dsfoQ2yJgc4AhRc3JB5kcmVMEv0MDkTTM6KCMSnDkfzxcJVo6f+f fcva/AB0HUnG5ZQU8cSK1jGurWTLMGI8YnEAwlqi1AB9y6HBtNh8kIUio8gdJuTL B/kv8wIOiuDESPW1UPsU+X2HKe/CPUu82swl9iEkOTojl9LKzmdBZbomtainPeTM tMpHPncO2fMRew== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:28 2026 by rpki-client