This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json) Hash identifier: jHXMF3cYgjeSWwWHMDU2YxAZvDAIETJfKb98kDwz5fc= Subject key identifier: FD:0C:BC:18:A6:5C:34:85:A2:C8:AB:87:9D:CF:98:5B:BB:7A:BC:99 Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb Certificate serial: 019C43223DFF10283C5BAE3C62FE87D7E6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft Manifest number: 0FA6 Signing time: Mon 09 Feb 2026 16:00:43 +0000 Manifest this update: Mon 09 Feb 2026 16:00:43 +0000 Manifest next update: Tue 10 Feb 2026 16:00:43 +0000 Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: 8HHIbC7tMLHNfy2b+DDnzOX/GyzV7YRDvwLk1mGbNWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:3d:ff:10:28:3c:5b:ae:3c:62:fe:87:d7:e6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb Validity Not Before: Feb 9 16:00:43 2026 GMT Not After : Feb 10 16:00:43 2026 GMT Subject: CN=fd0cbc18a65c3485a2c8ab879dcf985bbb7abc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:3c:2e:bc:dc:43:04:d4:ad:ce:6d:90:0f: 3c:9e:63:a7:25:2b:71:9c:c9:bf:d7:6e:a1:18:f2: 5c:d0:59:a5:fa:47:e1:35:b8:54:be:f7:48:f0:6d: dc:b5:36:76:b6:20:d9:65:2d:1e:f7:1a:b5:02:62: 3c:24:dd:5b:d4:74:83:15:83:00:9b:d4:63:ed:2a: 57:5c:89:14:87:29:77:b7:f2:83:17:a7:54:55:bd: e0:4a:d2:a0:d9:49:2a:f3:87:ca:81:c1:b0:4f:1b: f7:be:fd:d0:23:28:16:4b:c0:72:b5:e3:69:4b:91: c0:f9:cb:78:d3:58:08:cd:e9:18:41:d4:b0:b4:67: d3:3a:b8:1d:0a:8d:3e:a6:52:c8:83:95:8a:55:33: 7a:94:99:4d:08:67:e4:36:4a:59:6a:b5:78:8e:e3: 0b:7d:f0:1c:36:9e:8c:9e:ac:77:85:5b:fc:46:f0: 2c:89:20:68:55:3a:70:56:32:06:e4:18:54:46:47: 50:98:97:8f:51:7b:b2:e8:f6:e5:4a:f3:f5:d4:25: 85:6b:50:b4:9c:1e:98:81:a5:89:be:b5:a6:c5:0b: eb:4f:42:af:fe:eb:27:ba:40:1c:ea:dc:89:cf:02: 29:f5:ae:81:a4:e4:a5:a2:60:c8:2b:75:42:f8:e1: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0C:BC:18:A6:5C:34:85:A2:C8:AB:87:9D:CF:98:5B:BB:7A:BC:99 X509v3 Authority Key Identifier: keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:64:75:37:3d:58:52:f5:fb:26:c5:bb:43:2f:e8:b1:ed:fa: 55:80:09:bb:3a:b2:c2:01:ed:e8:19:7d:92:12:74:22:a1:8d: ec:91:ee:ea:bf:d3:59:ad:16:46:cb:b0:63:76:56:67:39:d3: 93:d8:45:ac:16:55:86:41:02:63:23:26:c2:87:d7:71:91:0b: 28:cd:42:6a:be:dd:76:f6:9c:41:f8:2a:b6:e4:3c:b0:f0:c1: b3:b1:95:f3:e0:0f:03:30:44:8d:bf:65:a6:d0:4c:c4:b6:a4: 0f:ed:ea:84:9e:9d:99:a2:1b:c7:3c:3e:11:3e:8c:ba:a8:bc: bd:7e:55:00:91:fd:ad:33:58:7e:a3:cb:49:20:6f:12:2e:eb: a3:69:cb:c7:3c:97:c0:80:5f:2b:bd:0d:bb:f0:4f:1a:e3:91: 5b:c6:df:44:b6:ce:63:c8:22:d5:09:92:97:36:6a:06:c6:a8: d6:8f:d1:88:14:f9:eb:75:24:3e:81:63:a4:07:46:95:cb:0b: 47:5c:36:6b:45:5e:a0:b6:48:da:46:aa:6c:6a:2a:68:5f:b7: 09:cd:7d:ef:2d:ba:b9:7f:7b:3c:c9:b5:ea:67:41:d3:89:90: f5:d3:4f:21:74:62:20:d5:bb:4c:cd:cd:0f:4a:2e:bb:ba:c9: a6:68:18:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIj3/ECg8W648Yv6H1+ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMjAyOTRiNDZjOTAyZDkzYzA3OWMxNjg2Y2ZlNDViYmEz MzE4Y2IwHhcNMjYwMjA5MTYwMDQzWhcNMjYwMjEwMTYwMDQzWjAzMTEwLwYDVQQD EyhmZDBjYmMxOGE2NWMzNDg1YTJjOGFiODc5ZGNmOTg1YmJiN2FiYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrM8LrzcQwTUrc5tkA88nmOnJStx nMm/126hGPJc0Fml+kfhNbhUvvdI8G3ctTZ2tiDZZS0e9xq1AmI8JN1b1HSDFYMA m9Rj7SpXXIkUhyl3t/KDF6dUVb3gStKg2Ukq84fKgcGwTxv3vv3QIygWS8ByteNp S5HA+ct401gIzekYQdSwtGfTOrgdCo0+plLIg5WKVTN6lJlNCGfkNkpZarV4juML ffAcNp6Mnqx3hVv8RvAsiSBoVTpwVjIG5BhURkdQmJePUXuy6PblSvP11CWFa1C0 nB6YgaWJvrWmxQvrT0Kv/usnukAc6tyJzwIp9a6BpOSlomDIK3VC+OGTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0MvBimXDSFosirh53PmFu7eryZMB8GA1UdIwQY MBaAFCEgKUtGyQLZPAecFobP5Fu6MxjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2Qt YTIwZGE1NmM0MTg0LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2QtYTIwZGE1NmM0MTg0 LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGR1Nz1Y UvX7JsW7Qy/ose36VYAJuzqywgHt6Bl9khJ0IqGN7JHu6r/TWa0WRsuwY3ZWZznT k9hFrBZVhkECYyMmwofXcZELKM1Car7ddvacQfgqtuQ8sPDBs7GV8+APAzBEjb9l ptBMxLakD+3qhJ6dmaIbxzw+ET6Muqi8vX5VAJH9rTNYfqPLSSBvEi7ro2nLxzyX wIBfK70Nu/BPGuORW8bfRLbOY8gi1QmSlzZqBsao1o/RiBT563UkPoFjpAdGlcsL R1w2a0VeoLZI2kaqbGoqaF+3Cc197y26uX97PMm16mdB04mQ9dNPIXRiINW7TM3N D0ouu7rJpmgYfw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:14 2026 by rpki-client