This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json) Hash identifier: S7dOGtlyJxIol1HJ1fNLpOsbcgwp1ubs5Z1q0lHVAUc= Subject key identifier: 66:A4:12:46:47:7B:6E:FD:DC:D5:7F:0F:DF:A6:3D:92:8C:11:56:4C Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131 Certificate serial: 019C4133B42EC275933D02056796D48B81B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft Manifest number: 0AD3 Signing time: Mon 09 Feb 2026 07:00:33 +0000 Manifest this update: Mon 09 Feb 2026 07:00:33 +0000 Manifest next update: Tue 10 Feb 2026 07:00:33 +0000 Files and hashes: 1: Eej9gskQ6HpjrksLpwx0h-HAY8A.roa (hash: t+XOMLEKB4RSNhae5plY45B83yXeeY3zAfFByAEFTUI=) 2: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: InNJfcD63aEs11i6oODROcR6HXIHrzPDbkSNXeXpurQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:b4:2e:c2:75:93:3d:02:05:67:96:d4:8b:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131 Validity Not Before: Feb 9 07:00:33 2026 GMT Not After : Feb 10 07:00:33 2026 GMT Subject: CN=66a41246477b6efddcd57f0fdfa63d928c11564c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:fe:32:c6:d2:31:a8:b9:e6:d1:23:2c:7a: fa:1b:60:c4:c0:e0:ff:86:af:aa:3f:fc:b4:6b:6d: 7e:90:0a:59:bb:33:dc:ba:db:69:ab:aa:b2:75:18: bd:61:cb:e2:08:3b:e1:e2:a2:cc:89:03:01:e6:02: 08:6e:e9:0f:a4:c2:19:e2:73:b2:cd:e2:47:e5:0d: 3f:bf:ad:7c:5b:ac:54:72:9f:87:e9:4a:0b:7f:98: f8:00:c1:b1:6d:eb:65:de:5a:78:4c:78:74:61:49: d4:87:ae:0e:c2:22:e5:5e:3c:ae:58:85:78:17:d9: bc:f3:41:10:eb:fa:d2:d7:47:9e:e6:b7:cb:2c:ac: 02:00:25:ce:79:59:32:72:de:19:ab:85:f3:9d:85: fe:e8:ad:f5:ec:ac:5e:e1:e2:3d:17:94:42:a4:1b: 51:b4:47:00:6b:27:48:1d:0d:e9:dd:54:68:2e:dd: 52:fa:50:57:83:86:84:4d:6d:73:43:c2:1f:26:bf: 12:21:27:42:8f:dd:f9:85:2e:5f:c6:54:b6:40:06: c4:96:6d:23:e2:82:9e:f9:ba:a9:72:d5:0e:51:16: db:57:9b:cd:b6:74:5c:51:f8:a1:e8:19:46:e7:be: 11:23:2a:2f:f4:34:c4:51:b8:d9:11:d9:cb:17:db: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A4:12:46:47:7B:6E:FD:DC:D5:7F:0F:DF:A6:3D:92:8C:11:56:4C X509v3 Authority Key Identifier: keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d1:ba:78:a6:be:54:64:78:d0:17:2e:92:ab:b4:92:6b:49: 83:00:f6:6f:f0:ef:e0:af:e0:ac:f9:56:34:b6:5e:88:b1:ff: 17:ac:f2:ba:c1:6a:14:09:0d:31:70:46:6e:ed:64:7e:b7:79: 66:fc:e5:69:60:13:0d:ca:b4:a6:a5:d6:1a:a4:0c:ac:b1:0c: 03:b7:27:8d:39:05:ed:b5:78:b2:e3:dd:b4:44:35:03:20:6b: cd:53:ad:7c:3a:98:fd:df:9a:e7:88:28:b2:f8:b7:b5:0e:e5: 01:a7:c2:32:b5:57:bb:44:f4:47:83:25:ed:a2:31:8d:a3:9f: 7c:1f:61:c6:e1:6c:36:eb:5d:0a:d4:ee:6a:87:95:68:7f:9a: 00:9e:de:31:a5:fe:38:44:9b:8c:f6:70:d2:bf:8e:a0:41:c4: 09:26:7a:61:27:4d:45:2d:54:6f:ee:c3:dc:9f:94:4c:a5:48: 63:f9:d8:fb:3a:2f:d7:c8:72:87:75:ab:d3:b4:4c:e8:b9:6b: 1e:35:1d:88:d0:96:ac:c4:a4:d9:ac:65:96:9e:2b:ad:e0:3c: 45:d3:c5:53:d0:35:ae:67:85:35:b4:6d:62:11:38:41:d4:1c: ae:46:a6:93:d5:40:84:78:ba:a6:e1:bd:48:65:a2:7d:6c:c1: 1b:b2:95:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM7QuwnWTPQIFZ5bUi4G4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4 MjYxMzEwHhcNMjYwMjA5MDcwMDMzWhcNMjYwMjEwMDcwMDMzWjAzMTEwLwYDVQQD Eyg2NmE0MTI0NjQ3N2I2ZWZkZGNkNTdmMGZkZmE2M2Q5MjhjMTE1NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRD+MsbSMai55tEjLHr6G2DEwOD/ hq+qP/y0a21+kApZuzPcuttpq6qydRi9YcviCDvh4qLMiQMB5gIIbukPpMIZ4nOy zeJH5Q0/v618W6xUcp+H6UoLf5j4AMGxbetl3lp4THh0YUnUh64OwiLlXjyuWIV4 F9m880EQ6/rS10ee5rfLLKwCACXOeVkyct4Zq4XznYX+6K317Kxe4eI9F5RCpBtR tEcAaydIHQ3p3VRoLt1S+lBXg4aETW1zQ8IfJr8SISdCj935hS5fxlS2QAbElm0j 4oKe+bqpctUOURbbV5vNtnRcUfih6BlG574RIyov9DTEUbjZEdnLF9vmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGakEkZHe2793NV/D9+mPZKMEVZMMB8GA1UdIwQY MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt ODVjMzA1ZjlmZTZmLzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdG6eKa+ VGR40Bcukqu0kmtJgwD2b/Dv4K/grPlWNLZeiLH/F6zyusFqFAkNMXBGbu1kfrd5 ZvzlaWATDcq0pqXWGqQMrLEMA7cnjTkF7bV4suPdtEQ1AyBrzVOtfDqY/d+a54go svi3tQ7lAafCMrVXu0T0R4Ml7aIxjaOffB9hxuFsNutdCtTuaoeVaH+aAJ7eMaX+ OESbjPZw0r+OoEHECSZ6YSdNRS1Ub+7D3J+UTKVIY/nY+zov18hyh3Wr07RM6Llr HjUdiNCWrMSk2axllp4rreA8RdPFU9A1rmeFNbRtYhE4QdQcrkamk9VAhHi6puG9 SGWifWzBG7KVtg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:44 2026 by rpki-client