This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json) Hash identifier: fwSVELWpTdJwNx7cWY2YGCS8J1kfGWGq5TPw+/XlzaE= Subject key identifier: D4:B6:A5:D0:19:5D:E7:2F:13:09:79:9E:C5:CC:AE:2B:92:5E:07:72 Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Certificate serial: 019C4246A2C8469C418B6F562CA73CF30C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft Manifest number: 0733 Signing time: Mon 09 Feb 2026 12:00:51 +0000 Manifest this update: Mon 09 Feb 2026 12:00:51 +0000 Manifest next update: Tue 10 Feb 2026 12:00:51 +0000 Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: IaUoliUduMknQ0kV7PoMIQC2XajfrcZ7HjygI/lVZn4=) 2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a2:c8:46:9c:41:8b:6f:56:2c:a7:3c:f3:0c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Validity Not Before: Feb 9 12:00:51 2026 GMT Not After : Feb 10 12:00:51 2026 GMT Subject: CN=d4b6a5d0195de72f1309799ec5ccae2b925e0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:65:e2:d7:6f:0b:36:96:0e:f4:15:e9:97: ee:7c:53:a6:5a:a0:22:74:3b:11:bc:1b:aa:ac:09: a8:51:51:42:fe:e4:2b:28:95:bc:33:53:8f:f9:f3: 94:2f:c5:d1:15:0f:69:ac:e1:a4:79:c3:00:fa:2a: 6e:81:ae:58:6d:46:34:40:c9:96:2d:a0:23:36:9c: ba:50:fd:f2:37:6c:95:a2:2b:fa:66:32:77:8b:ea: fa:d3:e5:6b:9c:47:8d:79:1f:7a:8c:4b:15:f6:ff: 49:84:ee:d5:3d:74:8f:7d:e4:a8:8c:e7:72:04:7a: 08:c4:59:3f:ee:9a:78:5e:97:ee:ff:f9:99:32:6c: e6:27:62:37:70:32:3b:19:98:c8:10:29:57:62:58: eb:07:0f:57:d3:a9:97:7f:22:0d:fb:db:17:0c:06: a3:ce:2f:1c:0c:be:6a:b7:b3:07:a4:06:83:cd:43: 6c:c9:3c:d3:e3:3e:88:22:4f:bc:cb:de:60:88:d5: 6b:83:0d:24:12:f9:d0:6a:b3:9e:c5:a4:1a:58:f0: e1:7d:55:30:9a:59:94:46:1b:b2:07:62:63:4d:14: ad:91:b3:39:29:00:a4:1b:a5:89:59:c5:ec:eb:a1: 12:f7:96:27:9f:60:13:5c:cb:d2:7e:61:1b:ad:82: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B6:A5:D0:19:5D:E7:2F:13:09:79:9E:C5:CC:AE:2B:92:5E:07:72 X509v3 Authority Key Identifier: keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ae:15:e1:37:95:65:96:e1:f7:6c:d9:42:02:2c:8c:46:1c: 11:d2:34:50:42:8f:59:00:6f:09:66:87:d5:38:e2:99:e4:5a: 98:9b:ec:eb:14:78:3b:d5:db:ca:12:5a:da:cb:10:d7:b7:9d: 21:b9:34:e3:0b:98:45:cc:e7:7a:a1:3c:5f:ce:c0:64:7e:b8: 2d:41:4c:83:e5:f0:76:b7:e9:4a:df:f3:da:da:22:06:ce:5c: 99:68:02:c6:f5:e0:27:33:41:42:79:95:aa:24:78:21:23:56: 3f:a3:c9:56:ba:b4:1b:11:e6:a0:b6:d4:15:be:7c:de:0c:67: 09:c6:05:52:27:ec:8b:26:99:8b:60:e5:a4:6b:b4:89:7c:e6: fb:25:99:8b:1f:ec:02:93:5e:49:71:78:59:44:89:34:fe:9d: 24:de:31:51:29:fb:99:d6:23:a2:1e:39:5f:d5:8b:27:bb:b1: 71:68:1f:a5:7a:2b:de:6c:3d:6d:5c:a4:ca:07:9b:6d:6e:ca: 8e:e0:0b:4f:d6:c9:73:ca:e5:14:dc:86:4a:6d:a6:93:d4:1a: c4:0f:5f:21:9a:3e:5e:92:ab:f2:f1:18:78:ba:30:0f:fc:79: ea:dc:0a:19:23:23:8e:6d:04:67:7b:5a:c4:bd:84:bd:fd:d0: 6d:f9:a8:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqLIRpxBi29WLKc88wwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2 NWFkMTEwHhcNMjYwMjA5MTIwMDUxWhcNMjYwMjEwMTIwMDUxWjAzMTEwLwYDVQQD EyhkNGI2YTVkMDE5NWRlNzJmMTMwOTc5OWVjNWNjYWUyYjkyNWUwNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Jl4tdvCzaWDvQV6ZfufFOmWqAi dDsRvBuqrAmoUVFC/uQrKJW8M1OP+fOUL8XRFQ9prOGkecMA+ipuga5YbUY0QMmW LaAjNpy6UP3yN2yVoiv6ZjJ3i+r60+VrnEeNeR96jEsV9v9JhO7VPXSPfeSojOdy BHoIxFk/7pp4Xpfu//mZMmzmJ2I3cDI7GZjIEClXYljrBw9X06mXfyIN+9sXDAaj zi8cDL5qt7MHpAaDzUNsyTzT4z6IIk+8y95giNVrgw0kEvnQarOexaQaWPDhfVUw mlmURhuyB2JjTRStkbM5KQCkG6WJWcXs66ES95Ynn2ATXMvSfmEbrYJzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS2pdAZXecvEwl5nsXMriuSXgdyMB8GA1UdIwQY MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3 LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq64V4TeV ZZbh92zZQgIsjEYcEdI0UEKPWQBvCWaH1TjimeRamJvs6xR4O9XbyhJa2ssQ17ed Ibk04wuYRczneqE8X87AZH64LUFMg+XwdrfpSt/z2toiBs5cmWgCxvXgJzNBQnmV qiR4ISNWP6PJVrq0GxHmoLbUFb583gxnCcYFUifsiyaZi2DlpGu0iXzm+yWZix/s ApNeSXF4WUSJNP6dJN4xUSn7mdYjoh45X9WLJ7uxcWgfpXor3mw9bVykygebbW7K juALT9bJc8rlFNyGSm2mk9QaxA9fIZo+XpKr8vEYeLowD/x56twKGSMjjm0EZ3ta xL2Evf3Qbfmojw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:56 2026 by rpki-client