This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft File: Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json) Hash identifier: q4nbdmW+nMwBGhpZfHZICKUsSrpALFReC7si0xcnk6I= Subject key identifier: 5B:71:EE:1B:9B:B8:F0:3E:42:61:1D:8C:8D:F5:BC:9C:0C:F8:C6:0E Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88 Certificate issuer: /CN=230cf97bad8227df2d6a39c54f6382108150f688 Certificate serial: 019C4321CEBC404B4932AC3653B5DB065028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft Manifest number: 172F Signing time: Mon 09 Feb 2026 16:00:14 +0000 Manifest this update: Mon 09 Feb 2026 16:00:14 +0000 Manifest next update: Tue 10 Feb 2026 16:00:14 +0000 Files and hashes: 1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: TJhBqq+FtgvbEGPqDKqJIhpcc2UEnKlzSM5Av26O9TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ce:bc:40:4b:49:32:ac:36:53:b5:db:06:50:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688 Validity Not Before: Feb 9 16:00:14 2026 GMT Not After : Feb 10 16:00:14 2026 GMT Subject: CN=5b71ee1b9bb8f03e42611d8c8df5bc9c0cf8c60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:0e:79:ee:43:30:47:cf:9f:39:ce:fe:3c: 01:db:40:a3:41:b9:f3:75:f4:b4:01:4e:69:d6:d4: 9d:95:14:8e:4a:1d:ec:c5:fe:88:b3:28:47:92:08: f5:ea:7e:48:ef:9d:ce:29:ab:9a:28:1a:93:04:dd: 58:09:a6:91:11:2d:99:0f:f3:a7:14:9d:b7:f7:2e: 9a:6e:1d:57:c7:43:cc:0e:1b:93:2c:3c:5b:12:aa: 06:58:d5:66:8c:5d:5f:c2:9a:2d:54:53:68:bc:41: aa:c7:87:ad:4d:1a:1c:12:5d:1e:8d:00:4b:b5:62: 31:c4:b9:47:81:5e:95:f1:f6:c4:80:d1:cf:01:f3: 2e:ac:44:84:18:c2:2f:6c:dd:18:ce:92:bc:25:2e: 5f:3b:91:ad:5a:77:b3:57:0d:63:e1:21:40:bd:e2: df:98:fe:b1:93:2d:b8:f0:97:57:c6:f7:07:92:a9: 98:90:b2:df:57:c2:1c:cd:33:b8:35:6b:2e:23:41: a4:9a:b9:b5:2e:a8:37:97:4e:d8:92:46:20:7e:3f: d8:1e:6f:ad:5a:08:40:9f:62:ec:35:ca:88:39:8f: 58:eb:f7:a1:ea:f9:03:58:b1:22:ca:a0:f1:c0:d5: 1c:94:95:6c:64:24:d0:53:0f:ef:4a:51:4f:52:06: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:71:EE:1B:9B:B8:F0:3E:42:61:1D:8C:8D:F5:BC:9C:0C:F8:C6:0E X509v3 Authority Key Identifier: keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:44:fd:05:8a:36:e1:3a:d5:80:7f:8b:6e:9f:47:fc:2b:03: a5:64:1f:2c:be:b9:31:fd:ec:8b:ab:73:dc:9f:21:b7:a6:ea: ce:3c:d0:3e:c1:6c:cf:6b:60:89:c5:35:ac:3c:cd:b0:da:29: 0e:90:21:53:d5:6a:95:52:68:d9:2e:36:85:eb:d5:33:e4:23: 7d:64:79:e8:ee:be:97:10:be:8a:66:d0:85:16:82:0f:48:1c: aa:65:56:b8:9a:ad:1b:a1:c9:af:99:a9:0c:b4:29:f2:b3:6c: 9b:0f:fb:4f:9d:c8:3e:9e:d0:9f:2f:0c:1c:12:34:c8:16:82: 97:ea:c9:db:29:52:af:38:aa:17:5c:53:90:b9:29:90:86:58: c3:40:ac:48:df:11:db:9f:3e:f0:b3:ed:ec:44:da:6a:b5:25: b1:77:d5:43:91:d8:ba:55:e2:92:23:c8:fd:b4:49:61:cb:bc: c9:8b:aa:be:fa:33:e5:27:5f:ab:54:ab:b7:89:65:ee:51:88: b2:d1:fc:9c:e4:0d:69:95:25:f2:14:52:15:2b:a2:56:2b:ef: 7c:99:56:7d:24:df:4c:18:86:ca:4c:69:af:05:31:2e:18:99: 16:01:55:24:87:52:55:62:82:ad:f3:7d:dc:38:ef:21:55:5b: e4:58:14:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIc68QEtJMqw2U7XbBlAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGNmOTdiYWQ4MjI3ZGYyZDZhMzljNTRmNjM4MjEwODE1 MGY2ODgwHhcNMjYwMjA5MTYwMDE0WhcNMjYwMjEwMTYwMDE0WjAzMTEwLwYDVQQD Eyg1YjcxZWUxYjliYjhmMDNlNDI2MTFkOGM4ZGY1YmM5YzBjZjhjNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NkOee5DMEfPnznO/jwB20CjQbnz dfS0AU5p1tSdlRSOSh3sxf6IsyhHkgj16n5I753OKauaKBqTBN1YCaaRES2ZD/On FJ239y6abh1Xx0PMDhuTLDxbEqoGWNVmjF1fwpotVFNovEGqx4etTRocEl0ejQBL tWIxxLlHgV6V8fbEgNHPAfMurESEGMIvbN0YzpK8JS5fO5GtWnezVw1j4SFAveLf mP6xky248JdXxvcHkqmYkLLfV8IczTO4NWsuI0Gkmrm1Lqg3l07YkkYgfj/YHm+t WghAn2LsNcqIOY9Y6/eh6vkDWLEiyqDxwNUclJVsZCTQUw/vSlFPUgZX0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtx7hubuPA+QmEdjI31vJwM+MYOMB8GA1UdIwQY MBaAFCMM+XutgiffLWo5xU9jghCBUPaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjct MDRlY2Q3YTQ0NTdlLzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjctMDRlY2Q3YTQ0NTdl LzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0T9BYo2 4TrVgH+Lbp9H/CsDpWQfLL65Mf3si6tz3J8ht6bqzjzQPsFsz2tgicU1rDzNsNop DpAhU9VqlVJo2S42hevVM+QjfWR56O6+lxC+imbQhRaCD0gcqmVWuJqtG6HJr5mp DLQp8rNsmw/7T53IPp7Qny8MHBI0yBaCl+rJ2ylSrziqF1xTkLkpkIZYw0CsSN8R 258+8LPt7ETaarUlsXfVQ5HYulXikiPI/bRJYcu8yYuqvvoz5Sdfq1Srt4ll7lGI stH8nOQNaZUl8hRSFSuiVivvfJlWfSTfTBiGykxprwUxLhiZFgFVJIdSVWKCrfN9 3DjvIVVb5FgU0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:50 2026 by rpki-client