This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json) Hash identifier: kvxLMudGq7AalQSrl+DLTRtP5KChuzBAAEi5j82aqF4= Subject key identifier: ED:CE:F3:C6:EA:B4:B5:68:C6:08:AA:D3:7F:73:3E:0F:A4:2F:0B:F6 Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Certificate serial: 019C427D268C81FCE80EC82557C7470208D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft Manifest number: 15B2 Signing time: Mon 09 Feb 2026 13:00:23 +0000 Manifest this update: Mon 09 Feb 2026 13:00:23 +0000 Manifest next update: Tue 10 Feb 2026 13:00:23 +0000 Files and hashes: 1: 3umndGzAD5rCZWRXYXf_uY9ZlGQ.roa (hash: +hSbfwDC34My2nrMGTb3S+msbWLWB8nIUFlFpyrQ6XM=) 2: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: 0eOTX3MTfVQBaduT0J3//KQvIEmBHO/TY45kBzfkmaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:26:8c:81:fc:e8:0e:c8:25:57:c7:47:02:08:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Validity Not Before: Feb 9 13:00:23 2026 GMT Not After : Feb 10 13:00:23 2026 GMT Subject: CN=edcef3c6eab4b568c608aad37f733e0fa42f0bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:71:30:44:1d:00:56:c8:14:73:e7:f9:d7: dc:e5:1a:54:e2:23:e1:f0:f1:38:46:60:eb:e7:9d: 57:e5:a6:48:d1:ac:26:43:6f:16:b5:59:dc:c5:bc: a7:9b:b5:b4:52:0c:a5:41:6c:e9:4f:21:fc:dd:65: 44:57:55:2c:3b:a3:33:35:a6:57:fc:96:36:58:e0: 9d:00:11:19:83:90:ea:e9:7f:9c:bc:ee:1b:71:fe: bb:78:88:34:ca:f1:52:7e:42:2f:e8:f8:5e:66:1a: b3:b6:5b:de:2c:af:0e:02:b2:69:23:c7:75:fe:30: 21:cc:f9:8d:e8:9d:fe:95:f5:d3:f8:78:72:f1:83: ee:f2:22:28:d3:dc:34:1d:2d:15:f2:f1:42:92:82: b2:34:6e:d8:93:72:b4:a3:45:d5:90:ff:e6:17:b1: 0b:82:0e:a6:bd:22:4c:43:bb:bf:98:8e:8b:40:53: 4d:0c:fa:0b:07:ba:13:70:77:52:85:6c:cb:5e:c0: ea:bd:07:91:a0:ff:a7:3e:57:bd:c9:d8:b1:8d:8d: a2:05:0f:c3:18:0b:97:a9:d5:d5:3a:fb:30:2e:20: 66:e3:6f:37:7d:07:44:56:a7:57:39:58:d6:35:01: 5f:14:8a:2c:db:e3:a6:2c:1f:41:f5:eb:dd:91:bf: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:F3:C6:EA:B4:B5:68:C6:08:AA:D3:7F:73:3E:0F:A4:2F:0B:F6 X509v3 Authority Key Identifier: keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:10:d5:80:9d:48:e8:5f:8e:7c:a1:65:c2:02:8e:6d:a3:12: d8:3f:70:4d:e5:5a:ee:6b:39:67:68:1b:99:f1:bd:f0:b2:91: bd:4c:0e:8e:b0:02:7e:a7:c2:f9:43:11:f9:90:fb:04:1e:b4: 7a:e1:1d:3b:f6:f6:38:a0:0e:e9:b0:f0:dc:bd:2c:6e:9b:b1: 09:01:49:14:58:fe:80:35:5d:16:2e:bf:90:c1:63:5e:7a:64: b4:3a:18:6b:18:4a:45:38:54:76:6e:d3:5f:ec:74:4f:71:17: 67:54:c1:28:3e:5c:8f:c0:d8:c7:b1:c8:70:d1:24:eb:73:f8: da:ec:12:6c:5b:fb:51:d2:a9:f2:c2:0f:8f:a3:07:64:4d:a3: e5:71:28:1f:c5:f3:bf:9c:5a:51:f9:eb:da:a7:2d:88:46:a5: 74:55:fe:b2:d0:08:f6:96:40:18:b1:fd:50:b5:74:54:95:e3: e0:3c:db:6d:22:25:53:c0:6d:9c:a9:d6:e2:97:a8:c5:37:a4: 6b:2b:0f:49:3e:e0:8f:26:ea:de:be:9f:c3:65:25:c9:d4:9f: a6:a9:31:cc:25:2a:8e:89:bd:69:e4:85:17:f1:ad:4b:64:bc: ac:c6:8a:58:69:bd:87:ad:72:87:79:65:56:c2:fb:8d:59:ce: 2d:fc:1c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSaMgfzoDsglV8dHAgjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTRiY2MwMzI5M2UzYWQwZTE5YTdhM2ZkMWIxY2ZiZDM0 YzA5OTAwHhcNMjYwMjA5MTMwMDIzWhcNMjYwMjEwMTMwMDIzWjAzMTEwLwYDVQQD EyhlZGNlZjNjNmVhYjRiNTY4YzYwOGFhZDM3ZjczM2UwZmE0MmYwYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBFxMEQdAFbIFHPn+dfc5RpU4iPh 8PE4RmDr551X5aZI0awmQ28WtVncxbynm7W0UgylQWzpTyH83WVEV1UsO6MzNaZX /JY2WOCdABEZg5Dq6X+cvO4bcf67eIg0yvFSfkIv6PheZhqztlveLK8OArJpI8d1 /jAhzPmN6J3+lfXT+Hhy8YPu8iIo09w0HS0V8vFCkoKyNG7Yk3K0o0XVkP/mF7EL gg6mvSJMQ7u/mI6LQFNNDPoLB7oTcHdShWzLXsDqvQeRoP+nPle9ydixjY2iBQ/D GAuXqdXVOvswLiBm4283fQdEVqdXOVjWNQFfFIos2+OmLB9B9evdkb/TCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3O88bqtLVoxgiq039zPg+kLwv2MB8GA1UdIwQY MBaAFCJUvMAyk+OtDhmno/0bHPvTTAmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAt NGUzNDdkNTUxYzNmLzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAtNGUzNDdkNTUxYzNm LzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBDVgJ1I 6F+OfKFlwgKObaMS2D9wTeVa7ms5Z2gbmfG98LKRvUwOjrACfqfC+UMR+ZD7BB60 euEdO/b2OKAO6bDw3L0sbpuxCQFJFFj+gDVdFi6/kMFjXnpktDoYaxhKRThUdm7T X+x0T3EXZ1TBKD5cj8DYx7HIcNEk63P42uwSbFv7UdKp8sIPj6MHZE2j5XEoH8Xz v5xaUfnr2qctiEaldFX+stAI9pZAGLH9ULV0VJXj4DzbbSIlU8BtnKnW4peoxTek aysPST7gjybq3r6fw2UlydSfpqkxzCUqjom9aeSFF/GtS2S8rMaKWGm9h61yh3ll VsL7jVnOLfwc5A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:47 2026 by rpki-client