This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json) Hash identifier: rx6KlP0zEUw7XHizJG0tYmmeit7/KrReCGxn1vdKsUc= Subject key identifier: 08:B8:DF:76:B7:61:28:F6:9B:ED:46:0E:17:DD:50:AF:53:3E:4C:54 Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Certificate serial: 019C4623B8437EC747A07CE00FAC420B0F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft Manifest number: 1818 Signing time: Tue 10 Feb 2026 06:01:11 +0000 Manifest this update: Tue 10 Feb 2026 06:01:11 +0000 Manifest next update: Wed 11 Feb 2026 06:01:11 +0000 Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=) 2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: XfFiSMTYZ94m4UZ+xbcgEPhJMtlhLj9YTVMJrrK8bVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:23:b8:43:7e:c7:47:a0:7c:e0:0f:ac:42:0b:0f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Validity Not Before: Feb 10 06:01:11 2026 GMT Not After : Feb 11 06:01:11 2026 GMT Subject: CN=08b8df76b76128f69bed460e17dd50af533e4c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:22:91:36:69:a6:02:ba:d3:78:5b:26:fa: 69:cc:fc:68:0b:10:03:5b:c9:b1:eb:3c:db:68:77: 3a:cb:25:50:a1:ba:d9:7b:10:8b:67:87:31:3f:87: 88:87:b2:0c:bd:35:77:bc:8c:58:37:1f:b1:1e:10: 7f:cc:d9:f1:5e:1a:a7:18:37:fb:57:35:be:2f:1c: de:a9:dd:4e:c5:04:30:ce:7c:d2:4b:1d:04:6d:37: 6c:80:e8:d7:66:5e:5a:8a:9e:f3:ac:21:86:b6:f9: c9:c6:bd:c8:ad:47:1d:d9:64:4b:c2:fc:20:8b:0d: c9:99:1a:bd:b6:7b:e5:27:55:55:cf:d9:cc:2d:51: 96:ab:15:27:ac:fc:d5:46:2d:36:42:da:d9:04:ca: 09:9c:d8:87:c0:0e:52:e6:b6:d9:38:e1:a8:1a:20: 59:c1:d3:ef:33:f1:58:e9:dd:1d:d9:05:44:9c:34: 0d:74:09:0f:c8:70:9c:4c:52:75:cd:50:0f:4d:33: 70:ab:fe:04:d3:66:20:c9:40:28:4f:0c:f2:1f:a0: ac:65:f3:4c:71:b8:01:f2:85:fc:99:c5:6e:39:c9: ca:99:2c:65:f2:13:cd:ae:b5:9c:d8:ec:c1:79:23: 59:4f:9a:c0:37:2e:db:7c:cc:b2:4f:9d:56:c8:28: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B8:DF:76:B7:61:28:F6:9B:ED:46:0E:17:DD:50:AF:53:3E:4C:54 X509v3 Authority Key Identifier: keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:2f:0c:10:5f:8b:d8:af:a9:71:60:61:dc:d9:aa:7e:45: a9:ad:59:8a:7a:25:e1:fe:e5:11:a2:47:0c:e4:68:da:2e:74: 45:61:fd:fe:bd:b9:29:e7:8e:fb:c9:e3:8c:28:71:ab:f1:64: b9:54:da:b8:a4:b6:74:aa:0e:ee:72:8b:10:e0:a2:e7:53:16: bf:46:ab:8c:4f:fa:79:50:29:00:82:df:ca:91:7a:b6:e5:7e: 5d:8d:23:8e:37:5b:59:ff:3b:82:99:be:0f:47:0f:b7:4d:be: 15:76:c3:63:c5:c7:ac:e0:70:b3:4c:a8:1a:f4:51:71:86:59: ac:7a:ad:58:fa:44:e1:b2:43:80:40:43:12:a6:a7:95:0d:d2: 8c:54:8f:34:6c:e2:3a:7c:53:6f:cb:d3:7f:2d:b8:29:be:6c: 59:d8:a3:c9:29:68:42:33:66:bc:67:f2:23:e5:1a:5c:99:b5: 5e:ed:f3:91:7c:6d:f1:7a:33:58:21:0d:dc:9a:85:94:c6:77: d2:69:4d:89:48:7a:29:91:38:2f:b2:60:92:2d:e1:67:b6:b9: 28:94:a7:6c:5f:a4:3f:7a:22:73:41:81:21:5f:96:b6:02:0e: d7:9f:c7:b3:f5:84:df:57:1a:82:5e:fe:37:87:35:45:3a:66: 43:ed:73:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxGI7hDfsdHoHzgD6xCCw9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk ZDRlZTYwHhcNMjYwMjEwMDYwMTExWhcNMjYwMjExMDYwMTExWjAzMTEwLwYDVQQD EygwOGI4ZGY3NmI3NjEyOGY2OWJlZDQ2MGUxN2RkNTBhZjUzM2U0YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuYikTZppgK603hbJvppzPxoCxAD W8mx6zzbaHc6yyVQobrZexCLZ4cxP4eIh7IMvTV3vIxYNx+xHhB/zNnxXhqnGDf7 VzW+Lxzeqd1OxQQwznzSSx0EbTdsgOjXZl5aip7zrCGGtvnJxr3IrUcd2WRLwvwg iw3JmRq9tnvlJ1VVz9nMLVGWqxUnrPzVRi02QtrZBMoJnNiHwA5S5rbZOOGoGiBZ wdPvM/FY6d0d2QVEnDQNdAkPyHCcTFJ1zVAPTTNwq/4E02YgyUAoTwzyH6CsZfNM cbgB8oX8mcVuOcnKmSxl8hPNrrWc2OzBeSNZT5rANy7bfMyyT51WyCjUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi433a3YSj2m+1GDhfdUK9TPkxUMB8GA1UdIwQY MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXUvDBBf i9ivqXFgYdzZqn5Fqa1Zinol4f7lEaJHDORo2i50RWH9/r25KeeO+8njjChxq/Fk uVTauKS2dKoO7nKLEOCi51MWv0arjE/6eVApAILfypF6tuV+XY0jjjdbWf87gpm+ D0cPt02+FXbDY8XHrOBws0yoGvRRcYZZrHqtWPpE4bJDgEBDEqanlQ3SjFSPNGzi OnxTb8vTfy24Kb5sWdijySloQjNmvGfyI+UaXJm1Xu3zkXxt8XozWCEN3JqFlMZ3 0mlNiUh6KZE4L7Jgki3hZ7a5KJSnbF+kP3oic0GBIV+WtgIO15/Hs/WE31cagl7+ N4c1RTpmQ+1zQw== -----END CERTIFICATE-----Generated at Tue Feb 10 10:37:22 2026 by rpki-client