This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json) Hash identifier: mnGiLOqlsotk52JlcQmI2KXsEZ50Fs9DUyYqi+elG6s= Subject key identifier: 43:82:9D:8D:AD:38:D0:B8:E6:18:62:24:3E:CD:3A:5C:8B:55:29:54 Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04 Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04 Certificate serial: 019C42465BD8AA62FE1C192D0F6C5A50FBF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft Manifest number: 0791 Signing time: Mon 09 Feb 2026 12:00:33 +0000 Manifest this update: Mon 09 Feb 2026 12:00:33 +0000 Manifest next update: Tue 10 Feb 2026 12:00:33 +0000 Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: EtUGAgT+DK3RCA2UY1JUtuRqJlOxlAdKWe54S8hPIPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5b:d8:aa:62:fe:1c:19:2d:0f:6c:5a:50:fb:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04 Validity Not Before: Feb 9 12:00:33 2026 GMT Not After : Feb 10 12:00:33 2026 GMT Subject: CN=43829d8dad38d0b8e61862243ecd3a5c8b552954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:6e:66:92:9b:dc:78:06:48:76:e0:ff:d2: e7:65:90:78:da:61:93:29:a0:cd:01:b2:e3:af:37: 00:ab:d5:62:70:88:e9:af:40:f2:66:b0:90:bb:fb: 5f:e2:32:8d:2e:6c:83:80:18:4c:8e:e7:9c:2d:61: f6:97:79:13:87:29:9a:47:7c:17:27:a9:ef:86:d8: 6c:ae:48:02:c2:71:db:e2:02:f6:50:40:53:d2:3d: e0:b2:ed:f1:1b:b0:f1:ec:81:ce:43:4a:d9:e7:71: 2f:53:d8:20:03:d8:8a:c1:9b:60:1a:34:15:10:5e: 3e:46:00:bf:a3:63:a6:fc:8e:c0:db:1b:e7:32:72: 5d:25:10:37:77:3b:7c:8c:c6:34:0f:60:29:17:84: 36:c5:03:4e:95:ff:f6:c1:a5:2a:01:da:74:72:73: 58:2a:01:9c:57:50:98:11:5a:ef:83:20:c7:1a:16: 50:67:af:0b:b5:b7:e9:15:07:19:c9:5d:2f:bd:09: 39:c8:8c:a4:59:16:1e:dd:86:fe:f4:22:07:37:df: 6f:e5:68:a2:4f:2a:04:b0:92:9a:43:01:1f:93:c0: 4d:fe:76:24:69:50:b3:42:f7:36:05:a4:2c:70:32: dd:df:64:4a:b2:f7:ea:98:7d:1d:4c:37:be:11:7a: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:82:9D:8D:AD:38:D0:B8:E6:18:62:24:3E:CD:3A:5C:8B:55:29:54 X509v3 Authority Key Identifier: keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:08:c5:b8:3f:28:0e:fa:14:60:73:26:de:40:f8:c9:ff:29: 13:5c:8c:34:2b:11:d6:3e:1d:72:c0:d6:7f:8e:57:12:20:4e: dd:73:f0:a9:65:89:8c:c4:61:41:c6:94:41:f6:98:1a:a5:23: f8:39:2d:ae:72:b0:63:0d:fd:f0:9c:ac:0d:3b:98:03:d8:a4: 90:11:05:d4:d6:ea:e0:68:c1:4c:10:2f:cc:d2:66:00:9a:27: fc:e3:9d:89:3a:cb:54:ee:e5:8f:9a:1d:47:45:da:e9:8f:c7: 8f:5f:97:78:4f:0e:a6:b2:2c:b3:7b:95:2c:e0:20:0d:80:83: 43:82:55:d3:ef:83:93:60:82:a2:86:73:a9:20:db:2d:11:0c: 70:1b:11:8b:e7:c7:6b:a4:f9:a6:60:e8:86:41:bf:b7:4d:40: 2b:58:53:9a:88:ae:10:fa:34:6d:3b:b4:af:13:81:f2:e7:15: f6:f3:92:77:cd:fe:f8:13:27:b7:68:38:26:ac:50:1e:c5:0e: 3f:6c:07:22:34:bf:9a:a8:1f:d6:1c:94:81:2b:2f:9b:1f:4f: 0f:29:35:72:8c:ec:03:3a:f6:78:3c:a3:f2:0f:89:f8:43:8e: 21:65:3d:5e:3b:37:69:28:9f:3f:f4:97:a0:74:ff:43:a2:a6: 5d:85:2c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlvYqmL+HBktD2xaUPv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Nzk0MjZhMGJjZDkwM2E1NTI2NDkyY2M1YWY3YjRmMmIw ZWRiMDQwHhcNMjYwMjA5MTIwMDMzWhcNMjYwMjEwMTIwMDMzWjAzMTEwLwYDVQQD Eyg0MzgyOWQ4ZGFkMzhkMGI4ZTYxODYyMjQzZWNkM2E1YzhiNTUyOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vVuZpKb3HgGSHbg/9LnZZB42mGT KaDNAbLjrzcAq9VicIjpr0DyZrCQu/tf4jKNLmyDgBhMjuecLWH2l3kThymaR3wX J6nvhthsrkgCwnHb4gL2UEBT0j3gsu3xG7Dx7IHOQ0rZ53EvU9ggA9iKwZtgGjQV EF4+RgC/o2Om/I7A2xvnMnJdJRA3dzt8jMY0D2ApF4Q2xQNOlf/2waUqAdp0cnNY KgGcV1CYEVrvgyDHGhZQZ68LtbfpFQcZyV0vvQk5yIykWRYe3Yb+9CIHN99v5Wii TyoEsJKaQwEfk8BN/nYkaVCzQvc2BaQscDLd32RKsvfqmH0dTDe+EXqNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOCnY2tONC45hhiJD7NOlyLVSlUMB8GA1UdIwQY MBaAFIl5QmoLzZA6VSZJLMWve08rDtsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMt NDlhYzI4MTQyMzE4LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMtNDlhYzI4MTQyMzE4 LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAjFuD8o DvoUYHMm3kD4yf8pE1yMNCsR1j4dcsDWf45XEiBO3XPwqWWJjMRhQcaUQfaYGqUj +DktrnKwYw398JysDTuYA9ikkBEF1Nbq4GjBTBAvzNJmAJon/OOdiTrLVO7lj5od R0Xa6Y/Hj1+XeE8OprIss3uVLOAgDYCDQ4JV0++Dk2CCooZzqSDbLREMcBsRi+fH a6T5pmDohkG/t01AK1hTmoiuEPo0bTu0rxOB8ucV9vOSd83++BMnt2g4JqxQHsUO P2wHIjS/mqgf1hyUgSsvmx9PDyk1cozsAzr2eDyj8g+J+EOOIWU9Xjs3aSifP/SX oHT/Q6KmXYUs3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:30 2026 by rpki-client