This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json) Hash identifier: wCv7UZfX1roRh1ves6caVnUrEB67RFB2xfhfJVkREVM= Subject key identifier: CD:8F:8F:A9:76:0F:35:1D:3A:41:D9:48:19:A1:CD:AA:94:47:01:4E Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a Certificate serial: 019C427D82D5DA477ACEA7F082AD12D97047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft Manifest number: 041E Signing time: Mon 09 Feb 2026 13:00:47 +0000 Manifest this update: Mon 09 Feb 2026 13:00:47 +0000 Manifest next update: Tue 10 Feb 2026 13:00:47 +0000 Files and hashes: 1: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: N+Xu8/ABknwC6gbbB9N2QdeUPkOYFc/+NPBEUg769I8=) 2: x3cjJVpLnZG-uty2qSffRSOuoQE.roa (hash: Tj4Pb94uCkpkUlh6u2jzVddtm53J1LKyupR5P1TGR+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:82:d5:da:47:7a:ce:a7:f0:82:ad:12:d9:70:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a Validity Not Before: Feb 9 13:00:47 2026 GMT Not After : Feb 10 13:00:47 2026 GMT Subject: CN=cd8f8fa9760f351d3a41d94819a1cdaa9447014e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:e7:c3:d1:d6:43:c3:70:55:27:a4:4f:d4: 06:ee:7c:77:d2:5f:02:b8:63:06:a5:dc:39:e3:5a: 61:a3:87:87:29:a7:9e:1e:02:98:bd:4b:25:60:1b: 2f:44:ce:7d:c4:5a:7d:d8:e2:19:50:de:61:e6:fa: 74:cd:75:21:16:f5:24:cd:d1:4b:b0:93:fc:ab:3b: fe:d2:0b:73:6d:73:eb:9d:c6:33:39:ea:6b:8d:34: 8d:b3:f7:6c:8c:61:b6:0e:d9:6d:63:b0:93:13:0c: 27:3e:fb:dd:4a:de:44:ec:87:3e:7d:37:4e:27:bc: 7a:86:64:3b:de:28:ec:83:94:f7:79:db:f7:0b:63: e2:e9:ec:61:a6:95:55:c6:ef:e5:a8:a5:35:5b:58: 11:78:c5:9d:32:2e:3e:57:f0:47:af:d9:91:d8:b1: 43:03:f9:ff:36:93:5c:2a:0b:81:ac:15:67:a2:7f: 23:33:a0:47:e8:76:b7:4e:a2:6e:20:8c:0b:dd:d2: 87:71:7f:d3:25:b9:ef:48:d4:58:d1:d9:ea:c3:f1: 2e:8d:46:2d:b1:81:19:8f:34:6a:d4:e6:c8:90:ec: 61:25:67:14:74:92:c5:8c:6b:3f:0f:3d:99:c8:77: c9:34:c0:a3:fb:8c:31:88:d5:08:89:14:ec:39:28: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:8F:A9:76:0F:35:1D:3A:41:D9:48:19:A1:CD:AA:94:47:01:4E X509v3 Authority Key Identifier: keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c3:4b:ce:50:f6:45:e3:6a:2d:da:e0:c0:0b:dd:1c:83:94: 2a:21:e8:6c:ab:87:82:6f:14:e7:23:28:c4:e3:a1:1d:0d:4e: aa:9c:70:a6:1a:78:0c:a7:a5:35:67:3f:d7:50:26:20:5c:69: 73:a2:4c:21:f2:d1:13:7e:7c:9b:cd:f0:1c:8b:59:0e:c3:65: 43:d5:07:2f:e3:9a:95:64:14:c1:a2:01:8b:6b:6a:53:22:d9: 2e:16:c8:6b:cc:26:40:6c:c3:e7:40:b6:c0:f1:51:12:a0:f6: 77:1a:be:f0:b1:63:ca:9e:1f:42:79:8d:34:f7:a8:45:2c:3e: b9:f0:a8:63:8e:e7:f9:cd:e0:32:12:0f:fd:b2:3d:8f:7b:41: d6:c1:40:df:9a:0d:6a:cd:10:e1:de:fa:64:93:a9:7b:5d:9e: d2:08:f4:03:46:59:24:50:1c:b1:a5:72:fb:55:1d:74:be:22: aa:b5:76:1c:f2:4e:56:55:62:42:83:10:22:17:cf:98:f6:a2: f1:c9:f8:cb:5c:66:7f:d9:ac:6d:8e:b6:21:78:d7:00:30:9a: c4:7f:bc:6e:de:98:43:cc:29:8f:5f:0d:f1:8e:0b:2c:60:5a: 04:1f:44:eb:b1:62:97:b0:eb:46:fe:83:e2:b0:38:bd:c3:73: 14:14:ac:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYLV2kd6zqfwgq0S2XBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTBlN2UzYzkxNzVlYjk4ZmY3ODE1ZDMwNzZmYjAyOTk2 YTczNGEwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD EyhjZDhmOGZhOTc2MGYzNTFkM2E0MWQ5NDgxOWExY2RhYTk0NDcwMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nfnw9HWQ8NwVSekT9QG7nx30l8C uGMGpdw541pho4eHKaeeHgKYvUslYBsvRM59xFp92OIZUN5h5vp0zXUhFvUkzdFL sJP8qzv+0gtzbXPrncYzOeprjTSNs/dsjGG2DtltY7CTEwwnPvvdSt5E7Ic+fTdO J7x6hmQ73ijsg5T3edv3C2Pi6exhppVVxu/lqKU1W1gReMWdMi4+V/BHr9mR2LFD A/n/NpNcKguBrBVnon8jM6BH6Ha3TqJuIIwL3dKHcX/TJbnvSNRY0dnqw/EujUYt sYEZjzRq1ObIkOxhJWcUdJLFjGs/Dz2ZyHfJNMCj+4wxiNUIiRTsOSiP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2Pj6l2DzUdOkHZSBmhzaqURwFOMB8GA1UdIwQY MBaAFIgQ5+PJF165j/eBXTB2+wKZanNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMt MmVlZGFjZTRhYWM5LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMtMmVlZGFjZTRhYWM5 LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMNLzlD2 ReNqLdrgwAvdHIOUKiHobKuHgm8U5yMoxOOhHQ1Oqpxwphp4DKelNWc/11AmIFxp c6JMIfLRE358m83wHItZDsNlQ9UHL+OalWQUwaIBi2tqUyLZLhbIa8wmQGzD50C2 wPFREqD2dxq+8LFjyp4fQnmNNPeoRSw+ufCoY47n+c3gMhIP/bI9j3tB1sFA35oN as0Q4d76ZJOpe12e0gj0A0ZZJFAcsaVy+1UddL4iqrV2HPJOVlViQoMQIhfPmPai 8cn4y1xmf9msbY62IXjXADCaxH+8bt6YQ8wpj18N8Y4LLGBaBB9E67Fil7DrRv6D 4rA4vcNzFBSsrA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:46 2026 by rpki-client