This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: RUkTOBwKohAwKSqWTFEeueYn9zRmDcN1XdQ1XAprLMg=
Subject key identifier: 09:7A:B3:04:DA:C6:A2:F5:11:07:77:C4:FE:69:B2:E5:35:41:A4:E2
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019C45478CAD4E472DAC17ACB11DE6150262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1812
Signing time: Tue 10 Feb 2026 02:00:42 +0000
Manifest this update: Tue 10 Feb 2026 02:00:42 +0000
Manifest next update: Wed 11 Feb 2026 02:00:42 +0000
Files and hashes: 1: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: wdEYMOtav1yzsvH2sGpFZ7s/u+KmVS4NSSD4s8asvNs=)
2: unrdcZbrdHFGkYI2NvQ0Uuo8iuQ.roa (hash: CvLqQM5rLi1faTdwSBeTlBwQCQBbSATUvwP2tHqg/FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:8c:ad:4e:47:2d:ac:17:ac:b1:1d:e6:15:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Feb 10 02:00:42 2026 GMT
Not After : Feb 11 02:00:42 2026 GMT
Subject: CN=097ab304dac6a2f5110777c4fe69b2e53541a4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:fc:b9:b3:ba:25:55:1e:31:26:ca:c8:33:
8d:b7:8b:07:f2:9e:cb:5a:55:53:be:89:70:f2:a9:
8b:11:71:08:93:80:7d:16:43:c7:32:34:61:01:40:
5a:c9:ad:01:f5:a3:ad:0f:30:1d:57:42:2b:62:83:
2f:c2:66:7c:a0:4a:94:32:5d:f3:c2:b2:dd:8f:89:
51:b3:56:77:c2:3f:7b:71:25:1e:2a:8a:ac:4b:d0:
63:e0:65:58:4f:c7:14:eb:1d:a9:24:06:b1:f4:e5:
b0:45:74:c6:57:0b:4b:e3:38:2f:ec:62:4f:67:28:
8e:38:45:40:e8:df:15:f8:56:63:bd:b6:71:52:e6:
4e:e6:7a:d5:f8:ea:0b:d1:1b:93:6c:f7:28:7d:42:
7a:c8:09:73:93:6f:59:c0:b6:ab:10:d3:41:49:23:
43:56:4d:29:6f:41:6f:99:f3:0d:88:d0:24:d5:a7:
14:3e:ca:35:19:2e:08:eb:18:d4:4d:c7:f7:22:45:
9d:ab:01:7d:a0:4f:7e:04:88:2b:29:96:82:2c:83:
44:f7:91:9f:bf:45:f4:00:e1:59:62:32:73:e6:04:
72:72:1b:7d:ad:e0:4b:07:d9:1a:37:e6:55:af:26:
79:f9:4c:69:72:aa:80:f1:e4:89:ae:5b:6f:c4:63:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7A:B3:04:DA:C6:A2:F5:11:07:77:C4:FE:69:B2:E5:35:41:A4:E2
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:76:22:43:72:e1:b5:31:69:97:dc:f7:97:91:64:e5:1d:
92:61:88:26:f5:33:0c:a3:37:ba:43:9c:5a:0b:45:57:6d:fe:
cd:04:43:2b:c6:c7:7c:01:e9:b1:3a:a1:c5:3d:aa:4c:4d:fb:
a1:7a:eb:bd:a2:4b:3c:11:f8:f3:e5:3e:cb:b4:23:bd:95:34:
d3:53:89:09:09:d8:b5:7a:2c:f8:0b:80:b4:d7:da:76:47:77:
34:8b:c1:7d:ca:3d:f5:a1:f6:f9:85:f3:1a:1d:51:81:ac:03:
8e:90:c9:10:95:53:36:6e:ea:23:54:0a:ce:37:c6:e3:74:65:
a6:14:01:c9:b7:62:40:75:5b:73:5e:d1:6a:70:bd:ce:8b:3a:
8a:e2:ef:5c:8e:b9:b6:18:29:a4:91:ad:c6:37:23:b0:66:fc:
3b:ce:a8:34:68:d3:c7:5f:b8:e2:7e:43:58:aa:7a:66:14:cd:
43:7d:7a:13:4e:1c:e1:25:9a:2d:5e:3b:bd:da:a2:cf:84:37:
cc:5b:3d:fb:95:f8:02:0f:fd:aa:39:28:cf:0f:78:33:ee:e3:
61:33:a6:79:12:02:94:3d:6d:b1:8f:b2:f7:c9:29:de:94:d8:
c8:ba:55:c0:d1:91:61:d8:2a:3c:f6:62:08:13:bb:03:03:ab:
34:e5:49:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFR4ytTkctrBessR3mFQJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjYwMjEwMDIwMDQyWhcNMjYwMjExMDIwMDQyWjAzMTEwLwYDVQQD
EygwOTdhYjMwNGRhYzZhMmY1MTEwNzc3YzRmZTY5YjJlNTM1NDFhNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgD8ubO6JVUeMSbKyDONt4sH8p7L
WlVTvolw8qmLEXEIk4B9FkPHMjRhAUBaya0B9aOtDzAdV0IrYoMvwmZ8oEqUMl3z
wrLdj4lRs1Z3wj97cSUeKoqsS9Bj4GVYT8cU6x2pJAax9OWwRXTGVwtL4zgv7GJP
ZyiOOEVA6N8V+FZjvbZxUuZO5nrV+OoL0RuTbPcofUJ6yAlzk29ZwLarENNBSSND
Vk0pb0FvmfMNiNAk1acUPso1GS4I6xjUTcf3IkWdqwF9oE9+BIgrKZaCLINE95Gf
v0X0AOFZYjJz5gRycht9reBLB9kaN+ZVryZ5+UxpcqqA8eSJrltvxGN7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl6swTaxqL1EQd3xP5psuU1QaTiMB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrR2IkNy
4bUxaZfc95eRZOUdkmGIJvUzDKM3ukOcWgtFV23+zQRDK8bHfAHpsTqhxT2qTE37
oXrrvaJLPBH48+U+y7QjvZU001OJCQnYtXos+AuAtNfadkd3NIvBfco99aH2+YXz
Gh1RgawDjpDJEJVTNm7qI1QKzjfG43RlphQBybdiQHVbc17RanC9zos6iuLvXI65
thgppJGtxjcjsGb8O86oNGjTx1+44n5DWKp6ZhTNQ316E04c4SWaLV47vdqiz4Q3
zFs9+5X4Ag/9qjkozw94M+7jYTOmeRIClD1tsY+y98kp3pTYyLpVwNGRYdgqPPZi
CBO7AwOrNOVJaA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:30 2026 by rpki-client