This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json) Hash identifier: ACH9oUE72KP1fSklcqoXXWW0dDvmgiuAP8Nz7V5VUkA= Subject key identifier: 45:E0:4E:A5:49:B6:1E:AA:DA:DD:C3:DC:10:BF:AE:F5:4C:CF:90:62 Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178 Certificate serial: 019C44348180F076F2AAFC7FDD19FB254E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft Manifest number: 0944 Signing time: Mon 09 Feb 2026 21:00:17 +0000 Manifest this update: Mon 09 Feb 2026 21:00:17 +0000 Manifest next update: Tue 10 Feb 2026 21:00:17 +0000 Files and hashes: 1: 62g98PmxyY2SBxaFk6sUPCKYqAY.roa (hash: tR36sfVrBqgXWEQ2XX9jyHKVVOPsMwsvegZz0ckSoK4=) 2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 42ClVjji9ju9kKoffanBT5ycz40UOixCxaAwepm9LrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:81:80:f0:76:f2:aa:fc:7f:dd:19:fb:25:4e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178 Validity Not Before: Feb 9 21:00:17 2026 GMT Not After : Feb 10 21:00:17 2026 GMT Subject: CN=45e04ea549b61eaadaddc3dc10bfaef54ccf9062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:bc:60:7d:b4:47:a9:5d:aa:24:b4:8c:dc: 35:7b:4e:56:4d:d9:a9:b3:bb:ac:ef:c9:0c:54:1a: 2a:64:e7:09:ba:83:df:24:f7:26:b6:34:9d:f3:26: 18:e0:5f:5e:1b:8f:f9:64:07:72:be:8d:6a:47:cc: 5a:be:c7:92:da:e1:d7:2f:54:f0:8a:aa:51:4e:5a: f3:e1:a1:87:0c:48:91:75:61:25:f1:3c:03:5e:08: f1:44:a0:1d:a8:c2:d7:2c:62:f5:51:0c:49:42:1c: be:1d:95:12:1b:ea:04:df:22:6a:c3:e0:1e:c7:98: 4a:5e:51:46:f6:fb:42:76:36:3f:64:dd:82:03:11: 11:95:ea:f1:b9:c9:e0:43:5e:26:4b:c1:cc:1e:93: b0:72:f5:09:11:66:b8:b4:37:f7:d7:82:ae:7d:dd: df:3a:e7:db:a1:63:7e:7d:de:37:b3:aa:3f:ab:7d: 71:82:65:54:8b:9d:00:69:37:e9:2f:90:51:65:11: 74:12:6b:f3:86:76:61:17:ae:74:c0:35:ac:8b:cc: 45:db:0c:aa:77:a0:b9:d5:a8:06:b0:29:19:a3:0a: 84:b6:e5:4f:14:7e:cd:a1:82:ce:2b:24:8e:e9:25: d5:20:79:5b:2f:1a:a4:bf:34:df:cf:79:05:8e:48: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:4E:A5:49:B6:1E:AA:DA:DD:C3:DC:10:BF:AE:F5:4C:CF:90:62 X509v3 Authority Key Identifier: keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6d:50:48:84:60:fd:f7:ec:51:0d:81:a7:32:5b:47:b6:8f: cb:57:7d:36:99:13:ec:6c:e4:68:90:17:ae:f9:20:45:99:ec: 51:c8:45:ef:16:25:a3:94:b2:ac:a4:39:4b:e3:47:d7:a0:c6: b1:f5:c1:94:7f:3b:0e:1f:28:12:05:73:3c:5d:cc:62:f5:ce: 17:9b:ea:59:1f:c6:f2:8a:3d:00:a6:c5:e5:86:01:62:8e:67: 06:27:95:80:13:7a:80:db:4b:9f:33:86:22:96:39:fe:cc:4d: 3d:5e:8e:31:4d:ec:d2:79:57:f7:58:ee:9a:24:cb:66:8f:1c: 24:7a:08:df:24:d6:11:f9:59:ff:f3:26:79:72:4d:77:b3:5f: ed:42:90:7d:f8:7a:68:5e:af:4c:80:f0:1a:f4:02:86:b0:35: e0:ec:a7:ab:3b:13:3b:8a:b8:b8:de:77:0c:ff:6c:66:38:3b: c6:55:51:ff:8a:00:a7:7b:f2:63:93:d9:29:f2:ab:a9:6e:5e: d4:cf:9e:ae:e4:59:e5:ba:a4:9d:ac:5c:49:f9:0d:27:5c:fd: fb:a0:22:5a:16:56:36:ef:b8:99:54:3d:05:1d:fa:76:f3:3b: c6:21:72:f3:eb:0d:6b:c7:f9:f1:32:9d:85:3a:c2:2d:5f:4a: 61:96:c9:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENIGA8Hbyqvx/3Rn7JU5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4 MzExNzgwHhcNMjYwMjA5MjEwMDE3WhcNMjYwMjEwMjEwMDE3WjAzMTEwLwYDVQQD Eyg0NWUwNGVhNTQ5YjYxZWFhZGFkZGMzZGMxMGJmYWVmNTRjY2Y5MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTe8YH20R6ldqiS0jNw1e05WTdmp s7us78kMVBoqZOcJuoPfJPcmtjSd8yYY4F9eG4/5ZAdyvo1qR8xavseS2uHXL1Tw iqpRTlrz4aGHDEiRdWEl8TwDXgjxRKAdqMLXLGL1UQxJQhy+HZUSG+oE3yJqw+Ae x5hKXlFG9vtCdjY/ZN2CAxERlerxucngQ14mS8HMHpOwcvUJEWa4tDf314Kufd3f OufboWN+fd43s6o/q31xgmVUi50AaTfpL5BRZRF0EmvzhnZhF650wDWsi8xF2wyq d6C51agGsCkZowqEtuVPFH7NoYLOKySO6SXVIHlbLxqkvzTfz3kFjkhOwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXgTqVJth6q2t3D3BC/rvVMz5BiMB8GA1UdIwQY MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtW1QSIRg /ffsUQ2BpzJbR7aPy1d9NpkT7GzkaJAXrvkgRZnsUchF7xYlo5SyrKQ5S+NH16DG sfXBlH87Dh8oEgVzPF3MYvXOF5vqWR/G8oo9AKbF5YYBYo5nBieVgBN6gNtLnzOG IpY5/sxNPV6OMU3s0nlX91jumiTLZo8cJHoI3yTWEflZ//MmeXJNd7Nf7UKQffh6 aF6vTIDwGvQChrA14OynqzsTO4q4uN53DP9sZjg7xlVR/4oAp3vyY5PZKfKrqW5e 1M+eruRZ5bqknaxcSfkNJ1z9+6AiWhZWNu+4mVQ9BR36dvM7xiFy8+sNa8f58TKd hTrCLV9KYZbJPA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:30 2026 by rpki-client