This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json) Hash identifier: cghS6BtJ8bWxe35B9CFv9GOwaK9eQRtMLh+y9kdiAT4= Subject key identifier: 55:0B:74:70:8A:EC:3C:CB:B6:E7:87:8F:10:95:FD:53:DF:2A:F2:AC Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310 Certificate serial: 019C4246248D578F573E2F7EC9C59DB0CA57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft Manifest number: 0596 Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: DHzZbSaQpwPU9cZHsezdSiC36orBRPggrTsxkuXK6yc=) 2: fz-rvWQsVYjo3OqyUy9lM_fX5Ww.roa (hash: m87pe4kWn6CXoDHZ+RYNhWqFQvvF86Ib8ZOI9K0cWsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:24:8d:57:8f:57:3e:2f:7e:c9:c5:9d:b0:ca:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310 Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=550b74708aec3ccbb6e7878f1095fd53df2af2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:d3:81:0c:fb:72:d2:0e:69:4f:8f:0f:0c: 96:e2:73:0d:8b:18:47:af:2c:1f:1b:2a:ad:63:33: 66:fd:23:5e:52:81:ad:f3:16:e3:b0:d2:69:56:15: bc:39:41:26:b4:fb:2b:51:46:6e:eb:34:bf:1a:8a: e8:ff:02:a2:5e:16:0b:9c:98:1c:9c:a2:26:51:76: df:6f:6c:b1:3d:f2:be:6a:c9:0c:cd:86:7c:2f:9b: fd:f4:45:37:97:38:e4:e5:d8:fc:28:c2:c1:61:b4: aa:22:17:bc:d5:0d:7f:34:42:8f:a6:b8:6e:eb:d9: 3e:a8:d8:51:53:36:41:fb:5c:23:1c:85:00:80:03: 09:00:dd:cb:c1:b8:8d:f6:ec:ae:6d:8e:32:1a:30: 7a:7c:cb:d6:9d:3e:43:47:71:7e:96:c6:72:35:db: a7:29:09:d0:6c:64:eb:e8:71:71:34:12:45:06:c9: 8e:0d:28:7d:23:a6:fa:1a:f9:32:ba:1d:47:5d:a3: d8:a6:0a:0b:ee:6b:ef:ee:9c:45:24:8d:62:49:71: f4:a3:e1:4c:45:2c:bf:9e:9e:7f:d4:2c:c6:fe:53: f0:eb:a4:c9:fb:af:3a:e8:a0:1b:a4:ee:8e:dc:4f: 79:73:a0:62:f0:a7:97:a0:b3:6b:bf:9c:a4:04:75: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:74:70:8A:EC:3C:CB:B6:E7:87:8F:10:95:FD:53:DF:2A:F2:AC X509v3 Authority Key Identifier: keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:98:bc:ad:74:38:51:a0:f5:9a:3a:64:bb:ea:c1:66:0c:1b: aa:fd:a1:cd:8f:28:fa:8b:08:98:8a:3c:46:20:40:b1:e6:50: 3e:fa:b1:4d:11:4c:e8:3f:ed:fd:75:26:b7:d0:30:9d:f5:36: 32:e5:1e:68:10:58:22:d5:d9:c4:61:03:07:c3:6f:e8:22:38: 9c:4b:1b:92:06:31:65:b3:3d:04:aa:88:5a:a5:05:9a:42:2b: c5:55:99:5a:f3:b1:ae:81:c9:2c:46:35:b4:2d:4b:58:a6:2a: d7:50:12:1c:64:64:90:e8:fc:38:74:54:89:0f:89:50:5f:f5: 4f:2a:ad:9b:08:87:4d:d7:4f:37:b8:68:17:8f:24:d2:a9:fc: a1:64:24:6f:c4:f9:5d:ae:32:42:05:89:c9:4a:06:5f:0f:4c: 43:16:7b:0c:34:8a:19:87:7a:56:56:b7:ec:e1:eb:9e:8e:1b: 56:cc:33:ac:eb:01:21:90:27:49:0a:61:e8:59:01:50:cd:e9: b7:49:c3:cf:4a:d9:a6:a9:1c:8a:78:12:c0:39:1d:6f:bc:08: b7:e9:48:ff:c0:04:4c:f5:84:40:1d:ad:c1:06:59:3f:ea:98: 07:e8:57:28:79:58:1c:f7:97:43:84:55:ae:ad:17:ce:97:81: 62:57:d7:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiSNV49XPi9+ycWdsMpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz NjczMTAwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD Eyg1NTBiNzQ3MDhhZWMzY2NiYjZlNzg3OGYxMDk1ZmQ1M2RmMmFmMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNDTgQz7ctIOaU+PDwyW4nMNixhH rywfGyqtYzNm/SNeUoGt8xbjsNJpVhW8OUEmtPsrUUZu6zS/Goro/wKiXhYLnJgc nKImUXbfb2yxPfK+askMzYZ8L5v99EU3lzjk5dj8KMLBYbSqIhe81Q1/NEKPprhu 69k+qNhRUzZB+1wjHIUAgAMJAN3LwbiN9uyubY4yGjB6fMvWnT5DR3F+lsZyNdun KQnQbGTr6HFxNBJFBsmODSh9I6b6Gvkyuh1HXaPYpgoL7mvv7pxFJI1iSXH0o+FM RSy/np5/1CzG/lPw66TJ+6866KAbpO6O3E95c6Bi8KeXoLNrv5ykBHUbPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFULdHCK7DzLtueHjxCV/VPfKvKsMB8GA1UdIwQY MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3 LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJi8rXQ4 UaD1mjpku+rBZgwbqv2hzY8o+osImIo8RiBAseZQPvqxTRFM6D/t/XUmt9AwnfU2 MuUeaBBYItXZxGEDB8Nv6CI4nEsbkgYxZbM9BKqIWqUFmkIrxVWZWvOxroHJLEY1 tC1LWKYq11ASHGRkkOj8OHRUiQ+JUF/1TyqtmwiHTddPN7hoF48k0qn8oWQkb8T5 Xa4yQgWJyUoGXw9MQxZ7DDSKGYd6Vla37OHrno4bVswzrOsBIZAnSQph6FkBUM3p t0nDz0rZpqkcingSwDkdb7wIt+lI/8AETPWEQB2twQZZP+qYB+hXKHlYHPeXQ4RV rq0XzpeBYlfXgA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:33 2026 by rpki-client