This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json) Hash identifier: gBb9HNMFO/+7iPIqFgkTG3f+3Hpx6U82M0UGZ+zBrKE= Subject key identifier: 96:B6:AD:CC:8A:67:A3:22:5D:B1:87:EA:65:E6:5D:27:FA:CF:ED:4E Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65 Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765 Certificate serial: 019C41A1947F286C9A2C390256133C2EA9B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft Manifest number: 150C Signing time: Mon 09 Feb 2026 09:00:34 +0000 Manifest this update: Mon 09 Feb 2026 09:00:34 +0000 Manifest next update: Tue 10 Feb 2026 09:00:34 +0000 Files and hashes: 1: CkDZy0vHEeVACtT5dWGXXEt2g-Q.roa (hash: BDhDMAFwjHTIfBm63KAK3A2wmzDVWeqFjAWRvTCerUc=) 2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: qw5xf9hfyqnLgpsbKaZa62RqSTPmRujHCoI7iajo9Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:94:7f:28:6c:9a:2c:39:02:56:13:3c:2e:a9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765 Validity Not Before: Feb 9 09:00:34 2026 GMT Not After : Feb 10 09:00:34 2026 GMT Subject: CN=96b6adcc8a67a3225db187ea65e65d27facfed4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:3b:61:42:51:6f:29:5e:9e:58:5d:ed:65: 11:d0:0f:69:98:a8:d9:f4:b5:34:7d:e3:a8:11:15: ed:1f:01:01:a2:f0:15:5b:d0:4c:59:72:90:d3:29: db:5e:48:6b:a8:16:23:8e:46:1f:30:2b:6b:3a:bf: c3:24:7d:55:8a:cb:ab:84:68:b5:ac:e3:cd:ad:c7: a3:39:3b:f8:68:1d:2e:74:c0:c8:9e:fb:f1:08:1b: c6:f7:18:3d:db:98:42:bf:9f:71:4d:4e:80:25:41: bc:cf:54:ca:d6:b7:65:42:88:a7:8a:7b:5d:51:95: 79:cc:33:26:42:f6:5e:77:77:a8:7d:f0:53:54:c8: 97:d9:65:69:df:08:ee:8a:ef:32:03:dd:30:d3:06: 7b:c2:aa:df:dc:bf:d4:65:a3:1e:df:b5:68:5f:74: f7:70:75:9b:0e:a4:fa:27:3f:1b:ad:5c:53:13:81: ac:de:e2:ca:24:49:28:8f:66:68:57:7a:51:c7:75: b5:68:c9:6b:12:e3:69:81:1d:74:f7:44:e6:c2:02: 68:a8:54:89:1e:c2:94:38:14:d5:78:8c:73:9b:b7: 36:4e:6d:14:c4:89:c2:21:17:0e:d5:4b:81:f1:e1: a3:d7:23:e5:3f:bb:9e:f4:62:8a:27:cc:ea:b3:99: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:AD:CC:8A:67:A3:22:5D:B1:87:EA:65:E6:5D:27:FA:CF:ED:4E X509v3 Authority Key Identifier: keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:76:84:a5:91:12:94:16:f3:86:d3:2c:8a:a0:9c:b2:88: 4c:5e:11:6d:2f:13:7c:d0:65:f3:59:bc:80:85:cc:ac:f1:8f: fa:9b:d3:06:62:9d:ed:2e:30:af:cc:b5:1d:10:7c:67:9f:11: 43:43:48:b1:fd:0a:98:6f:61:fa:fd:92:30:6c:e8:26:db:6b: 0d:7d:70:01:44:35:3f:a9:36:59:dc:af:13:b4:47:22:7e:3b: 34:d6:26:c4:cd:d9:8c:9a:a9:4f:1c:b9:83:e8:5c:e8:83:0d: 75:93:bf:17:fe:95:e5:de:4e:70:a0:75:e1:cf:4d:7d:7b:27: 9d:05:80:0f:48:d7:72:87:3f:04:cc:42:94:8b:f8:c3:22:4a: 82:5e:8a:b8:b6:7b:88:d4:14:4b:36:23:37:19:4b:f4:13:03: b5:9e:1d:8d:da:a4:26:02:e1:b7:47:83:7f:73:80:e1:0d:0d: 8d:28:86:98:c8:37:8b:f2:ef:ac:55:11:35:ef:94:08:4e:6c: 79:8b:7b:76:f0:db:03:bd:0e:c5:f4:69:dc:36:ad:21:ed:b0: 2f:ea:f4:1e:68:b0:3d:54:d9:ca:a7:0b:7e:d0:19:d6:28:c9: 01:95:db:f3:59:34:53:d2:b9:63:62:42:58:2b:c3:19:38:0a: 58:d3:22:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZR/KGyaLDkCVhM8Lqm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZGUwNzg3Y2Y5ODgxYTFmYzU5NTU2Y2ExNTQyZDc3Nzlm Mjg3NjUwHhcNMjYwMjA5MDkwMDM0WhcNMjYwMjEwMDkwMDM0WjAzMTEwLwYDVQQD Eyg5NmI2YWRjYzhhNjdhMzIyNWRiMTg3ZWE2NWU2NWQyN2ZhY2ZlZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyU7YUJRbylenlhd7WUR0A9pmKjZ 9LU0feOoERXtHwEBovAVW9BMWXKQ0ynbXkhrqBYjjkYfMCtrOr/DJH1VisurhGi1 rOPNrcejOTv4aB0udMDInvvxCBvG9xg925hCv59xTU6AJUG8z1TK1rdlQoinintd UZV5zDMmQvZed3eoffBTVMiX2WVp3wjuiu8yA90w0wZ7wqrf3L/UZaMe37VoX3T3 cHWbDqT6Jz8brVxTE4Gs3uLKJEkoj2ZoV3pRx3W1aMlrEuNpgR1090TmwgJoqFSJ HsKUOBTVeIxzm7c2Tm0UxInCIRcO1UuB8eGj1yPlP7ue9GKKJ8zqs5mFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa2rcyKZ6MiXbGH6mXmXSf6z+1OMB8GA1UdIwQY MBaAFIreB4fPmIGh/FlVbKFULXd58odlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzE5MTUtZGJmZS00NDgxLWIzMWIt NTY5N2M3YjFjNWMxLzEvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iYzE5MTUtZGJmZS00NDgxLWIzMWItNTY5N2M3YjFjNWMx LzEvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVF2hKWR EpQW84bTLIqgnLKITF4RbS8TfNBl81m8gIXMrPGP+pvTBmKd7S4wr8y1HRB8Z58R Q0NIsf0KmG9h+v2SMGzoJttrDX1wAUQ1P6k2WdyvE7RHIn47NNYmxM3ZjJqpTxy5 g+hc6IMNdZO/F/6V5d5OcKB14c9NfXsnnQWAD0jXcoc/BMxClIv4wyJKgl6KuLZ7 iNQUSzYjNxlL9BMDtZ4djdqkJgLht0eDf3OA4Q0NjSiGmMg3i/LvrFURNe+UCE5s eYt7dvDbA70OxfRp3DatIe2wL+r0HmiwPVTZyqcLftAZ1ijJAZXb81k0U9K5Y2JC WCvDGTgKWNMivQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:20 2026 by rpki-client