This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft File: IxogKGMGhumbv9Xhyw3Ti424IuA.mft (raw, json) Hash identifier: Dce4mpytY4zJGc3KAO6krH7yRLSiMMNXJua1cE9nphk= Subject key identifier: D2:94:D0:D3:2B:D7:0A:20:AE:72:9D:61:9E:29:85:39:0F:FB:38:65 Authority key identifier: 23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0 Certificate issuer: /CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0 Certificate serial: 019C43C6B30F41913446A08CB77E0058FC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft Manifest number: 0139 Signing time: Mon 09 Feb 2026 19:00:21 +0000 Manifest this update: Mon 09 Feb 2026 19:00:21 +0000 Manifest next update: Tue 10 Feb 2026 19:00:21 +0000 Files and hashes: 1: IxogKGMGhumbv9Xhyw3Ti424IuA.crl (hash: qDYJmJ3mqWGNP2ZEye2twiDPgGIiNmUOcPIIhf+xpxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b3:0f:41:91:34:46:a0:8c:b7:7e:00:58:fc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0 Validity Not Before: Feb 9 19:00:21 2026 GMT Not After : Feb 10 19:00:21 2026 GMT Subject: CN=d294d0d32bd70a20ae729d619e2985390ffb3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:a1:5b:a1:a2:b2:41:54:34:b1:1b:40:18: aa:aa:08:35:e3:a9:f4:95:0e:97:95:14:76:b2:f5: e6:33:73:28:11:5c:79:2f:a0:de:1b:5c:48:90:34: 8f:fb:34:33:d8:39:56:c1:50:0e:5f:66:3a:d8:94: 78:5d:a0:cc:ed:4d:24:77:b5:96:09:c4:b7:99:96: 1b:1b:32:f1:83:37:64:68:04:3b:77:f7:8a:c9:de: 42:ec:a8:1a:50:64:5a:37:36:5a:7b:7a:41:52:78: ab:d1:e8:62:82:9e:3b:51:f0:81:5b:cc:c3:5d:33: e0:53:8b:44:bf:3f:28:b4:60:b5:07:b7:56:36:56: af:35:21:49:48:12:1e:b0:65:33:c8:21:bb:9a:d9: 2d:b5:a1:53:9a:21:b6:59:07:32:50:2c:9e:0e:ab: 3c:a4:f6:dd:fd:8f:45:b4:a5:a4:b2:c5:c0:04:bf: 21:b2:c0:61:ab:a8:84:16:be:a1:58:83:93:44:ab: 2c:29:e8:ca:08:00:98:3c:bc:25:cb:8d:1d:7e:34: c7:53:57:e1:6e:b1:27:ea:5e:48:c5:8c:74:15:cf: fe:a6:78:8e:08:64:4d:f6:b7:8b:50:56:9c:58:e3: 78:11:8d:0a:22:37:1e:ff:c2:05:e7:d1:2e:d3:9b: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:D0:D3:2B:D7:0A:20:AE:72:9D:61:9E:29:85:39:0F:FB:38:65 X509v3 Authority Key Identifier: keyid:23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5e:70:a0:c4:ba:81:8a:65:23:3d:98:b9:ac:6d:03:67:41: db:d5:6e:51:2a:2c:33:32:d2:d4:62:d6:f1:ba:2d:4c:95:66: 42:ef:f3:7d:7d:67:79:c6:27:30:b2:d3:e8:c0:52:d7:ef:ad: c5:75:00:1b:97:37:b9:ac:39:28:b9:15:c8:79:ba:e4:c1:c0: f6:02:95:e2:3d:ee:96:5f:e3:74:e6:c2:7d:5a:a6:64:26:39: 42:0f:06:05:43:eb:a4:ef:41:9f:3b:47:37:55:db:1e:30:40: 69:2e:73:dc:85:9b:40:80:ac:cf:86:77:8e:b8:4b:1a:bf:4a: 2e:b2:c0:4b:1d:43:f6:ec:82:4c:ba:c1:aa:52:ea:19:18:60: f3:7d:44:3f:50:cc:ef:d1:99:19:09:88:cb:d0:64:d2:d8:46: 94:22:61:42:0f:bf:eb:68:96:bd:9d:f0:bd:21:e8:e0:2d:a5: 4b:c3:48:4b:60:67:a5:a3:75:42:74:be:a5:b5:99:da:a1:7f: e6:24:b4:4f:9e:eb:dd:30:5d:1b:56:1b:9a:b1:f3:17:9e:53: 78:95:ea:f6:a0:1b:96:68:ad:40:7a:cf:bf:d4:ed:7f:75:d5: 72:1a:e1:51:8a:3b:df:a4:8f:9f:5f:c0:ec:7f:f3:a1:d2:01: 1b:1f:c3:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrMPQZE0RqCMt34AWPySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMWEyMDI4NjMwNjg2ZTk5YmJmZDVlMWNiMGRkMzhiOGRi ODIyZTAwHhcNMjYwMjA5MTkwMDIxWhcNMjYwMjEwMTkwMDIxWjAzMTEwLwYDVQQD EyhkMjk0ZDBkMzJiZDcwYTIwYWU3MjlkNjE5ZTI5ODUzOTBmZmIzODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhqhW6GiskFUNLEbQBiqqgg146n0 lQ6XlRR2svXmM3MoEVx5L6DeG1xIkDSP+zQz2DlWwVAOX2Y62JR4XaDM7U0kd7WW CcS3mZYbGzLxgzdkaAQ7d/eKyd5C7KgaUGRaNzZae3pBUnir0ehigp47UfCBW8zD XTPgU4tEvz8otGC1B7dWNlavNSFJSBIesGUzyCG7mtkttaFTmiG2WQcyUCyeDqs8 pPbd/Y9FtKWkssXABL8hssBhq6iEFr6hWIOTRKssKejKCACYPLwly40dfjTHU1fh brEn6l5IxYx0Fc/+pniOCGRN9reLUFacWON4EY0KIjce/8IF59Eu05v4hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKU0NMr1wogrnKdYZ4phTkP+zhlMB8GA1UdIwQY MBaAFCMaIChjBobpm7/V4csN04uNuCLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhvZ0tHTUdodW1idjlYaHl3M1RpNDI0SXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kMWE3N2MtZDRhOC00OTYwLWExMzkt MzhiMjc5Njg3MDE4LzEvSXhvZ0tHTUdodW1idjlYaHl3M1RpNDI0SXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kMWE3N2MtZDRhOC00OTYwLWExMzktMzhiMjc5Njg3MDE4 LzEvSXhvZ0tHTUdodW1idjlYaHl3M1RpNDI0SXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ15woMS6 gYplIz2YuaxtA2dB29VuUSosMzLS1GLW8botTJVmQu/zfX1necYnMLLT6MBS1++t xXUAG5c3uaw5KLkVyHm65MHA9gKV4j3ull/jdObCfVqmZCY5Qg8GBUPrpO9BnztH N1XbHjBAaS5z3IWbQICsz4Z3jrhLGr9KLrLASx1D9uyCTLrBqlLqGRhg831EP1DM 79GZGQmIy9Bk0thGlCJhQg+/62iWvZ3wvSHo4C2lS8NIS2BnpaN1QnS+pbWZ2qF/ 5iS0T57r3TBdG1YbmrHzF55TeJXq9qAblmitQHrPv9Ttf3XVchrhUYo736SPn1/A 7H/zodIBGx/D1Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:53 2026 by rpki-client