This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json) Hash identifier: cfzKqJb0VzX+C3HcvGyJ1Amdq6vWo8Nhemc1bj6rBxg= Subject key identifier: CB:8B:88:1A:FC:67:19:BC:AF:C6:9B:5B:97:CC:7D:B5:5C:67:21:9C Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Certificate serial: 019C421004551AA6C9F3A174F4FD3462587D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=) 2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: QhnsTeVQcat3UYRSv8fsbeZwccobelZ7D56z1KTePOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:04:55:1a:a6:c9:f3:a1:74:f4:fd:34:62:58:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=cb8b881afc6719bcafc69b5b97cc7db55c67219c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:b0:a7:a0:b5:43:e1:39:31:26:04:dd:44: b2:25:da:3f:89:e6:4b:a3:5a:e7:52:26:3d:8a:64: bc:10:1e:6d:01:00:7f:f5:1b:80:de:11:cb:19:ed: 3a:5e:1b:e2:f9:f5:5e:d1:db:64:7e:f1:0c:80:77: f1:60:d3:e5:2d:a7:d6:31:e9:6a:7a:b7:16:31:e7: cf:6b:da:a5:07:3a:43:a3:ad:ae:7a:69:63:75:27: 24:6d:e7:85:d3:a1:ae:68:66:3c:f3:f6:5b:c2:d4: ac:df:7b:d7:67:8e:27:ea:e8:45:11:c8:ce:23:fb: 70:a4:53:9f:76:cd:29:fd:99:c9:08:c8:96:c3:64: a1:a0:4e:25:91:1b:65:7c:90:47:61:15:d0:47:fb: cc:c6:87:65:57:00:62:4b:17:c7:78:02:f8:a7:89: 25:06:39:64:c9:c3:52:b5:ce:7a:db:14:4d:7f:a4: 7e:25:bc:17:0b:7d:7b:06:48:92:ea:85:34:e7:17: dc:82:bd:ff:ec:9e:03:49:dc:20:fa:05:5e:db:95: 52:63:e5:93:4b:82:96:57:e7:ff:d1:74:c7:b4:64: 6a:15:bc:8d:76:81:46:c0:3c:49:29:81:a1:d1:95: ba:06:f0:43:34:02:b9:ec:6f:80:b0:f3:36:48:d3: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8B:88:1A:FC:67:19:BC:AF:C6:9B:5B:97:CC:7D:B5:5C:67:21:9C X509v3 Authority Key Identifier: keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:74:46:39:e8:16:d8:18:79:33:d9:0f:5a:87:7a:0f:b4:6c: d3:d8:fa:f2:72:7a:57:69:ab:a7:b6:02:2e:d5:ea:b8:82:d6: 0d:45:b1:35:68:a7:50:9b:d6:58:99:30:4d:1f:3b:ee:4e:06: 8d:36:e6:17:86:43:77:b4:6d:2d:64:88:47:be:75:37:0f:fe: 49:9b:cb:a2:c1:5c:7a:de:54:b0:fa:bd:10:57:f0:ac:ab:5c: 3d:53:40:85:36:ae:52:0f:ff:b6:38:bc:ec:2e:81:ec:c2:34: 3e:84:62:e7:ca:49:54:a6:ca:88:d3:ef:3d:da:7a:51:4b:b8: 62:0c:cf:0b:63:d8:33:4b:ec:b5:0f:5b:cb:eb:e5:ab:3a:6c: 58:fe:dc:85:b3:44:82:9d:8f:a9:ef:36:e2:11:ee:10:a3:0f: d3:39:f5:ac:23:92:dc:b7:2f:88:03:9c:6a:97:16:5a:05:f8: c2:e4:d3:ae:02:a8:d5:0f:ed:b7:4f:8b:7b:9c:76:08:be:9d: a6:c2:b7:b1:0b:4f:20:7b:22:a7:99:23:ed:25:ed:52:40:ba: 68:0c:e7:35:94:a7:24:5d:07:eb:7b:2f:1e:d3:35:5b:8d:10: 9c:a5:64:bd:fd:3b:a7:f1:80:1d:73:c2:8f:34:03:c6:b8:8a: 3b:5b:a7:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEARVGqbJ86F09P00Ylh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl YjEzNDEwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EyhjYjhiODgxYWZjNjcxOWJjYWZjNjliNWI5N2NjN2RiNTVjNjcyMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb2wp6C1Q+E5MSYE3USyJdo/ieZL o1rnUiY9imS8EB5tAQB/9RuA3hHLGe06Xhvi+fVe0dtkfvEMgHfxYNPlLafWMelq ercWMefPa9qlBzpDo62uemljdSckbeeF06GuaGY88/ZbwtSs33vXZ44n6uhFEcjO I/twpFOfds0p/ZnJCMiWw2ShoE4lkRtlfJBHYRXQR/vMxodlVwBiSxfHeAL4p4kl BjlkycNStc562xRNf6R+JbwXC317BkiS6oU05xfcgr3/7J4DSdwg+gVe25VSY+WT S4KWV+f/0XTHtGRqFbyNdoFGwDxJKYGh0ZW6BvBDNAK57G+AsPM2SNMozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuLiBr8Zxm8r8abW5fMfbVcZyGcMB8GA1UdIwQY MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXRGOegW 2Bh5M9kPWod6D7Rs09j68nJ6V2mrp7YCLtXquILWDUWxNWinUJvWWJkwTR877k4G jTbmF4ZDd7RtLWSIR751Nw/+SZvLosFcet5UsPq9EFfwrKtcPVNAhTauUg//tji8 7C6B7MI0PoRi58pJVKbKiNPvPdp6UUu4YgzPC2PYM0vstQ9by+vlqzpsWP7chbNE gp2Pqe824hHuEKMP0zn1rCOS3LcviAOcapcWWgX4wuTTrgKo1Q/tt0+Le5x2CL6d psK3sQtPIHsip5kj7SXtUkC6aAznNZSnJF0H63svHtM1W40QnKVkvf07p/GAHXPC jzQDxriKO1unAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:22 2026 by rpki-client