This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json) Hash identifier: Ve2ESaCL6XA4RwceQ2Hf8JVJfAZ2CJP+m490DSxiHuw= Subject key identifier: 13:5E:02:96:F8:A6:8F:92:0B:B4:58:37:40:9C:ED:ED:46:69:97:27 Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93 Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193 Certificate serial: 019C427D1BBAF7D1BD9321A98948A2BA5EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft Manifest number: 0837 Signing time: Mon 09 Feb 2026 13:00:21 +0000 Manifest this update: Mon 09 Feb 2026 13:00:21 +0000 Manifest next update: Tue 10 Feb 2026 13:00:21 +0000 Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: sJ24qnXbB02AzS5KMjZowqL46YFduQ/J33OsOfEXA6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:1b:ba:f7:d1:bd:93:21:a9:89:48:a2:ba:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88eafafff81b95dcee57727057ed67114a338193 Validity Not Before: Feb 9 13:00:21 2026 GMT Not After : Feb 10 13:00:21 2026 GMT Subject: CN=135e0296f8a68f920bb45837409ceded46699727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:59:1d:be:5f:04:93:b0:b8:7d:b0:49:2f: a3:23:c1:73:d3:b2:b8:5c:40:61:62:c5:66:69:09: 31:b1:fe:1e:31:01:26:83:cb:c6:ed:e7:c2:24:7b: a3:c9:62:31:51:8c:cb:f8:7a:44:2f:c8:47:cd:16: 6a:da:21:23:bc:20:40:25:de:11:6c:3d:0b:45:ba: d3:a4:3d:e2:cf:62:e2:bc:ec:c3:69:2d:94:f3:2f: df:32:ed:9c:62:f2:aa:f9:31:e8:61:c2:7e:7e:5f: db:58:bc:3e:4e:c1:eb:da:13:ff:d4:69:7d:a0:64: b3:28:34:07:eb:13:96:47:43:24:57:6c:8f:01:20: 8d:ac:69:d5:47:d0:f8:ba:4b:1c:fa:f3:3f:b9:92: ba:11:0c:61:66:7e:12:b3:98:82:6c:1b:34:0a:35: 4a:4a:1d:c0:21:1f:9b:02:11:7f:f9:23:e9:d5:52: b5:7b:20:33:c3:60:07:a6:b3:a1:2f:91:2d:82:81: 09:87:95:cf:94:7e:83:ff:72:e9:70:d8:8f:46:b7: 2c:7a:6e:48:b1:08:43:8c:fe:b3:22:ca:b1:0d:c7: 4b:70:8e:97:a2:b2:8f:c3:d4:34:45:53:fa:9f:66: ef:b0:16:37:78:ea:5a:02:29:43:4e:d2:f6:19:08: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:02:96:F8:A6:8F:92:0B:B4:58:37:40:9C:ED:ED:46:69:97:27 X509v3 Authority Key Identifier: keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7a:95:d0:44:93:34:2f:bd:1b:2a:60:e7:52:77:4e:0e:25: 17:22:65:45:9c:d2:83:fa:4c:14:56:bd:80:39:94:22:63:1a: 19:7b:e2:34:3a:1d:07:4b:11:b8:0b:4b:c3:b5:7a:5b:9e:ec: a1:9e:90:41:c4:e7:1c:ca:59:34:a3:6f:41:36:17:2f:08:70: 0b:45:28:60:94:cf:c5:5d:b3:73:b9:ea:ec:fc:eb:52:81:fe: b8:41:96:18:73:7b:f3:60:82:ee:5c:05:c7:ff:2e:51:b2:33: 56:23:60:b7:84:9d:09:c1:6b:b8:7d:a7:79:b1:91:56:50:1f: 48:6e:32:08:5c:4f:87:2f:aa:b9:f5:bf:fd:b9:46:f7:77:be: e7:dd:44:5c:4a:45:1e:34:44:c8:a1:8a:d8:84:42:61:f7:72: 60:47:b0:8a:44:aa:c3:18:c6:14:72:be:32:35:5c:7a:c3:d5: 01:9b:4d:56:16:cf:92:df:6c:8c:83:ab:a9:1a:ec:07:c3:d8: 87:f5:26:2e:d9:2d:11:bd:af:3b:f6:96:a6:13:51:a1:35:bc: 2b:c3:c6:18:23:79:a3:f4:46:e0:92:99:40:b1:40:90:07:d7: 0c:c9:78:c9:2b:a1:c8:87:ed:e1:86:bc:9a:34:01:44:23:55: 94:c4:af:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRu699G9kyGpiUiiul7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWFmYWZmZjgxYjk1ZGNlZTU3NzI3MDU3ZWQ2NzExNGEz MzgxOTMwHhcNMjYwMjA5MTMwMDIxWhcNMjYwMjEwMTMwMDIxWjAzMTEwLwYDVQQD EygxMzVlMDI5NmY4YTY4ZjkyMGJiNDU4Mzc0MDljZWRlZDQ2Njk5NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1ZHb5fBJOwuH2wSS+jI8Fz07K4 XEBhYsVmaQkxsf4eMQEmg8vG7efCJHujyWIxUYzL+HpEL8hHzRZq2iEjvCBAJd4R bD0LRbrTpD3iz2LivOzDaS2U8y/fMu2cYvKq+THoYcJ+fl/bWLw+TsHr2hP/1Gl9 oGSzKDQH6xOWR0MkV2yPASCNrGnVR9D4uksc+vM/uZK6EQxhZn4Ss5iCbBs0CjVK Sh3AIR+bAhF/+SPp1VK1eyAzw2AHprOhL5EtgoEJh5XPlH6D/3LpcNiPRrcsem5I sQhDjP6zIsqxDcdLcI6XorKPw9Q0RVP6n2bvsBY3eOpaAilDTtL2GQhgvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNeApb4po+SC7RYN0Cc7e1GaZcnMB8GA1UdIwQY MBaAFIjq+v/4G5Xc7ldycFftZxFKM4GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMt MWEzODdhNDU2NTc5LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMtMWEzODdhNDU2NTc5 LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHqV0EST NC+9Gypg51J3Tg4lFyJlRZzSg/pMFFa9gDmUImMaGXviNDodB0sRuAtLw7V6W57s oZ6QQcTnHMpZNKNvQTYXLwhwC0UoYJTPxV2zc7nq7PzrUoH+uEGWGHN782CC7lwF x/8uUbIzViNgt4SdCcFruH2nebGRVlAfSG4yCFxPhy+qufW//blG93e+591EXEpF HjREyKGK2IRCYfdyYEewikSqwxjGFHK+MjVcesPVAZtNVhbPkt9sjIOrqRrsB8PY h/UmLtktEb2vO/aWphNRoTW8K8PGGCN5o/RG4JKZQLFAkAfXDMl4ySuhyIft4Ya8 mjQBRCNVlMSvYA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:37 2026 by rpki-client