This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft File: iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json) Hash identifier: YS9Ib7Ekk7CPR82l+DSNs//WItwEy9/uM4xB6bzLU1Y= Subject key identifier: BD:CC:36:F1:5D:1E:12:3C:1D:3E:FA:80:7E:D8:51:A1:04:FA:70:68 Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC Certificate issuer: /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec Certificate serial: 019C427E06A9170B399151BD12E721867248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft Manifest number: 05A6 Signing time: Mon 09 Feb 2026 13:01:21 +0000 Manifest this update: Mon 09 Feb 2026 13:01:21 +0000 Manifest next update: Tue 10 Feb 2026 13:01:21 +0000 Files and hashes: 1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: YkGZY73ceqkJ4ltzBa1t/k/Az5Eyc0bWZzFFeer0YFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:06:a9:17:0b:39:91:51:bd:12:e7:21:86:72:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec Validity Not Before: Feb 9 13:01:21 2026 GMT Not After : Feb 10 13:01:21 2026 GMT Subject: CN=bdcc36f15d1e123c1d3efa807ed851a104fa7068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:bc:17:96:23:19:c2:97:fd:3c:25:bd:c2: f8:84:49:89:e5:5a:af:2e:31:56:ac:6a:71:a3:79: 26:ff:fe:81:91:d9:00:2e:68:82:ba:8d:66:68:58: 23:4d:ab:06:c7:2d:c5:4c:8a:20:a9:18:59:ee:11: 73:e5:9d:fc:f7:01:ca:96:ea:62:7a:84:31:ff:31: 38:99:d4:f9:19:b6:b2:05:00:bc:13:07:5c:4b:cf: 50:87:a5:9e:37:0e:be:a2:f9:bc:39:d6:36:cd:31: b6:a8:91:1f:65:93:47:ba:4c:b1:34:31:49:6f:87: ee:9c:83:3e:56:1c:8e:09:14:9b:3d:7e:04:2c:fe: 0f:84:5c:cc:4a:a9:38:76:4b:76:a8:a1:ce:40:6d: 5a:a2:1a:3b:5d:fd:17:bc:fd:42:bb:d4:90:4e:c9: c2:70:d5:be:1d:14:d2:d2:68:f1:41:37:0a:30:ef: a7:97:74:91:ad:92:19:f7:49:34:5a:fa:f8:61:56: ef:fb:d9:a8:71:68:86:e5:b5:e0:50:83:dd:cf:41: 8f:27:fb:2f:2e:a3:32:51:1a:24:60:63:8e:42:23: fd:e2:d8:dc:d8:de:ea:c6:6c:70:64:10:44:b6:b0: 9a:6c:46:bb:29:d8:e5:ef:6e:f4:d7:78:38:32:1b: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:36:F1:5D:1E:12:3C:1D:3E:FA:80:7E:D8:51:A1:04:FA:70:68 X509v3 Authority Key Identifier: keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:af:64:e2:79:94:a6:63:34:77:14:ac:e5:9c:0a:d2:ff:18: f6:87:69:e6:ec:fc:44:04:28:6a:54:8a:7f:61:af:0e:f7:6a: de:fb:15:9c:e8:a2:47:66:ee:5b:e1:99:d1:82:bb:42:1f:70: 76:75:c1:e2:d1:fa:98:04:d0:c1:7f:5b:6e:dc:f7:4b:27:f6: 82:c7:30:47:27:ee:f0:92:f7:36:13:45:23:8f:eb:84:80:8b: 1b:e6:ef:e2:11:88:f8:93:d6:8c:42:65:65:21:7d:f6:41:26: 2e:38:b6:7c:28:d6:9d:90:24:63:29:b6:4b:0a:d7:2a:b3:5b: b9:58:1d:ce:77:4f:c8:d2:16:e8:02:87:95:5a:de:03:9e:d8: 66:97:8e:a4:64:6e:36:5e:f1:6c:9b:73:69:2e:01:c7:cd:a8: ca:9f:1d:74:55:2d:7b:d2:65:b8:e8:6d:72:1c:83:99:64:4e: 77:8b:21:35:cd:38:fb:3c:46:02:a6:d3:ba:c7:c9:29:bd:94: c4:31:ee:a1:27:86:b0:1e:15:d1:0e:ef:af:a3:c3:3c:c8:e8: 5c:2e:e8:8f:15:fc:e8:92:dc:d2:c8:4d:72:00:9d:7f:2a:4f: 64:ed:91:73:77:97:b9:59:b4:18:81:b7:ed:8a:c7:4e:e9:a2: ae:fe:0a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgapFws5kVG9EuchhnJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTQ5YTQ5ZWEwNjc3MGE4N2Q3NWE1YzgzNTZmNDU2NGUx YWIxZWMwHhcNMjYwMjA5MTMwMTIxWhcNMjYwMjEwMTMwMTIxWjAzMTEwLwYDVQQD EyhiZGNjMzZmMTVkMWUxMjNjMWQzZWZhODA3ZWQ4NTFhMTA0ZmE3MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuS8F5YjGcKX/TwlvcL4hEmJ5Vqv LjFWrGpxo3km//6BkdkALmiCuo1maFgjTasGxy3FTIogqRhZ7hFz5Z389wHKlupi eoQx/zE4mdT5GbayBQC8EwdcS89Qh6WeNw6+ovm8OdY2zTG2qJEfZZNHukyxNDFJ b4funIM+VhyOCRSbPX4ELP4PhFzMSqk4dkt2qKHOQG1aoho7Xf0XvP1Cu9SQTsnC cNW+HRTS0mjxQTcKMO+nl3SRrZIZ90k0Wvr4YVbv+9mocWiG5bXgUIPdz0GPJ/sv LqMyURokYGOOQiP94tjc2N7qxmxwZBBEtrCabEa7Kdjl727013g4MhtiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3MNvFdHhI8HT76gH7YUaEE+nBoMB8GA1UdIwQY MBaAFIrkmknqBncKh9daXINW9FZOGrHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hMDIyMWEtNzcxZi00NmU2LWIzYzMt OTdmMDhjNmQ5OGQzLzEvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hMDIyMWEtNzcxZi00NmU2LWIzYzMtOTdmMDhjNmQ5OGQz LzEvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq9k4nmU pmM0dxSs5ZwK0v8Y9odp5uz8RAQoalSKf2GvDvdq3vsVnOiiR2buW+GZ0YK7Qh9w dnXB4tH6mATQwX9bbtz3Syf2gscwRyfu8JL3NhNFI4/rhICLG+bv4hGI+JPWjEJl ZSF99kEmLji2fCjWnZAkYym2SwrXKrNbuVgdzndPyNIW6AKHlVreA57YZpeOpGRu Nl7xbJtzaS4Bx82oyp8ddFUte9JluOhtchyDmWROd4shNc04+zxGAqbTusfJKb2U xDHuoSeGsB4V0Q7vr6PDPMjoXC7ojxX86JLc0shNcgCdfypPZO2Rc3eXuVm0GIG3 7YrHTumirv4K4w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:35 2026 by rpki-client