This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json) Hash identifier: qeyv+Blo/AgUyNw7Kyy0fD0skda2QbmHt1sF1OSm+lw= Subject key identifier: A2:9D:7C:5E:62:B7:9C:6D:8C:62:29:78:94:C2:E7:0A:F5:42:B7:7E Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Certificate serial: 019C427DAB7C20457D1966E0ECB133EA6FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft Manifest number: 0301 Signing time: Mon 09 Feb 2026 13:00:57 +0000 Manifest this update: Mon 09 Feb 2026 13:00:57 +0000 Manifest next update: Tue 10 Feb 2026 13:00:57 +0000 Files and hashes: 1: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (hash: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw=) 2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: pnIn8ILjMk9INX6D7LAuopZvj1ytityfUpUr4IdSM4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ab:7c:20:45:7d:19:66:e0:ec:b1:33:ea:6f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Validity Not Before: Feb 9 13:00:57 2026 GMT Not After : Feb 10 13:00:57 2026 GMT Subject: CN=a29d7c5e62b79c6d8c62297894c2e70af542b77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:b1:fc:82:34:c2:97:0e:3f:a1:23:28:9e: d1:f8:91:2f:4d:ea:be:be:6c:0f:60:f5:49:9d:2a: 98:d6:51:5e:91:75:3c:70:b0:17:8d:f7:42:5d:46: 02:46:c0:8e:3e:36:b0:c9:af:ed:1f:b2:49:b0:44: 2e:7c:71:18:df:82:09:a2:d2:c9:04:04:1a:6f:b3: 9b:08:66:9e:b8:eb:25:bf:8c:fe:fa:fa:f5:93:0e: e7:bd:f5:e2:52:18:5d:7a:b1:8a:ef:3f:9b:f2:81: 2f:d9:e9:1e:8c:29:d1:ad:cb:67:34:65:5a:ed:ab: 2c:39:6f:44:3a:32:09:fe:37:8c:e3:c9:bf:90:87: a1:70:9f:64:26:0a:a3:b3:8f:b5:34:b9:c6:82:6b: 71:ab:40:42:ea:74:9f:97:d9:6d:cd:6e:d7:f0:95: 57:c0:3a:fd:65:0c:c5:49:cd:8c:0f:6c:11:52:61: e1:a0:b1:78:47:de:d6:a3:86:db:d7:72:a1:a3:49: c0:5a:45:68:40:5f:a4:4f:1c:10:c3:30:fc:55:c3: da:9b:92:08:f3:d9:ea:c6:31:25:c6:ae:d1:ed:d2: b8:d2:ee:f8:bd:5d:5c:fe:78:58:8e:17:ca:06:74: 9e:ea:c6:bc:14:5d:09:46:75:63:f8:51:e9:bc:d1: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:7C:5E:62:B7:9C:6D:8C:62:29:78:94:C2:E7:0A:F5:42:B7:7E X509v3 Authority Key Identifier: keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a1:fb:5b:e4:42:83:a3:89:a0:90:1b:3f:bf:d3:c7:8f:ca: f6:eb:74:5d:1d:2d:6a:d5:4e:46:e5:e7:12:57:0d:0f:86:11: c9:00:29:17:81:58:b2:ba:77:f5:67:e2:5d:cd:4e:cd:b3:41: 72:b0:f5:7a:5e:1c:76:f3:fd:13:29:af:d0:20:f9:37:51:8d: 62:55:a7:dd:d7:bd:09:bc:b4:dc:8b:a4:ec:51:4c:bf:3d:10: 87:6a:75:bb:7f:5d:ff:52:7e:3a:1a:ca:44:56:ca:c4:92:28: 4e:7b:cf:74:e6:29:ea:44:ba:e1:a6:b6:70:b4:c7:3f:48:f1: fb:65:9f:e5:e4:5e:fb:6b:a7:75:83:77:94:e1:b8:03:9a:39: 59:96:7e:98:9a:a1:bd:f3:1b:ae:cf:63:b6:d7:49:ef:27:e3: d1:0e:14:02:01:68:3e:00:52:02:d3:b3:0d:05:3a:9a:54:09: 35:0a:96:22:91:a9:f7:fe:56:ef:fb:f3:d2:87:22:d7:40:cc: 97:8e:f7:e3:a0:81:18:e9:7c:03:37:15:de:0f:9b:bb:9f:02: 58:75:39:b1:c1:a2:03:a8:82:0f:75:ce:fb:15:8c:72:eb:16: b1:e9:2b:3d:aa:da:08:cd:07:6e:a2:f7:2e:d5:e3:26:7f:18: 84:54:e2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfat8IEV9GWbg7LEz6m/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0 M2E5YjcwHhcNMjYwMjA5MTMwMDU3WhcNMjYwMjEwMTMwMDU3WjAzMTEwLwYDVQQD EyhhMjlkN2M1ZTYyYjc5YzZkOGM2MjI5Nzg5NGMyZTcwYWY1NDJiNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jux/II0wpcOP6EjKJ7R+JEvTeq+ vmwPYPVJnSqY1lFekXU8cLAXjfdCXUYCRsCOPjawya/tH7JJsEQufHEY34IJotLJ BAQab7ObCGaeuOslv4z++vr1kw7nvfXiUhhderGK7z+b8oEv2ekejCnRrctnNGVa 7assOW9EOjIJ/jeM48m/kIehcJ9kJgqjs4+1NLnGgmtxq0BC6nSfl9ltzW7X8JVX wDr9ZQzFSc2MD2wRUmHhoLF4R97Wo4bb13Kho0nAWkVoQF+kTxwQwzD8VcPam5II 89nqxjElxq7R7dK40u74vV1c/nhYjhfKBnSe6sa8FF0JRnVj+FHpvNFI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKdfF5it5xtjGIpeJTC5wr1Qrd+MB8GA1UdIwQY MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt NTEzOGYzNDJlOWY1LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1 LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqH7W+RC g6OJoJAbP7/Tx4/K9ut0XR0tatVORuXnElcND4YRyQApF4FYsrp39WfiXc1OzbNB crD1el4cdvP9Eymv0CD5N1GNYlWn3de9Cby03Iuk7FFMvz0Qh2p1u39d/1J+OhrK RFbKxJIoTnvPdOYp6kS64aa2cLTHP0jx+2Wf5eRe+2undYN3lOG4A5o5WZZ+mJqh vfMbrs9jttdJ7yfj0Q4UAgFoPgBSAtOzDQU6mlQJNQqWIpGp9/5W7/vz0oci10DM l47346CBGOl8AzcV3g+bu58CWHU5scGiA6iCD3XO+xWMcusWsekrParaCM0HbqL3 LtXjJn8YhFTiYg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:12:57 2026 by rpki-client