This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft File: IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json) Hash identifier: 1GGcgWnnhgl5X03sJLRmL26rEXjZ+zL/aYfh/orh9VE= Subject key identifier: BF:95:74:1E:E8:C2:E5:CB:B9:02:B7:18:E8:21:47:7A:EA:05:AB:91 Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B Certificate issuer: /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b Certificate serial: 019C43C6D37983AB6E26144832816EC24BB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft Manifest number: 0EB7 Signing time: Mon 09 Feb 2026 19:00:29 +0000 Manifest this update: Mon 09 Feb 2026 19:00:29 +0000 Manifest next update: Tue 10 Feb 2026 19:00:29 +0000 Files and hashes: 1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: mULjqR1RzvKdCAiXMN6BKC0Q1/87MTZ+Kc5PmXC3008=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d3:79:83:ab:6e:26:14:48:32:81:6e:c2:4b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b Validity Not Before: Feb 9 19:00:29 2026 GMT Not After : Feb 10 19:00:29 2026 GMT Subject: CN=bf95741ee8c2e5cbb902b718e821477aea05ab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:3a:06:c7:55:c9:8c:75:dd:ac:ff:51:9c: 54:1c:ca:11:c6:6b:15:e6:38:67:34:9e:98:37:59: fc:fa:bb:dd:ef:79:f5:55:32:2c:8b:50:ae:e7:aa: 55:86:4f:75:a5:ec:62:fb:44:d6:7d:7d:cb:d5:85: 71:f1:82:8e:8f:57:65:bf:15:7c:a6:34:9c:e5:e6: a6:da:2d:fa:34:9e:68:9e:70:ce:eb:cb:20:ff:c3: 43:6a:6b:93:fb:61:38:1a:3b:91:be:65:26:07:d1: ca:1c:5d:88:33:00:2a:e2:19:c4:cd:58:60:a0:f0: fd:5d:9f:d2:36:a3:d7:a8:cc:99:df:0f:a3:7a:e0: 19:75:f7:31:3f:c1:b2:24:3b:a4:70:a1:3c:3e:8a: bd:c0:38:f2:b5:7f:fa:b1:7e:45:73:40:84:0b:66: 0d:04:b1:7f:bd:4b:d5:ea:52:60:69:e9:3a:41:c3: 80:8c:69:3e:7a:a4:0c:b8:da:6a:bf:1b:6e:93:bf: 27:72:51:88:09:28:aa:3f:f6:ad:d3:28:d4:c3:ad: 90:c2:ce:9c:24:c7:5f:f9:38:e8:3f:d4:11:2f:40: bf:f6:03:00:06:a0:02:27:03:36:f1:04:83:71:34: 07:f5:39:2f:78:d2:09:3a:a4:17:7e:4b:58:9e:3c: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:74:1E:E8:C2:E5:CB:B9:02:B7:18:E8:21:47:7A:EA:05:AB:91 X509v3 Authority Key Identifier: keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d5:c6:d9:02:d9:f3:57:c1:a0:48:b2:bd:46:29:2a:a7:a4: f2:84:21:3f:66:f8:69:7f:f2:c6:ae:1e:27:9f:74:f0:61:cb: d3:5d:40:24:4a:18:6c:c7:fb:ab:7c:35:28:5d:cf:d4:9e:5d: 54:df:b6:53:c4:cb:59:77:98:73:32:8a:31:5e:50:80:83:11: 25:98:2c:ce:6e:3d:b5:ff:55:18:d7:36:e9:0b:22:ec:a9:aa: 72:ca:77:bc:ca:e4:17:6e:f3:94:02:2d:5e:d0:33:d5:c2:d1: 90:12:d8:a6:3c:5e:6a:e7:da:03:13:88:c8:ab:fc:1c:1c:d8: 52:6e:5e:ad:d5:26:98:c6:3a:c4:67:96:0d:79:3c:da:dd:a1: ba:ff:71:12:50:39:fc:f7:42:d7:bd:54:87:3b:9e:f4:7f:f0: 68:45:0e:e8:03:10:f3:b7:91:18:70:f4:91:d3:cb:bb:53:aa: 6f:7d:a4:49:a0:12:52:dc:a1:ee:a4:a8:96:b2:5a:9d:97:26: 56:c4:2e:45:80:b5:c1:79:ec:8e:11:1f:ce:ac:88:40:40:c5: 22:28:24:26:f7:55:37:c0:31:a1:cf:10:ed:76:2a:56:40:c1: 58:b7:0f:d2:2b:92:64:6b:b2:9d:04:63:c7:6f:11:83:0e:d1: d8:1f:fd:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtN5g6tuJhRIMoFuwku2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2NjZmExMjJkM2JhZTgzYWJlNTQ0MWMwYTE5YzliZTEz ZjU0OGIwHhcNMjYwMjA5MTkwMDI5WhcNMjYwMjEwMTkwMDI5WjAzMTEwLwYDVQQD EyhiZjk1NzQxZWU4YzJlNWNiYjkwMmI3MThlODIxNDc3YWVhMDVhYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswc6BsdVyYx13az/UZxUHMoRxmsV 5jhnNJ6YN1n8+rvd73n1VTIsi1Cu56pVhk91pexi+0TWfX3L1YVx8YKOj1dlvxV8 pjSc5eam2i36NJ5onnDO68sg/8NDamuT+2E4GjuRvmUmB9HKHF2IMwAq4hnEzVhg oPD9XZ/SNqPXqMyZ3w+jeuAZdfcxP8GyJDukcKE8Poq9wDjytX/6sX5Fc0CEC2YN BLF/vUvV6lJgaek6QcOAjGk+eqQMuNpqvxtuk78nclGICSiqP/at0yjUw62Qws6c JMdf+TjoP9QRL0C/9gMABqACJwM28QSDcTQH9TkveNIJOqQXfktYnjxRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+VdB7owuXLuQK3GOghR3rqBauRMB8GA1UdIwQY MBaAFCLMz6Ei07roOr5UQcChnJvhP1SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjct YzE1YWZlNTc5NDQ4LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjctYzE1YWZlNTc5NDQ4 LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9XG2QLZ 81fBoEiyvUYpKqek8oQhP2b4aX/yxq4eJ5908GHL011AJEoYbMf7q3w1KF3P1J5d VN+2U8TLWXeYczKKMV5QgIMRJZgszm49tf9VGNc26Qsi7Kmqcsp3vMrkF27zlAIt XtAz1cLRkBLYpjxeaufaAxOIyKv8HBzYUm5erdUmmMY6xGeWDXk82t2huv9xElA5 /PdC171Uhzue9H/waEUO6AMQ87eRGHD0kdPLu1Oqb32kSaASUtyh7qSolrJanZcm VsQuRYC1wXnsjhEfzqyIQEDFIigkJvdVN8Axoc8Q7XYqVkDBWLcP0iuSZGuynQRj x28Rgw7R2B/9lQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:21 2026 by rpki-client