This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json) Hash identifier: IMDKheuoFMYHLrQnlaLMGVtf3E7USFoClwZSzMVIqcQ= Subject key identifier: 01:35:87:C4:EB:D7:9E:30:3B:61:9D:08:04:3C:72:07:9F:7C:BA:43 Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196 Certificate serial: 019C427DC4EF8C14AA00B57D7633A5F20247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft Manifest number: 02FE Signing time: Mon 09 Feb 2026 13:01:04 +0000 Manifest this update: Mon 09 Feb 2026 13:01:04 +0000 Manifest next update: Tue 10 Feb 2026 13:01:04 +0000 Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: av3mBbVDIFVYUocQSO/12N5V+/AXvJAiUhPiOYVZXNw=) 2: p2L_EOyK-Gu4buEXAYfa_Yk4PIM.roa (hash: 6kS2aQ01rx8f7YBcYoBwf+GjyXhd+eHnUHvmzdgYR3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c4:ef:8c:14:aa:00:b5:7d:76:33:a5:f2:02:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196 Validity Not Before: Feb 9 13:01:04 2026 GMT Not After : Feb 10 13:01:04 2026 GMT Subject: CN=013587c4ebd79e303b619d08043c72079f7cba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:51:f7:57:4d:bb:4b:91:77:65:fe:e3:63: 07:b1:a8:09:4c:1d:9d:1a:84:49:42:7c:60:a4:69: df:ca:bb:c8:73:31:c9:10:f5:63:c6:6b:11:14:d0: 33:41:d9:11:ab:a8:70:3e:93:f9:f5:81:7c:21:52: 47:d7:75:23:b7:6c:11:e6:80:ae:88:7c:59:9f:89: f7:2d:24:63:d8:9c:06:26:16:88:26:e9:12:8b:1a: c4:af:de:e4:8b:75:f6:71:6b:d9:1e:43:a3:7a:1f: b3:2c:9b:9a:76:74:c0:77:f0:c8:06:c5:a2:d8:84: a4:51:a4:ff:7e:db:3c:e9:a9:02:29:dc:c3:8b:0c: 16:84:97:fe:ff:19:7f:0f:01:19:3d:b2:7f:cf:0a: 37:fa:d0:96:81:f1:10:d1:cc:ca:93:cb:ae:12:db: 5a:ea:b4:08:e4:ed:4f:6f:97:3a:3e:11:9b:3d:f4: 4f:66:36:8e:63:bc:a9:15:74:65:8b:8b:b8:df:4f: 4b:81:fc:e4:55:af:1b:82:81:98:80:e8:27:e2:0d: 17:a7:b3:98:6a:34:11:77:0d:eb:59:b6:0e:b8:b4: 33:15:fe:9a:ac:7f:76:df:01:d4:0a:6f:ec:ae:fe: 88:ec:1d:72:6f:e9:e2:cd:6f:55:58:a5:be:bb:f1: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:35:87:C4:EB:D7:9E:30:3B:61:9D:08:04:3C:72:07:9F:7C:BA:43 X509v3 Authority Key Identifier: keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:47:d6:da:51:f8:1a:d2:d6:c0:f7:42:c7:33:5b:26:fb:c8: dd:88:52:2f:5c:e2:a3:f3:d2:e3:0c:8e:37:37:b9:75:2b:a7: a4:f4:16:fc:2c:19:21:c8:35:35:03:36:fe:7f:46:48:fa:7e: 5a:76:af:87:97:61:b1:09:b5:a3:16:04:16:f8:ef:ed:8c:df: 23:99:b7:c8:08:68:4a:cb:71:8f:bb:22:d4:4c:93:56:a2:56: 8f:6a:72:f3:b4:12:cc:f9:71:81:ca:39:e4:ec:0a:10:f8:23: 20:15:2f:51:ce:ca:f8:c7:78:65:86:49:ad:c1:59:be:5d:54: ec:e0:00:ac:38:87:f4:09:e4:a4:95:ce:b7:fd:6b:e5:93:95: 49:1f:e8:67:a9:cd:33:9d:8e:46:db:22:68:c2:76:fd:b3:23: 83:bf:7b:05:13:4d:15:ca:7f:07:81:19:9f:d1:f8:a5:7d:8c: c5:e0:2c:21:65:cc:49:34:d7:de:1c:ba:1a:3f:2d:f4:a2:fd: 31:fe:71:63:61:fd:20:2e:46:b1:af:00:e6:f6:04:80:4f:35: 28:05:bb:a2:5e:aa:e2:a2:e8:9c:d8:9b:aa:cd:34:16:c8:ee: 35:84:ce:1a:a4:db:b8:f9:62:f6:6c:6c:64:13:e6:20:67:31: 2b:dd:d8:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcTvjBSqALV9djOl8gJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGYwOGZhNDIyMjUzNWMwYWYyNmEwZDczNDdkYmYxNzI1 NDcxOTYwHhcNMjYwMjA5MTMwMTA0WhcNMjYwMjEwMTMwMTA0WjAzMTEwLwYDVQQD EygwMTM1ODdjNGViZDc5ZTMwM2I2MTlkMDgwNDNjNzIwNzlmN2NiYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqRR91dNu0uRd2X+42MHsagJTB2d GoRJQnxgpGnfyrvIczHJEPVjxmsRFNAzQdkRq6hwPpP59YF8IVJH13Ujt2wR5oCu iHxZn4n3LSRj2JwGJhaIJukSixrEr97ki3X2cWvZHkOjeh+zLJuadnTAd/DIBsWi 2ISkUaT/fts86akCKdzDiwwWhJf+/xl/DwEZPbJ/zwo3+tCWgfEQ0czKk8uuEtta 6rQI5O1Pb5c6PhGbPfRPZjaOY7ypFXRli4u4309LgfzkVa8bgoGYgOgn4g0Xp7OY ajQRdw3rWbYOuLQzFf6arH923wHUCm/srv6I7B1yb+nizW9VWKW+u/FQ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE1h8Tr154wO2GdCAQ8cgeffLpDMB8GA1UdIwQY MBaAFCNPCPpCIlNcCvJqDXNH2/FyVHGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUt MmJlN2VkYzc5MzJkLzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUtMmJlN2VkYzc5MzJk LzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0fW2lH4 GtLWwPdCxzNbJvvI3YhSL1zio/PS4wyONze5dSunpPQW/CwZIcg1NQM2/n9GSPp+ Wnavh5dhsQm1oxYEFvjv7YzfI5m3yAhoSstxj7si1EyTVqJWj2py87QSzPlxgco5 5OwKEPgjIBUvUc7K+Md4ZYZJrcFZvl1U7OAArDiH9AnkpJXOt/1r5ZOVSR/oZ6nN M52ORtsiaMJ2/bMjg797BRNNFcp/B4EZn9H4pX2MxeAsIWXMSTTX3hy6Gj8t9KL9 Mf5xY2H9IC5Gsa8A5vYEgE81KAW7ol6q4qLonNibqs00FsjuNYTOGqTbuPli9mxs ZBPmIGcxK93YFw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:30 2026 by rpki-client