This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json) Hash identifier: 8w0q97gaij56WO8pdAn4Sg/vEORrG9xj2nwxLWCq+J8= Subject key identifier: 7E:E9:FF:4E:C1:5F:9B:4E:BD:EC:64:6F:FE:C8:02:05:F1:69:17:1D Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15 Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15 Certificate serial: 019C42463D5F99C01BACC1A94D6A91066843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft Manifest number: 0DAA Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: 7hmJknF3g0jZ2PzjgnEt6tkUwkk.roa (hash: 0kxSwLIeU1LRwwQYmR17mV6US+bp2NYwjzNIshTtU+0=) 2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: Fp7k+xWr6g2UhYvg3eE0n1z5CeDyJnGEranTsuVav/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3d:5f:99:c0:1b:ac:c1:a9:4d:6a:91:06:68:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15 Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=7ee9ff4ec15f9b4ebdec646ffec80205f169171d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:66:ae:17:79:b7:9d:1c:ba:f4:d3:19:e8: 65:a8:a2:a6:5a:32:8e:52:4a:d4:31:6a:0c:9c:90: f0:08:a6:e0:19:4a:b6:9f:f3:98:f5:d9:d7:bb:e4: 9f:2f:9e:47:a8:19:60:02:1c:59:f7:0d:97:9c:ef: 8f:0b:04:23:1b:dd:a5:05:03:9d:65:a1:37:6a:51: 11:ea:e6:96:7f:d6:65:50:71:c8:61:12:23:88:31: c7:26:25:8a:3a:0a:bc:c0:54:ee:61:71:fb:79:f3: 09:c0:dd:5c:f6:d3:85:3b:8d:40:6d:82:62:89:f5: b1:ff:9d:05:57:2a:7c:a7:92:05:47:97:20:0b:a6: 53:c8:d8:52:e0:3b:b3:bd:1e:fe:5d:9b:9c:be:47: db:63:75:78:6e:ad:4f:f7:a9:d8:08:c6:e4:23:ac: 2b:05:06:6c:be:20:10:07:e1:3a:9d:b0:72:0d:5a: 90:84:05:01:2a:9f:8b:74:d2:e6:ab:df:b7:1d:c2: 84:9a:39:69:b5:99:76:61:f1:6b:72:27:8c:80:dd: 54:7a:0b:ae:97:66:f8:e9:08:49:82:dd:39:fa:e8: ed:e2:1f:6c:b5:76:16:29:34:c9:31:3b:5c:6f:f1: f8:ef:81:69:7f:eb:d7:7b:fa:42:ca:d9:99:45:ad: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E9:FF:4E:C1:5F:9B:4E:BD:EC:64:6F:FE:C8:02:05:F1:69:17:1D X509v3 Authority Key Identifier: keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:41:24:41:f6:89:bf:55:74:4e:72:51:0a:d0:7a:19:a6:d2: 39:fe:65:82:f2:13:88:a8:63:13:16:57:26:ee:39:1f:8c:f8: a1:ab:e4:f8:01:bd:44:ff:2a:ba:a1:a6:d8:5e:11:3e:95:ec: f6:e6:ea:37:37:36:38:69:ff:dd:0a:33:30:e2:fa:3d:31:0c: 69:50:70:87:d3:9a:d2:0d:29:0d:93:df:6c:60:94:d4:72:9b: b0:2f:9e:b6:28:cc:8c:0b:c0:e9:44:1e:ba:44:8a:3c:d1:b5: 53:5e:88:5e:17:73:35:cd:27:9d:48:c9:c7:02:e2:21:f7:29: 66:cb:3b:80:80:a6:84:5f:45:72:21:6b:8f:89:48:55:de:52: ae:ac:ed:59:c7:cc:30:65:31:1c:eb:c0:06:2b:94:0d:6c:34: 08:ef:15:0f:12:2f:fd:fb:f0:32:e5:cb:f1:b4:83:28:95:a7: 08:87:c9:55:27:c4:39:c4:2e:47:cc:c5:c6:6f:1a:82:86:6b: be:20:e9:e2:39:a5:de:79:bd:8c:95:f0:7d:aa:df:7a:7a:34: 7b:f6:20:05:a6:9c:a2:7f:06:12:cf:6f:79:5d:c1:97:5f:0f: e9:fa:f5:66:f6:24:d0:42:b8:36:2a:4b:cb:66:bd:f5:89:24: 14:c8:78:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRj1fmcAbrMGpTWqRBmhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi YmVlMTUwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD Eyg3ZWU5ZmY0ZWMxNWY5YjRlYmRlYzY0NmZmZWM4MDIwNWYxNjkxNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYBmrhd5t50cuvTTGehlqKKmWjKO UkrUMWoMnJDwCKbgGUq2n/OY9dnXu+SfL55HqBlgAhxZ9w2XnO+PCwQjG92lBQOd ZaE3alER6uaWf9ZlUHHIYRIjiDHHJiWKOgq8wFTuYXH7efMJwN1c9tOFO41AbYJi ifWx/50FVyp8p5IFR5cgC6ZTyNhS4DuzvR7+XZucvkfbY3V4bq1P96nYCMbkI6wr BQZsviAQB+E6nbByDVqQhAUBKp+LdNLmq9+3HcKEmjlptZl2YfFrcieMgN1Ueguu l2b46QhJgt05+ujt4h9stXYWKTTJMTtcb/H474Fpf+vXe/pCytmZRa1NYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7p/07BX5tOvexkb/7IAgXxaRcdMB8GA1UdIwQY MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt ODkzNWU5MDc5Nzk2LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2 LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEEkQfaJ v1V0TnJRCtB6GabSOf5lgvITiKhjExZXJu45H4z4oavk+AG9RP8quqGm2F4RPpXs 9ubqNzc2OGn/3QozMOL6PTEMaVBwh9Oa0g0pDZPfbGCU1HKbsC+etijMjAvA6UQe ukSKPNG1U16IXhdzNc0nnUjJxwLiIfcpZss7gICmhF9FciFrj4lIVd5SrqztWcfM MGUxHOvABiuUDWw0CO8VDxIv/fvwMuXL8bSDKJWnCIfJVSfEOcQuR8zFxm8agoZr viDp4jml3nm9jJXwfarfeno0e/YgBaacon8GEs9veV3Bl18P6fr1ZvYk0EK4NipL y2a99YkkFMh4KQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:57 2026 by rpki-client