This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json) Hash identifier: aCp5MoAZwQY3K6hIR410z9uEi27e0odNC+Pa0y7OYvo= Subject key identifier: 96:D7:12:5E:53:00:31:A7:E0:D1:4E:B1:06:D5:BD:F3:98:2B:F0:DF Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019C25864F28E7C33F72023EA59B149D7AC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft Manifest number: 0428 Signing time: Tue 03 Feb 2026 22:01:24 +0000 Manifest this update: Tue 03 Feb 2026 22:01:24 +0000 Manifest next update: Wed 04 Feb 2026 22:01:24 +0000 Files and hashes: 1: 5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa (hash: wiv18quwyClsd4yVsJMpmHhiUfcPB5/Y1Yp9XFRzyRk=) 2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: hqQjB3uiWU2lJLADvizEzr9JsHpCX3Lbhy0XeeP6taI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:86:4f:28:e7:c3:3f:72:02:3e:a5:9b:14:9d:7a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Feb 3 22:01:24 2026 GMT Not After : Feb 4 22:01:24 2026 GMT Subject: CN=96d7125e530031a7e0d14eb106d5bdf3982bf0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:b8:2f:0d:b1:46:c3:7d:7a:88:da:26:44: 2f:14:bd:c4:68:1d:48:c7:60:89:c0:31:d3:a6:df: a2:db:31:97:e8:16:ac:d7:84:47:2a:cb:c9:9b:30: ca:d6:2b:26:b6:b8:65:34:c2:9a:b5:8b:cc:52:2b: 02:fb:1f:58:0e:45:79:df:6c:98:05:40:3e:ca:74: fa:20:ed:ee:df:66:e0:2c:aa:b0:0e:e5:b1:24:7d: f2:0a:dd:23:76:9b:d6:6d:59:91:c9:86:3b:eb:60: 72:96:f9:b2:9f:3f:02:7b:32:76:50:ab:0a:87:d5: b8:26:96:af:7f:f8:32:14:ee:68:fb:bf:5f:ae:28: 01:ee:eb:70:aa:42:1d:6d:98:16:60:c5:07:e7:fa: ec:c6:dc:bd:47:59:fe:f0:06:3f:eb:d8:02:0a:2f: 57:b3:3b:82:0c:db:be:75:3f:f4:43:ad:ab:8c:8c: aa:bd:b3:e9:d8:95:4d:4d:6a:f0:ab:2d:44:39:9c: 08:4e:96:45:82:db:21:e1:a5:ad:c9:28:f6:36:0d: bf:be:bb:5b:5a:38:2a:a1:e6:fc:c0:8f:68:3a:55: 88:4b:6c:aa:b8:5a:f4:3a:71:10:7d:99:d2:a5:72: c7:55:be:2d:8d:ec:52:f3:1f:3f:be:e1:50:38:d2: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:12:5E:53:00:31:A7:E0:D1:4E:B1:06:D5:BD:F3:98:2B:F0:DF X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:5e:b4:f8:df:43:76:2c:47:97:c4:99:0a:88:a2:74:f5: 87:99:fd:90:d7:f5:72:f7:9d:2d:7f:d0:ef:1e:ef:68:a0:6a: d5:e2:5b:4b:43:83:90:a0:62:57:5a:4f:0b:7f:eb:56:42:a5: f4:90:22:7b:4d:5e:68:1b:82:31:3d:93:ca:ba:35:26:46:1e: 22:9b:0a:b8:d8:b9:9d:01:d2:ef:92:35:aa:e8:bd:f2:06:7a: 91:56:7d:5d:c2:15:95:86:3c:c3:b5:ee:5a:89:cd:76:71:9b: bf:ba:57:c9:3d:aa:8e:90:6d:14:3d:28:b2:07:4a:6a:b8:32: 94:03:32:39:ac:a6:b9:c7:c5:ed:3e:5f:9c:a4:79:e0:b7:8d: 28:1f:0b:40:0c:a9:41:b2:13:0c:ad:64:f6:07:7b:e9:c0:3c: 9d:ef:62:ef:b4:78:d3:f1:e4:7b:17:3e:3b:8c:0a:7c:f2:24: 0a:23:03:64:9d:c3:43:17:0c:f3:f7:fd:46:6b:0d:1d:c8:8a: 4c:1e:49:61:18:e1:4f:fc:08:9e:e4:3e:df:bc:3c:f8:ed:21: 07:e1:6e:19:bc:47:97:19:f0:d3:57:b9:85:28:32:67:4c:7b: d1:5e:61:cd:b0:ef:07:a9:46:7f:77:46:fb:e4:20:ff:53:24: 46:13:a6:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlhk8o58M/cgI+pZsUnXrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjYwMjAzMjIwMTI0WhcNMjYwMjA0MjIwMTI0WjAzMTEwLwYDVQQD Eyg5NmQ3MTI1ZTUzMDAzMWE3ZTBkMTRlYjEwNmQ1YmRmMzk4MmJmMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUm4Lw2xRsN9eojaJkQvFL3EaB1I x2CJwDHTpt+i2zGX6Bas14RHKsvJmzDK1ismtrhlNMKatYvMUisC+x9YDkV532yY BUA+ynT6IO3u32bgLKqwDuWxJH3yCt0jdpvWbVmRyYY762Bylvmynz8CezJ2UKsK h9W4Jpavf/gyFO5o+79frigB7utwqkIdbZgWYMUH5/rsxty9R1n+8AY/69gCCi9X szuCDNu+dT/0Q62rjIyqvbPp2JVNTWrwqy1EOZwITpZFgtsh4aWtySj2Ng2/vrtb Wjgqoeb8wI9oOlWIS2yquFr0OnEQfZnSpXLHVb4tjexS8x8/vuFQONLQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbXEl5TADGn4NFOsQbVvfOYK/DfMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0xetPjf Q3YsR5fEmQqIonT1h5n9kNf1cvedLX/Q7x7vaKBq1eJbS0ODkKBiV1pPC3/rVkKl 9JAie01eaBuCMT2Tyro1JkYeIpsKuNi5nQHS75I1qui98gZ6kVZ9XcIVlYY8w7Xu WonNdnGbv7pXyT2qjpBtFD0osgdKargylAMyOaymucfF7T5fnKR54LeNKB8LQAyp QbITDK1k9gd76cA8ne9i77R40/Hkexc+O4wKfPIkCiMDZJ3DQxcM8/f9RmsNHciK TB5JYRjhT/wInuQ+37w8+O0hB+FuGbxHlxnw01e5hSgyZ0x70V5hzbDvB6lGf3dG ++Qg/1MkRhOmeQ== -----END CERTIFICATE-----Generated at Wed Feb 4 04:21:43 2026 by rpki-client