This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json) Hash identifier: UxqsdqL6ZoHjpzvMwmVPbpxFOcoHKvY13H0dXBR1lIQ= Subject key identifier: EE:91:79:5D:86:36:D9:E1:CC:F1:5B:81:B1:EA:A0:89:98:21:3F:C0 Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Certificate serial: 019C4322495FB936DE6A6F102BF34D4B7A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft Manifest number: 1558 Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=) 2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: 9VgCz1BIyDxyr6kPldR/YP9X/DbNUjDvp9JhO0DRlLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:49:5f:b9:36:de:6a:6f:10:2b:f3:4d:4b:7a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=ee91795d8636d9e1ccf15b81b1eaa08998213fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:3e:23:91:64:65:a3:29:46:72:dc:57:30: ca:05:6c:93:92:65:c0:57:2b:31:9b:eb:b6:9f:ae: 7b:50:08:46:59:57:71:3d:20:d9:34:18:47:35:5b: 50:a6:5e:93:52:ac:0a:8f:95:eb:de:85:74:af:85: 9a:af:4e:62:de:03:37:90:0f:7f:05:f8:aa:1c:c8: 66:f8:b6:c1:24:30:cc:0e:ff:c2:d8:c8:5b:a3:f9: b6:95:38:af:bc:70:fa:b8:e0:ba:d1:6e:da:4f:37: 68:c1:11:4b:be:52:a6:66:06:f4:f0:06:96:60:28: 4b:cb:a1:10:85:38:44:1c:fa:1a:5e:10:c7:69:e8: a0:49:e1:71:f4:ae:8b:21:f1:0c:46:f0:70:c2:c5: ef:de:d8:9e:6c:e1:b8:83:e3:f7:d3:1a:a0:8a:b2: c5:72:23:50:e4:34:a4:ab:58:d2:4e:a1:67:6b:db: 05:cc:4c:84:07:4c:6f:b1:29:8b:d5:30:26:fd:25: 5c:bf:2f:5c:a7:5d:75:80:83:45:74:c4:3a:fc:c0: 1e:54:d2:2d:df:0d:d7:99:86:bb:c1:d8:9b:df:1b: 6c:b0:94:c1:e5:ea:e3:19:2e:be:fa:ab:a6:1d:f3: ff:30:4d:a6:50:26:26:99:5f:bf:bc:f4:61:c6:d7: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:91:79:5D:86:36:D9:E1:CC:F1:5B:81:B1:EA:A0:89:98:21:3F:C0 X509v3 Authority Key Identifier: keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ba:b3:c3:2f:f8:c8:41:1c:35:34:6b:84:8e:94:1b:ae:44: 73:ec:71:ec:a4:89:ab:38:88:80:62:b2:b9:fb:ee:bf:58:1c: a0:fd:87:07:ed:ae:2d:3c:ba:ee:33:8f:f0:9e:03:82:0c:f6: 24:71:bb:0c:33:8e:c6:8d:40:c0:ca:6d:c6:85:a8:0f:86:08: f2:58:d0:f9:1e:ed:8d:bb:e5:cf:11:75:c8:28:6e:e1:e9:00: ff:60:6b:52:11:31:b9:6d:2c:ae:d2:c7:95:b8:14:01:42:2e: e7:b0:2b:5e:a3:65:2b:00:8c:75:b3:a5:40:4a:71:7a:5c:a7: 13:5a:9c:d9:c2:35:f1:93:83:2c:d4:52:69:b8:43:42:fc:07: f6:ef:a9:e0:3c:0a:db:a9:52:7d:c0:3a:fb:07:2b:42:8d:d2: 93:b8:83:62:38:46:62:54:89:8f:e5:5a:88:cc:a8:79:50:c1: f2:dd:fa:fd:64:63:cb:d2:72:02:23:2b:f8:f6:b6:c1:c2:d0: 51:bc:c8:03:ef:99:35:35:59:f8:0f:cf:8f:80:aa:70:d5:4d: 55:8a:c2:15:f0:61:96:56:fb:f0:09:1d:70:a0:2d:9a:00:97: 83:4e:e3:c4:21:1a:d7:bf:4d:e2:7e:0f:f4:a4:be:78:ef:14: 71:b2:a9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIklfuTbeam8QK/NNS3ooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh ODkwNDQwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD EyhlZTkxNzk1ZDg2MzZkOWUxY2NmMTViODFiMWVhYTA4OTk4MjEzZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkM+I5FkZaMpRnLcVzDKBWyTkmXA Vysxm+u2n657UAhGWVdxPSDZNBhHNVtQpl6TUqwKj5Xr3oV0r4War05i3gM3kA9/ BfiqHMhm+LbBJDDMDv/C2Mhbo/m2lTivvHD6uOC60W7aTzdowRFLvlKmZgb08AaW YChLy6EQhThEHPoaXhDHaeigSeFx9K6LIfEMRvBwwsXv3tiebOG4g+P30xqgirLF ciNQ5DSkq1jSTqFna9sFzEyEB0xvsSmL1TAm/SVcvy9cp111gINFdMQ6/MAeVNIt 3w3XmYa7wdib3xtssJTB5erjGS6++qumHfP/ME2mUCYmmV+/vPRhxtdrwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6ReV2GNtnhzPFbgbHqoImYIT/AMB8GA1UdIwQY MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbqzwy/4 yEEcNTRrhI6UG65Ec+xx7KSJqziIgGKyufvuv1gcoP2HB+2uLTy67jOP8J4Dggz2 JHG7DDOOxo1AwMptxoWoD4YI8ljQ+R7tjbvlzxF1yChu4ekA/2BrUhExuW0srtLH lbgUAUIu57ArXqNlKwCMdbOlQEpxelynE1qc2cI18ZODLNRSabhDQvwH9u+p4DwK 26lSfcA6+wcrQo3Sk7iDYjhGYlSJj+VaiMyoeVDB8t36/WRjy9JyAiMr+Pa2wcLQ UbzIA++ZNTVZ+A/Pj4CqcNVNVYrCFfBhllb78AkdcKAtmgCXg07jxCEa179N4n4P 9KS+eO8UcbKpHw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:22 2026 by rpki-client