This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json) Hash identifier: Miic/alMcHQey2Nkn0oy8POm1WjqUceek7C+JtKxlk8= Subject key identifier: 86:D8:89:9E:EE:BD:9D:88:D5:20:4A:C3:9C:C0:6F:81:AC:CD:41:45 Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0 Certificate serial: 019C42B430816B1190395BC890CA56C1356E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft Manifest number: 02AB Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: fqVkCktxticbeaYPWedk8dy33zf/qywjtHQEDon5KKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:30:81:6b:11:90:39:5b:c8:90:ca:56:c1:35:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=86d8899eeebd9d88d5204ac39cc06f81accd4145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:d5:d9:dd:5b:81:38:13:02:0a:90:45:8f: 22:80:15:3b:f0:19:d9:ab:06:53:22:fc:98:27:b3: f5:ab:a1:1c:ff:65:0f:ba:a2:5b:ca:25:c9:b3:73: b7:4a:2c:b2:39:63:cb:b1:ac:65:12:82:1f:d2:fb: 6e:39:62:af:35:b7:fe:cc:15:7c:20:32:3a:b9:75: 19:b3:cd:21:34:2b:e1:8c:bb:78:5e:1e:49:68:63: 82:5e:bc:f0:0a:08:28:f5:d5:ec:ed:e6:38:c2:8f: af:cb:4c:47:5c:c4:ca:0a:53:bc:7d:07:d4:82:6e: 26:09:3b:59:c8:b8:b2:1d:59:0f:52:bc:69:b6:b6: 54:49:5f:73:9c:2d:22:ea:54:8d:cc:34:50:ad:61: aa:23:52:5f:34:d8:c8:37:7f:fd:14:b1:e7:29:96: 7d:f3:dd:08:fa:96:24:db:94:e0:36:55:67:1b:5d: 5a:a8:82:59:b3:27:c3:f4:83:af:96:b8:9d:0b:42: 74:63:d3:8c:e9:12:2e:86:0d:0e:5b:ce:66:5b:69: 84:ce:3e:2e:53:81:47:d0:94:70:b5:cd:cf:62:a6: 82:7d:b2:46:a6:4b:88:ce:de:ae:bd:bf:0a:5a:11: 0f:c5:2c:25:49:4d:77:09:cf:15:45:fe:96:61:c4: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D8:89:9E:EE:BD:9D:88:D5:20:4A:C3:9C:C0:6F:81:AC:CD:41:45 X509v3 Authority Key Identifier: keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:e2:dd:39:96:3a:dd:8a:33:10:ba:76:27:c6:52:f6:5d:ac: 5d:d0:13:2f:e4:e6:44:28:ea:2a:2a:16:77:96:a4:9e:bc:83: 0d:b0:09:1c:db:1d:da:72:5d:b5:7a:ab:b0:90:3a:e7:12:d9: 43:c4:1c:c3:17:fa:f3:af:66:9c:4a:6d:22:49:1e:62:7b:02: 7a:65:fb:ab:b1:fc:1f:41:3b:84:ac:3e:54:05:91:da:cb:fe: 97:33:5a:69:00:b0:72:1d:16:a7:92:1c:c4:d6:f0:c8:6f:7a: da:f3:be:db:eb:9c:c1:12:4b:fa:25:6d:e2:f3:5d:a6:af:9a: dc:ef:78:61:8c:42:f0:50:74:63:fe:7c:55:1f:7d:de:15:ec: 60:be:8c:b8:6c:30:31:a9:82:74:73:a3:bc:03:ed:86:ab:d1: 68:d9:21:d3:ab:fe:3e:62:f2:be:62:d6:d8:b8:12:9b:65:3e: ea:77:fa:cf:30:1e:1d:24:43:d5:16:ad:3e:0d:57:71:4f:03: a7:fb:27:df:04:ff:4c:ff:12:79:4b:99:7a:9d:04:59:5f:cb: 2e:4f:2f:a8:6a:8a:e0:8f:52:82:54:3c:f6:37:64:a4:2b:51: 99:e5:7d:9b:fe:e0:e9:9f:fc:ec:c6:c1:4d:02:a5:42:80:72: 52:3d:be:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDCBaxGQOVvIkMpWwTVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODJhNGE1ZjI5NjE1ZWQ5ZmVlNGY2NzUxMTQ4NWUzNGNm NzEyZTAwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD Eyg4NmQ4ODk5ZWVlYmQ5ZDg4ZDUyMDRhYzM5Y2MwNmY4MWFjY2Q0MTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy3V2d1bgTgTAgqQRY8igBU78BnZ qwZTIvyYJ7P1q6Ec/2UPuqJbyiXJs3O3SiyyOWPLsaxlEoIf0vtuOWKvNbf+zBV8 IDI6uXUZs80hNCvhjLt4Xh5JaGOCXrzwCggo9dXs7eY4wo+vy0xHXMTKClO8fQfU gm4mCTtZyLiyHVkPUrxptrZUSV9znC0i6lSNzDRQrWGqI1JfNNjIN3/9FLHnKZZ9 890I+pYk25TgNlVnG11aqIJZsyfD9IOvlridC0J0Y9OM6RIuhg0OW85mW2mEzj4u U4FH0JRwtc3PYqaCfbJGpkuIzt6uvb8KWhEPxSwlSU13Cc8VRf6WYcRyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbYiZ7uvZ2I1SBKw5zAb4GszUFFMB8GA1UdIwQY MBaAFHCCpKXylhXtn+5PZ1EUheNM9xLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEt OTllMzVjNzA5NDg2LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEtOTllMzVjNzA5NDg2 LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3uLdOZY6 3YozELp2J8ZS9l2sXdATL+TmRCjqKioWd5aknryDDbAJHNsd2nJdtXqrsJA65xLZ Q8Qcwxf6869mnEptIkkeYnsCemX7q7H8H0E7hKw+VAWR2sv+lzNaaQCwch0Wp5Ic xNbwyG962vO+2+ucwRJL+iVt4vNdpq+a3O94YYxC8FB0Y/58VR993hXsYL6MuGww MamCdHOjvAPthqvRaNkh06v+PmLyvmLW2LgSm2U+6nf6zzAeHSRD1RatPg1XcU8D p/sn3wT/TP8SeUuZep0EWV/LLk8vqGqK4I9SglQ89jdkpCtRmeV9m/7g6Z/87MbB TQKlQoByUj2+tA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:58 2026 by rpki-client