This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft File: cIx-If6q6sViZpSXVEPndzXz_Kc.mft (raw, json) Hash identifier: seR65+2L27qPLSjX1cS5850K6xsNnRNskFDoPYKSmQ0= Subject key identifier: 90:12:DA:4C:CD:C1:A3:D3:0B:33:03:33:1D:F9:C5:90:A0:68:BE:32 Authority key identifier: 70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 Certificate issuer: /CN=708c7e21feaaeac5626694975443e77735f3fca7 Certificate serial: 019C43223CDBB28E9CED7175DA583BB663AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft Manifest number: 010C Signing time: Mon 09 Feb 2026 16:00:42 +0000 Manifest this update: Mon 09 Feb 2026 16:00:42 +0000 Manifest next update: Tue 10 Feb 2026 16:00:42 +0000 Files and hashes: 1: cIx-If6q6sViZpSXVEPndzXz_Kc.crl (hash: wgaqPs2y5M1i6EE+uY9qwrz3WAW1eRBfbvtuUTJ/uEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:3c:db:b2:8e:9c:ed:71:75:da:58:3b:b6:63:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708c7e21feaaeac5626694975443e77735f3fca7 Validity Not Before: Feb 9 16:00:42 2026 GMT Not After : Feb 10 16:00:42 2026 GMT Subject: CN=9012da4ccdc1a3d30b3303331df9c590a068be32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:8f:b1:f8:cd:25:e2:a7:2b:17:47:30:bb: 1c:b3:2d:40:bc:a4:74:5b:b9:27:1b:91:a6:d9:12: 11:55:8e:29:24:a4:b1:e5:73:0f:85:71:fd:6c:1b: 72:16:7c:48:20:6b:89:62:4f:5d:98:03:26:29:e5: 62:8e:19:f6:5f:cf:5a:68:81:b9:8c:20:d4:c6:0b: 88:fc:8a:17:70:e0:73:e5:46:8d:64:eb:65:ad:90: e1:ad:f8:48:03:55:71:bb:aa:b8:79:72:b0:5e:7b: b1:8d:81:ee:ec:14:a2:8b:5a:a6:d4:18:89:d2:0a: aa:a7:83:71:d6:e0:cc:d5:68:bf:fc:a5:c9:1c:66: 95:0b:da:ba:17:d0:48:2a:b5:05:1f:37:e3:d5:cf: 02:26:84:62:21:1b:0c:f5:d7:43:89:7d:16:bb:c8: fe:ce:cd:19:ea:74:97:77:d6:a7:ea:4e:96:b0:fd: b5:47:7d:4a:c6:b6:cf:01:3e:e3:47:18:88:85:a1: c9:26:17:85:3d:99:b5:f3:bd:70:a7:7f:51:1c:09: b2:4f:ae:ff:24:cb:de:51:7e:8d:c9:d5:2e:67:d9: 62:49:0d:d0:78:9f:95:ca:4a:53:23:24:a0:fd:5a: 0a:6d:3f:15:d0:a7:36:cd:36:b4:fd:6c:44:4c:19: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:DA:4C:CD:C1:A3:D3:0B:33:03:33:1D:F9:C5:90:A0:68:BE:32 X509v3 Authority Key Identifier: keyid:70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6a:53:01:f4:1e:fd:ce:bf:b1:f6:e3:0f:38:30:34:22:ab: e0:ac:1e:64:de:53:07:4c:6d:1a:59:fc:06:00:34:f2:76:2c: 51:d9:44:42:33:14:0f:f4:d1:44:d7:df:23:07:9b:39:ee:83: 7b:c8:54:8e:34:16:bd:e7:c8:c7:ae:b4:d9:88:cc:b8:a0:d4: 8c:7b:13:e1:a7:e7:8a:6e:8e:32:e6:ed:08:8f:d6:d9:56:a3: c8:53:c0:35:d9:a6:f3:00:3f:c9:57:99:5f:9c:97:fd:b4:58: 0d:2e:47:f8:69:ab:b5:db:b8:0f:5b:f3:8c:a5:d0:87:e4:d0: 01:7b:1d:f6:9e:0c:3a:81:43:d9:4d:aa:88:7d:37:34:08:0c: 09:83:12:85:17:93:98:d6:41:ba:52:12:c5:71:ca:bc:5b:53: aa:cd:9f:ca:b7:80:1a:48:ee:34:a1:c1:fc:31:a0:e9:41:23: db:34:84:65:9c:54:fb:cb:cb:6b:8f:21:9f:c3:de:66:60:4d: b6:62:20:d6:74:78:6d:1b:25:92:20:1b:c3:8f:6b:d4:8c:97: a7:63:72:7c:bb:5b:22:7c:49:66:9a:19:f1:56:ed:21:b6:c2: 86:64:9d:38:34:8f:c2:d1:45:2b:13:43:d8:30:0c:15:92:c8: b9:ee:ce:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjzbso6c7XF12lg7tmOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGM3ZTIxZmVhYWVhYzU2MjY2OTQ5NzU0NDNlNzc3MzVm M2ZjYTcwHhcNMjYwMjA5MTYwMDQyWhcNMjYwMjEwMTYwMDQyWjAzMTEwLwYDVQQD Eyg5MDEyZGE0Y2NkYzFhM2QzMGIzMzAzMzMxZGY5YzU5MGEwNjhiZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cOPsfjNJeKnKxdHMLscsy1AvKR0 W7knG5Gm2RIRVY4pJKSx5XMPhXH9bBtyFnxIIGuJYk9dmAMmKeVijhn2X89aaIG5 jCDUxguI/IoXcOBz5UaNZOtlrZDhrfhIA1Vxu6q4eXKwXnuxjYHu7BSii1qm1BiJ 0gqqp4Nx1uDM1Wi//KXJHGaVC9q6F9BIKrUFHzfj1c8CJoRiIRsM9ddDiX0Wu8j+ zs0Z6nSXd9an6k6WsP21R31KxrbPAT7jRxiIhaHJJheFPZm1871wp39RHAmyT67/ JMveUX6NydUuZ9liSQ3QeJ+VykpTIySg/VoKbT8V0Kc2zTa0/WxETBmIJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAS2kzNwaPTCzMDMx35xZCgaL4yMB8GA1UdIwQY MBaAFHCMfiH+qurFYmaUl1RD53c18/ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgt ODdhYWUzNTc1YTJhLzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgtODdhYWUzNTc1YTJh LzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmpTAfQe /c6/sfbjDzgwNCKr4KweZN5TB0xtGln8BgA08nYsUdlEQjMUD/TRRNffIwebOe6D e8hUjjQWvefIx6602YjMuKDUjHsT4afnim6OMubtCI/W2VajyFPANdmm8wA/yVeZ X5yX/bRYDS5H+Gmrtdu4D1vzjKXQh+TQAXsd9p4MOoFD2U2qiH03NAgMCYMShReT mNZBulISxXHKvFtTqs2fyreAGkjuNKHB/DGg6UEj2zSEZZxU+8vLa48hn8PeZmBN tmIg1nR4bRslkiAbw49r1IyXp2NyfLtbInxJZpoZ8VbtIbbChmSdODSPwtFFKxND 2DAMFZLIue7Obg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:57 2026 by rpki-client