This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json) Hash identifier: y8evEpKzsSWYbJKOcriFwSAbJbUKb29g3OLNGgUhbxU= Subject key identifier: E4:D6:F1:21:00:BF:EF:97:FF:5A:E1:97:7D:86:0F:DE:0C:A9:9B:D9 Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac Certificate serial: 019C41A19CAB596A364E8C1453B15E9720DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 09:00:36 +0000 Manifest this update: Mon 09 Feb 2026 09:00:36 +0000 Manifest next update: Tue 10 Feb 2026 09:00:36 +0000 Files and hashes: 1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: TW5dsppGROaQo4BT/wKRNqLTMbws+AD+mzWFEiLljJ4=) 2: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (hash: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:9c:ab:59:6a:36:4e:8c:14:53:b1:5e:97:20:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac Validity Not Before: Feb 9 09:00:36 2026 GMT Not After : Feb 10 09:00:36 2026 GMT Subject: CN=e4d6f12100bfef97ff5ae1977d860fde0ca99bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:10:62:7c:a2:bb:f2:b2:1d:11:be:e0:88: cf:6f:5b:31:4d:25:c0:c1:76:e7:82:a3:07:a2:4d: 9f:d4:7f:18:69:9b:29:23:1a:40:ab:9d:0d:54:4c: eb:1b:7f:a2:01:04:07:53:ff:b3:8b:06:bc:f7:37: 3f:5e:36:ea:27:f1:30:e8:49:eb:4b:67:c6:9d:7e: a4:74:4d:7f:ec:62:6a:a7:69:87:0f:7e:23:8a:af: 5e:06:c8:68:9f:b2:65:44:84:cc:ff:a3:09:3a:cc: 3f:87:f1:38:dc:2c:c7:18:2a:67:de:f3:d0:98:2a: 8c:6b:db:f0:bb:6d:55:7b:0e:30:38:7a:dd:f4:83: 83:61:b5:4d:0d:2b:a1:18:b8:ed:ac:e2:50:96:00: 0e:21:97:ac:56:a0:a8:55:4b:05:d1:e7:b7:60:a1: 3b:59:fb:c3:ec:56:1d:20:89:46:21:6e:96:ed:f2: 01:6c:f3:a2:58:0b:95:19:b7:19:f3:01:1c:25:a9: f1:1c:a0:32:e8:ce:59:de:5b:04:32:51:c5:59:6c: b2:3c:b5:ce:66:29:fe:1f:63:15:7a:14:e2:37:cd: 2a:74:24:5d:70:cf:ce:a5:fc:a0:53:e6:e1:b8:72: 98:91:1a:c6:29:35:89:d9:1f:d2:ac:79:8c:0c:09: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:F1:21:00:BF:EF:97:FF:5A:E1:97:7D:86:0F:DE:0C:A9:9B:D9 X509v3 Authority Key Identifier: keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:62:34:26:5f:8a:66:e3:25:1c:72:b6:27:56:2a:0b:6e: ea:21:fc:d6:c3:0f:d6:46:d7:79:91:81:c0:82:2d:4e:b4:64: d1:ba:aa:4e:8b:6f:c1:a6:d9:e5:b2:51:c1:fa:0c:6f:15:b6: 8e:a3:7e:f8:98:ac:56:b2:fd:21:bf:31:23:7c:a2:c1:93:50: e3:11:b1:f6:d5:5d:6a:5c:0f:22:f4:5e:fb:8c:bd:c1:28:45: 8a:70:4d:9e:d3:5e:86:35:89:13:9a:ac:e1:18:69:30:b3:c2: 15:12:a4:65:8f:fb:79:38:86:0c:cc:03:78:d1:ee:e5:64:1b: 8f:a9:5f:4a:b4:3c:ff:ba:cb:94:eb:31:9e:92:0f:f2:44:1b: 61:7d:a2:58:29:7a:e3:f0:76:d1:3e:11:f9:e5:47:e0:0c:da: bf:14:3e:9b:20:0b:09:a5:ba:be:27:15:82:9c:be:cb:17:c4: ce:4d:e2:5f:1e:16:36:12:81:0b:f4:48:dc:bc:2b:57:d1:7f: 46:d9:60:e5:60:df:3c:0f:70:67:e5:8b:2f:fd:57:20:31:cc: 00:33:57:8d:49:4f:49:de:9d:bc:cd:95:3b:92:63:69:7f:5a: 95:2c:31:f4:16:b9:24:7d:ec:33:e4:08:9e:3a:13:eb:af:55: d2:eb:1c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZyrWWo2TowUU7FelyDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MGM0OTgzZWUxOGJjNWUwMjVmYWFmZGUzMWM2NDEzNGE0 NjIwYWMwHhcNMjYwMjA5MDkwMDM2WhcNMjYwMjEwMDkwMDM2WjAzMTEwLwYDVQQD EyhlNGQ2ZjEyMTAwYmZlZjk3ZmY1YWUxOTc3ZDg2MGZkZTBjYTk5YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApccQYnyiu/KyHRG+4IjPb1sxTSXA wXbngqMHok2f1H8YaZspIxpAq50NVEzrG3+iAQQHU/+ziwa89zc/XjbqJ/Ew6Enr S2fGnX6kdE1/7GJqp2mHD34jiq9eBshon7JlRITM/6MJOsw/h/E43CzHGCpn3vPQ mCqMa9vwu21Vew4wOHrd9IODYbVNDSuhGLjtrOJQlgAOIZesVqCoVUsF0ee3YKE7 WfvD7FYdIIlGIW6W7fIBbPOiWAuVGbcZ8wEcJanxHKAy6M5Z3lsEMlHFWWyyPLXO Zin+H2MVehTiN80qdCRdcM/OpfygU+bhuHKYkRrGKTWJ2R/SrHmMDAn5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTW8SEAv++X/1rhl32GD94MqZvZMB8GA1UdIwQY MBaAFIkMSYPuGLxeAl+q/eMcZBNKRiCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUt ZWMxOWNkMzhmMjQ1LzEvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUtZWMxOWNkMzhmMjQ1 LzEvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwhiNCZf imbjJRxytidWKgtu6iH81sMP1kbXeZGBwIItTrRk0bqqTotvwabZ5bJRwfoMbxW2 jqN++JisVrL9Ib8xI3yiwZNQ4xGx9tVdalwPIvRe+4y9wShFinBNntNehjWJE5qs 4RhpMLPCFRKkZY/7eTiGDMwDeNHu5WQbj6lfSrQ8/7rLlOsxnpIP8kQbYX2iWCl6 4/B20T4R+eVH4AzavxQ+myALCaW6vicVgpy+yxfEzk3iXx4WNhKBC/RI3LwrV9F/ Rtlg5WDfPA9wZ+WLL/1XIDHMADNXjUlPSd6dvM2VO5JjaX9alSwx9Ba5JH3sM+QI njoT669V0uscVg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:33 2026 by rpki-client