This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json) Hash identifier: UAe4Zo0PsqD182APoCqimRNUk+HrCrwqC92WXA6i5cQ= Subject key identifier: AB:35:0C:5D:F1:B4:2B:11:42:D5:DD:77:BB:A9:4C:3F:AB:85:F8:B7 Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4 Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4 Certificate serial: 019C4390A53D214ABF53986EF5F6C656D775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft Manifest number: 1291 Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: TGmsldAw73JdAQ8kh2RG2M68N4pjF7/27t+jlIwzMMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a5:3d:21:4a:bf:53:98:6e:f5:f6:c6:56:d7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4 Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=ab350c5df1b42b1142d5dd77bba94c3fab85f8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:cf:f2:c7:b9:ff:5a:f1:33:08:63:40:6c: 9f:3f:c8:c9:66:6b:b0:97:fb:79:bf:fe:60:14:a5: 01:b0:0c:87:7f:c4:2c:0e:ed:38:49:e5:16:de:65: b0:44:b5:dd:fd:96:96:c1:01:b1:d5:1e:e9:5d:63: dd:ff:9a:7b:22:7c:7c:b8:c1:1a:be:96:46:62:e7: ae:83:44:c6:f5:8d:b4:fc:e2:67:3c:25:2b:e5:80: 0a:35:b1:50:ae:2c:0f:2a:b2:c0:a0:e8:ec:3f:ba: 58:5c:d1:8c:10:58:dc:f7:80:dc:3a:a9:99:cf:62: e9:51:f6:76:43:8d:57:c2:5e:b6:42:44:d4:e5:e5: 8b:bc:bc:ab:55:d3:16:4f:e0:b0:3c:b9:af:97:ba: 2b:ef:ca:1d:f0:42:b0:b8:50:f0:cd:89:c5:ad:3a: 39:5f:e1:52:19:be:d0:ab:d2:f4:8b:5a:33:39:04: 5c:62:3b:a5:19:b2:51:3d:fa:5e:7e:ee:31:92:9f: 68:a0:3b:46:cf:a3:cb:14:2e:fc:ce:30:cc:88:8a: 20:d6:7b:43:6a:fc:e4:78:e6:c1:8e:42:22:27:91: f8:4b:0a:62:c8:6b:70:95:32:07:da:ed:cb:7d:dd: 74:7b:cf:8b:1f:a7:6c:69:84:08:42:03:58:c4:a8: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:0C:5D:F1:B4:2B:11:42:D5:DD:77:BB:A9:4C:3F:AB:85:F8:B7 X509v3 Authority Key Identifier: keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:54:4a:16:6e:60:6b:ae:d9:af:0c:26:00:da:30:f9:6d:93: 96:a2:ca:d9:c3:e6:1c:4a:cb:4a:5a:09:b2:c9:58:c4:47:e8: 87:8e:eb:ef:e8:19:43:34:9a:e0:e8:a4:33:37:74:6e:c1:79: 4a:5a:a4:24:e9:82:c4:29:bc:76:f5:1f:24:e1:17:ee:58:c8: 39:96:2d:fb:b3:0a:c2:d5:9b:ac:fa:f2:29:44:65:f6:cb:a8: 1d:4a:41:c6:69:e8:b6:a3:50:e6:98:50:0f:3f:cc:3d:37:0e: 22:01:8a:f5:55:83:5a:48:67:ca:e3:41:f4:59:8f:9c:5b:7d: 01:0e:46:a6:89:33:59:1b:75:10:26:04:00:d4:3b:96:27:8b: 49:b0:a2:df:0d:e5:ea:df:3e:d6:7b:62:35:75:3f:77:00:f1: 4e:1a:ba:ed:31:7c:1a:74:5f:27:c0:b4:d3:08:3b:23:e9:d4: ed:50:cd:7f:46:8c:06:83:62:16:b6:58:47:7e:0a:d7:b5:62: be:56:86:e6:d0:b3:b3:18:fd:95:a7:e6:37:49:49:f0:12:6f: a6:14:ed:8b:a4:73:f1:8f:b1:86:de:9d:6f:93:3f:b3:0a:36: 86:61:93:ae:43:fb:4a:59:f6:0d:34:76:da:0c:69:51:5a:3a: 33:ce:f6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKU9IUq/U5hu9fbGVtd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTM0N2ViNjNkYjBlNjEyMzBjNWMzMWU5ZTE5ZGZjZTdl OTQxYzQwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD EyhhYjM1MGM1ZGYxYjQyYjExNDJkNWRkNzdiYmE5NGMzZmFiODVmOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zvP8se5/1rxMwhjQGyfP8jJZmuw l/t5v/5gFKUBsAyHf8QsDu04SeUW3mWwRLXd/ZaWwQGx1R7pXWPd/5p7Inx8uMEa vpZGYueug0TG9Y20/OJnPCUr5YAKNbFQriwPKrLAoOjsP7pYXNGMEFjc94DcOqmZ z2LpUfZ2Q41Xwl62QkTU5eWLvLyrVdMWT+CwPLmvl7or78od8EKwuFDwzYnFrTo5 X+FSGb7Qq9L0i1ozOQRcYjulGbJRPfpefu4xkp9ooDtGz6PLFC78zjDMiIog1ntD avzkeObBjkIiJ5H4SwpiyGtwlTIH2u3Lfd10e8+LH6dsaYQIQgNYxKgGIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs1DF3xtCsRQtXdd7upTD+rhfi3MB8GA1UdIwQY MBaAFIiTR+tj2w5hIwxcMenhnfzn6UHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYt ZDVlYjYyMWZjM2FjLzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYtZDVlYjYyMWZjM2Fj LzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVRKFm5g a67ZrwwmANow+W2TlqLK2cPmHErLSloJsslYxEfoh47r7+gZQzSa4OikMzd0bsF5 SlqkJOmCxCm8dvUfJOEX7ljIOZYt+7MKwtWbrPryKURl9suoHUpBxmnotqNQ5phQ Dz/MPTcOIgGK9VWDWkhnyuNB9FmPnFt9AQ5GpokzWRt1ECYEANQ7lieLSbCi3w3l 6t8+1ntiNXU/dwDxThq67TF8GnRfJ8C00wg7I+nU7VDNf0aMBoNiFrZYR34K17Vi vlaG5tCzsxj9lafmN0lJ8BJvphTti6Rz8Y+xht6db5M/swo2hmGTrkP7Sln2DTR2 2gxpUVo6M872hA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:59 2026 by rpki-client