This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json) Hash identifier: JKswjkojPkcvinHi4h92mWgJZvcubGgvx0aeP23rRLE= Subject key identifier: BB:90:10:21:C9:FD:51:F2:B0:42:6B:0A:1C:EB:01:F5:98:49:99:1F Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05 Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305 Certificate serial: 019C1C14A0B37DAACD8426F0881E036F2DFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft Manifest number: 17FD Signing time: Mon 02 Feb 2026 02:00:39 +0000 Manifest this update: Mon 02 Feb 2026 02:00:39 +0000 Manifest next update: Tue 03 Feb 2026 02:00:39 +0000 Files and hashes: 1: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: QCmp5HKkJr4cR88Ej1SAjX8gjiHcCsaO17aHmW2COKU=) 2: mIJkdI_D_OLqojcSa_oOxsMYHXI.roa (hash: /rw37thuWBvovhA/vpu0eqLvxv8XNv0W36vkyYoUMlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:a0:b3:7d:aa:cd:84:26:f0:88:1e:03:6f:2d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305 Validity Not Before: Feb 2 02:00:39 2026 GMT Not After : Feb 3 02:00:39 2026 GMT Subject: CN=bb901021c9fd51f2b0426b0a1ceb01f59849991f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:2d:29:a7:9b:b0:42:5a:3a:bb:40:26:f4: 69:e1:91:88:d7:d4:8b:70:08:1d:04:a3:38:51:46: 28:e1:b3:5d:3f:50:b6:37:ad:92:84:c0:ff:ab:ea: 33:89:94:bb:3b:ec:bb:d2:79:cb:56:87:bd:1e:1f: 48:a7:40:11:42:0e:ba:38:e1:14:5a:d7:51:87:20: 3d:43:5c:5c:5c:2c:3b:c0:39:51:b5:ea:d6:81:13: 1d:30:3c:32:63:e8:6d:44:d4:af:b6:4e:98:96:fc: 08:76:c0:a5:d7:2b:c2:f0:4e:95:94:bb:50:7c:7b: bd:6f:1a:d1:ee:f1:2f:38:73:44:22:bc:5a:d1:49: 28:a2:05:a6:18:0c:bd:05:37:87:b7:5c:7e:7a:14: 67:de:54:2a:d6:39:b7:b0:18:f4:cb:90:d0:6e:d0: 36:32:03:ce:30:b1:b2:a6:88:6d:75:8c:94:59:72: b7:75:11:a7:7b:a7:75:1f:33:9c:ef:ac:15:eb:22: 5a:47:69:c5:e2:dc:19:97:9c:21:90:7f:f4:ad:30: f0:dd:48:b1:cb:1e:c4:1d:55:2e:df:a5:96:24:14: 64:70:df:da:cd:0c:49:bd:6b:98:30:cf:8b:83:6a: 37:d8:e2:19:ae:40:0c:d4:82:c7:c6:8d:f0:26:1f: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:90:10:21:C9:FD:51:F2:B0:42:6B:0A:1C:EB:01:F5:98:49:99:1F X509v3 Authority Key Identifier: keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ce:c5:33:a0:6c:4e:fc:9c:d0:df:73:87:18:a2:f2:39:6b: 7d:0c:14:39:39:3d:0e:57:68:0d:84:b3:53:de:4a:9a:a5:3c: 38:a9:1f:a3:13:f2:77:81:0d:12:f1:d9:c0:fc:05:c1:db:26: ea:dd:1c:ef:5b:cc:da:00:61:d0:d0:33:55:52:b1:e6:13:ab: 66:05:5d:df:74:b0:19:9a:f6:72:92:79:47:1a:d4:cf:d9:28: 95:d3:8a:22:5a:ca:00:72:ea:fd:d3:c9:fd:86:da:c3:04:88: 5d:3d:48:61:ed:4c:ad:bd:17:fe:ed:ff:63:5f:4b:1b:26:5b: bf:fa:f9:93:e0:68:ed:05:8a:18:94:40:b9:da:8f:4d:b3:8e: 15:d7:c2:ec:08:67:65:1f:b3:09:9e:11:20:25:00:3a:91:5f: 8d:8a:97:e6:5a:ec:d9:61:2e:9d:02:63:c0:85:e1:6f:c0:c8: 7f:4e:44:07:e2:f6:d6:12:e1:42:e0:42:0f:fa:19:1d:99:0a: cb:7a:08:a3:50:9f:60:61:91:25:1c:de:3b:a5:60:73:d1:ec: ba:09:d3:cb:7c:86:d8:ab:96:48:b9:01:22:32:12:12:88:24: f3:f5:9b:16:10:c3:b1:a0:5f:01:5d:7a:58:90:b6:02:33:b8: 11:e7:9d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFKCzfarNhCbwiB4Dby3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYWVkYzhiMmExYmJkNmQzNzA1NWVjMDBlOGU2MGY0NTg4 ZTEzMDUwHhcNMjYwMjAyMDIwMDM5WhcNMjYwMjAzMDIwMDM5WjAzMTEwLwYDVQQD EyhiYjkwMTAyMWM5ZmQ1MWYyYjA0MjZiMGExY2ViMDFmNTk4NDk5OTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3EtKaebsEJaOrtAJvRp4ZGI19SL cAgdBKM4UUYo4bNdP1C2N62ShMD/q+oziZS7O+y70nnLVoe9Hh9Ip0ARQg66OOEU WtdRhyA9Q1xcXCw7wDlRterWgRMdMDwyY+htRNSvtk6YlvwIdsCl1yvC8E6VlLtQ fHu9bxrR7vEvOHNEIrxa0UkoogWmGAy9BTeHt1x+ehRn3lQq1jm3sBj0y5DQbtA2 MgPOMLGypohtdYyUWXK3dRGne6d1HzOc76wV6yJaR2nF4twZl5whkH/0rTDw3Uix yx7EHVUu36WWJBRkcN/azQxJvWuYMM+Lg2o32OIZrkAM1ILHxo3wJh/C4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuQECHJ/VHysEJrChzrAfWYSZkfMB8GA1UdIwQY MBaAFCCu3IsqG71tNwVewA6OYPRYjhMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQt OTY5ZDI1MzlkMGNhLzEvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQtOTY5ZDI1MzlkMGNh LzEvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc7FM6Bs Tvyc0N9zhxii8jlrfQwUOTk9DldoDYSzU95KmqU8OKkfoxPyd4ENEvHZwPwFwdsm 6t0c71vM2gBh0NAzVVKx5hOrZgVd33SwGZr2cpJ5RxrUz9koldOKIlrKAHLq/dPJ /YbawwSIXT1IYe1Mrb0X/u3/Y19LGyZbv/r5k+Bo7QWKGJRAudqPTbOOFdfC7Ahn ZR+zCZ4RICUAOpFfjYqX5lrs2WEunQJjwIXhb8DIf05EB+L21hLhQuBCD/oZHZkK y3oIo1CfYGGRJRzeO6Vgc9HsugnTy3yG2KuWSLkBIjISEogk8/WbFhDDsaBfAV16 WJC2AjO4EeedOQ== -----END CERTIFICATE-----Generated at Mon Feb 2 05:04:13 2026 by rpki-client