This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json) Hash identifier: 4as4a5ThofOA/8yJpuJLLtkLA7GRhkmJlJwLiAOVXTc= Subject key identifier: B4:BA:46:AE:A1:59:FB:12:0C:DF:E6:06:CD:C6:61:2E:9B:27:40:88 Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Certificate serial: 019C420FE89DDFAE9117BB4EFBB53B028C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft Manifest number: 0E76 Signing time: Mon 09 Feb 2026 11:01:04 +0000 Manifest this update: Mon 09 Feb 2026 11:01:04 +0000 Manifest next update: Tue 10 Feb 2026 11:01:04 +0000 Files and hashes: 1: 1-kYVKomYqjL01cbaEPOlMsEWOVY.roa (hash: oUQ10g8uHJDmhHl7WNNwDwZSnYMcTHr2vmmz1SCpm+8=) 2: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: BjBFOxBXGMYJNUfpwa8TT1Y9uAx8MiHa0o5clqnRIIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e8:9d:df:ae:91:17:bb:4e:fb:b5:3b:02:8c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Validity Not Before: Feb 9 11:01:04 2026 GMT Not After : Feb 10 11:01:04 2026 GMT Subject: CN=b4ba46aea159fb120cdfe606cdc6612e9b274088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:b1:61:eb:b0:63:5c:9a:3c:74:f5:ae:32: b1:fb:54:20:34:ca:bc:eb:95:12:c1:5e:8f:46:61: f9:76:f4:e0:45:da:0b:33:35:d3:93:5e:fa:ca:1e: 02:d7:b9:b9:ec:c9:cf:b9:92:5a:7c:d6:83:0a:46: 80:0e:95:e3:e7:f3:2e:4a:fe:ab:65:e5:fd:18:c6: ce:39:a2:5c:26:e0:5b:c7:e3:cb:50:88:40:c7:82: 66:39:3f:14:d8:0e:8b:30:1b:23:e1:6a:0c:18:47: cf:08:db:7a:63:52:6f:d6:a6:90:bc:8b:33:87:13: 5c:b1:28:0a:04:7a:fe:f4:35:72:73:e4:bb:f9:1d: 27:19:ee:45:b9:91:b7:05:f6:40:3e:44:8e:cd:30: 4b:3e:d8:2b:d9:e7:92:53:16:bc:ed:f6:00:67:53: d7:c9:c2:4c:8b:67:d7:b9:b6:4d:de:91:4c:bd:c9: b4:40:2b:70:10:95:bd:02:05:f8:b5:60:a9:74:1f: a9:79:d6:bc:d6:d8:57:00:c8:f1:28:54:19:cc:8f: a2:bc:45:65:0d:49:6a:f2:d4:9c:9a:20:e3:29:37: f1:95:15:d1:33:59:53:cb:79:50:d3:92:ac:6e:96: e0:43:c4:a5:31:d5:c4:87:df:6e:95:5d:6d:45:b2: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BA:46:AE:A1:59:FB:12:0C:DF:E6:06:CD:C6:61:2E:9B:27:40:88 X509v3 Authority Key Identifier: keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:a8:b6:d9:88:ee:51:b2:39:d0:72:d8:a6:ca:98:bc:04: 13:61:fc:65:ba:f8:d7:03:c8:91:70:6c:be:61:16:4e:1c:47: b8:99:d0:09:d0:80:d2:13:a9:1b:c4:76:d1:78:60:b8:d7:61: 1b:76:0a:ec:bf:f7:8d:78:34:ea:ec:ad:7d:47:c9:a2:81:21: 63:8b:57:f9:9e:c5:f1:29:14:70:98:81:53:94:f0:0e:f8:31: 2b:f6:5a:ec:94:09:8f:8b:1d:b0:6f:ce:67:f3:95:94:3e:bf: d8:ba:0d:35:f5:f8:8f:24:7e:8e:a4:c7:7e:cf:2e:53:7a:c2: e8:2c:ea:21:86:ba:29:11:45:29:bb:e6:61:00:02:9b:73:b6: eb:4c:31:73:ca:f7:4d:d7:95:66:9b:7a:b7:63:88:31:62:f4: 61:e8:c4:0f:bc:e0:3a:85:f5:a4:61:66:62:28:fa:08:86:e0: 4a:ea:8b:9f:c2:96:3b:6e:c9:97:df:68:78:d3:09:14:4f:ae: ff:d7:1d:27:4c:47:09:18:72:4e:8f:24:3d:fd:7d:9f:52:b0: f2:23:e5:bf:04:92:4b:9e:6f:bd:8e:1c:65:75:7b:ef:96:39: 4b:18:d0:3c:22:a4:44:b7:eb:3f:1b:2c:69:aa:27:04:5a:75: b7:3d:b2:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+id366RF7tO+7U7AowpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi MWUyMjkwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD EyhiNGJhNDZhZWExNTlmYjEyMGNkZmU2MDZjZGM2NjEyZTliMjc0MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOqxYeuwY1yaPHT1rjKx+1QgNMq8 65USwV6PRmH5dvTgRdoLMzXTk176yh4C17m57MnPuZJafNaDCkaADpXj5/MuSv6r ZeX9GMbOOaJcJuBbx+PLUIhAx4JmOT8U2A6LMBsj4WoMGEfPCNt6Y1Jv1qaQvIsz hxNcsSgKBHr+9DVyc+S7+R0nGe5FuZG3BfZAPkSOzTBLPtgr2eeSUxa87fYAZ1PX ycJMi2fXubZN3pFMvcm0QCtwEJW9AgX4tWCpdB+peda81thXAMjxKFQZzI+ivEVl DUlq8tScmiDjKTfxlRXRM1lTy3lQ05KsbpbgQ8SlMdXEh99ulV1tRbKCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS6Rq6hWfsSDN/mBs3GYS6bJ0CIMB8GA1UdIwQY MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4 LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROKottmI 7lGyOdBy2KbKmLwEE2H8Zbr41wPIkXBsvmEWThxHuJnQCdCA0hOpG8R20XhguNdh G3YK7L/3jXg06uytfUfJooEhY4tX+Z7F8SkUcJiBU5TwDvgxK/Za7JQJj4sdsG/O Z/OVlD6/2LoNNfX4jyR+jqTHfs8uU3rC6CzqIYa6KRFFKbvmYQACm3O260wxc8r3 TdeVZpt6t2OIMWL0YejED7zgOoX1pGFmYij6CIbgSuqLn8KWO27Jl99oeNMJFE+u /9cdJ0xHCRhyTo8kPf19n1Kw8iPlvwSSS55vvY4cZXV775Y5SxjQPCKkRLfrPxss aaonBFp1tz2yqw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:30 2026 by rpki-client