This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json) Hash identifier: sMNrHlFokfKl7VIYnTC2UsuHAEFnF9kZ0mYmwMaVfmI= Subject key identifier: 47:F8:7C:AB:E8:40:0F:11:49:C0:A1:6A:0B:9F:B6:DE:28:38:08:FE Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Certificate serial: 019C443523A6F5D8997B9FE71219C8D7C38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 21:00:58 +0000 Manifest this update: Mon 09 Feb 2026 21:00:58 +0000 Manifest next update: Tue 10 Feb 2026 21:00:58 +0000 Files and hashes: 1: Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa (hash: vgpms375ZNHUjcZk9fgkMXFPfvTYsPPbiXsTHzCrq6o=) 2: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: KspCH7ZP3MFTrtRWnFQcK3LmSVsOifylGQckNndD8wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:23:a6:f5:d8:99:7b:9f:e7:12:19:c8:d7:c3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Validity Not Before: Feb 9 21:00:58 2026 GMT Not After : Feb 10 21:00:58 2026 GMT Subject: CN=47f87cabe8400f1149c0a16a0b9fb6de283808fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:86:f5:b2:3f:9a:4e:5a:5a:b5:d0:96:25: 96:2f:f9:4b:c5:f2:a1:aa:64:f8:7a:bb:8b:e5:f6: 36:72:ba:93:6a:9a:10:8d:58:d6:61:44:5f:ba:f6: 4e:7a:5e:c9:5d:17:63:55:a8:1e:cc:c4:9f:b6:92: be:3e:45:8d:d4:8a:53:9f:22:63:16:b9:7d:29:10: 30:19:21:29:24:e8:da:c2:1e:d2:6d:7c:b5:ff:67: ff:e6:cf:b4:6a:55:ee:09:c1:8d:04:c1:45:4e:ca: 6f:f5:68:6c:8f:45:67:b3:f4:5e:c2:38:1a:0e:a3: d5:e9:36:42:7e:cb:87:75:38:d2:e0:dd:47:19:74: 86:84:3e:ec:99:9b:a6:7c:e5:e2:7f:e3:e3:63:85: bf:33:56:e1:40:02:1b:49:f5:f4:a2:07:b3:3f:be: 32:b4:f4:41:33:76:92:d7:e5:18:3c:80:01:77:53: 54:30:0b:af:7c:e7:12:4c:dc:db:1e:e1:c2:0a:80: 39:3a:63:f4:d1:2a:53:e5:d1:34:d0:d1:16:f0:1b: 81:4d:a1:94:84:09:ca:c6:bd:c9:ce:28:de:6c:a2: 1c:6e:b5:97:7e:f3:a6:5a:49:e9:34:be:bb:02:9a: b1:39:79:5e:d7:42:56:9b:36:a0:9d:d6:1e:29:61: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:7C:AB:E8:40:0F:11:49:C0:A1:6A:0B:9F:B6:DE:28:38:08:FE X509v3 Authority Key Identifier: keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fc:d6:c2:f6:81:50:15:07:c2:8a:06:a1:e0:0b:02:f6:e6: 2d:9e:4f:1e:49:68:9b:57:5f:f1:a3:04:1f:94:db:d5:0b:5a: 33:41:4d:6d:ff:74:1b:39:ac:97:cb:0d:8d:b3:c5:40:b5:bf: df:8d:c2:b7:a0:c7:6f:e8:be:dc:ee:64:47:d1:5f:0b:e9:c3: b8:c2:f6:70:d7:9b:72:b1:c1:e9:6b:9a:de:c0:c9:64:b4:93: 71:82:71:67:b2:c3:b8:2d:98:c7:5e:77:cf:f3:b6:c1:3b:19: 8c:f2:7b:c0:d6:0d:a7:96:ff:7b:90:92:bd:3f:3e:28:30:ea: 57:d5:df:05:45:1a:c5:58:80:34:07:00:af:0f:b0:26:8b:26: 84:73:8a:4e:a4:c9:e1:d4:d3:f8:09:b9:10:29:67:4b:dd:2d: 9c:cf:f9:4a:e4:f5:e5:d8:e2:b7:5c:32:49:f8:1b:42:50:77: 08:ab:6f:08:3c:77:40:b1:36:99:be:20:fe:39:07:2a:23:83: d2:10:a1:c0:48:df:f2:70:63:54:cc:87:74:b1:16:60:43:e2: 50:5d:f8:69:aa:bd:40:89:ff:c4:fb:85:80:e5:99:1d:7d:9b: 54:5a:6a:b0:7f:a7:04:82:4b:9f:a4:a0:79:2a:5e:c4:49:05: b3:b6:8f:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENSOm9diZe5/nEhnI18OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj YTQ0OTUwHhcNMjYwMjA5MjEwMDU4WhcNMjYwMjEwMjEwMDU4WjAzMTEwLwYDVQQD Eyg0N2Y4N2NhYmU4NDAwZjExNDljMGExNmEwYjlmYjZkZTI4MzgwOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDCG9bI/mk5aWrXQliWWL/lLxfKh qmT4eruL5fY2crqTapoQjVjWYURfuvZOel7JXRdjVagezMSftpK+PkWN1IpTnyJj Frl9KRAwGSEpJOjawh7SbXy1/2f/5s+0alXuCcGNBMFFTspv9Whsj0Vns/Rewjga DqPV6TZCfsuHdTjS4N1HGXSGhD7smZumfOXif+PjY4W/M1bhQAIbSfX0ogezP74y tPRBM3aS1+UYPIABd1NUMAuvfOcSTNzbHuHCCoA5OmP00SpT5dE00NEW8BuBTaGU hAnKxr3JzijebKIcbrWXfvOmWknpNL67ApqxOXle10JWmzagndYeKWG9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf4fKvoQA8RScChaguftt4oOAj+MB8GA1UdIwQY MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt OGNmMTE1YWEyY2MzLzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvzWwvaB UBUHwooGoeALAvbmLZ5PHklom1df8aMEH5Tb1QtaM0FNbf90Gzmsl8sNjbPFQLW/ 343Ct6DHb+i+3O5kR9FfC+nDuML2cNebcrHB6Wua3sDJZLSTcYJxZ7LDuC2Yx153 z/O2wTsZjPJ7wNYNp5b/e5CSvT8+KDDqV9XfBUUaxViANAcArw+wJosmhHOKTqTJ 4dTT+Am5EClnS90tnM/5SuT15djit1wySfgbQlB3CKtvCDx3QLE2mb4g/jkHKiOD 0hChwEjf8nBjVMyHdLEWYEPiUF34aaq9QIn/xPuFgOWZHX2bVFpqsH+nBIJLn6Sg eSpexEkFs7aPkg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:26 2026 by rpki-client