This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft File: ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json) Hash identifier: fWv+mBVnTn3RM35rXCvYU0eV/Gum/2GstGJ3N1Nng+g= Subject key identifier: FA:BB:64:4E:3D:E8:A2:76:74:38:A6:41:8D:3C:F3:CB:E5:4C:08:E5 Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18 Certificate issuer: /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218 Certificate serial: 019C43223E1E30D462A11D8F09F2AD72B70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:43 +0000 Manifest this update: Mon 09 Feb 2026 16:00:43 +0000 Manifest next update: Tue 10 Feb 2026 16:00:43 +0000 Files and hashes: 1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: EkZKscI5VHzopnJusP76l2G5LB8iJQHhAZmrUVlOuMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:3e:1e:30:d4:62:a1:1d:8f:09:f2:ad:72:b7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218 Validity Not Before: Feb 9 16:00:43 2026 GMT Not After : Feb 10 16:00:43 2026 GMT Subject: CN=fabb644e3de8a2767438a6418d3cf3cbe54c08e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:54:95:ef:d7:fb:0e:5f:35:17:8d:3b:6b: ec:9c:f2:82:ce:2a:f2:d5:e2:c6:3a:95:a1:dd:66: c8:88:bf:a4:fd:56:b8:32:41:76:2d:91:72:42:23: b2:7e:5b:a0:6e:f5:d5:f3:c5:b7:4e:de:cb:14:35: 5d:12:78:ec:8d:36:66:42:f2:1d:da:19:7c:fd:82: 52:83:27:f7:98:fb:92:82:ee:d1:61:10:ff:da:f4: 10:2a:1f:9c:15:3e:67:60:9e:ef:13:2d:2c:f0:9c: 9f:97:1c:fe:5c:bf:01:13:dd:1e:8b:20:f2:30:85: 94:3e:bd:89:12:ea:8f:d5:fa:df:9e:96:5d:80:3e: e4:19:91:4e:bc:f0:2b:2a:cd:07:d2:55:04:ee:98: d6:a7:7e:2b:09:3d:93:30:23:79:60:d7:1d:70:97: 90:1a:fd:93:ef:a5:5c:a2:16:94:13:87:32:bb:81: de:40:50:1a:55:c2:7d:b7:1c:f9:cf:03:39:7a:b2: 79:47:04:a3:81:aa:2e:e4:01:82:7e:2c:c9:6f:70: 2c:64:0c:b6:9b:ad:20:10:3b:b7:a1:f0:71:ec:32: c4:1e:fa:9c:aa:1a:bc:9b:da:b5:d3:a9:88:9b:64: 21:fd:61:41:34:e0:08:87:0d:8d:e1:32:c0:22:91: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:64:4E:3D:E8:A2:76:74:38:A6:41:8D:3C:F3:CB:E5:4C:08:E5 X509v3 Authority Key Identifier: keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:37:94:eb:37:db:34:fe:66:ed:cd:8a:cc:21:d3:83:07:f5: c7:78:63:1b:fb:5a:a0:29:8f:77:f2:f3:2e:e7:a2:ad:ec:eb: 35:0c:9a:ed:a0:7b:fb:93:a7:74:d7:c4:63:95:ee:55:19:4a: ad:42:b9:fe:a2:f0:59:76:7b:c3:21:f8:9a:1b:cb:cb:ac:f7: e2:08:6a:56:a9:96:be:f5:23:5e:9d:6c:e0:2b:3e:94:13:21: 2d:85:35:d5:26:0c:75:5c:a4:1c:a1:57:66:03:34:d5:1d:be: 41:c2:b4:09:3a:28:d4:94:8f:9f:7f:bc:13:b9:6f:a2:8e:a1: d4:d0:1a:26:9e:f3:0d:b7:fe:55:5b:73:49:26:1b:41:a7:84: d0:10:78:1e:3e:f0:c3:79:b4:2b:5b:78:48:82:29:75:43:4b: ed:0b:fa:09:14:bd:ac:46:39:13:ba:76:f0:0d:77:b6:8d:14: 8f:5a:c7:69:b2:73:da:94:50:ed:a4:e2:f9:32:ad:d5:c3:80: aa:51:a9:5e:cb:8b:0b:7b:f5:17:b4:c3:ef:68:9f:fe:bb:3f: 20:8f:57:91:aa:e8:2a:6d:fc:55:d0:1e:35:b1:f1:28:65:f3: 88:0f:55:1b:06:1e:1d:c4:af:74:33:c9:1f:4f:fc:7d:44:41: 2d:d5:8d:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIj4eMNRioR2PCfKtcrcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDFlMmYyZDE0NTJlN2M0Y2MwN2RiZmE3ODM5ZDU4ZGY1 N2YyMTgwHhcNMjYwMjA5MTYwMDQzWhcNMjYwMjEwMTYwMDQzWjAzMTEwLwYDVQQD EyhmYWJiNjQ0ZTNkZThhMjc2NzQzOGE2NDE4ZDNjZjNjYmU1NGMwOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozZUle/X+w5fNReNO2vsnPKCziry 1eLGOpWh3WbIiL+k/Va4MkF2LZFyQiOyflugbvXV88W3Tt7LFDVdEnjsjTZmQvId 2hl8/YJSgyf3mPuSgu7RYRD/2vQQKh+cFT5nYJ7vEy0s8Jyflxz+XL8BE90eiyDy MIWUPr2JEuqP1frfnpZdgD7kGZFOvPArKs0H0lUE7pjWp34rCT2TMCN5YNcdcJeQ Gv2T76VcohaUE4cyu4HeQFAaVcJ9txz5zwM5erJ5RwSjgaou5AGCfizJb3AsZAy2 m60gEDu3ofBx7DLEHvqcqhq8m9q106mIm2Qh/WFBNOAIhw2N4TLAIpH0LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq7ZE496KJ2dDimQY0888vlTAjlMB8GA1UdIwQY MBaAFIpB4vLRRS58TMB9v6eDnVjfV/IYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZjY5YzQtZDY0YS00MzQwLTliZjEt MzY0ODU0Y2JjMGU4LzEvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZjY5YzQtZDY0YS00MzQwLTliZjEtMzY0ODU0Y2JjMGU4 LzEvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTeU6zfb NP5m7c2KzCHTgwf1x3hjG/taoCmPd/LzLueirezrNQya7aB7+5OndNfEY5XuVRlK rUK5/qLwWXZ7wyH4mhvLy6z34ghqVqmWvvUjXp1s4Cs+lBMhLYU11SYMdVykHKFX ZgM01R2+QcK0CToo1JSPn3+8E7lvoo6h1NAaJp7zDbf+VVtzSSYbQaeE0BB4Hj7w w3m0K1t4SIIpdUNL7Qv6CRS9rEY5E7p28A13to0Uj1rHabJz2pRQ7aTi+TKt1cOA qlGpXsuLC3v1F7TD72if/rs/II9XkaroKm38VdAeNbHxKGXziA9VGwYeHcSvdDPJ H0/8fURBLdWNvA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:08 2026 by rpki-client