This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json) Hash identifier: GdILHNIpPQixzQztdnBLZofOIyu6QrL2mS0dsDm1FTg= Subject key identifier: 4B:B2:09:78:22:10:42:83:80:1A:73:C4:4F:37:CD:4E:91:F9:BA:AF Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Certificate serial: 019C420F4A73B5FBE56A4A64C96A3845DD36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:24 +0000 Manifest this update: Mon 09 Feb 2026 11:00:24 +0000 Manifest next update: Tue 10 Feb 2026 11:00:24 +0000 Files and hashes: 1: 1-t_zhWLilE6KvhfiWmcU3qakEiY.roa (hash: 0Yp7FcFsKOjytovm/Gd90cW5FsF6AebKXtz8XB/GJT0=) 2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: ycUgdvz+KDvO0O2w0cIYDz+nd4I+awCf4wqSJ9B0FbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4a:73:b5:fb:e5:6a:4a:64:c9:6a:38:45:dd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Validity Not Before: Feb 9 11:00:24 2026 GMT Not After : Feb 10 11:00:24 2026 GMT Subject: CN=4bb2097822104283801a73c44f37cd4e91f9baaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:52:ba:81:86:87:ac:f5:08:66:82:7f:fa: 2a:47:3b:c1:e0:60:39:ac:27:53:a1:4f:15:4c:ad: 83:86:40:e6:3f:fd:af:63:f6:0c:4f:37:53:5c:3a: d1:86:51:1b:7d:05:b8:b8:d4:8a:5e:ab:6d:d6:3c: b0:8b:be:05:c7:4d:3b:da:a6:9a:bc:7b:1f:f2:a7: e3:5a:ed:39:64:a0:ea:a4:72:ac:5f:59:13:c5:f5: f3:9a:02:76:0b:89:43:d4:a6:83:9c:94:b6:cd:f2: 4e:56:83:47:18:24:48:70:2a:45:b4:5a:44:d5:8a: 6f:c5:e6:bd:60:f7:4b:cc:0a:bc:b8:01:9d:63:a9: 88:0a:42:c1:51:e7:da:f7:0e:b7:a9:39:83:36:77: 56:65:19:04:0a:89:38:26:f2:25:ef:4a:bd:1b:72: f6:70:0d:04:cd:54:08:d4:08:21:b2:ef:53:82:6e: 0c:b8:dd:2f:95:f8:57:be:eb:9f:1c:8e:b1:06:2e: 7f:cc:e7:0c:85:f2:96:20:61:5a:1c:6b:26:e8:28: c6:e6:6a:33:08:37:e4:be:f3:56:6c:cc:48:0d:58: b9:9e:0f:08:94:3f:d7:26:5a:de:aa:e9:e4:bc:04: 14:0c:20:18:af:d8:ad:3c:b9:5c:1f:f8:30:75:5f: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B2:09:78:22:10:42:83:80:1A:73:C4:4F:37:CD:4E:91:F9:BA:AF X509v3 Authority Key Identifier: keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:0c:e5:d7:74:52:85:f9:5b:51:fd:6d:c4:a7:3d:82:e5: 95:65:31:06:97:8c:65:44:1c:39:c8:e9:06:32:4f:e7:b8:07: e5:cd:b7:38:37:88:e0:29:13:0f:c5:35:28:ce:86:fb:ee:db: 6d:2e:b6:a4:c1:7c:99:46:fc:7f:b9:99:65:e5:f8:02:18:18: 02:98:a2:ed:c9:85:23:65:ba:85:43:4c:3b:27:2b:65:f4:2b: 3b:ed:96:57:e7:9a:72:6f:46:9f:74:99:e2:59:44:7b:cc:38: 2a:b8:d9:51:fb:45:e2:8d:88:b1:63:e1:cc:fb:68:53:38:cf: 2e:b3:73:b1:91:00:4c:c7:59:4d:05:6f:94:cc:7b:20:2e:2e: 17:31:c0:99:cd:28:05:9e:ed:ad:2d:18:46:5b:03:ba:db:57: 92:67:a1:15:38:66:74:67:47:74:a0:d6:4e:45:9d:5c:c7:79: 4f:53:99:30:8d:e9:ca:1a:2b:ff:a4:72:d3:aa:99:9e:9f:2a: 8f:db:80:b5:41:5f:b8:04:8b:c8:f7:83:ba:7a:75:af:57:b2: 0a:81:a6:3f:1a:00:3e:7b:fe:0d:70:a1:78:f7:79:e9:87:f7: a0:89:8e:17:89:b7:90:19:9a:71:f1:3c:5b:1a:5b:dc:8f:e6: 21:23:7d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0pztfvlakpkyWo4Rd02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWRiNjQ0ZWEwZTI3NDlkZDZlZDAyMmFlY2QxMjE5NGJj Yjk2ZjIwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD Eyg0YmIyMDk3ODIyMTA0MjgzODAxYTczYzQ0ZjM3Y2Q0ZTkxZjliYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9SuoGGh6z1CGaCf/oqRzvB4GA5 rCdToU8VTK2DhkDmP/2vY/YMTzdTXDrRhlEbfQW4uNSKXqtt1jywi74Fx0072qaa vHsf8qfjWu05ZKDqpHKsX1kTxfXzmgJ2C4lD1KaDnJS2zfJOVoNHGCRIcCpFtFpE 1Ypvxea9YPdLzAq8uAGdY6mICkLBUefa9w63qTmDNndWZRkECok4JvIl70q9G3L2 cA0EzVQI1Aghsu9Tgm4MuN0vlfhXvuufHI6xBi5/zOcMhfKWIGFaHGsm6CjG5moz CDfkvvNWbMxIDVi5ng8IlD/XJlrequnkvAQUDCAYr9itPLlcH/gwdV+88wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuyCXgiEEKDgBpzxE83zU6R+bqvMB8GA1UdIwQY MBaAFIsdtkTqDidJ3W7QIq7NEhlLy5byMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMt NTQzNzc2ZjdjOTJlLzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMtNTQzNzc2ZjdjOTJl LzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr0M5dd0 UoX5W1H9bcSnPYLllWUxBpeMZUQcOcjpBjJP57gH5c23ODeI4CkTD8U1KM6G++7b bS62pMF8mUb8f7mZZeX4AhgYApii7cmFI2W6hUNMOycrZfQrO+2WV+eacm9Gn3SZ 4llEe8w4KrjZUftF4o2IsWPhzPtoUzjPLrNzsZEATMdZTQVvlMx7IC4uFzHAmc0o BZ7trS0YRlsDuttXkmehFThmdGdHdKDWTkWdXMd5T1OZMI3pyhor/6Ry06qZnp8q j9uAtUFfuASLyPeDunp1r1eyCoGmPxoAPnv+DXChePd56Yf3oImOF4m3kBmacfE8 Wxpb3I/mISN9DA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:41 2026 by rpki-client