This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json) Hash identifier: ECeGa9OuBMOZ1yWElZUvziANrT2VZi6KrDj2RlDNbNc= Subject key identifier: 99:2F:D0:88:6D:8E:C6:64:27:0C:7B:A7:6D:E0:7A:9D:5C:8D:9C:D5 Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9 Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9 Certificate serial: 019C4134119ACBF7E2AD26BC68127474DBB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 07:00:57 +0000 Manifest this update: Mon 09 Feb 2026 07:00:57 +0000 Manifest next update: Tue 10 Feb 2026 07:00:57 +0000 Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: ZQYM3FB2nByI37fvIDLlb2ArpLy0xuUEY5ehC4Jt8fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:11:9a:cb:f7:e2:ad:26:bc:68:12:74:74:db:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9 Validity Not Before: Feb 9 07:00:57 2026 GMT Not After : Feb 10 07:00:57 2026 GMT Subject: CN=992fd0886d8ec664270c7ba76de07a9d5c8d9cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:ed:6a:ad:8e:0e:e8:2c:4a:93:27:09:90: ed:b4:38:aa:4f:63:21:c0:34:26:c6:e6:ce:8d:90: 6b:df:52:b1:7f:14:56:48:52:df:64:1c:99:b1:10: 0d:13:04:da:4e:5a:02:20:a6:fe:d1:ea:4f:c5:53: 68:86:10:1e:f6:40:ed:9e:b9:3e:61:f5:c3:e4:ac: a7:9c:ed:cf:0f:fc:0e:e5:f6:e9:ff:dd:e3:e4:f7: 65:10:6c:32:33:2e:01:af:78:f7:0e:55:df:01:c0: be:60:a1:44:81:4c:74:50:ca:8b:f0:c4:93:60:db: 7a:8f:fb:5f:bf:9c:b5:0b:a1:89:2f:ee:85:eb:52: 0c:22:72:00:04:00:b3:ce:03:d8:c5:99:f6:a1:f5: f0:fc:6c:32:19:d0:28:76:ea:a2:43:b6:dc:c2:02: e1:fe:53:e4:47:65:92:54:e9:4b:57:ad:4b:5b:c8: 42:bb:dd:49:93:e9:eb:08:36:a5:9e:80:ff:df:98: 47:dd:b6:b1:52:af:4e:40:f5:17:98:ee:1c:7a:67: 58:1a:ec:9b:e0:f6:51:64:68:25:79:2b:d7:b4:37: 75:75:e8:12:cc:18:67:32:cc:a5:2c:dc:bf:6e:52: 1b:88:74:a6:ad:8e:d8:ea:3f:bb:d2:90:4d:2b:0a: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:D0:88:6D:8E:C6:64:27:0C:7B:A7:6D:E0:7A:9D:5C:8D:9C:D5 X509v3 Authority Key Identifier: keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f8:0a:47:8c:a3:d6:f4:3e:c0:f3:1d:9f:42:d7:ec:bf:b0: 05:a4:e4:94:57:62:7f:18:af:0d:c8:7e:1e:75:a9:e3:3c:16: 43:a3:b1:f6:49:0b:0a:1f:59:bc:55:66:36:32:c9:81:bb:91: 58:24:5c:95:06:94:ad:72:e9:8c:3f:a3:7b:fc:7a:70:f2:2a: 6b:1c:b7:f2:ff:ee:03:df:40:34:15:98:e2:0a:26:3e:f3:b7: 46:22:01:30:74:d3:17:aa:86:df:46:e8:43:64:39:59:21:ae: 37:c5:0f:40:6b:24:74:bb:83:b6:69:3c:f3:74:16:95:55:d9: 00:77:88:16:c9:8b:66:3a:b8:81:7b:6a:0b:f2:10:be:bf:53: 5d:44:58:b6:e1:e6:67:12:f0:03:59:bd:63:a4:a9:4a:b2:1f: 92:1b:ea:42:cc:12:41:18:ab:80:c9:51:05:40:fb:56:f1:36: 44:fd:e0:7a:d0:80:f4:66:7b:fb:37:2d:09:34:90:b7:61:62: ea:52:c9:a1:90:eb:0a:4d:98:4b:3b:9f:a4:d7:1d:70:ae:89: e8:00:c2:38:4d:e0:3c:a0:7f:ef:c2:98:36:b8:f7:84:ce:eb: 6b:8d:bd:a3:cd:e7:0f:2e:cf:a3:a6:b5:98:3c:78:d2:2d:5c: 25:fe:fd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNBGay/firSa8aBJ0dNu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTY3MzFhODlkZjdlOTM3MWFiYTMzZWIxNGQ3MmY2MWUz OTgwYjkwHhcNMjYwMjA5MDcwMDU3WhcNMjYwMjEwMDcwMDU3WjAzMTEwLwYDVQQD Eyg5OTJmZDA4ODZkOGVjNjY0MjcwYzdiYTc2ZGUwN2E5ZDVjOGQ5Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK/taq2ODugsSpMnCZDttDiqT2Mh wDQmxubOjZBr31KxfxRWSFLfZByZsRANEwTaTloCIKb+0epPxVNohhAe9kDtnrk+ YfXD5KynnO3PD/wO5fbp/93j5PdlEGwyMy4Br3j3DlXfAcC+YKFEgUx0UMqL8MST YNt6j/tfv5y1C6GJL+6F61IMInIABACzzgPYxZn2ofXw/GwyGdAoduqiQ7bcwgLh /lPkR2WSVOlLV61LW8hCu91Jk+nrCDalnoD/35hH3baxUq9OQPUXmO4cemdYGuyb 4PZRZGgleSvXtDd1degSzBhnMsylLNy/blIbiHSmrY7Y6j+70pBNKwoiPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkv0IhtjsZkJwx7p23gep1cjZzVMB8GA1UdIwQY MBaAFIjmcxqJ336TcaujPrFNcvYeOYC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2Ut NmJjZjRhNDJhYzdkLzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2UtNmJjZjRhNDJhYzdk LzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvgKR4yj 1vQ+wPMdn0LX7L+wBaTklFdifxivDch+HnWp4zwWQ6Ox9kkLCh9ZvFVmNjLJgbuR WCRclQaUrXLpjD+je/x6cPIqaxy38v/uA99ANBWY4gomPvO3RiIBMHTTF6qG30bo Q2Q5WSGuN8UPQGskdLuDtmk883QWlVXZAHeIFsmLZjq4gXtqC/IQvr9TXURYtuHm ZxLwA1m9Y6SpSrIfkhvqQswSQRirgMlRBUD7VvE2RP3getCA9GZ7+zctCTSQt2Fi 6lLJoZDrCk2YSzufpNcdcK6J6ADCOE3gPKB/78KYNrj3hM7ra429o83nDy7Po6a1 mDx40i1cJf79tA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:57 2026 by rpki-client