This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json) Hash identifier: GY8VghXxdYlyvF7mF1aXycKom/j5mAQMbiQNXhbS/As= Subject key identifier: 58:DC:D5:F4:38:54:C2:9B:1F:CE:11:61:8C:62:17:B5:F4:5B:3C:2E Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Certificate serial: 019C42EAFCE94425D1292AB79F98BBA727F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft Manifest number: 0B43 Signing time: Mon 09 Feb 2026 15:00:22 +0000 Manifest this update: Mon 09 Feb 2026 15:00:22 +0000 Manifest next update: Tue 10 Feb 2026 15:00:22 +0000 Files and hashes: 1: dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa (hash: zTuoRHdXLep95ed7e0hmPYJZjgqTN3feHiOb9GoDWDQ=) 2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: VRF3C6UkcRpC8qIPX5dzpnb5Rbph7bNNx6yAmMBojLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fc:e9:44:25:d1:29:2a:b7:9f:98:bb:a7:27:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Validity Not Before: Feb 9 15:00:22 2026 GMT Not After : Feb 10 15:00:22 2026 GMT Subject: CN=58dcd5f43854c29b1fce11618c6217b5f45b3c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:8b:ef:dd:0d:8e:a9:7b:b1:2b:00:40:d2: c1:c7:32:55:69:d6:8f:49:e1:c2:ab:fb:fd:0a:74: 87:4b:04:6c:57:c9:87:5c:c6:d6:34:49:e4:f0:f8: 31:34:c3:ba:39:29:aa:a0:70:c4:6f:d1:ad:8f:b7: 81:e0:ca:17:35:18:3a:bc:a2:4f:2c:9f:42:f3:a0: ea:24:02:d6:45:3a:6c:fe:2b:e5:4e:5e:1b:08:be: 2c:a7:03:6a:74:d6:c6:ce:21:78:23:3c:fc:de:34: b2:b9:9e:68:4a:6c:86:26:08:2c:3e:b6:5c:2a:1c: 4b:18:f3:e5:cd:c3:19:57:22:53:62:97:e7:95:f5: e1:bf:c8:e6:f1:4c:22:4b:ba:7a:4b:5e:8a:be:50: dc:9e:ec:7a:9b:47:1e:95:32:ba:3a:23:40:49:9a: 8c:e7:81:cf:c4:5e:4f:a2:32:61:b1:49:28:91:f8: 22:30:d0:e6:b2:48:50:0f:17:ea:83:d8:6c:18:58: 77:56:33:58:82:ea:50:2a:10:2e:cd:9a:ef:f4:ca: ee:63:e2:be:32:b0:da:f3:84:5b:8b:f1:8f:76:dd: 79:a8:26:30:58:7a:d1:ec:08:4f:92:d3:c7:0f:ed: 41:40:0e:98:eb:31:0b:b5:08:c2:de:23:47:ce:40: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DC:D5:F4:38:54:C2:9B:1F:CE:11:61:8C:62:17:B5:F4:5B:3C:2E X509v3 Authority Key Identifier: keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:3b:db:58:69:ec:27:03:a9:cc:53:fb:ff:ba:c0:99:1f:cb: 67:62:7c:bf:2b:69:37:14:b5:9b:9e:16:ea:8e:fb:73:50:95: ce:64:6d:4b:53:c9:e0:d7:8a:e2:01:2c:78:23:4e:5d:88:da: 5e:05:41:a8:ad:50:92:e1:e8:e5:e3:46:fa:3c:92:19:22:48: 5d:07:91:88:cf:86:83:35:e0:7e:2e:3b:15:da:4a:91:3b:21: 0f:b6:98:2f:1b:ff:fa:c5:f8:56:21:34:57:bc:76:26:0c:c2: d6:4a:64:d1:16:03:26:0c:fc:74:37:18:eb:63:5b:dd:4b:28: fe:70:67:56:70:a4:3b:14:61:4d:ee:7d:04:b1:91:1e:cd:6b: 8e:65:dd:15:9c:c8:b4:df:09:e3:c7:a0:4c:dd:9b:77:a6:62: b3:29:0f:9a:d8:7d:eb:45:76:9f:14:7c:98:1b:46:c5:1a:30: 0e:b5:86:81:f2:74:98:81:db:4e:9e:d5:7e:77:42:49:58:04: 60:d4:f9:09:b5:20:d9:9c:72:2d:31:cc:50:b9:24:89:85:49: b8:5b:a2:01:86:b5:f9:a1:dd:f9:2f:6d:9e:d0:78:53:5c:8c: bf:7b:45:45:11:2f:ee:08:a8:6f:d2:68:76:91:d9:ba:d2:13: 32:f3:b2:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vzpRCXRKSq3n5i7pyfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNTE1ZmJiMzFiMzBjYTIyZDJmOTQ3YzUxOWFjNDcxZjAy YmI2MDUwHhcNMjYwMjA5MTUwMDIyWhcNMjYwMjEwMTUwMDIyWjAzMTEwLwYDVQQD Eyg1OGRjZDVmNDM4NTRjMjliMWZjZTExNjE4YzYyMTdiNWY0NWIzYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3auL790Njql7sSsAQNLBxzJVadaP SeHCq/v9CnSHSwRsV8mHXMbWNEnk8PgxNMO6OSmqoHDEb9Gtj7eB4MoXNRg6vKJP LJ9C86DqJALWRTps/ivlTl4bCL4spwNqdNbGziF4Izz83jSyuZ5oSmyGJggsPrZc KhxLGPPlzcMZVyJTYpfnlfXhv8jm8UwiS7p6S16KvlDcnux6m0celTK6OiNASZqM 54HPxF5PojJhsUkokfgiMNDmskhQDxfqg9hsGFh3VjNYgupQKhAuzZrv9MruY+K+ MrDa84Rbi/GPdt15qCYwWHrR7AhPktPHD+1BQA6Y6zELtQjC3iNHzkD68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjc1fQ4VMKbH84RYYxiF7X0WzwuMB8GA1UdIwQY MBaAFItRX7sxswyiLS+UfFGaxHHwK7YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUt MDZhNDY1NWM2MzYyLzEvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUtMDZhNDY1NWM2MzYy LzEvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2TvbWGns JwOpzFP7/7rAmR/LZ2J8vytpNxS1m54W6o77c1CVzmRtS1PJ4NeK4gEseCNOXYja XgVBqK1QkuHo5eNG+jySGSJIXQeRiM+GgzXgfi47FdpKkTshD7aYLxv/+sX4ViE0 V7x2JgzC1kpk0RYDJgz8dDcY62Nb3Uso/nBnVnCkOxRhTe59BLGRHs1rjmXdFZzI tN8J48egTN2bd6ZisykPmth960V2nxR8mBtGxRowDrWGgfJ0mIHbTp7VfndCSVgE YNT5CbUg2ZxyLTHMULkkiYVJuFuiAYa1+aHd+S9tntB4U1yMv3tFRREv7giob9Jo dpHZutITMvOyzA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:12 2026 by rpki-client