This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json) Hash identifier: ERuTIAA0iIlNOM4ApCWbCB+oW45+JV0nbc5Mg8yHlAc= Subject key identifier: BD:B5:8F:99:6A:27:C4:80:33:50:BA:B4:E7:1A:E3:D4:96:DF:C3:43 Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61 Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61 Certificate serial: 019C427D8D0C9186125A07496272E1F21C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:00:50 +0000 Manifest this update: Mon 09 Feb 2026 13:00:50 +0000 Manifest next update: Tue 10 Feb 2026 13:00:50 +0000 Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: 9kcyJ3/BmhwVRtr+FAMZ8SWGAR0jH5GSHIMv5fw/Tic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8d:0c:91:86:12:5a:07:49:62:72:e1:f2:1c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61 Validity Not Before: Feb 9 13:00:50 2026 GMT Not After : Feb 10 13:00:50 2026 GMT Subject: CN=bdb58f996a27c4803350bab4e71ae3d496dfc343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:d5:75:a9:b9:cd:82:cb:7c:c1:92:a5:38: c2:6a:cc:73:20:9c:3a:a8:9e:e8:79:d7:d6:af:25: bd:b7:1c:4f:94:86:a4:bb:12:b2:89:3b:8b:7d:5b: e8:e9:1d:aa:58:b2:14:46:52:6c:8b:24:42:0d:57: a7:d9:10:d6:72:35:f9:21:6b:d4:f8:d3:2b:f4:c3: 6a:a2:b5:c2:0a:fd:98:11:a2:d4:87:03:67:3b:8d: db:8a:48:7d:c7:14:60:6e:9e:a1:6c:f6:59:b3:05: 23:4c:58:d4:74:4c:b2:21:3c:19:47:9e:12:3a:87: 92:46:bb:b9:ea:a5:80:58:3f:15:3e:f5:a9:0a:d4: ca:d8:17:52:98:03:47:38:36:a8:8e:78:20:ee:b4: 53:5e:9b:f2:5c:5a:9a:51:52:30:f9:7f:15:13:26: 0e:75:a4:04:08:82:e4:0f:61:76:56:17:3c:a8:c2: ff:96:03:51:38:38:a8:f6:d9:66:90:99:cb:35:e0: 13:ec:12:f1:32:3b:26:33:5d:32:de:a4:d3:c5:c3: 54:c3:ae:5d:43:f5:a0:b8:16:8f:86:98:e7:e7:28: 13:32:cd:17:23:f1:57:8b:e7:3b:9a:99:23:04:34: 5f:79:c0:07:84:70:7d:80:af:a2:d6:73:06:d7:a5: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:8F:99:6A:27:C4:80:33:50:BA:B4:E7:1A:E3:D4:96:DF:C3:43 X509v3 Authority Key Identifier: keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ec:b3:c0:02:d7:2b:a9:96:4f:6d:1b:52:d8:23:68:d6:3e: 18:e8:12:98:df:ab:bf:ff:da:38:e0:82:87:65:8a:4e:0f:5c: 5b:e2:5f:b6:23:7a:c3:b5:54:91:80:9e:a4:cb:9c:b1:9e:a7: ad:c5:fe:db:f6:8b:36:39:a6:45:a2:6d:84:2b:32:2e:a2:ce: c5:c7:38:99:3a:aa:ed:d1:48:3a:95:df:15:49:00:4e:b8:c0: 84:04:ec:f2:56:42:72:60:67:08:80:62:a9:64:61:20:a5:fb: 4e:df:4b:8f:af:c1:a6:f8:db:74:7c:46:38:6b:fd:aa:88:eb: 18:15:c1:13:bf:bc:4c:8d:2f:ee:26:bd:d1:2b:a6:52:c9:7b: b0:b0:a5:0d:02:01:ed:99:fe:34:f5:17:c1:6a:ed:0d:75:0b: 0d:08:e2:39:36:6a:e2:f0:df:c9:70:89:b3:3f:ef:99:c1:ea: 88:41:d5:c9:ef:b9:cd:0d:df:15:89:ef:90:ec:a3:9a:73:25: 6a:a7:f4:56:1c:d0:f3:af:d2:8e:5c:fe:61:06:47:4d:39:02: a7:07:fd:5a:75:79:ff:73:64:04:a9:82:6f:ac:64:86:28:0b: 41:a0:49:d1:d3:e8:56:3a:aa:bd:1b:fd:f1:5c:03:25:91:86: 55:22:65:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfY0MkYYSWgdJYnLh8hxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjE4NThjZDM3ZmIzOGIyYWNmYTVjYjRlZjQzZTNjMzA4 ZDNkNjEwHhcNMjYwMjA5MTMwMDUwWhcNMjYwMjEwMTMwMDUwWjAzMTEwLwYDVQQD EyhiZGI1OGY5OTZhMjdjNDgwMzM1MGJhYjRlNzFhZTNkNDk2ZGZjMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC3Vdam5zYLLfMGSpTjCasxzIJw6 qJ7oedfWryW9txxPlIakuxKyiTuLfVvo6R2qWLIURlJsiyRCDVen2RDWcjX5IWvU +NMr9MNqorXCCv2YEaLUhwNnO43bikh9xxRgbp6hbPZZswUjTFjUdEyyITwZR54S OoeSRru56qWAWD8VPvWpCtTK2BdSmANHODaojngg7rRTXpvyXFqaUVIw+X8VEyYO daQECILkD2F2Vhc8qML/lgNRODio9tlmkJnLNeAT7BLxMjsmM10y3qTTxcNUw65d Q/WguBaPhpjn5ygTMs0XI/FXi+c7mpkjBDRfecAHhHB9gK+i1nMG16VQQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL21j5lqJ8SAM1C6tOca49SW38NDMB8GA1UdIwQY MBaAFInxhYzTf7OLKs+ly070PjwwjT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMt M2ZlNGY3Y2JhZGFiLzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMtM2ZlNGY3Y2JhZGFi LzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+yzwALX K6mWT20bUtgjaNY+GOgSmN+rv//aOOCCh2WKTg9cW+JftiN6w7VUkYCepMucsZ6n rcX+2/aLNjmmRaJthCsyLqLOxcc4mTqq7dFIOpXfFUkATrjAhATs8lZCcmBnCIBi qWRhIKX7Tt9Lj6/BpvjbdHxGOGv9qojrGBXBE7+8TI0v7ia90SumUsl7sLClDQIB 7Zn+NPUXwWrtDXULDQjiOTZq4vDfyXCJsz/vmcHqiEHVye+5zQ3fFYnvkOyjmnMl aqf0VhzQ86/Sjlz+YQZHTTkCpwf9WnV5/3NkBKmCb6xkhigLQaBJ0dPoVjqqvRv9 8VwDJZGGVSJlHA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:53 2026 by rpki-client