This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: Hj6XJcRBAX1tKxOjfhzbs99Jtvzvdd8pM4iYaTvSaPU= Subject key identifier: 30:DC:C7:83:2F:28:2A:73:EC:41:AA:7E:EF:24:DB:4D:2C:F6:4F:BA Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019C41D889E2092530E55EEEEAC6E234E740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 15BB Signing time: Mon 09 Feb 2026 10:00:35 +0000 Manifest this update: Mon 09 Feb 2026 10:00:35 +0000 Manifest next update: Tue 10 Feb 2026 10:00:35 +0000 Files and hashes: 1: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: bwae7m2WVjKNzYgHVJM/Yeh9DjLL6gjm8b0htDUiP6Q=) 2: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (hash: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:89:e2:09:25:30:e5:5e:ee:ea:c6:e2:34:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Feb 9 10:00:35 2026 GMT Not After : Feb 10 10:00:35 2026 GMT Subject: CN=30dcc7832f282a73ec41aa7eef24db4d2cf64fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:e9:eb:21:56:aa:f1:4b:dd:95:d7:bf:f2: fa:2f:0b:d4:22:7d:12:0e:88:9f:8b:3d:0b:8f:19: c4:de:b0:c6:70:ff:52:95:34:a7:ee:90:bd:85:a3: 57:91:64:f0:ab:1f:22:43:72:bc:c9:08:13:d7:ce: bb:7d:19:a9:ab:b7:06:0c:de:04:b2:d2:8d:8c:62: 29:d0:19:1b:9e:72:d0:a8:22:f9:69:f6:5f:91:7e: 15:ff:78:3b:a4:c5:7e:f4:cd:4c:73:53:b7:5e:55: f3:f8:aa:09:f9:20:0f:80:9a:1a:c3:89:e2:05:19: f2:b7:63:a8:b9:36:04:45:c0:37:85:43:24:70:fc: 5d:1a:90:e3:90:9e:21:bd:4c:22:6c:ee:0b:67:f0: 02:70:53:c9:33:d1:f2:aa:be:e8:c2:f2:19:5b:db: 0c:96:7c:99:d5:c0:8e:15:fa:1e:a8:ed:ad:a6:94: b5:05:04:bd:2e:cf:fc:63:30:ec:e2:aa:8f:a8:5d: 34:b7:99:5b:9a:87:21:bc:b0:31:05:d6:d4:9c:d8: 08:c4:b1:62:bc:51:bd:bc:34:53:55:b5:ae:b4:27: 65:7e:d4:95:fd:d3:29:25:07:b5:84:87:fb:0a:6a: b1:6d:f7:96:4c:3f:48:be:96:c9:7b:c2:91:3f:db: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DC:C7:83:2F:28:2A:73:EC:41:AA:7E:EF:24:DB:4D:2C:F6:4F:BA X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:68:a5:58:63:07:24:f7:5e:6b:09:a4:f2:c0:88:18:62: 49:a6:f2:bf:9d:4d:7f:67:88:e7:a8:fe:21:5e:b1:1e:21:41: 01:82:43:28:ac:97:18:16:94:04:6a:d7:bb:44:91:b1:1b:44: e7:c6:7c:43:e8:e4:15:dc:cd:4e:17:a5:c8:f5:a9:cc:cb:77: d3:e6:a9:06:fc:f4:de:8a:27:6d:06:f5:33:b9:e4:77:cf:d4: bd:b9:5b:6b:ec:ef:0b:2c:ec:23:3e:a2:88:7e:55:9a:b4:b9: 25:78:c7:8d:43:2c:9e:c7:5b:87:e0:04:a0:52:59:61:6f:21: 9e:54:73:25:b3:98:59:55:61:bd:b8:c9:1e:38:50:04:05:37: 69:73:6d:b1:81:a3:7a:cc:b3:8c:97:1a:be:5b:80:4c:d9:90: 2f:0e:f2:25:77:b5:9e:35:6c:8e:aa:dc:67:c4:a5:5b:d5:c6: a3:46:04:37:19:0a:73:eb:81:58:c5:61:a5:64:fc:75:ac:b9: 43:1a:55:8c:3c:fe:c8:a4:fa:94:18:44:61:1c:d6:96:f2:49: 99:72:30:d3:8d:18:b8:a2:b1:3a:81:80:0a:6c:29:75:1f:f4: e0:4a:ee:8e:5b:e1:33:88:86:88:e6:27:1a:df:5e:b2:ae:8e: 32:a8:3c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IniCSUw5V7u6sbiNOdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjYwMjA5MTAwMDM1WhcNMjYwMjEwMTAwMDM1WjAzMTEwLwYDVQQD EygzMGRjYzc4MzJmMjgyYTczZWM0MWFhN2VlZjI0ZGI0ZDJjZjY0ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryHp6yFWqvFL3ZXXv/L6LwvUIn0S Doifiz0LjxnE3rDGcP9SlTSn7pC9haNXkWTwqx8iQ3K8yQgT1867fRmpq7cGDN4E stKNjGIp0BkbnnLQqCL5afZfkX4V/3g7pMV+9M1Mc1O3XlXz+KoJ+SAPgJoaw4ni BRnyt2OouTYERcA3hUMkcPxdGpDjkJ4hvUwibO4LZ/ACcFPJM9Hyqr7owvIZW9sM lnyZ1cCOFfoeqO2tppS1BQS9Ls/8YzDs4qqPqF00t5lbmochvLAxBdbUnNgIxLFi vFG9vDRTVbWutCdlftSV/dMpJQe1hIf7CmqxbfeWTD9IvpbJe8KRP9sFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDcx4MvKCpz7EGqfu8k200s9k+6MB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn9opVhj ByT3XmsJpPLAiBhiSabyv51Nf2eI56j+IV6xHiFBAYJDKKyXGBaUBGrXu0SRsRtE 58Z8Q+jkFdzNThelyPWpzMt30+apBvz03oonbQb1M7nkd8/Uvblba+zvCyzsIz6i iH5VmrS5JXjHjUMsnsdbh+AEoFJZYW8hnlRzJbOYWVVhvbjJHjhQBAU3aXNtsYGj esyzjJcavluATNmQLw7yJXe1njVsjqrcZ8SlW9XGo0YENxkKc+uBWMVhpWT8day5 QxpVjDz+yKT6lBhEYRzWlvJJmXIw040YuKKxOoGACmwpdR/04ErujlvhM4iGiOYn Gt9esq6OMqg8eA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:57 2026 by rpki-client