This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json) Hash identifier: w0Pmsb1vw62xmmAFsl19Mpsp3OXzABjW86jlSP55JGs= Subject key identifier: D8:EC:1D:D3:B2:45:14:DD:A1:A3:76:64:41:78:28:8B:EB:D9:BA:1B Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Certificate serial: 019C424646FE1376DD0B3F6880DB1B61656C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft Manifest number: 1550 Signing time: Mon 09 Feb 2026 12:00:27 +0000 Manifest this update: Mon 09 Feb 2026 12:00:27 +0000 Manifest next update: Tue 10 Feb 2026 12:00:27 +0000 Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=) 2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: RAqpZd9KZEhtiS61lniyLqMT0ljLELx1mEGUrnBiOtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:46:fe:13:76:dd:0b:3f:68:80:db:1b:61:65:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Validity Not Before: Feb 9 12:00:27 2026 GMT Not After : Feb 10 12:00:27 2026 GMT Subject: CN=d8ec1dd3b24514dda1a376644178288bebd9ba1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:63:29:5f:ad:d0:6f:07:8c:b2:81:af:a3: 3d:6f:53:4e:aa:85:13:1b:93:02:a7:11:85:b1:70: 18:c9:77:ee:10:88:ca:75:2c:40:7c:8b:59:bd:26: de:e7:17:49:d7:46:78:9a:ac:c4:1c:79:5f:41:0b: 01:cc:cb:79:1a:23:d8:8b:56:df:9d:41:c8:38:91: e8:39:b2:df:fa:ae:66:3d:8a:4b:1e:61:66:0f:04: d8:0c:5d:9b:65:14:43:a1:cc:e2:ba:39:cb:41:1e: d4:85:6f:c5:a0:00:66:92:ec:6c:8b:42:37:1b:dd: 64:33:02:b8:b5:85:65:c7:8a:0b:bd:ec:6b:ab:c8: 9d:ea:65:b0:f4:9f:a2:ab:ee:2f:dc:cf:2c:11:76: d5:02:1d:a4:ee:54:9e:f7:a4:1d:46:58:a9:12:56: 74:85:a7:1a:35:96:eb:ba:b8:8e:1b:dc:d5:9c:3c: 20:f6:85:f7:c1:bb:24:cb:3f:73:35:40:3b:8d:01: fa:2c:b4:39:a4:8e:8a:5b:2f:81:f9:ca:f2:e7:0f: 85:aa:29:f5:89:69:4c:41:4f:60:fb:e4:61:e8:7f: 4f:0d:68:a8:03:aa:c1:27:b7:e7:ca:20:15:9d:c0: 12:a3:c8:14:ad:66:d1:db:a4:1c:c6:28:f6:0b:bb: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:1D:D3:B2:45:14:DD:A1:A3:76:64:41:78:28:8B:EB:D9:BA:1B X509v3 Authority Key Identifier: keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c7:5a:96:ac:c5:60:c8:92:40:eb:57:ef:5d:8b:41:83:3d: 9a:11:4b:10:f2:53:df:aa:a2:f9:e4:86:bd:b7:cc:03:92:1b: c8:ed:0f:20:c0:28:8f:44:ec:72:a0:00:b4:3a:88:10:c1:b8: 4b:4d:29:86:70:62:3d:8c:bb:b3:0b:26:f3:89:6b:42:ff:15: 5b:93:0f:e0:83:cf:9c:2a:ba:59:66:26:8c:13:2f:2f:8d:d1: 3f:20:9d:c5:dd:ee:d0:17:d0:28:c7:7d:c8:30:85:de:9b:3d: f2:92:73:6b:d1:fd:b6:d8:70:2f:42:2e:c1:8a:b5:3c:19:4f: 64:01:55:14:5f:62:73:0f:ae:da:54:64:46:7c:56:c7:89:69: a4:cc:58:9f:c3:fd:48:d8:d4:03:c7:b9:96:ab:87:64:3d:4b: 03:17:05:7b:6f:4f:f7:1f:e9:a9:b8:7c:95:ce:cd:13:cc:69: 96:cb:92:53:05:ca:12:2b:9d:d7:ca:9b:b6:f7:3d:cc:5a:1f: 24:24:d6:91:6e:86:88:dc:cf:38:9b:cb:7d:8f:c8:65:9c:46: b2:0c:6d:c3:81:df:e7:50:ff:9d:44:82:1e:0a:05:fe:65:43: 91:07:f2:b7:c9:26:92:9e:62:90:0b:be:15:ea:07:b0:39:cf: 97:5f:f5:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkb+E3bdCz9ogNsbYWVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4 YWYzNmYwHhcNMjYwMjA5MTIwMDI3WhcNMjYwMjEwMTIwMDI3WjAzMTEwLwYDVQQD EyhkOGVjMWRkM2IyNDUxNGRkYTFhMzc2NjQ0MTc4Mjg4YmViZDliYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvtjKV+t0G8HjLKBr6M9b1NOqoUT G5MCpxGFsXAYyXfuEIjKdSxAfItZvSbe5xdJ10Z4mqzEHHlfQQsBzMt5GiPYi1bf nUHIOJHoObLf+q5mPYpLHmFmDwTYDF2bZRRDocziujnLQR7UhW/FoABmkuxsi0I3 G91kMwK4tYVlx4oLvexrq8id6mWw9J+iq+4v3M8sEXbVAh2k7lSe96QdRlipElZ0 hacaNZbruriOG9zVnDwg9oX3wbskyz9zNUA7jQH6LLQ5pI6KWy+B+cry5w+Fqin1 iWlMQU9g++Rh6H9PDWioA6rBJ7fnyiAVncASo8gUrWbR26Qcxij2C7u02wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjsHdOyRRTdoaN2ZEF4KIvr2bobMB8GA1UdIwQY MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMdalqzF YMiSQOtX712LQYM9mhFLEPJT36qi+eSGvbfMA5IbyO0PIMAoj0TscqAAtDqIEMG4 S00phnBiPYy7swsm84lrQv8VW5MP4IPPnCq6WWYmjBMvL43RPyCdxd3u0BfQKMd9 yDCF3ps98pJza9H9tthwL0IuwYq1PBlPZAFVFF9icw+u2lRkRnxWx4lppMxYn8P9 SNjUA8e5lquHZD1LAxcFe29P9x/pqbh8lc7NE8xplsuSUwXKEiud18qbtvc9zFof JCTWkW6GiNzPOJvLfY/IZZxGsgxtw4Hf51D/nUSCHgoF/mVDkQfyt8kmkp5ikAu+ FeoHsDnPl1/1/w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:54 2026 by rpki-client