This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: UrAVycfHEv7NNVKV/SnAJEmDRTtRfUlxZ5KMrPO/ejQ= Subject key identifier: 85:73:81:ED:91:1C:36:4F:D4:FC:FC:88:5C:C2:7E:2B:91:5D:9F:C0 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019C43C721972250003634F36A308AE31988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 14D8 Signing time: Mon 09 Feb 2026 19:00:49 +0000 Manifest this update: Mon 09 Feb 2026 19:00:49 +0000 Manifest next update: Tue 10 Feb 2026 19:00:49 +0000 Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: ZYrg20ahbjM6P8D5Nr69vN3gLuN19X7X1Ti3Xioqgdg=) 2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:21:97:22:50:00:36:34:f3:6a:30:8a:e3:19:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Feb 9 19:00:49 2026 GMT Not After : Feb 10 19:00:49 2026 GMT Subject: CN=857381ed911c364fd4fcfc885cc27e2b915d9fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:9b:32:d4:32:fd:d1:70:4c:8e:ca:6b:11: 8b:f4:b3:b0:02:13:bb:2d:bb:b7:9c:33:3d:fa:d2: 36:40:e5:50:85:13:85:cd:a6:7c:e8:ac:ed:59:b8: 22:d6:84:ba:01:be:3e:3e:ac:5c:9f:9b:25:e6:e3: cc:a4:08:a8:c2:ec:13:9f:e3:49:43:5c:7a:5f:a8: 58:a2:a7:c2:e1:d6:00:fe:75:d5:c7:73:15:88:78: 64:85:53:1e:31:3b:cc:9e:bf:62:cc:51:b6:8c:6e: 9c:24:32:66:bf:f6:59:ad:8f:aa:da:f2:95:91:47: dd:34:09:04:a9:53:3d:31:76:46:06:0a:07:c8:91: f4:50:9b:43:3b:64:7d:a4:43:c2:bb:76:60:3d:6b: e3:6e:24:55:c3:48:8a:76:26:43:3f:93:3a:bd:5d: 42:54:81:a5:5d:d9:24:d4:e4:56:34:fd:c4:73:d7: 05:27:b2:80:5d:5f:7e:c8:4e:81:97:6a:c6:21:87: 6d:7d:6e:b6:c3:0d:37:c5:12:09:80:16:cd:e7:98: cc:24:a1:43:0b:40:82:1e:70:49:4d:a3:22:4c:9e: bb:79:d2:67:a4:91:9f:f8:49:d3:60:bc:c8:84:33: 52:5f:12:d7:80:88:ed:91:21:2f:ab:bc:9f:d4:28: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:73:81:ED:91:1C:36:4F:D4:FC:FC:88:5C:C2:7E:2B:91:5D:9F:C0 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:84:0e:26:35:99:af:86:3e:58:27:13:db:54:59:c2:c5:2d: 82:09:e3:77:ca:31:63:1e:0a:5d:b5:1f:de:a0:ba:0b:4f:15: 13:17:31:17:7c:28:01:00:aa:8b:94:2e:60:3b:b5:a5:60:2b: 29:8a:01:18:c3:b0:54:74:d9:01:c6:ae:7c:f1:dc:d2:8f:fc: 04:5f:34:94:a9:f8:20:72:cf:0e:ca:d6:07:39:14:95:3e:64: b8:07:73:94:76:9c:26:52:16:be:6f:ad:e9:27:77:8e:92:09: 6e:75:79:40:21:5b:b9:dd:d7:7a:2e:d2:2e:01:b8:0b:58:47: bb:a5:f9:8a:12:3c:4d:0d:a1:81:23:47:d6:74:41:b4:9f:d0: 41:37:e9:8d:5e:8c:ba:f8:10:0d:83:05:44:77:d1:34:cd:d2: 6b:39:94:d4:8f:82:11:99:68:f3:6b:d5:27:8c:12:cf:c6:0f: fd:61:56:87:32:21:17:84:5c:c2:a8:18:09:89:39:1f:fa:a8: 98:98:6e:ba:20:5e:3c:6d:e4:08:59:a0:58:b4:be:0f:75:55: cb:65:af:cd:98:eb:84:3b:50:8e:3d:8c:29:f5:29:28:92:81: 94:51:1f:46:26:27:33:d4:6c:8f:e0:cb:4f:6b:5b:49:54:ed: a3:f8:0e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyGXIlAANjTzajCK4xmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjYwMjA5MTkwMDQ5WhcNMjYwMjEwMTkwMDQ5WjAzMTEwLwYDVQQD Eyg4NTczODFlZDkxMWMzNjRmZDRmY2ZjODg1Y2MyN2UyYjkxNWQ5ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ibMtQy/dFwTI7KaxGL9LOwAhO7 Lbu3nDM9+tI2QOVQhROFzaZ86KztWbgi1oS6Ab4+Pqxcn5sl5uPMpAiowuwTn+NJ Q1x6X6hYoqfC4dYA/nXVx3MViHhkhVMeMTvMnr9izFG2jG6cJDJmv/ZZrY+q2vKV kUfdNAkEqVM9MXZGBgoHyJH0UJtDO2R9pEPCu3ZgPWvjbiRVw0iKdiZDP5M6vV1C VIGlXdkk1ORWNP3Ec9cFJ7KAXV9+yE6Bl2rGIYdtfW62ww03xRIJgBbN55jMJKFD C0CCHnBJTaMiTJ67edJnpJGf+EnTYLzIhDNSXxLXgIjtkSEvq7yf1ChWUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVzge2RHDZP1Pz8iFzCfiuRXZ/AMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4QOJjWZ r4Y+WCcT21RZwsUtggnjd8oxYx4KXbUf3qC6C08VExcxF3woAQCqi5QuYDu1pWAr KYoBGMOwVHTZAcaufPHc0o/8BF80lKn4IHLPDsrWBzkUlT5kuAdzlHacJlIWvm+t 6Sd3jpIJbnV5QCFbud3Xei7SLgG4C1hHu6X5ihI8TQ2hgSNH1nRBtJ/QQTfpjV6M uvgQDYMFRHfRNM3SazmU1I+CEZlo82vVJ4wSz8YP/WFWhzIhF4RcwqgYCYk5H/qo mJhuuiBePG3kCFmgWLS+D3VVy2WvzZjrhDtQjj2MKfUpKJKBlFEfRiYnM9Rsj+DL T2tbSVTto/gOZQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:29 2026 by rpki-client