This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json) Hash identifier: RrZMTb/baRkeh71Iy/mrC5HjK4iiWeo9l4MPBX3j4Gw= Subject key identifier: 89:B7:CE:6D:C6:BB:E7:3A:16:DB:BE:42:E3:46:6B:58:6A:9A:01:79 Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Certificate serial: 019C4246D61383CFB4E591B562038C0867AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft Manifest number: 151F Signing time: Mon 09 Feb 2026 12:01:04 +0000 Manifest this update: Mon 09 Feb 2026 12:01:04 +0000 Manifest next update: Tue 10 Feb 2026 12:01:04 +0000 Files and hashes: 1: WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa (hash: DSIGTtOOJTOd6v4lSY+KI5Vvun5FIwwizdppUGcnQf0=) 2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: S211IGHN3Av//D6Ky4C45Qg/EYZ1/5ff3Rlrrmy96aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:d6:13:83:cf:b4:e5:91:b5:62:03:8c:08:67:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Validity Not Before: Feb 9 12:01:04 2026 GMT Not After : Feb 10 12:01:04 2026 GMT Subject: CN=89b7ce6dc6bbe73a16dbbe42e3466b586a9a0179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:02:4b:f4:37:d2:76:4b:76:ed:44:74:4a: 24:c7:0d:10:6d:06:a4:f9:8c:60:8c:b2:aa:cf:d0: a1:ad:10:8d:f8:f9:36:9f:cf:68:19:94:94:7f:70: b1:e6:01:18:96:82:c0:85:41:bb:b9:c9:47:92:67: c9:73:2a:47:9f:80:52:aa:06:99:e5:53:02:d3:1a: 91:77:d0:5e:28:0c:11:02:9f:a9:99:d3:fc:53:e3: db:09:7c:a7:41:b5:a2:83:58:4d:72:c1:ab:eb:c2: 58:f1:6d:38:a3:08:ad:7a:e7:d2:10:55:a5:a5:f1: 5b:67:cd:cd:a0:f0:b8:4a:17:fe:5f:f6:bb:c1:6e: 4f:ed:13:be:6e:44:88:5b:97:17:06:dd:dc:03:01: 3d:40:8f:57:ea:46:9e:d5:bb:c8:1d:b5:b0:0b:6c: 61:1c:9c:c3:cb:3e:ee:fd:ea:be:15:a7:6f:3b:e0: 53:9c:4b:09:c3:2c:b8:41:73:f5:e4:05:b9:fa:cc: ab:43:0e:74:6d:a6:18:50:16:82:23:ed:97:c3:49: b6:9a:80:1b:a7:cc:25:9e:9a:95:c3:ae:2a:58:fb: 0d:86:71:61:0e:b8:55:ab:d7:97:50:d1:7a:11:eb: 50:ed:a0:1a:02:ff:c3:b0:0f:03:81:5e:eb:a6:4b: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B7:CE:6D:C6:BB:E7:3A:16:DB:BE:42:E3:46:6B:58:6A:9A:01:79 X509v3 Authority Key Identifier: keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:94:9f:4f:6e:9f:84:e1:e6:be:98:e5:73:e3:c9:50:8c:57: e6:f6:98:94:31:12:fb:16:fd:af:b4:32:13:70:0e:a8:8b:10: 68:8b:26:1a:61:b6:de:95:d0:6e:2b:61:fe:3b:f5:ab:47:df: 66:ad:76:9c:6d:d4:e4:8f:dd:75:7b:c0:87:d4:5e:e2:68:2d: 5d:fd:22:ae:55:46:c1:b1:62:a9:d5:3a:f3:65:0d:c4:c8:29: a7:c0:52:1d:7c:c3:fc:b5:39:4f:fa:02:34:ea:1e:77:1b:4a: 9b:ad:8b:f9:21:e3:4a:07:26:1e:c9:fe:5c:38:53:a6:5f:bb: f3:3f:0d:4e:1b:13:fc:22:5e:2a:a6:00:04:57:a8:d7:4e:61: e7:55:b6:ae:c2:70:32:86:e5:66:53:a9:ca:7b:96:1f:99:64: 8a:ba:d3:f3:f6:6f:dc:e9:fd:1c:b8:79:fa:ae:57:a2:f8:1a: d4:a2:76:5f:21:0d:3b:2d:00:52:ad:76:0e:ff:1a:2c:41:47: ee:6d:06:e4:bf:aa:e7:c6:fb:64:46:2b:6c:b1:5f:62:c2:5e: bd:25:fa:0a:1e:f4:58:f3:10:52:67:fc:26:da:60:1d:00:98: 80:35:d5:fe:63:05:51:c5:75:28:19:39:bd:00:32:75:02:06: e6:51:c0:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRtYTg8+05ZG1YgOMCGesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmViMmIwNTBkNTBhZDhjZTEwYzFjMmY1MDdmZGI4YTUy ZDAyOGMwHhcNMjYwMjA5MTIwMTA0WhcNMjYwMjEwMTIwMTA0WjAzMTEwLwYDVQQD Eyg4OWI3Y2U2ZGM2YmJlNzNhMTZkYmJlNDJlMzQ2NmI1ODZhOWEwMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iACS/Q30nZLdu1EdEokxw0QbQak +YxgjLKqz9ChrRCN+Pk2n89oGZSUf3Cx5gEYloLAhUG7uclHkmfJcypHn4BSqgaZ 5VMC0xqRd9BeKAwRAp+pmdP8U+PbCXynQbWig1hNcsGr68JY8W04owiteufSEFWl pfFbZ83NoPC4Shf+X/a7wW5P7RO+bkSIW5cXBt3cAwE9QI9X6kae1bvIHbWwC2xh HJzDyz7u/eq+FadvO+BTnEsJwyy4QXP15AW5+syrQw50baYYUBaCI+2Xw0m2moAb p8wlnpqVw64qWPsNhnFhDrhVq9eXUNF6EetQ7aAaAv/DsA8DgV7rpkvBkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm3zm3Gu+c6Ftu+QuNGa1hqmgF5MB8GA1UdIwQY MBaAFIj+srBQ1QrYzhDBwvUH/bilLQKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMt MmYyMWY0NTI0NjgzLzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMtMmYyMWY0NTI0Njgz LzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJSfT26f hOHmvpjlc+PJUIxX5vaYlDES+xb9r7QyE3AOqIsQaIsmGmG23pXQbith/jv1q0ff Zq12nG3U5I/ddXvAh9Re4mgtXf0irlVGwbFiqdU682UNxMgpp8BSHXzD/LU5T/oC NOoedxtKm62L+SHjSgcmHsn+XDhTpl+78z8NThsT/CJeKqYABFeo105h51W2rsJw MoblZlOpynuWH5lkirrT8/Zv3On9HLh5+q5Xovga1KJ2XyENOy0AUq12Dv8aLEFH 7m0G5L+q58b7ZEYrbLFfYsJevSX6Ch70WPMQUmf8JtpgHQCYgDXV/mMFUcV1KBk5 vQAydQIG5lHAyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:48 2026 by rpki-client