This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft File: Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft (raw, json) Hash identifier: YobeAJN4rUi0iH2EyXkwuONi/pAKJCL8iXWlxzb2Kbs= Subject key identifier: B4:D2:8B:67:3A:31:08:39:B1:E9:8C:62:AC:A1:C7:1A:34:58:5D:25 Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822 Certificate serial: 019C435923A69CDABC54C7FB9D4FFCFF629F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft Manifest number: F4 Signing time: Mon 09 Feb 2026 17:00:41 +0000 Manifest this update: Mon 09 Feb 2026 17:00:41 +0000 Manifest next update: Tue 10 Feb 2026 17:00:41 +0000 Files and hashes: 1: Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl (hash: MFbxYPzyoJsDKO6j0LyOiIPCFiF2sIUofn38cSK0Wyk=) 2: pxWFbsoMAQLBSDALy0IF8eFc7ac.roa (hash: sA4Q71fkUFI3QlXq81C3J6iGGkQPgi0Z5yBB1wSqgCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:23:a6:9c:da:bc:54:c7:fb:9d:4f:fc:ff:62:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce6f80d7670973d32ec4745301011217468822 Validity Not Before: Feb 9 17:00:41 2026 GMT Not After : Feb 10 17:00:41 2026 GMT Subject: CN=b4d28b673a310839b1e98c62aca1c71a34585d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:6e:92:7f:83:c6:60:86:b4:c4:85:1f:26: 90:0c:8e:4a:a1:de:d7:f7:11:dc:ef:d8:d5:af:3a: ec:ae:9e:6a:71:66:88:b2:2d:80:05:db:4a:a6:b9: 75:f7:5c:fb:c8:81:a0:17:68:9c:8b:47:05:f0:a6: ad:28:57:5c:17:0e:f1:76:d2:c8:bf:59:1f:98:f8: 97:9b:90:f7:99:c8:0e:47:56:01:9f:37:57:15:8a: c2:71:bf:51:c2:78:71:78:7b:3f:7a:a6:69:df:22: 3b:5f:6e:31:36:d0:c6:d6:60:be:0a:fc:b5:71:f5: 52:2f:55:73:3a:24:8f:77:60:66:8c:d0:4d:36:82: 25:af:95:a5:7e:d9:ce:ec:6d:9b:91:98:4d:98:d3: c0:53:71:d4:bc:61:a0:8a:61:d1:a8:c4:15:3a:eb: 06:59:a5:a8:f9:60:ef:70:59:82:e8:48:25:8d:04: 1d:cf:aa:ac:c3:f4:46:5b:54:27:4c:30:7b:ab:e9: ab:ef:bb:b9:39:d2:c9:7c:00:4b:ef:50:1c:24:03: 8a:be:be:b2:d5:3f:27:4a:18:17:30:2e:a2:c9:ef: 98:bd:35:70:9f:e6:d3:f4:fb:01:e3:41:8e:92:f0: 42:93:37:cd:5b:03:f5:49:27:3e:12:5a:bc:cf:82: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D2:8B:67:3A:31:08:39:B1:E9:8C:62:AC:A1:C7:1A:34:58:5D:25 X509v3 Authority Key Identifier: keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e3:40:d7:fb:9e:a9:23:32:3d:04:af:0f:ca:1a:8a:32:52: 3b:fe:b7:61:12:b0:6b:6c:c0:23:e3:c9:5c:00:bb:0d:bf:ae: af:af:26:a6:db:c6:8d:f6:fc:69:1b:24:d7:88:35:56:6c:7f: f3:8a:e0:4e:6c:a6:76:1c:19:69:a2:bc:94:72:05:9a:59:87: b0:c2:95:81:15:c0:6f:34:0d:e7:b3:f0:ae:36:80:b7:15:99: 95:10:83:3e:75:85:21:20:35:29:73:1e:d3:0a:99:f5:03:f0: bf:e7:59:2b:fe:fc:05:13:9b:be:73:e1:9b:30:1e:b0:90:0c: d6:c3:51:ae:8c:0d:4f:f7:89:0f:87:ae:bf:64:28:34:41:fb: 3d:82:d0:93:91:66:3f:5f:68:23:58:31:ed:09:cc:05:60:49: 63:be:32:2b:88:1b:4d:30:d7:4f:a7:a6:b3:d7:c3:4c:90:5a: 93:20:ce:89:27:f0:47:bd:95:a8:3f:2a:66:f3:93:01:0d:93: 53:cc:50:44:6b:25:1f:e9:8c:91:63:7a:f6:1a:eb:82:bc:47: 31:f3:2f:65:fb:8c:b3:47:75:de:02:61:ed:36:8d:9d:d7:d7: ba:9e:dd:e3:aa:82:15:1b:07:56:17:f5:13:9c:5a:87:33:9b: e1:ef:1b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSOmnNq8VMf7nU/8/2KfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0 Njg4MjIwHhcNMjYwMjA5MTcwMDQxWhcNMjYwMjEwMTcwMDQxWjAzMTEwLwYDVQQD EyhiNGQyOGI2NzNhMzEwODM5YjFlOThjNjJhY2ExYzcxYTM0NTg1ZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVukn+DxmCGtMSFHyaQDI5Kod7X 9xHc79jVrzrsrp5qcWaIsi2ABdtKprl191z7yIGgF2ici0cF8KatKFdcFw7xdtLI v1kfmPiXm5D3mcgOR1YBnzdXFYrCcb9RwnhxeHs/eqZp3yI7X24xNtDG1mC+Cvy1 cfVSL1VzOiSPd2BmjNBNNoIlr5WlftnO7G2bkZhNmNPAU3HUvGGgimHRqMQVOusG WaWo+WDvcFmC6EgljQQdz6qsw/RGW1QnTDB7q+mr77u5OdLJfABL71AcJAOKvr6y 1T8nShgXMC6iye+YvTVwn+bT9PsB40GOkvBCkzfNWwP1SSc+Elq8z4K5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTSi2c6MQg5semMYqyhxxo0WF0lMB8GA1UdIwQY MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt NWFhYmRlMzExZmRiLzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeNA1/ue qSMyPQSvD8oaijJSO/63YRKwa2zAI+PJXAC7Db+ur68mptvGjfb8aRsk14g1Vmx/ 84rgTmymdhwZaaK8lHIFmlmHsMKVgRXAbzQN57PwrjaAtxWZlRCDPnWFISA1KXMe 0wqZ9QPwv+dZK/78BRObvnPhmzAesJAM1sNRrowNT/eJD4euv2QoNEH7PYLQk5Fm P19oI1gx7QnMBWBJY74yK4gbTTDXT6ems9fDTJBakyDOiSfwR72VqD8qZvOTAQ2T U8xQRGslH+mMkWN69hrrgrxHMfMvZfuMs0d13gJh7TaNndfXup7d46qCFRsHVhf1 E5xahzOb4e8b2A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:51 2026 by rpki-client