This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json) Hash identifier: 0Pg4y2sAsMjnVj1lZGEzIu9fXvL8JLx2BKpouQij9hw= Subject key identifier: 60:8C:50:DC:AF:32:79:7B:7A:49:BB:E2:2F:48:0C:E2:DF:E7:DC:8B Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Certificate serial: 019C43FE5930ADEF0BFF31DE05A2F463430F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft Manifest number: 0337 Signing time: Mon 09 Feb 2026 20:01:08 +0000 Manifest this update: Mon 09 Feb 2026 20:01:08 +0000 Manifest next update: Tue 10 Feb 2026 20:01:08 +0000 Files and hashes: 1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=) 2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: VOhIbK40uzqGGnZdQQ5MSIbouJt8P//jGk23Q5DfKgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:59:30:ad:ef:0b:ff:31:de:05:a2:f4:63:43:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Validity Not Before: Feb 9 20:01:08 2026 GMT Not After : Feb 10 20:01:08 2026 GMT Subject: CN=608c50dcaf32797b7a49bbe22f480ce2dfe7dc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:0c:7c:72:c8:ae:3b:5a:5c:72:08:f3:4f: 33:00:cb:d0:83:d7:32:dc:c5:05:b6:68:82:7b:0a: 7d:3e:90:ee:df:7d:f8:50:2c:24:7e:d3:46:03:aa: 6c:65:00:40:2e:39:2a:b6:fe:5d:b2:15:cd:27:f5: e3:b8:9e:ee:ca:3a:72:84:1c:57:89:ee:93:7e:99: 7a:f9:b0:da:6b:7d:ec:06:6c:08:54:21:9e:a1:f2: e6:49:cd:5d:08:55:5f:24:79:a1:e1:4e:38:96:0e: b8:55:b0:c7:c9:6a:33:66:29:db:f1:d5:13:47:91: 72:1b:f8:e3:b0:75:aa:76:7c:02:a4:fd:cd:11:ba: 30:6a:2e:f3:89:02:4a:43:b1:89:9e:7f:9f:6d:57: 09:6c:87:d6:14:f9:5d:97:db:2e:b5:e4:70:9e:5c: d9:a4:32:a2:e7:57:c5:d3:db:d3:b8:ed:b4:aa:51: 38:98:99:8c:4b:04:ac:e6:3d:a4:cd:66:0e:49:48: 3e:ab:d1:a1:44:dc:82:92:49:dc:83:e4:96:7f:5a: a3:e3:9e:05:26:64:04:a5:85:a1:af:d3:d0:b8:2f: 9c:11:1f:01:fc:63:73:28:80:4d:25:8b:f1:7e:c4: 7a:cb:2f:86:e4:b7:99:50:39:18:28:20:ef:74:c9: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:50:DC:AF:32:79:7B:7A:49:BB:E2:2F:48:0C:E2:DF:E7:DC:8B X509v3 Authority Key Identifier: keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:58:8f:f7:f2:a3:9f:02:34:6e:a7:15:80:57:ee:0d:16:0a: 10:1a:05:88:b8:9a:eb:36:78:d8:8a:a0:2a:52:22:c3:ec:2c: 1b:95:6b:32:2e:2d:21:2e:52:b5:5f:5c:ab:84:c3:06:04:25: d0:59:b9:ae:fa:cd:23:60:72:54:a8:37:9f:ee:05:07:44:f1: 2a:ed:f7:44:19:3e:29:fb:83:6f:9c:fc:9b:4b:ba:87:a2:23: e1:52:99:1a:12:39:32:a4:a2:e9:5f:ba:97:0f:d8:e7:03:b1: 4a:27:1d:34:68:8a:de:5d:ad:5b:96:87:f8:9f:9e:0c:a2:2d: 5d:4b:dd:3a:75:51:e2:8e:4e:50:fe:c7:58:15:1e:67:17:2c: fc:4f:a0:e8:41:36:57:b9:6c:1c:d4:be:34:50:76:a3:37:3e: a5:ae:dc:3b:98:05:58:27:56:a0:bd:b9:be:20:da:28:dc:d0: 91:0a:17:30:06:c8:9b:d9:4a:cf:23:16:67:87:75:9a:58:ed: 2e:e6:5b:9c:3a:48:b4:dc:00:8b:db:79:35:41:d8:bc:f7:12: be:bf:c1:12:a1:35:a0:5a:12:25:af:59:39:47:84:ad:66:7f: 15:f3:2c:c3:2a:41:bf:b5:89:17:8f:43:1c:0f:c8:54:e6:cf: b5:74:84:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lkwre8L/zHeBaL0Y0MPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm ZjVlMDcwHhcNMjYwMjA5MjAwMTA4WhcNMjYwMjEwMjAwMTA4WjAzMTEwLwYDVQQD Eyg2MDhjNTBkY2FmMzI3OTdiN2E0OWJiZTIyZjQ4MGNlMmRmZTdkYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIcMfHLIrjtaXHII808zAMvQg9cy 3MUFtmiCewp9PpDu3334UCwkftNGA6psZQBALjkqtv5dshXNJ/XjuJ7uyjpyhBxX ie6Tfpl6+bDaa33sBmwIVCGeofLmSc1dCFVfJHmh4U44lg64VbDHyWozZinb8dUT R5FyG/jjsHWqdnwCpP3NEbowai7ziQJKQ7GJnn+fbVcJbIfWFPldl9suteRwnlzZ pDKi51fF09vTuO20qlE4mJmMSwSs5j2kzWYOSUg+q9GhRNyCkkncg+SWf1qj454F JmQEpYWhr9PQuC+cER8B/GNzKIBNJYvxfsR6yy+G5LeZUDkYKCDvdMmuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCMUNyvMnl7ekm74i9IDOLf59yLMB8GA1UdIwQY MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlViP9/Kj nwI0bqcVgFfuDRYKEBoFiLia6zZ42IqgKlIiw+wsG5VrMi4tIS5StV9cq4TDBgQl 0Fm5rvrNI2ByVKg3n+4FB0TxKu33RBk+KfuDb5z8m0u6h6Ij4VKZGhI5MqSi6V+6 lw/Y5wOxSicdNGiK3l2tW5aH+J+eDKItXUvdOnVR4o5OUP7HWBUeZxcs/E+g6EE2 V7lsHNS+NFB2ozc+pa7cO5gFWCdWoL25viDaKNzQkQoXMAbIm9lKzyMWZ4d1mljt LuZbnDpItNwAi9t5NUHYvPcSvr/BEqE1oFoSJa9ZOUeErWZ/FfMswypBv7WJF49D HA/IVObPtXSEUg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:51 2026 by rpki-client