This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json) Hash identifier: NRU3jSLbOWWvGxqXFD63g4t4v+9p+RN7p2BuLZuQgD0= Subject key identifier: 1D:02:C7:52:76:73:4C:4D:A8:44:82:A8:D6:B9:A7:68:6F:5F:01:81 Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69 Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269 Certificate serial: 019C4358D98A309539A5EFC5EAC525FA3B9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 17:00:22 +0000 Manifest this update: Mon 09 Feb 2026 17:00:22 +0000 Manifest next update: Tue 10 Feb 2026 17:00:22 +0000 Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: ZIz2aASXoNNbMAEArgKhPjYj/5VpWIVAxuvV/NSNVBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d9:8a:30:95:39:a5:ef:c5:ea:c5:25:fa:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269 Validity Not Before: Feb 9 17:00:22 2026 GMT Not After : Feb 10 17:00:22 2026 GMT Subject: CN=1d02c75276734c4da84482a8d6b9a7686f5f0181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:b5:4f:ba:72:32:b7:ed:35:4f:1d:9c:e0: 1f:b5:e9:15:8c:8b:ae:80:22:2d:b7:bc:88:b1:dd: 41:33:41:8d:83:d7:d5:e5:d6:12:7a:93:30:d7:cc: a5:b8:5a:d1:fd:f4:c8:aa:14:17:67:f4:22:f2:3b: 0f:4d:06:2a:44:7b:2a:22:ad:b3:ad:f6:09:a2:2b: 38:58:21:b7:b4:b7:09:28:a5:24:b4:c9:eb:14:25: e5:40:35:d4:4e:92:c8:a2:fd:79:9d:78:57:b4:0a: e6:cb:65:19:c3:0a:0c:15:2d:4d:32:63:b4:0f:2a: 0f:53:e3:57:9d:20:0e:09:d5:88:f3:02:ec:c1:85: 8f:17:91:ff:d7:41:9a:fc:9b:3c:fe:d8:a7:7d:3b: ce:b1:d4:4e:0a:b5:aa:91:da:80:92:1d:e8:5f:c0: fa:56:e5:6b:2d:1d:d1:63:09:b8:c3:3b:cd:86:b7: c5:a2:0a:fb:23:1f:70:46:f2:8b:73:6d:31:9b:8d: 44:15:56:9c:50:8b:12:11:c0:63:dd:33:29:8c:23: a5:62:40:ab:1d:d0:96:77:eb:cc:0a:98:2d:af:bd: 77:cd:9b:a0:a2:15:69:2a:a7:ae:1c:f9:b6:43:a3: a9:76:b4:95:cf:23:5b:d6:92:4a:18:77:51:d1:9f: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:02:C7:52:76:73:4C:4D:A8:44:82:A8:D6:B9:A7:68:6F:5F:01:81 X509v3 Authority Key Identifier: keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1c:69:12:6c:70:32:9d:50:12:99:12:74:cf:de:f6:78:88: ff:62:da:bc:5b:4b:c5:ba:1a:3a:60:dd:8e:1b:8c:d4:de:5f: ac:86:28:18:56:97:6a:52:7c:47:19:d1:16:c8:15:16:c0:77: c1:f9:2e:a5:2e:38:20:1f:c1:98:f7:21:d1:57:ad:fd:be:c6: 8b:d1:3a:ef:00:83:1e:5d:ec:26:d7:06:6b:f9:09:b5:22:00: a6:35:96:00:d3:aa:ce:a0:6d:5d:73:0e:eb:9f:a5:d4:6f:54: 2b:a1:4d:73:81:e4:5e:f3:d2:17:4b:d6:fa:e8:c2:3b:5c:07: 3c:ed:77:53:52:fb:a4:a8:91:d2:44:e6:f1:46:af:4a:4d:73: 4a:b5:5a:18:fe:45:56:81:54:e6:33:be:7c:5a:32:74:96:bc: 2d:9b:ae:1d:1d:ef:ad:ce:8c:18:bf:2c:54:8e:f9:31:bb:3c: 7d:4b:e2:98:2d:6b:78:f4:18:0f:e0:40:32:45:12:c2:64:43: 64:de:b7:50:df:f6:17:4a:86:67:66:b9:3a:f0:b8:a0:d7:8a: 37:47:d3:fe:42:b4:c2:be:45:cf:e9:9c:bf:5b:5c:a9:98:ac: a2:6d:1c:5b:a8:a5:9e:c0:de:0f:ae:db:98:ab:01:73:b2:4b: e5:aa:cd:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNmKMJU5pe/F6sUl+jucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MjNkNzAyMjRiN2JkM2MyYTdjZTdkYzdhODdjOTJhZDVh ZmYyNjkwHhcNMjYwMjA5MTcwMDIyWhcNMjYwMjEwMTcwMDIyWjAzMTEwLwYDVQQD EygxZDAyYzc1Mjc2NzM0YzRkYTg0NDgyYThkNmI5YTc2ODZmNWYwMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KC1T7pyMrftNU8dnOAftekVjIuu gCItt7yIsd1BM0GNg9fV5dYSepMw18yluFrR/fTIqhQXZ/Qi8jsPTQYqRHsqIq2z rfYJois4WCG3tLcJKKUktMnrFCXlQDXUTpLIov15nXhXtArmy2UZwwoMFS1NMmO0 DyoPU+NXnSAOCdWI8wLswYWPF5H/10Ga/Js8/tinfTvOsdROCrWqkdqAkh3oX8D6 VuVrLR3RYwm4wzvNhrfFogr7Ix9wRvKLc20xm41EFVacUIsSEcBj3TMpjCOlYkCr HdCWd+vMCpgtr713zZugohVpKqeuHPm2Q6OpdrSVzyNb1pJKGHdR0Z80xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0Cx1J2c0xNqESCqNa5p2hvXwGBMB8GA1UdIwQY MBaAFIkj1wIkt708Knzn3HqHySrVr/JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUt Zjk4NjU1MWE3MDdkLzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUtZjk4NjU1MWE3MDdk LzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxxpEmxw Mp1QEpkSdM/e9niI/2LavFtLxboaOmDdjhuM1N5frIYoGFaXalJ8RxnRFsgVFsB3 wfkupS44IB/BmPch0Vet/b7Gi9E67wCDHl3sJtcGa/kJtSIApjWWANOqzqBtXXMO 65+l1G9UK6FNc4HkXvPSF0vW+ujCO1wHPO13U1L7pKiR0kTm8UavSk1zSrVaGP5F VoFU5jO+fFoydJa8LZuuHR3vrc6MGL8sVI75Mbs8fUvimC1rePQYD+BAMkUSwmRD ZN63UN/2F0qGZ2a5OvC4oNeKN0fT/kK0wr5Fz+mcv1tcqZisom0cW6ilnsDeD67b mKsBc7JL5arN+A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:21 2026 by rpki-client