This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json) Hash identifier: VYOGtqouv7ngKtS3y+Mqqf8hakF0W2Z6MzrVH9DNA3Y= Subject key identifier: 25:28:F3:1D:0F:52:70:04:CC:48:BF:EA:40:CA:21:A1:00:0A:8D:8D Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Certificate serial: 019C432223902D2E04CD2D9FF65B4CE600A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft Manifest number: 12FC Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: NGLdXCfUIZ778alx7eqit4ISJAVZOJPoCqbTzFTy5S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:23:90:2d:2e:04:cd:2d:9f:f6:5b:4c:e6:00:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=2528f31d0f527004cc48bfea40ca21a1000a8d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:84:e0:6a:3c:5c:b8:f1:20:2f:57:a9:24: be:6e:61:2c:57:71:a5:c1:fb:7c:92:c5:f0:f0:cd: 1a:6a:d7:2d:e8:bb:08:ba:50:01:e9:cf:fc:3e:d4: 4d:ff:e4:dc:fd:b3:2e:aa:37:d6:ef:ed:c2:18:44: e9:cc:93:84:ed:ac:13:86:04:89:ae:6f:e3:f8:96: 4a:be:65:7c:8d:b7:b2:62:b6:51:4c:ec:16:a9:56: 49:a2:12:97:71:81:a2:4a:fd:1a:e6:04:b2:ed:3b: d1:36:0c:45:0a:27:97:68:0d:3a:5f:39:12:92:83: 40:7f:7f:ff:2c:0e:2e:ec:04:1f:04:e8:03:d8:6a: 4d:1c:5e:aa:16:00:d6:72:17:92:21:e2:28:0d:82: f9:67:ab:42:64:04:9d:9f:62:c4:ce:8a:68:cf:03: d6:f7:7e:90:9a:72:2f:6b:03:7d:e8:59:ec:1e:0a: c2:86:53:6e:be:80:43:9a:83:c9:7f:f8:81:c3:8a: 87:e3:91:e6:ca:b5:55:27:89:6c:e1:70:b5:56:00: e4:85:f0:a5:34:01:99:cf:96:99:ce:d9:5b:f4:c4: 1b:b5:2a:39:35:48:b2:20:fe:be:ac:84:cc:2c:ee: 92:e2:e5:f9:f4:c7:8c:cc:bb:e2:40:cf:02:8b:e0: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:28:F3:1D:0F:52:70:04:CC:48:BF:EA:40:CA:21:A1:00:0A:8D:8D X509v3 Authority Key Identifier: keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:28:8b:ee:c6:76:6f:fe:66:64:50:95:ab:5d:06:b5:d9:b9: 1f:52:02:43:a3:6d:84:6e:26:64:8d:6c:38:40:f6:96:ea:23: 92:bb:4f:82:44:b9:63:bd:cd:ae:3b:c0:76:4f:b8:3b:f5:82: fb:a1:1b:9c:f2:6f:15:fb:5c:a6:8d:47:f9:37:2f:39:78:9a: e3:02:c2:a4:d2:91:1d:6b:f8:be:c2:ba:54:6d:e8:ed:f1:1f: 06:f3:1b:7b:40:9a:43:22:21:4b:da:06:7f:78:bc:72:d4:c6: 2f:31:65:fc:b3:e8:59:22:5b:60:80:0e:39:d0:32:22:34:eb: 56:4f:5e:4b:69:fd:13:dc:2b:b2:44:f2:26:cc:e3:ea:50:d4: e9:39:b9:2c:0e:4f:fa:3f:87:ae:03:ea:99:be:b7:2b:78:52: fb:61:a7:32:e7:8f:66:c6:a3:94:99:d1:f1:bc:79:b7:86:6d: 32:8d:ab:2e:5e:17:c7:c0:8c:40:fb:13:62:e6:84:45:fa:6d: 72:5f:b0:8c:d4:ec:fb:08:50:62:8c:d5:bd:ff:28:d9:1e:04: 0d:2d:67:d4:41:49:38:65:ce:16:97:95:59:22:de:bc:7b:2e: 47:58:53:3f:b4:45:aa:a1:d1:58:15:ff:2b:c5:35:1c:bd:4f: a3:df:57:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiOQLS4EzS2f9ltM5gChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0 NGNjNmEwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD EygyNTI4ZjMxZDBmNTI3MDA0Y2M0OGJmZWE0MGNhMjFhMTAwMGE4ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMqE4Go8XLjxIC9XqSS+bmEsV3Gl wft8ksXw8M0aatct6LsIulAB6c/8PtRN/+Tc/bMuqjfW7+3CGETpzJOE7awThgSJ rm/j+JZKvmV8jbeyYrZRTOwWqVZJohKXcYGiSv0a5gSy7TvRNgxFCieXaA06XzkS koNAf3//LA4u7AQfBOgD2GpNHF6qFgDWcheSIeIoDYL5Z6tCZASdn2LEzopozwPW 936QmnIvawN96FnsHgrChlNuvoBDmoPJf/iBw4qH45HmyrVVJ4ls4XC1VgDkhfCl NAGZz5aZztlb9MQbtSo5NUiyIP6+rITMLO6S4uX59MeMzLviQM8Ci+A5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUo8x0PUnAEzEi/6kDKIaEACo2NMB8GA1UdIwQY MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxiiL7sZ2 b/5mZFCVq10Gtdm5H1ICQ6NthG4mZI1sOED2luojkrtPgkS5Y73NrjvAdk+4O/WC +6EbnPJvFftcpo1H+TcvOXia4wLCpNKRHWv4vsK6VG3o7fEfBvMbe0CaQyIhS9oG f3i8ctTGLzFl/LPoWSJbYIAOOdAyIjTrVk9eS2n9E9wrskTyJszj6lDU6Tm5LA5P +j+HrgPqmb63K3hS+2GnMuePZsajlJnR8bx5t4ZtMo2rLl4Xx8CMQPsTYuaERfpt cl+wjNTs+whQYozVvf8o2R4EDS1n1EFJOGXOFpeVWSLevHsuR1hTP7RFqqHRWBX/ K8U1HL1Po99XTA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:59 2026 by rpki-client