This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json) Hash identifier: uK/hNDDQkcXLb5BiVq97Om4uT0VZVQZHC1dyETgyKsg= Subject key identifier: 8D:96:EA:C7:3F:9C:82:FB:35:71:C4:A8:F5:4D:C7:18:FF:23:C9:AB Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b Certificate serial: 019C42B3FD6C63C3FB0154710A129A05057E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft Manifest number: 0D53 Signing time: Mon 09 Feb 2026 14:00:17 +0000 Manifest this update: Mon 09 Feb 2026 14:00:17 +0000 Manifest next update: Tue 10 Feb 2026 14:00:17 +0000 Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: Wu3dxrg7ac+owLN8kO/aEvg9R903YsVU2wuOjZVkzeo=) 2: sojMdgVzKQwkqrETNbM2QVHp_oA.roa (hash: Z2UII6RbUrfp+wZL3LL7DVhq4lhmq9mEWIUdqO9gofc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fd:6c:63:c3:fb:01:54:71:0a:12:9a:05:05:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b Validity Not Before: Feb 9 14:00:17 2026 GMT Not After : Feb 10 14:00:17 2026 GMT Subject: CN=8d96eac73f9c82fb3571c4a8f54dc718ff23c9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:26:69:67:6f:3b:8a:13:91:dd:22:de:95: 30:da:87:57:b8:ce:25:07:0d:64:2c:aa:f4:ee:16: 4c:e0:69:0e:ef:fe:8a:f7:d4:92:fa:d0:b1:50:8c: 80:3d:46:c4:d8:63:ed:45:b9:97:b5:5a:c5:d7:f2: a4:2c:36:c9:e6:79:c5:4f:46:db:33:d4:ca:24:e6: dd:7c:55:e7:a5:2d:b5:0c:20:ee:15:36:6f:14:9d: 7d:a7:c0:8e:a9:96:50:7a:fc:f3:6e:32:a0:91:c2: 75:a7:04:90:52:64:bf:b0:55:12:3e:a9:47:80:36: 05:6f:d4:b5:20:69:6c:e7:4d:e8:bd:63:26:86:c4: b4:2a:fe:a5:a6:98:12:40:87:4d:7c:19:bc:f9:8a: 77:08:d6:69:f0:69:e5:59:05:97:f9:3b:44:53:57: 99:fe:5d:ac:91:aa:0b:52:a4:36:e5:37:eb:77:c2: 7d:64:9f:44:6c:6f:21:0e:9d:93:1c:9e:ba:39:3d: af:a7:95:70:99:30:47:a1:15:b4:92:38:9c:e9:b9: ca:a6:82:85:6e:be:e7:ba:bf:e8:df:2f:ac:16:de: 98:36:8b:a5:85:89:dc:0c:a5:69:90:17:e5:46:d7: 0e:28:d7:42:ad:d3:f4:4b:dc:92:8d:a3:7e:68:b6: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:EA:C7:3F:9C:82:FB:35:71:C4:A8:F5:4D:C7:18:FF:23:C9:AB X509v3 Authority Key Identifier: keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:52:40:00:7c:59:e8:af:d8:2a:ff:a7:fc:dd:77:5d:b8:b6: d1:0b:cb:47:8d:74:4a:97:ed:0f:fe:a8:d9:ea:ce:0d:a0:fd: 81:f7:f6:19:60:f0:81:94:71:4f:8c:7d:71:3c:67:61:37:e2: 54:7e:0c:d4:b0:c0:c7:27:c8:b8:f7:32:51:c2:ad:0e:d1:a8: 3d:c8:d0:4e:d6:25:74:f0:dd:c3:2d:eb:0e:05:91:36:a1:4b: c2:8c:70:eb:8a:2e:85:13:b0:37:57:7c:b1:a7:35:92:a2:87: 86:6b:92:d2:5f:29:9b:53:a3:67:d5:47:20:37:12:a5:73:55: ad:f6:bb:29:24:e0:99:99:fe:1d:5e:37:4a:a1:fb:15:e4:c8: 29:d6:00:c5:06:ce:e1:e7:1a:7e:91:e0:73:2f:1d:32:6f:ad: 4b:45:7b:d6:eb:14:70:fa:fd:3e:9e:e6:d9:a9:3f:aa:db:7d: 30:b1:46:48:51:a2:a1:12:33:f2:18:55:0a:a2:15:75:5a:c6: 50:0b:b3:4b:50:51:5e:0e:50:76:b7:a8:6a:40:f2:6b:43:35: e7:17:6b:35:d7:88:7c:fc:37:3f:14:50:a6:fa:d8:47:40:8b: 1f:0e:57:bb:16:23:cd:2c:2c:02:f8:9c:cc:f6:88:14:bf:ae: 4c:85:c5:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/1sY8P7AVRxChKaBQV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNDIzODM5ZjIxMDcyMTYyNzY0MWFlNmI2Y2NlYWNlZThk OTA2N2IwHhcNMjYwMjA5MTQwMDE3WhcNMjYwMjEwMTQwMDE3WjAzMTEwLwYDVQQD Eyg4ZDk2ZWFjNzNmOWM4MmZiMzU3MWM0YThmNTRkYzcxOGZmMjNjOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRgmaWdvO4oTkd0i3pUw2odXuM4l Bw1kLKr07hZM4GkO7/6K99SS+tCxUIyAPUbE2GPtRbmXtVrF1/KkLDbJ5nnFT0bb M9TKJObdfFXnpS21DCDuFTZvFJ19p8COqZZQevzzbjKgkcJ1pwSQUmS/sFUSPqlH gDYFb9S1IGls503ovWMmhsS0Kv6lppgSQIdNfBm8+Yp3CNZp8GnlWQWX+TtEU1eZ /l2skaoLUqQ25Tfrd8J9ZJ9EbG8hDp2THJ66OT2vp5VwmTBHoRW0kjic6bnKpoKF br7nur/o3y+sFt6YNoulhYncDKVpkBflRtcOKNdCrdP0S9ySjaN+aLa3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2W6sc/nIL7NXHEqPVNxxj/I8mrMB8GA1UdIwQY MBaAFCJCODnyEHIWJ2Qa5rbM6s7o2QZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mOGFiNDgtMDVkMC00ZjljLThiMGYt OThjODc1YWUzNWM5LzEvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mOGFiNDgtMDVkMC00ZjljLThiMGYtOThjODc1YWUzNWM5 LzEvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVJAAHxZ 6K/YKv+n/N13Xbi20QvLR410SpftD/6o2erODaD9gff2GWDwgZRxT4x9cTxnYTfi VH4M1LDAxyfIuPcyUcKtDtGoPcjQTtYldPDdwy3rDgWRNqFLwoxw64ouhROwN1d8 sac1kqKHhmuS0l8pm1OjZ9VHIDcSpXNVrfa7KSTgmZn+HV43SqH7FeTIKdYAxQbO 4ecafpHgcy8dMm+tS0V71usUcPr9Pp7m2ak/qtt9MLFGSFGioRIz8hhVCqIVdVrG UAuzS1BRXg5QdreoakDya0M15xdrNdeIfPw3PxRQpvrYR0CLHw5XuxYjzSwsAvic zPaIFL+uTIXFlg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:10 2026 by rpki-client