This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json) Hash identifier: xamCldJcKGYbPnEmDG5+0do0HTItAyzZAhzBuRUShNw= Subject key identifier: 3C:A6:18:71:F0:8D:58:91:BF:24:C9:2A:0A:2F:74:87:FB:52:36:75 Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Certificate serial: 019C42467D98EBA1224A2C41E719AD7844AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft Manifest number: 02B0 Signing time: Mon 09 Feb 2026 12:00:41 +0000 Manifest this update: Mon 09 Feb 2026 12:00:41 +0000 Manifest next update: Tue 10 Feb 2026 12:00:41 +0000 Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: B9a5bD0IH+0WfJ2IVg3+cNMGs026I8ab3l9ykKSNYfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:7d:98:eb:a1:22:4a:2c:41:e7:19:ad:78:44:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Validity Not Before: Feb 9 12:00:41 2026 GMT Not After : Feb 10 12:00:41 2026 GMT Subject: CN=3ca61871f08d5891bf24c92a0a2f7487fb523675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:de:0e:e6:e6:cd:54:79:ee:83:a8:f0:c7: 09:d9:b9:e3:a7:78:48:64:52:c8:3e:14:6e:e5:a0: 8b:4d:da:6f:ab:a7:ac:4b:b9:8f:34:98:4d:49:69: bd:1c:86:db:22:51:b3:37:ff:e3:a7:33:71:c5:df: 9e:42:0f:a7:ce:c9:f0:a1:70:33:95:fd:6f:51:17: 06:ce:52:53:cd:81:40:5b:07:3e:fa:5d:be:85:d1: ac:97:41:46:56:62:0e:21:ee:ea:37:c4:63:57:2b: 1f:ed:d6:b9:e2:52:13:04:9f:3a:95:86:90:79:61: e1:33:7b:87:0a:2b:f4:6f:34:8c:b6:e4:e4:d9:a6: 76:9f:7f:54:e7:a0:86:f7:de:0c:51:69:60:ea:ac: bf:73:ee:a5:f2:51:1e:2e:31:db:22:0e:f9:3d:92: 98:7e:62:06:e9:d7:42:e8:8d:dc:6e:4e:0c:b0:b9: ed:8c:41:b4:33:07:18:9a:4f:6b:5e:99:4a:5b:a8: 29:61:5f:f3:e6:8f:8c:d9:62:11:fd:60:ac:53:d4: 6a:97:a0:84:68:a8:0c:63:37:13:c4:e2:16:b3:63: 43:e1:a9:fa:26:4a:60:bb:5c:f0:e0:d8:13:70:61: 1a:28:95:e9:41:19:86:a4:bc:90:c4:a1:3e:78:ef: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A6:18:71:F0:8D:58:91:BF:24:C9:2A:0A:2F:74:87:FB:52:36:75 X509v3 Authority Key Identifier: keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4e:5a:ec:6a:a2:fe:6f:17:8d:7d:a6:04:71:be:e3:41:ea: 96:fc:71:6d:12:d1:c4:af:72:ed:ff:99:85:1f:14:11:2f:4e: 77:35:3e:4b:dc:b6:b2:8e:5a:08:59:51:86:bd:73:aa:b5:41: cb:28:af:c6:cc:5f:8d:95:2f:99:22:3a:0d:8d:ee:2b:2f:1c: 4f:a1:d7:e0:18:a0:12:8d:9a:a2:28:5f:49:f4:2f:e0:b9:f3: ce:7c:d6:24:d7:b6:03:4b:18:36:ac:bd:58:76:6c:a0:e3:fc: 09:c4:53:29:13:f1:32:74:68:dd:92:46:aa:36:65:b8:9d:16: 6f:4d:50:d5:e9:6f:11:9e:88:e3:4a:08:04:6c:c3:43:c9:4e: 0e:e8:9d:ff:97:e4:75:69:75:99:54:ea:e1:a4:3b:d6:73:9b: 14:92:a4:42:a0:be:72:92:7a:51:9e:93:49:5b:3c:eb:c8:a5: 1d:af:73:de:e9:99:6f:cb:40:ae:46:58:de:65:91:18:0d:96: e2:c6:04:9e:30:fb:58:b8:4a:98:b1:2c:e2:d7:55:8e:61:1f: 72:10:6e:af:6d:42:eb:ad:1b:3e:83:96:ed:0e:32:48:42:d8: 15:cf:10:b5:37:f5:db:b8:d9:f1:62:b2:f1:07:c9:ca:25:a4: 3d:93:fb:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRn2Y66EiSixB5xmteESvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDBiY2RlOTU5YjIwMzI2MjM0OTFiZjMyNzlhZDQ1YTlj YTBiZTgwHhcNMjYwMjA5MTIwMDQxWhcNMjYwMjEwMTIwMDQxWjAzMTEwLwYDVQQD EygzY2E2MTg3MWYwOGQ1ODkxYmYyNGM5MmEwYTJmNzQ4N2ZiNTIzNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wDeDubmzVR57oOo8McJ2bnjp3hI ZFLIPhRu5aCLTdpvq6esS7mPNJhNSWm9HIbbIlGzN//jpzNxxd+eQg+nzsnwoXAz lf1vURcGzlJTzYFAWwc++l2+hdGsl0FGVmIOIe7qN8RjVysf7da54lITBJ86lYaQ eWHhM3uHCiv0bzSMtuTk2aZ2n39U56CG994MUWlg6qy/c+6l8lEeLjHbIg75PZKY fmIG6ddC6I3cbk4MsLntjEG0MwcYmk9rXplKW6gpYV/z5o+M2WIR/WCsU9Rql6CE aKgMYzcTxOIWs2ND4an6Jkpgu1zw4NgTcGEaKJXpQRmGpLyQxKE+eO8nkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDymGHHwjViRvyTJKgovdIf7UjZ1MB8GA1UdIwQY MBaAFIrQvN6VmyAyYjSRvzJ5rUWpygvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzct MmQzMjQyNmUxNDFkLzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzctMmQzMjQyNmUxNDFk LzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPE5a7Gqi /m8XjX2mBHG+40HqlvxxbRLRxK9y7f+ZhR8UES9OdzU+S9y2so5aCFlRhr1zqrVB yyivxsxfjZUvmSI6DY3uKy8cT6HX4BigEo2aoihfSfQv4LnzznzWJNe2A0sYNqy9 WHZsoOP8CcRTKRPxMnRo3ZJGqjZluJ0Wb01Q1elvEZ6I40oIBGzDQ8lODuid/5fk dWl1mVTq4aQ71nObFJKkQqC+cpJ6UZ6TSVs868ilHa9z3umZb8tArkZY3mWRGA2W 4sYEnjD7WLhKmLEs4tdVjmEfchBur21C660bPoOW7Q4ySELYFc8QtTf127jZ8WKy 8QfJyiWkPZP7uw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:40 2026 by rpki-client