This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json) Hash identifier: uk8QisVd1cNolYHl/3TxN02oYWLennIxo+m67YSD9dI= Subject key identifier: A1:69:CE:39:74:51:C7:B3:B7:62:52:B4:98:C2:C4:BE:F1:BA:1D:8F Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c Certificate serial: 019C4321D7DF61D0FC510B2937F9E0A083B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft Manifest number: 01AC Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=) 2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: fbNTGv4V3fVVQwYB7b+F2PkA7grrmoiKgYHYvMB64sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d7:df:61:d0:fc:51:0b:29:37:f9:e0:a0:83:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=a169ce397451c7b3b76252b498c2c4bef1ba1d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:38:54:31:2c:a2:64:91:8a:e5:79:17:a2: 73:cf:60:d2:af:1e:60:4f:27:c4:d4:35:3b:6a:ae: 0f:5b:16:18:6b:4b:28:09:4f:d1:4a:e9:11:54:8c: e8:c3:16:45:8d:90:2e:2b:64:6f:33:73:16:a8:6e: 24:30:b7:89:d2:a5:87:e2:c4:74:04:d7:db:4f:3d: 39:79:b8:55:d1:9b:2e:38:64:41:9d:09:6b:de:c5: 7f:dc:92:73:a6:f6:7b:72:23:f0:aa:a7:f5:d7:a3: 77:d1:78:e8:a4:e5:f3:62:f4:78:3d:91:33:d4:31: 16:f5:e7:c1:1d:30:de:e4:43:d6:04:13:cb:db:d9: 8f:b9:c2:2f:4a:79:90:b6:5b:16:68:bb:85:be:c8: da:d8:79:38:d1:a6:ce:03:ff:f4:20:6c:36:0d:be: b8:68:39:25:73:6f:47:a0:6d:ea:ab:86:7e:dc:9d: c3:5e:d5:16:e5:f0:b3:46:26:db:46:f2:96:35:e8: 41:47:77:d4:e0:59:93:06:1a:36:a4:22:05:de:9e: b5:a6:73:88:2a:39:eb:dc:d1:c9:7f:a3:bd:37:83: 20:6b:2d:a5:6c:fd:71:8a:7a:31:06:f9:10:8a:00: eb:b2:4f:67:75:c8:25:77:16:4a:42:6b:f8:59:7a: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:CE:39:74:51:C7:B3:B7:62:52:B4:98:C2:C4:BE:F1:BA:1D:8F X509v3 Authority Key Identifier: keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:fc:15:d5:9a:37:e6:25:ae:cb:88:9e:b2:e4:96:aa:1d:2f: f4:d0:01:f0:fe:bc:2f:5d:4a:26:0f:aa:bb:6b:ae:39:da:43: cb:81:e3:44:be:fd:1a:72:6d:05:ce:13:ef:80:86:28:96:03: 34:d2:4c:cc:b8:76:a3:63:ee:25:d1:1c:e5:6e:43:a6:05:54: 06:8c:bc:84:69:47:bb:98:85:da:ae:49:68:47:01:32:f8:9a: 07:84:b8:67:09:a4:ab:a8:cc:ea:7c:ef:24:28:de:f1:a9:1f: 94:e7:b3:02:44:bd:9e:34:69:d2:1f:77:35:06:c8:31:01:79: 3f:7b:0a:51:d8:73:33:f4:10:a2:9d:f4:1a:cd:8b:98:db:d5: 81:5e:ea:d6:49:26:63:c9:c3:1f:a4:ad:71:25:f8:d4:55:b6: 24:6c:1a:2f:27:18:38:79:24:19:16:77:95:dd:c6:3e:dc:8b: 35:95:a3:97:c8:1a:f4:25:91:24:0c:53:fd:66:52:86:4c:20: 06:4f:3c:04:d9:82:d3:78:f8:fb:4b:b1:99:18:89:b5:18:67: 44:ca:43:72:dd:bc:43:90:be:9a:c3:ce:31:8c:52:99:ba:a5: 51:3f:32:92:0b:c4:66:7e:e9:c0:d9:f1:8c:26:6b:a8:a8:29: 60:34:dc:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdffYdD8UQspN/ngoIO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTUyZGQ4Njk1ZDQ4M2Q0N2NlNGNmODQ1YjkwNmIxNzUy NzZhNWMwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EyhhMTY5Y2UzOTc0NTFjN2IzYjc2MjUyYjQ5OGMyYzRiZWYxYmExZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyss4VDEsomSRiuV5F6Jzz2DSrx5g TyfE1DU7aq4PWxYYa0soCU/RSukRVIzowxZFjZAuK2RvM3MWqG4kMLeJ0qWH4sR0 BNfbTz05ebhV0ZsuOGRBnQlr3sV/3JJzpvZ7ciPwqqf116N30XjopOXzYvR4PZEz 1DEW9efBHTDe5EPWBBPL29mPucIvSnmQtlsWaLuFvsja2Hk40abOA//0IGw2Db64 aDklc29HoG3qq4Z+3J3DXtUW5fCzRibbRvKWNehBR3fU4FmTBho2pCIF3p61pnOI Kjnr3NHJf6O9N4Mgay2lbP1xinoxBvkQigDrsk9ndcgldxZKQmv4WXrB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFpzjl0Ucezt2JStJjCxL7xuh2PMB8GA1UdIwQY MBaAFIpVLdhpXUg9R85M+EW5BrF1J2pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAt MjliM2YwMjcyYjlmLzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAtMjliM2YwMjcyYjlm LzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvwV1Zo3 5iWuy4iesuSWqh0v9NAB8P68L11KJg+qu2uuOdpDy4HjRL79GnJtBc4T74CGKJYD NNJMzLh2o2PuJdEc5W5DpgVUBoy8hGlHu5iF2q5JaEcBMviaB4S4Zwmkq6jM6nzv JCje8akflOezAkS9njRp0h93NQbIMQF5P3sKUdhzM/QQop30Gs2LmNvVgV7q1kkm Y8nDH6StcSX41FW2JGwaLycYOHkkGRZ3ld3GPtyLNZWjl8ga9CWRJAxT/WZShkwg Bk88BNmC03j4+0uxmRiJtRhnRMpDct28Q5C+msPOMYxSmbqlUT8ykgvEZn7pwNnx jCZrqKgpYDTc+A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:08 2026 by rpki-client