This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json) Hash identifier: NQbe6Uy/tg0uKUocKiotwy8J0F2ACBmlQC+VXwC0Fw8= Subject key identifier: DD:A8:8E:85:C2:15:D8:F8:34:8B:AB:0E:86:3F:F4:CF:53:73:29:FA Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d Certificate serial: 019C427D3C551A6ACDEECEFD89B8C35865D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft Manifest number: 0451 Signing time: Mon 09 Feb 2026 13:00:29 +0000 Manifest this update: Mon 09 Feb 2026 13:00:29 +0000 Manifest next update: Tue 10 Feb 2026 13:00:29 +0000 Files and hashes: 1: 3xmlsxTNDAPRt4_0q9JN37-J_fo.roa (hash: hrh+PtmNTziEnO3zB1N3sBXi6xmDSdZWbvKSyvj1sho=) 2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: c0RcZCHIdzv0YLEvfb4lSQZmFHXKwAXZNdx0WW5F6ok=) 3: pmOgP6lJVCEt59Qkk4t1jrCJur0.roa (hash: jMdmf86ejjzlc+CFJdZFf5qZkdpQs78Wj3mu5HwUV0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:3c:55:1a:6a:cd:ee:ce:fd:89:b8:c3:58:65:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d Validity Not Before: Feb 9 13:00:29 2026 GMT Not After : Feb 10 13:00:29 2026 GMT Subject: CN=dda88e85c215d8f8348bab0e863ff4cf537329fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:b7:1c:65:f3:e7:58:5a:b4:e5:b1:b8:fd: 59:6f:00:b8:6e:c1:4c:f8:93:a1:09:4d:32:49:00: e4:dd:49:d9:4f:d4:1d:97:a1:64:c6:fd:2a:42:48: 7d:b8:ec:7f:ae:75:44:af:ed:50:24:4e:cb:8e:05: 74:73:ca:c2:6f:db:33:4e:07:c2:dd:0c:aa:5a:c8: 93:64:7e:14:82:b9:a7:a6:3f:59:f1:9d:4d:5b:44: b4:9c:d3:ef:8b:f4:29:56:fc:1a:7a:28:07:7d:e2: f6:e8:79:74:3b:cb:27:13:c2:d7:66:10:65:5b:8c: 3e:88:a4:e8:78:ca:93:f1:7a:c0:24:ee:ba:c7:92: 14:95:6a:9c:7d:65:4e:0c:f5:d3:82:ad:37:c7:34: c5:1c:b0:14:64:42:c1:18:8a:f1:dd:29:cc:35:85: c9:4e:20:82:d3:6c:27:82:79:76:8b:b9:ca:de:c2: 83:4f:16:b9:2b:a3:aa:e8:96:50:ef:c3:f3:e3:a2: 40:d5:0a:ab:3b:8c:f2:af:b3:45:74:8d:db:57:fe: 70:15:d8:78:4e:0b:8b:17:2b:39:aa:ac:26:29:76: 39:a1:a0:90:1f:5d:6e:68:7f:ff:a4:82:cd:8d:04: 1b:43:40:eb:96:02:17:fe:03:d7:be:9c:18:14:04: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:8E:85:C2:15:D8:F8:34:8B:AB:0E:86:3F:F4:CF:53:73:29:FA X509v3 Authority Key Identifier: keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cd:b3:75:98:f6:bf:27:24:54:e9:6b:0e:67:2b:a2:3e:dd: 11:9e:4a:f4:d0:88:4e:2a:57:be:5b:cf:76:36:ba:7b:b7:35: e5:46:a2:38:fb:bb:95:dc:45:25:b3:13:32:da:67:ff:34:f8: 62:73:28:86:e4:86:db:48:d4:45:33:23:df:1b:3d:58:ed:73: 97:8e:53:7f:39:85:02:21:e6:5b:2b:c3:52:4b:42:0a:e8:07: d5:e8:e9:7b:53:19:df:6a:58:f1:a8:81:bf:1b:57:5a:df:db: 2c:32:fc:12:a5:ff:2f:c9:a9:65:59:31:e1:56:07:c6:f1:05: 1b:19:2c:f0:6c:6a:35:5e:96:55:23:be:4c:1b:e3:81:76:7f: a1:7c:16:e6:33:95:53:b9:9f:df:6e:1e:ac:d8:0c:e7:3a:c6: 72:06:62:b0:b7:bf:9a:6a:8a:d3:53:7b:7c:8c:49:71:a8:5b: 4e:f9:a0:d9:d7:ce:57:66:9f:77:28:0d:da:8c:36:df:b7:1d: 49:39:14:f2:c0:20:ad:7b:4b:59:ee:46:36:91:0e:57:ec:f3: cf:29:91:3d:22:58:e9:8d:73:0f:96:7f:ba:8c:ee:d3:58:88: 8f:bf:2b:27:1a:d2:49:41:fe:ec:ee:5a:8b:ee:f9:cf:8e:17: 48:6b:6d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTxVGmrN7s79ibjDWGXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOWRhNzgzY2RmYjNjYjZkOWJjODJjMTkyZDZkNzJhYmI0 YTMzNmQwHhcNMjYwMjA5MTMwMDI5WhcNMjYwMjEwMTMwMDI5WjAzMTEwLwYDVQQD EyhkZGE4OGU4NWMyMTVkOGY4MzQ4YmFiMGU4NjNmZjRjZjUzNzMyOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDW3HGXz51hatOWxuP1ZbwC4bsFM +JOhCU0ySQDk3UnZT9Qdl6Fkxv0qQkh9uOx/rnVEr+1QJE7LjgV0c8rCb9szTgfC 3QyqWsiTZH4Ugrmnpj9Z8Z1NW0S0nNPvi/QpVvwaeigHfeL26Hl0O8snE8LXZhBl W4w+iKToeMqT8XrAJO66x5IUlWqcfWVODPXTgq03xzTFHLAUZELBGIrx3SnMNYXJ TiCC02wngnl2i7nK3sKDTxa5K6Oq6JZQ78Pz46JA1QqrO4zyr7NFdI3bV/5wFdh4 TguLFys5qqwmKXY5oaCQH11uaH//pILNjQQbQ0DrlgIX/gPXvpwYFATzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2ojoXCFdj4NIurDoY/9M9Tcyn6MB8GA1UdIwQY MBaAFCCdp4PN+zy22byCwZLW1yq7SjNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTct Mjg0NjFiZTg5NzQwLzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTctMjg0NjFiZTg5NzQw LzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs2zdZj2 vyckVOlrDmcroj7dEZ5K9NCITipXvlvPdja6e7c15UaiOPu7ldxFJbMTMtpn/zT4 YnMohuSG20jURTMj3xs9WO1zl45TfzmFAiHmWyvDUktCCugH1ejpe1MZ32pY8aiB vxtXWt/bLDL8EqX/L8mpZVkx4VYHxvEFGxks8GxqNV6WVSO+TBvjgXZ/oXwW5jOV U7mf324erNgM5zrGcgZisLe/mmqK01N7fIxJcahbTvmg2dfOV2afdygN2ow237cd STkU8sAgrXtLWe5GNpEOV+zzzymRPSJY6Y1zD5Z/uozu01iIj78rJxrSSUH+7O5a i+75z44XSGttSw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:38 2026 by rpki-client