This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json) Hash identifier: cQLsA+UasjLZyXKl6RHyZDR0wqG68RnQgQDlsgpU4oc= Subject key identifier: 95:F4:66:1B:55:B4:48:FE:C3:68:7E:41:11:1B:7F:FB:D6:AA:39:5A Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019C42B41F29FC0FB09C8CF51E4A22034CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft Manifest number: 0656 Signing time: Mon 09 Feb 2026 14:00:26 +0000 Manifest this update: Mon 09 Feb 2026 14:00:26 +0000 Manifest next update: Tue 10 Feb 2026 14:00:26 +0000 Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=) 2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: b5nRIrGapGhPjZS2peOJlLSxYj5B0M7aFN5Aj2e3HOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1f:29:fc:0f:b0:9c:8c:f5:1e:4a:22:03:4c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Feb 9 14:00:26 2026 GMT Not After : Feb 10 14:00:26 2026 GMT Subject: CN=95f4661b55b448fec3687e41111b7ffbd6aa395a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:73:6c:eb:21:5d:e2:8a:a1:0a:fc:52:78: 90:41:22:5e:eb:b8:47:fe:8c:81:30:cd:aa:be:cb: 74:ea:a4:b1:e4:67:d2:1f:a9:be:fb:2a:0a:78:ec: 75:9d:d4:4a:76:21:8a:52:cb:cf:69:5f:f4:a4:8a: f9:52:ff:2c:95:24:ef:1a:90:40:4d:c5:0c:92:8a: 4f:22:c7:00:46:ef:cf:49:59:53:12:75:4c:e2:92: 0b:2d:4d:98:85:4c:11:44:0d:c0:c0:26:04:2f:21: 80:bd:14:b2:77:b5:5e:ca:84:7c:17:d5:b8:f1:c6: 97:d2:85:7c:3d:9c:02:1e:9b:9d:7f:a7:b7:e3:a3: 33:4a:5f:7e:a4:bc:20:77:01:d6:fd:3d:05:38:b3: eb:7d:90:53:8c:96:5b:d9:66:24:ba:d6:9f:31:43: 00:aa:2a:78:cd:3d:f3:ac:fa:44:6b:fd:5d:c6:01: 7c:d4:aa:9d:82:2f:cd:ba:74:fa:8a:2f:32:d0:27: 53:1d:fd:cd:7b:cc:61:8b:1a:fc:c1:06:73:7a:3e: fd:98:0d:18:7e:e5:f3:ce:26:e6:66:e1:c1:6f:e6: 2f:25:dc:67:b2:3f:da:82:89:b5:91:b0:97:5f:1d: 33:e3:12:04:68:00:da:ad:9c:cc:fe:58:05:85:aa: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:66:1B:55:B4:48:FE:C3:68:7E:41:11:1B:7F:FB:D6:AA:39:5A X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:57:83:7f:13:c9:55:e0:ad:41:5d:8e:ac:d5:93:f1:7d: d2:54:91:41:8f:b1:31:9c:39:fb:d3:af:30:57:65:f9:46:5a: 91:1e:f2:0b:bb:30:4c:39:97:dd:da:ed:ba:1b:02:e7:f0:61: 8a:17:78:31:7e:33:e2:e4:41:29:3e:16:d2:f7:70:e6:47:e8: c6:00:45:89:a4:f7:a9:5a:0b:4f:16:bb:a3:70:ed:a9:26:c3: 63:60:17:aa:d6:b4:90:aa:74:cd:8d:2c:f6:6e:82:c6:5b:34: 6a:b8:6d:60:a8:f5:82:64:d2:1e:d8:f3:fe:ee:b4:d5:cd:43: d1:f9:84:78:de:3f:61:e3:94:fa:1e:66:1b:fb:84:6b:fa:f2: bf:3d:db:ee:f6:6c:cc:55:d1:0b:65:fd:4c:ce:20:f7:a0:41: 92:71:df:52:19:d5:5c:bd:35:d2:e7:29:94:79:60:69:39:25: 2d:e0:54:9e:8d:74:e5:52:3a:6c:a0:1e:49:68:36:74:f9:59: 8f:97:57:92:c0:fe:25:e8:1d:dd:c5:5d:c1:ba:d1:42:78:ab: f3:f1:21:a4:23:e9:9f:fe:8f:6e:00:09:07:91:49:b5:84:61: e1:00:05:db:4c:74:66:d5:8a:6e:18:03:4d:be:61:12:dc:18: 97:9e:14:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtB8p/A+wnIz1HkoiA0yoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD Eyg5NWY0NjYxYjU1YjQ0OGZlYzM2ODdlNDExMTFiN2ZmYmQ2YWEzOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutdzbOshXeKKoQr8UniQQSJe67hH /oyBMM2qvst06qSx5GfSH6m++yoKeOx1ndRKdiGKUsvPaV/0pIr5Uv8slSTvGpBA TcUMkopPIscARu/PSVlTEnVM4pILLU2YhUwRRA3AwCYELyGAvRSyd7VeyoR8F9W4 8caX0oV8PZwCHpudf6e346MzSl9+pLwgdwHW/T0FOLPrfZBTjJZb2WYkutafMUMA qip4zT3zrPpEa/1dxgF81Kqdgi/NunT6ii8y0CdTHf3Ne8xhixr8wQZzej79mA0Y fuXzzibmZuHBb+YvJdxnsj/agom1kbCXXx0z4xIEaADarZzM/lgFhapCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX0ZhtVtEj+w2h+QREbf/vWqjlaMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgtXg38T yVXgrUFdjqzVk/F90lSRQY+xMZw5+9OvMFdl+UZakR7yC7swTDmX3drtuhsC5/Bh ihd4MX4z4uRBKT4W0vdw5kfoxgBFiaT3qVoLTxa7o3DtqSbDY2AXqta0kKp0zY0s 9m6Cxls0arhtYKj1gmTSHtjz/u601c1D0fmEeN4/YeOU+h5mG/uEa/ryvz3b7vZs zFXRC2X9TM4g96BBknHfUhnVXL010ucplHlgaTklLeBUno105VI6bKAeSWg2dPlZ j5dXksD+Jegd3cVdwbrRQnir8/EhpCPpn/6PbgAJB5FJtYRh4QAF20x0ZtWKbhgD Tb5hEtwYl54UxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:10 2026 by rpki-client