This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft File: i70nOhRTYWFVEmDYSNdvomRGzUY.mft (raw, json) Hash identifier: GoCrJOUMQucDU7qcQWvlBUXZN4jxl7pNWLdCM8tNRbI= Subject key identifier: 08:C3:4A:21:B2:73:F1:29:05:5D:5F:27:67:5B:46:CB:76:11:94:47 Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46 Certificate serial: 019C4390CF90396FAB8A4BFAC73CC8E8B483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft Manifest number: 03E9 Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: Psndu95QZf6tgKNvQkbaDhxNkYg.roa (hash: d9f4EyfJsmR2vvAcSDXuO/gBDmodHHefWdbiiIbdVEk=) 2: i70nOhRTYWFVEmDYSNdvomRGzUY.crl (hash: D1fAVOBdo2h2F0W/LUmtf9ZZzMw/oNuIvDV8VhKzFtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cf:90:39:6f:ab:8a:4b:fa:c7:3c:c8:e8:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46 Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=08c34a21b273f129055d5f27675b46cb76119447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:52:36:63:81:6c:bd:8b:59:99:3e:9a:f9: 6c:f0:d0:46:52:4a:de:70:62:ca:28:0c:fc:04:a8: c3:61:0e:70:6f:a7:69:26:bd:83:7a:99:28:92:fc: 9e:12:e3:6f:82:75:f8:bc:52:87:0f:af:a4:52:0c: f4:72:0c:10:c5:57:22:ca:dd:45:ef:1a:c5:ff:62: 49:f5:37:92:b9:53:be:e2:61:2f:49:02:dd:6c:d4: d6:cc:f2:08:70:fe:10:4e:d6:a1:97:fb:66:49:85: 48:a3:4c:b8:94:6d:08:8d:08:54:7a:7f:dc:cb:1f: 99:a2:2b:79:e5:69:87:da:63:4b:ff:e8:dd:72:6e: e7:70:cd:09:3d:4b:3a:2e:71:73:d4:75:90:0c:cb: 73:d6:80:45:bc:9c:a2:9e:36:20:ba:77:9e:d6:85: 4b:8a:96:53:c1:38:c4:b8:56:08:39:9c:64:31:2d: 84:1a:d3:8e:9f:89:ec:08:da:e9:d8:2f:c5:10:fc: 35:c3:25:65:2b:69:53:52:29:f9:b8:68:3e:50:2e: 25:c1:92:a6:a6:c0:03:9a:c7:9c:76:e2:e5:fb:f3: f5:a2:51:02:ae:46:96:e7:eb:6a:52:fc:63:60:49: dc:f1:98:46:83:f3:f8:97:bc:06:69:51:5c:04:da: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C3:4A:21:B2:73:F1:29:05:5D:5F:27:67:5B:46:CB:76:11:94:47 X509v3 Authority Key Identifier: keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5f:89:0d:c1:15:23:19:e9:6a:09:fe:9e:4a:c3:54:1b:6f: ad:81:86:15:36:0d:18:f8:1c:12:7b:ae:1d:de:81:02:e5:15: 99:1a:c1:2d:c9:dd:24:48:97:a6:63:fd:3b:cb:06:59:d9:ec: 65:e5:93:20:d5:fc:6d:6c:84:15:d6:33:32:4a:6d:fc:d2:e3: a1:7b:5c:bb:ce:db:94:c6:b0:47:14:69:cc:e2:60:1e:1a:e4: 3f:46:be:6c:4b:c3:07:52:d8:6f:9b:84:91:65:f8:94:4d:e8: 2a:a9:de:b1:56:05:60:86:d9:22:ce:fd:f2:8c:f0:03:02:ae: 85:62:c8:ae:68:ea:27:a8:57:b9:12:29:9a:09:0c:02:fa:fc: 74:2c:e0:86:59:2f:f9:37:71:66:e4:3d:05:2b:27:3a:78:dc: a3:d2:54:d4:a4:11:dd:82:ee:f7:f0:9f:43:69:ff:5e:75:90: 13:31:24:59:47:e2:9d:4c:87:7c:34:10:de:ec:26:f0:cd:1d: 17:ac:31:0e:71:1e:e5:38:a6:85:2b:ff:11:bb:d7:6d:64:e9: 45:b8:80:88:94:80:74:6b:84:a8:c1:67:e2:e4:dd:6a:9b:36: 53:81:b8:d4:4e:2a:d5:51:45:4d:51:40:54:6a:25:c0:a1:96: 3b:f5:ce:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkM+QOW+rikv6xzzI6LSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYmQyNzNhMTQ1MzYxNjE1NTEyNjBkODQ4ZDc2ZmEyNjQ0 NmNkNDYwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD EygwOGMzNGEyMWIyNzNmMTI5MDU1ZDVmMjc2NzViNDZjYjc2MTE5NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMVSNmOBbL2LWZk+mvls8NBGUkre cGLKKAz8BKjDYQ5wb6dpJr2DepkokvyeEuNvgnX4vFKHD6+kUgz0cgwQxVciyt1F 7xrF/2JJ9TeSuVO+4mEvSQLdbNTWzPIIcP4QTtahl/tmSYVIo0y4lG0IjQhUen/c yx+Zoit55WmH2mNL/+jdcm7ncM0JPUs6LnFz1HWQDMtz1oBFvJyinjYgunee1oVL ipZTwTjEuFYIOZxkMS2EGtOOn4nsCNrp2C/FEPw1wyVlK2lTUin5uGg+UC4lwZKm psADmsecduLl+/P1olECrkaW5+tqUvxjYEnc8ZhGg/P4l7wGaVFcBNp3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjDSiGyc/EpBV1fJ2dbRst2EZRHMB8GA1UdIwQY MBaAFIu9JzoUU2FhVRJg2EjXb6JkRs1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTct ZTE2MjIwMzI5NmJiLzEvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTctZTE2MjIwMzI5NmJi LzEvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1+JDcEV Ixnpagn+nkrDVBtvrYGGFTYNGPgcEnuuHd6BAuUVmRrBLcndJEiXpmP9O8sGWdns ZeWTINX8bWyEFdYzMkpt/NLjoXtcu87blMawRxRpzOJgHhrkP0a+bEvDB1LYb5uE kWX4lE3oKqnesVYFYIbZIs798ozwAwKuhWLIrmjqJ6hXuRIpmgkMAvr8dCzghlkv +TdxZuQ9BSsnOnjco9JU1KQR3YLu9/CfQ2n/XnWQEzEkWUfinUyHfDQQ3uwm8M0d F6wxDnEe5TimhSv/EbvXbWTpRbiAiJSAdGuEqMFn4uTdaps2U4G41E4q1VFFTVFA VGolwKGWO/XOWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:41 2026 by rpki-client