This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json) Hash identifier: 2b5aM7xsl0wXQXB4Y0aqhqcZtFadgAKmwKi2kl1Y9aY= Subject key identifier: 0C:4C:43:A2:F7:64:ED:BD:46:48:F3:CC:91:6F:0C:69:94:15:F6:88 Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301 Certificate serial: 019C438FE9C1FD9F33EA56CEC1B08CFDFE52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft Manifest number: 07AC Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: 9tSjl7rCW26s/TGsNEBznVtcS61i47fH7xHcJV6G36s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e9:c1:fd:9f:33:ea:56:ce:c1:b0:8c:fd:fe:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=0c4c43a2f764edbd4648f3cc916f0c699415f688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:ff:ef:df:a6:97:26:9f:31:7c:9e:35:fd: 59:64:43:79:84:8e:5f:ad:13:51:67:f7:53:30:70: ec:51:e3:1b:bb:08:2d:cb:20:3f:d9:48:92:c1:32: 39:84:b6:54:01:c1:da:ba:39:51:11:33:16:dd:3b: 84:8b:20:2c:54:3f:a6:da:bf:80:23:c4:4c:67:aa: 04:95:e8:ba:5f:9f:f9:19:ab:67:af:bd:a5:b2:77: 95:5c:e4:1b:a2:5c:6c:8e:0e:2d:24:8f:4e:04:f9: eb:14:44:ca:f1:f1:38:94:65:2c:1c:09:bc:99:39: 3a:e5:1b:40:8f:05:84:34:28:9e:f9:91:af:74:c0: 7f:7e:7a:24:0e:6c:60:f3:a3:b5:2e:e8:91:6f:48: 1e:d9:83:f3:0a:ce:e2:35:be:f6:c8:f0:d1:5f:b8: 0d:b7:b7:7d:7e:9c:a3:97:af:59:f2:42:76:91:18: d0:7e:34:43:80:93:52:ac:df:7b:66:40:a4:8b:80: 7e:c4:ad:3d:41:76:c5:87:fa:6e:4d:e1:50:f9:1c: 3f:54:00:e7:8b:7c:63:06:b4:91:c6:39:b7:9f:db: 17:b1:00:fa:07:01:02:1c:80:05:fd:3a:28:0c:53: ae:ea:8d:7d:ea:a4:86:99:e4:57:93:06:b3:e9:93: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:43:A2:F7:64:ED:BD:46:48:F3:CC:91:6F:0C:69:94:15:F6:88 X509v3 Authority Key Identifier: keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:77:72:3e:e1:13:f7:1f:0b:af:30:33:ee:94:d6:21:b8:f9: 21:b8:4c:cb:85:2a:04:35:30:09:d5:4d:1b:b6:5d:3d:5e:3b: 24:58:d2:b9:f1:ac:d9:4b:72:d8:cf:5f:f5:df:4d:c2:9b:27: b1:41:db:0a:1a:60:c1:0f:80:a5:02:1a:f5:15:0e:4b:1f:42: e1:8f:bd:cc:7c:4d:af:d8:2b:ac:50:78:97:40:2d:3e:af:f7: 37:df:16:a4:e3:46:fc:29:a4:98:33:f5:65:f2:41:2e:c4:8e: 2e:dd:1c:3b:02:74:91:fa:d1:70:76:48:43:c7:96:c4:d5:55: 06:03:95:51:b2:47:e3:a7:56:cf:16:f1:54:50:67:3f:a8:d1: 3f:6e:e1:92:8c:6e:a7:7d:e5:2d:44:05:af:db:7b:1b:68:42: 5a:97:e8:b8:32:9e:b4:b1:f6:a2:51:ce:69:dd:61:b1:6b:f9: 67:24:a9:ec:8a:4a:1d:40:c9:cd:13:9a:ba:b5:3c:4b:40:7c: 3f:3b:1b:8f:13:cf:bc:52:c9:f4:dc:97:20:a6:ce:a8:3d:e9: 1e:84:50:24:b4:da:d8:ba:aa:c9:66:e4:25:27:da:ef:96:70: 43:52:dd:9b:ca:d0:dd:bf:5c:81:36:b9:7a:fb:c1:d9:3b:1a: 5d:9f:ee:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+nB/Z8z6lbOwbCM/f5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWMzOGZlODEwNWZiNTlhMmNkMjU3ZjUxOWY4NTg1OTU4 NDAzMDEwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD EygwYzRjNDNhMmY3NjRlZGJkNDY0OGYzY2M5MTZmMGM2OTk0MTVmNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07H/79+mlyafMXyeNf1ZZEN5hI5f rRNRZ/dTMHDsUeMbuwgtyyA/2UiSwTI5hLZUAcHaujlRETMW3TuEiyAsVD+m2r+A I8RMZ6oElei6X5/5Gatnr72lsneVXOQbolxsjg4tJI9OBPnrFETK8fE4lGUsHAm8 mTk65RtAjwWENCie+ZGvdMB/fnokDmxg86O1LuiRb0ge2YPzCs7iNb72yPDRX7gN t7d9fpyjl69Z8kJ2kRjQfjRDgJNSrN97ZkCki4B+xK09QXbFh/puTeFQ+Rw/VADn i3xjBrSRxjm3n9sXsQD6BwECHIAF/TooDFOu6o196qSGmeRXkwaz6ZOO+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxMQ6L3ZO29RkjzzJFvDGmUFfaIMB8GA1UdIwQY MBaAFCGsOP6BBftZos0lf1GfhYWVhAMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmIt MGNmNTRjZmE4ZGExLzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmItMGNmNTRjZmE4ZGEx LzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXdyPuET 9x8LrzAz7pTWIbj5IbhMy4UqBDUwCdVNG7ZdPV47JFjSufGs2Uty2M9f9d9Nwpsn sUHbChpgwQ+ApQIa9RUOSx9C4Y+9zHxNr9grrFB4l0AtPq/3N98WpONG/CmkmDP1 ZfJBLsSOLt0cOwJ0kfrRcHZIQ8eWxNVVBgOVUbJH46dWzxbxVFBnP6jRP27hkoxu p33lLUQFr9t7G2hCWpfouDKetLH2olHOad1hsWv5ZySp7IpKHUDJzROaurU8S0B8 PzsbjxPPvFLJ9NyXIKbOqD3pHoRQJLTa2LqqyWbkJSfa75ZwQ1Ldm8rQ3b9cgTa5 evvB2TsaXZ/uXw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:52 2026 by rpki-client