This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json) Hash identifier: JOkewtv0SSPdxd2g+TRHTk4qpeFGRRBI4BjicMjHyM8= Subject key identifier: DB:0D:34:DD:86:A0:55:37:CA:0F:15:95:8A:B0:C7:34:28:1A:4C:45 Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f Certificate serial: 019C42B401A0CDE7EC3B5FAF870256227458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft Manifest number: 60 Signing time: Mon 09 Feb 2026 14:00:18 +0000 Manifest this update: Mon 09 Feb 2026 14:00:18 +0000 Manifest next update: Tue 10 Feb 2026 14:00:18 +0000 Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 4Zqz09TXNXu18aBP8oC/S4OvessSEeE4b9jB3VFdXQw=) 2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:01:a0:cd:e7:ec:3b:5f:af:87:02:56:22:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f Validity Not Before: Feb 9 14:00:18 2026 GMT Not After : Feb 10 14:00:18 2026 GMT Subject: CN=db0d34dd86a05537ca0f15958ab0c734281a4c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:15:8b:15:ab:d2:2a:5d:da:56:1f:40:b0: dc:b8:78:a4:bf:6b:f2:06:18:3c:6c:a4:aa:52:43: 90:bd:06:b5:e2:07:50:90:a3:c4:2c:cf:ee:71:29: cf:25:7d:f8:93:b3:52:e9:7d:38:28:7c:fd:db:e9: 38:95:c4:87:bf:75:41:23:f7:d0:16:67:c4:17:32: cd:6b:66:53:bf:d0:b8:e1:bd:a6:8b:d8:f5:c6:54: bf:72:75:fa:fe:86:32:fd:00:b0:4a:db:17:13:ed: 00:c7:84:75:f6:db:b1:fd:35:76:1d:e7:f5:28:b6: d3:09:19:15:8e:77:dc:b1:4f:67:31:f9:9b:25:db: d5:86:3e:28:5e:5a:c9:a7:7d:e8:dd:c0:29:d7:6b: 11:ac:2a:12:5b:ee:00:fd:c7:ff:6b:8e:56:c1:aa: 7e:a1:bb:87:e4:87:e4:1d:38:47:b6:9a:71:6d:34: eb:2d:06:0d:f2:b6:db:da:e2:ff:e2:4e:42:d8:d6: 36:30:d1:72:fc:a1:a0:12:40:bf:d6:6c:94:0d:a2: 61:8d:71:7c:9b:4c:ae:56:3b:fe:3b:6b:00:af:28: 64:42:07:cb:bc:45:e6:85:13:5b:cb:13:af:2f:8f: 65:b8:2d:6b:0c:07:e2:6f:3b:c5:e6:30:79:ab:c0: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:34:DD:86:A0:55:37:CA:0F:15:95:8A:B0:C7:34:28:1A:4C:45 X509v3 Authority Key Identifier: keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5b:ef:76:7c:29:17:7c:2b:27:41:de:b6:bb:58:e8:b2:19: 60:5c:10:dc:d3:27:97:c2:c9:2e:ca:f4:73:76:2b:86:59:e1: e1:f4:63:29:ba:b2:b4:1f:e6:6c:79:0a:4c:48:02:f5:e6:44: 7f:56:3f:55:30:c2:20:db:fa:1f:99:c4:0c:17:14:9c:b8:6f: 1f:0f:75:1c:f7:d3:80:ec:c2:6e:39:38:22:80:b6:e4:21:08: c2:a1:78:d8:25:b1:96:08:29:26:77:0e:74:0d:ed:00:a9:a8: 97:be:71:c4:22:78:5d:21:40:61:9c:d6:83:44:1a:ad:69:31: c5:a3:50:8d:de:87:46:0b:41:07:b2:22:d1:de:af:6b:cf:c8: 60:ef:19:21:47:d3:7c:ac:a4:f7:ab:5d:dc:94:26:18:65:4e: bc:3b:ee:83:78:30:7b:dd:b5:8c:34:62:82:d0:cb:cb:cf:cc: ef:2e:94:41:2f:5b:8a:b4:2c:c6:1d:60:98:29:6a:0e:99:d4: 67:70:f7:be:8f:54:bc:25:37:46:e9:46:b9:b6:9a:69:40:73: e6:01:32:f6:c2:86:3d:bf:eb:64:2a:16:d1:5d:c9:cb:33:4e: 0b:f8:53:c5:ab:9c:0d:65:79:73:5b:b7:a7:9d:5d:4d:ae:a4: 0d:20:65:fb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCtAGgzefsO1+vhwJWInRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjVhMmYyOGIxZWI2MjkxNjExMTI4NzA5NDJhNWVkMTgx YjUxOWYwHhcNMjYwMjA5MTQwMDE4WhcNMjYwMjEwMTQwMDE4WjAzMTEwLwYDVQQD EyhkYjBkMzRkZDg2YTA1NTM3Y2EwZjE1OTU4YWIwYzczNDI4MWE0YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9UVixWr0ipd2lYfQLDcuHikv2vy Bhg8bKSqUkOQvQa14gdQkKPELM/ucSnPJX34k7NS6X04KHz92+k4lcSHv3VBI/fQ FmfEFzLNa2ZTv9C44b2mi9j1xlS/cnX6/oYy/QCwStsXE+0Ax4R19tux/TV2Hef1 KLbTCRkVjnfcsU9nMfmbJdvVhj4oXlrJp33o3cAp12sRrCoSW+4A/cf/a45Wwap+ obuH5IfkHThHtppxbTTrLQYN8rbb2uL/4k5C2NY2MNFy/KGgEkC/1myUDaJhjXF8 m0yuVjv+O2sAryhkQgfLvEXmhRNbyxOvL49luC1rDAfibzvF5jB5q8C0NwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNsNNN2GoFU3yg8VlYqwxzQoGkxFMB8GA1UdIwQY MBaAFPolovKLHrYpFhEShwlCpe0YG1GfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pV2k4b3NldGlrV0VSS0hDVUtsN1JnYlVaOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFj LWUxZDE5NWFjMzVkMi8xLzEtaVdpOG9zZXRpa1dFUktIQ1VLbDdSZ2JVWjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M5LzY0NDQzZS0wM2Y4LTQzNzUtOTQxYy1lMWQxOTVhYzM1 ZDIvMS8xLWlXaThvc2V0aWtXRVJLSENVS2w3UmdiVVo4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1vv dnwpF3wrJ0HetrtY6LIZYFwQ3NMnl8LJLsr0c3Yrhlnh4fRjKbqytB/mbHkKTEgC 9eZEf1Y/VTDCINv6H5nEDBcUnLhvHw91HPfTgOzCbjk4IoC25CEIwqF42CWxlggp JncOdA3tAKmol75xxCJ4XSFAYZzWg0QarWkxxaNQjd6HRgtBB7Ii0d6va8/IYO8Z IUfTfKyk96td3JQmGGVOvDvug3gwe921jDRigtDLy8/M7y6UQS9birQsxh1gmClq DpnUZ3D3vo9UvCU3RulGubaaaUBz5gEy9sKGPb/rZCoW0V3JyzNOC/hTxaucDWV5 c1u3p51dTa6kDSBl+w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:05 2026 by rpki-client