This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json) Hash identifier: 8txf3qMm3OyZIxHG81XeENwzmio2agPoC9O7/MkoxCk= Subject key identifier: E2:71:67:36:BF:BD:36:70:97:2E:6C:EA:EA:5E:DE:D8:70:59:50:95 Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1 Certificate serial: 019C420F97A4AFFBB6945E8BF5DC917CB831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft Manifest number: 0840 Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: tOO92/QZxXvvn2clz0bNdJtMV3YYgtW1JVWU+JLkCqo=) 2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:97:a4:af:fb:b6:94:5e:8b:f5:dc:91:7c:b8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1 Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=e2716736bfbd3670972e6ceaea5eded870595095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:01:1f:50:b5:ca:46:37:11:68:8e:27:79: c8:a1:ee:d9:18:03:2b:fe:2d:bc:84:ef:ed:f6:d4: ca:5e:4b:f4:3a:48:69:59:5c:c8:1e:8a:75:4b:f1: 42:8d:f1:d5:73:92:db:2e:40:e8:e5:0d:d6:0f:e8: 28:52:f1:d2:d5:01:a7:28:5e:b3:e7:9b:b8:b0:ea: b1:69:f7:38:b1:37:b9:d6:6b:ac:5c:fd:cb:cb:4f: 8f:b1:0f:da:f2:99:6b:f0:6c:0e:02:80:d7:da:ff: a5:f4:af:80:d5:82:b5:a5:1b:00:35:9a:8d:9f:17: e7:6d:9f:c4:56:c2:7a:84:46:f2:fb:06:f3:70:71: b4:d5:e1:c0:6d:8e:ed:c6:41:8e:19:12:a7:7c:8a: ec:ba:32:e2:ca:a3:aa:cc:a1:fd:cb:ac:2e:71:a7: 7e:8a:a8:cc:d1:9a:b5:26:cf:d1:cf:ac:a0:12:fd: 52:e8:ef:44:3e:77:98:6d:61:b6:e9:8d:e8:cf:76: f7:68:2d:b1:2c:14:74:f9:78:63:3c:10:50:39:62: 1f:c2:29:d8:d8:d1:69:1e:4c:6f:b4:b9:6a:ea:1b: 77:75:e1:d6:dc:ba:5a:07:26:6c:10:cc:9f:43:64: c9:75:91:4b:f1:e9:e3:28:0a:fe:59:40:42:62:c2: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:67:36:BF:BD:36:70:97:2E:6C:EA:EA:5E:DE:D8:70:59:50:95 X509v3 Authority Key Identifier: keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9e:17:fb:1d:c0:18:21:cf:41:e8:c5:b4:90:5e:af:67:be: cf:e5:60:6d:d1:38:c0:78:c1:e5:81:78:ce:bb:96:fe:4c:37: ed:90:21:d0:37:6d:5c:26:d1:b0:c1:5b:fe:d7:71:35:97:f7: 71:90:e0:cd:dc:df:84:5b:b9:b2:dc:ae:93:51:38:2b:74:5e: 63:c0:c2:e6:76:4f:99:a5:8c:34:5e:9a:8e:a1:58:f6:ff:0a: f2:6e:4c:db:f6:88:82:ac:e3:39:ec:76:1c:32:63:1a:80:e4: 17:c8:5d:3b:53:69:9c:1d:2d:44:cc:67:60:52:8b:2c:f0:bc: 5c:82:5e:b3:b5:c9:cc:54:99:a8:ff:95:a7:cc:2d:b6:46:5c: 95:b6:cf:9c:35:8f:41:3e:ea:2a:84:ea:7d:79:77:7c:a4:f3: ad:79:93:9a:79:13:90:3c:f7:f3:21:50:ba:4e:d3:fd:7d:69: 82:d5:b6:30:64:6c:33:bf:3e:bb:96:9a:73:07:fa:49:31:9e: 24:7d:71:2c:06:ce:a0:6b:3b:ca:ab:7b:48:ca:ca:f8:51:4e: c0:47:67:a4:99:fd:1d:6e:c6:73:3d:44:11:8c:8c:40:9f:e4: ab:fe:3b:c2:0b:7b:fb:a6:d9:22:f9:31:47:cf:2b:01:d3:cb: 7e:c3:be:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5ekr/u2lF6L9dyRfLgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0 ODViZTEwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EyhlMjcxNjczNmJmYmQzNjcwOTcyZTZjZWFlYTVlZGVkODcwNTk1MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj8BH1C1ykY3EWiOJ3nIoe7ZGAMr /i28hO/t9tTKXkv0OkhpWVzIHop1S/FCjfHVc5LbLkDo5Q3WD+goUvHS1QGnKF6z 55u4sOqxafc4sTe51musXP3Ly0+PsQ/a8plr8GwOAoDX2v+l9K+A1YK1pRsANZqN nxfnbZ/EVsJ6hEby+wbzcHG01eHAbY7txkGOGRKnfIrsujLiyqOqzKH9y6wucad+ iqjM0Zq1Js/Rz6ygEv1S6O9EPneYbWG26Y3oz3b3aC2xLBR0+XhjPBBQOWIfwinY 2NFpHkxvtLlq6ht3deHW3LpaByZsEMyfQ2TJdZFL8enjKAr+WUBCYsIi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJxZza/vTZwly5s6upe3thwWVCVMB8GA1UdIwQY MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAap4X+x3A GCHPQejFtJBer2e+z+VgbdE4wHjB5YF4zruW/kw37ZAh0DdtXCbRsMFb/tdxNZf3 cZDgzdzfhFu5styuk1E4K3ReY8DC5nZPmaWMNF6ajqFY9v8K8m5M2/aIgqzjOex2 HDJjGoDkF8hdO1NpnB0tRMxnYFKLLPC8XIJes7XJzFSZqP+Vp8wttkZclbbPnDWP QT7qKoTqfXl3fKTzrXmTmnkTkDz38yFQuk7T/X1pgtW2MGRsM78+u5aacwf6STGe JH1xLAbOoGs7yqt7SMrK+FFOwEdnpJn9HW7Gcz1EEYyMQJ/kq/47wgt7+6bZIvkx R88rAdPLfsO+og== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:01 2026 by rpki-client