This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json) Hash identifier: sgph9COb4uOzdQw2WuvS597nReoo+C+fm2gDNXo3Vm8= Subject key identifier: DF:08:C5:6E:D4:F4:87:6E:25:43:B9:2B:BF:21:D5:6D:71:3B:1D:6C Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Certificate serial: 019C41D8F067A41A121E94FB6081ECC8F6E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft Manifest number: 0348 Signing time: Mon 09 Feb 2026 10:01:02 +0000 Manifest this update: Mon 09 Feb 2026 10:01:02 +0000 Manifest next update: Tue 10 Feb 2026 10:01:02 +0000 Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=) 2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: +gjOE4GUe9XeTMqUVl9nTmKx08lLgZ9rdDklBMqgKWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f0:67:a4:1a:12:1e:94:fb:60:81:ec:c8:f6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Validity Not Before: Feb 9 10:01:02 2026 GMT Not After : Feb 10 10:01:02 2026 GMT Subject: CN=df08c56ed4f4876e2543b92bbf21d56d713b1d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:e5:8b:ed:ab:80:a0:45:9e:12:f5:cd:02: d1:c2:a3:18:68:c3:96:31:dd:25:d2:88:ff:0d:f8: ae:9d:bb:42:c0:b8:17:4d:56:0d:e9:0a:b2:64:99: a0:96:8c:a5:06:bb:36:a8:1b:ad:46:c7:95:50:74: 3b:89:b1:c6:be:84:90:f8:d5:dc:62:29:cb:f5:ce: 36:00:53:12:31:cd:c8:ad:2d:e8:08:80:a0:94:3a: 25:f5:02:82:4a:b5:27:85:87:12:73:ee:b4:b7:22: 28:e9:da:e9:1c:be:4a:d5:b0:52:44:4f:d7:77:5d: e4:26:85:0e:1f:33:c0:9f:de:2c:2e:1a:88:d4:3b: 65:fd:c4:53:01:d1:19:16:c3:f4:71:65:21:2b:0c: 2a:17:fb:eb:78:4f:18:3c:32:72:6d:fd:02:79:05: a6:26:71:14:55:75:ac:64:3a:a5:50:11:36:4b:cf: 39:0f:5d:43:f6:15:a5:7f:fd:ba:83:55:44:84:13: 98:cb:7b:f5:58:a4:22:f6:6f:46:da:31:6e:90:8f: 3a:19:d9:22:49:8d:1e:29:94:a4:e0:d9:f4:1f:80: b6:bb:59:89:18:ac:b8:4a:c0:ee:ff:59:ad:98:0c: a0:1a:a1:08:c6:2a:f7:75:0f:eb:72:c6:45:bc:97: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:C5:6E:D4:F4:87:6E:25:43:B9:2B:BF:21:D5:6D:71:3B:1D:6C X509v3 Authority Key Identifier: keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fa:ac:67:c5:fe:3b:55:dd:7b:23:59:fd:fa:5c:0f:f2:2e: 9a:71:02:b9:28:6f:ae:0f:82:ab:e2:85:1c:77:83:fc:05:85: e2:88:56:58:2d:aa:2e:4d:75:6e:fc:29:6f:4c:97:ee:c4:e9: 1f:e4:39:99:91:1b:d7:d2:08:01:3a:9a:9a:49:e9:cc:ea:42: 6a:2a:f8:72:f3:8b:8d:e2:b1:fc:7f:62:e3:5a:d3:ce:a6:6b: 95:b3:42:74:93:c6:4f:fb:66:0e:9e:dd:8d:66:3f:e7:a0:ae: 98:28:d9:98:1a:29:82:f9:3f:31:77:0f:65:ac:e1:e9:0e:4d: 6d:ac:41:17:91:7c:f3:13:c2:c4:ea:83:44:3d:88:2e:bc:e1: 4f:05:72:ce:ac:eb:6a:fb:b8:d1:cd:cb:d8:99:7c:4a:30:35: 99:fd:bc:62:be:20:e0:14:c3:4c:4f:b9:c2:83:8f:11:82:fb: b5:57:f9:47:e5:81:06:84:24:f8:0a:ea:35:48:c3:53:1a:d5: ff:8c:6a:bf:5b:65:f1:dd:bc:1b:45:c7:cb:c9:12:97:21:52: df:6f:c8:db:9a:9b:61:4b:b3:6c:cd:43:f0:42:c3:bc:9d:4b: 3f:ff:25:d8:f0:97:32:3e:30:bd:7d:d0:74:7d:3b:b4:c1:23: f2:bb:4a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PBnpBoSHpT7YIHsyPbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw YjFmOTcwHhcNMjYwMjA5MTAwMTAyWhcNMjYwMjEwMTAwMTAyWjAzMTEwLwYDVQQD EyhkZjA4YzU2ZWQ0ZjQ4NzZlMjU0M2I5MmJiZjIxZDU2ZDcxM2IxZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTPli+2rgKBFnhL1zQLRwqMYaMOW Md0l0oj/DfiunbtCwLgXTVYN6QqyZJmgloylBrs2qButRseVUHQ7ibHGvoSQ+NXc YinL9c42AFMSMc3IrS3oCICglDol9QKCSrUnhYcSc+60tyIo6drpHL5K1bBSRE/X d13kJoUOHzPAn94sLhqI1Dtl/cRTAdEZFsP0cWUhKwwqF/vreE8YPDJybf0CeQWm JnEUVXWsZDqlUBE2S885D11D9hWlf/26g1VEhBOYy3v1WKQi9m9G2jFukI86Gdki SY0eKZSk4Nn0H4C2u1mJGKy4SsDu/1mtmAygGqEIxir3dQ/rcsZFvJftVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8IxW7U9IduJUO5K78h1W1xOx1sMB8GA1UdIwQY MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0 LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfqsZ8X+ O1XdeyNZ/fpcD/IumnECuShvrg+Cq+KFHHeD/AWF4ohWWC2qLk11bvwpb0yX7sTp H+Q5mZEb19IIATqamknpzOpCair4cvOLjeKx/H9i41rTzqZrlbNCdJPGT/tmDp7d jWY/56CumCjZmBopgvk/MXcPZazh6Q5NbaxBF5F88xPCxOqDRD2ILrzhTwVyzqzr avu40c3L2Jl8SjA1mf28Yr4g4BTDTE+5woOPEYL7tVf5R+WBBoQk+ArqNUjDUxrV /4xqv1tl8d28G0XHy8kSlyFS32/I25qbYUuzbM1D8ELDvJ1LP/8l2PCXMj4wvX3Q dH07tMEj8rtKBg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:51 2026 by rpki-client