This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json) Hash identifier: 5qRzRNNRUJFwQNevicsXNGD+vavtU6Pppnm9f1APoL4= Subject key identifier: B1:06:6D:6F:47:20:73:FB:2A:5B:87:3E:11:CA:07:0D:24:31:96:AB Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Certificate serial: 019C427DBA0A4F87890369E84EFE4F8FD9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft Manifest number: 0411 Signing time: Mon 09 Feb 2026 13:01:01 +0000 Manifest this update: Mon 09 Feb 2026 13:01:01 +0000 Manifest next update: Tue 10 Feb 2026 13:01:01 +0000 Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: dL+7kLnvHFNqwv4cEDHMHMhnIx6ll0PbZdUr0ixKQms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ba:0a:4f:87:89:03:69:e8:4e:fe:4f:8f:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Validity Not Before: Feb 9 13:01:01 2026 GMT Not After : Feb 10 13:01:01 2026 GMT Subject: CN=b1066d6f472073fb2a5b873e11ca070d243196ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:f5:30:f2:b9:f3:3a:19:a4:33:9b:dc:c8: f2:5e:71:e2:f0:5d:8e:ba:02:66:d3:c1:33:a5:ea: 52:ea:b8:5d:91:02:0f:fb:d2:49:32:d7:c3:6b:be: 8f:30:97:aa:d9:42:69:60:91:26:fe:64:bb:fb:b1: 2a:da:e5:17:d1:1f:af:99:02:5d:2a:3f:f4:d8:4b: c5:4c:c6:f4:9f:54:59:24:82:bc:c4:43:55:20:40: 3b:a8:db:d8:c7:7d:90:bb:97:1d:fa:d7:18:a3:f0: ab:e8:61:6e:f9:7f:35:45:52:e1:7e:5e:51:51:4b: 12:e0:66:64:e5:36:2a:a3:60:73:67:b5:de:0f:4b: 96:ec:34:e7:67:10:86:be:71:46:1f:8e:00:ef:a7: f7:b9:52:c6:9a:cc:82:e8:63:3f:7b:f2:67:7f:fb: b6:a0:cf:c8:b5:bf:69:d0:af:e1:2f:23:cb:5b:31: a2:b3:45:75:04:3c:6e:96:14:75:df:31:d0:85:8e: 3a:6f:99:53:20:e6:b5:f0:e1:03:d9:de:1c:6b:70: 59:90:30:94:5a:bd:b1:7f:7a:0e:f0:5a:9b:e6:19: 35:1b:b0:55:21:8d:e6:19:64:eb:ff:ce:48:0e:1a: 9e:ef:79:e4:fd:d5:d2:20:39:d5:be:de:e9:2e:d1: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:06:6D:6F:47:20:73:FB:2A:5B:87:3E:11:CA:07:0D:24:31:96:AB X509v3 Authority Key Identifier: keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:20:cb:07:b2:4a:71:87:1e:5c:ea:a5:cd:29:5f:fc:86: 12:a7:8b:45:10:d4:13:3e:b7:8f:e7:f8:96:1d:68:35:25:2f: 6b:4c:c1:a3:20:10:0c:c0:4a:60:43:a2:9d:a8:da:dd:a0:4e: 43:ef:64:fe:34:37:ed:41:d3:63:16:68:58:b0:93:6d:4b:5e: 54:46:04:e9:fa:8f:bf:6d:ca:6e:33:74:f0:22:4e:10:ed:97: 75:d3:1f:5b:81:fe:ca:8d:49:b6:71:a6:05:c3:24:19:9a:08: 2e:aa:14:8d:c1:a5:b1:95:f8:fe:dc:12:4c:8f:b4:ba:8a:ed: a7:7c:af:6c:7e:ee:36:7d:5d:20:b3:c7:13:0e:7d:16:37:1e: cf:26:24:ff:b0:df:24:71:2c:c6:fc:99:86:f5:32:74:71:81: a5:2f:b6:ff:ac:76:d4:e7:fa:ef:64:cc:2f:bb:db:40:8d:10: d0:7c:72:a0:d1:ec:ed:14:98:ef:d5:b8:c6:fe:61:e0:c3:ab: 0b:d1:a2:b0:22:2f:4d:d6:40:52:56:82:50:d6:55:90:88:31: e9:3b:be:f3:48:8c:54:53:33:f1:f7:50:5d:8e:27:ac:40:48: 0b:4b:e3:a2:c9:ee:1a:38:b9:ad:16:6f:2a:57:f8:c7:29:3b: 30:b5:d6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfboKT4eJA2noTv5Pj9nwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx YmE3YzQwHhcNMjYwMjA5MTMwMTAxWhcNMjYwMjEwMTMwMTAxWjAzMTEwLwYDVQQD EyhiMTA2NmQ2ZjQ3MjA3M2ZiMmE1Yjg3M2UxMWNhMDcwZDI0MzE5NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm/1MPK58zoZpDOb3MjyXnHi8F2O ugJm08EzpepS6rhdkQIP+9JJMtfDa76PMJeq2UJpYJEm/mS7+7Eq2uUX0R+vmQJd Kj/02EvFTMb0n1RZJIK8xENVIEA7qNvYx32Qu5cd+tcYo/Cr6GFu+X81RVLhfl5R UUsS4GZk5TYqo2BzZ7XeD0uW7DTnZxCGvnFGH44A76f3uVLGmsyC6GM/e/Jnf/u2 oM/Itb9p0K/hLyPLWzGis0V1BDxulhR13zHQhY46b5lTIOa18OED2d4ca3BZkDCU Wr2xf3oO8Fqb5hk1G7BVIY3mGWTr/85IDhqe73nk/dXSIDnVvt7pLtFD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEGbW9HIHP7KluHPhHKBw0kMZarMB8GA1UdIwQY MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1 LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlogywey SnGHHlzqpc0pX/yGEqeLRRDUEz63j+f4lh1oNSUva0zBoyAQDMBKYEOinaja3aBO Q+9k/jQ37UHTYxZoWLCTbUteVEYE6fqPv23KbjN08CJOEO2XddMfW4H+yo1JtnGm BcMkGZoILqoUjcGlsZX4/twSTI+0uortp3yvbH7uNn1dILPHEw59FjcezyYk/7Df JHEsxvyZhvUydHGBpS+2/6x21Of672TML7vbQI0Q0HxyoNHs7RSY79W4xv5h4MOr C9GisCIvTdZAUlaCUNZVkIgx6Tu+80iMVFMz8fdQXY4nrEBIC0vjosnuGji5rRZv Klf4xyk7MLXWFA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:16 2026 by rpki-client