This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json) Hash identifier: vgrXIO6kFqz2yLhyyxJ5JEyHB8xnQCy4jqxJMuwG8p8= Subject key identifier: CA:10:3D:09:70:D2:C4:4A:3E:FC:74:D9:88:40:9C:B9:A4:97:13:0F Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95 Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95 Certificate serial: 019C427DF9C29211DD22D9C8D9142785B9AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft Manifest number: 09D6 Signing time: Mon 09 Feb 2026 13:01:17 +0000 Manifest this update: Mon 09 Feb 2026 13:01:17 +0000 Manifest next update: Tue 10 Feb 2026 13:01:17 +0000 Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: kKy8PROZSOvCnocfXiblehiwRyajDHZBPPMviLo+BGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f9:c2:92:11:dd:22:d9:c8:d9:14:27:85:b9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad60676432f68723662c932579a849352014b95 Validity Not Before: Feb 9 13:01:17 2026 GMT Not After : Feb 10 13:01:17 2026 GMT Subject: CN=ca103d0970d2c44a3efc74d988409cb9a497130f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:61:75:f0:c9:fb:bb:b4:cf:62:4c:3b:86: 1c:0a:18:21:1f:45:db:68:88:19:bd:88:1a:9b:51: 4c:01:17:c1:98:2b:97:28:3b:8a:20:f8:ca:32:e0: 86:ba:97:4c:9e:d7:36:c8:3b:d0:ea:93:bb:6e:40: 67:0b:06:22:97:4f:e5:27:c9:8d:66:81:62:7f:1a: ca:1e:17:a7:ba:37:ee:cc:f5:ec:be:68:f0:08:66: 23:46:08:1a:9d:d6:fb:8b:b5:ca:6f:da:6f:8a:57: 22:ad:00:dc:6e:15:10:2c:5f:5a:d3:23:d5:ac:ab: 11:91:1a:66:7b:73:46:c2:55:b5:0d:22:67:9c:c6: 75:e3:dd:94:5a:d3:a2:40:99:d4:54:db:17:c9:3b: 58:cd:66:e8:c8:79:05:e7:b9:db:42:96:fc:85:68: da:c6:46:73:9d:63:6e:d9:3e:4a:ea:5c:ec:cc:9b: ce:1f:8d:70:7e:f1:ab:e5:57:eb:71:07:af:1b:66: 62:84:a9:65:88:62:ed:07:c7:87:93:ed:0f:68:ce: 3a:cc:b1:e7:71:30:9a:6b:14:70:10:6f:27:6c:bd: 60:c3:71:86:c6:a5:ff:41:de:ee:ff:b6:40:09:94: 0d:71:f0:e8:4f:e2:43:c6:5f:69:f2:19:65:da:f1: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:3D:09:70:D2:C4:4A:3E:FC:74:D9:88:40:9C:B9:A4:97:13:0F X509v3 Authority Key Identifier: keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4f:9f:3a:3b:24:51:56:a0:d8:08:b0:39:ae:b5:8d:2c:11: b1:7b:eb:d6:84:12:35:ac:10:86:75:87:1a:ef:b6:b9:1e:86: 17:c0:4a:09:b2:db:0b:f9:38:c4:80:f0:b2:ef:8b:89:04:12: 3d:66:61:40:3e:75:19:99:e3:0b:4d:8d:5a:3e:83:ba:2c:a9: 93:ed:3d:64:f9:d3:eb:d6:33:e3:74:2e:7f:55:d2:db:23:6c: d8:41:79:6e:d9:0e:fa:c8:5b:46:5e:43:c1:4b:ff:19:e0:b3: 4f:b6:b7:9d:7b:fc:c9:af:3c:ce:75:61:fc:9a:ea:21:b4:37: c1:52:e5:f8:31:50:0c:3a:ba:aa:12:88:e0:c2:e4:0a:54:53: d7:a6:c8:e0:c3:25:72:cb:2a:a6:8f:10:f4:ba:bf:8f:c8:fe: aa:da:3b:77:04:07:bb:7a:f3:54:ac:20:9e:47:20:06:21:d8: 57:3c:bc:8d:17:e5:f2:67:a5:21:a6:3b:b5:7e:95:d0:97:0a: 88:86:7c:cd:06:68:f4:47:9d:56:b4:53:46:2b:64:4b:68:0e: ac:68:83:8e:34:54:25:8c:ab:a1:19:03:60:d4:ab:74:15:33: 1a:cc:44:1f:93:5d:f2:17:54:1e:1c:1b:ba:61:6a:f1:2a:56: 07:3d:98:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffnCkhHdItnI2RQnhbmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDYwNjc2NDMyZjY4NzIzNjYyYzkzMjU3OWE4NDkzNTIw MTRiOTUwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD EyhjYTEwM2QwOTcwZDJjNDRhM2VmYzc0ZDk4ODQwOWNiOWE0OTcxMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ9hdfDJ+7u0z2JMO4YcChghH0Xb aIgZvYgam1FMARfBmCuXKDuKIPjKMuCGupdMntc2yDvQ6pO7bkBnCwYil0/lJ8mN ZoFifxrKHhenujfuzPXsvmjwCGYjRggandb7i7XKb9pvilcirQDcbhUQLF9a0yPV rKsRkRpme3NGwlW1DSJnnMZ1492UWtOiQJnUVNsXyTtYzWboyHkF57nbQpb8hWja xkZznWNu2T5K6lzszJvOH41wfvGr5VfrcQevG2ZihKlliGLtB8eHk+0PaM46zLHn cTCaaxRwEG8nbL1gw3GGxqX/Qd7u/7ZACZQNcfDoT+JDxl9p8hll2vHBIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoQPQlw0sRKPvx02YhAnLmklxMPMB8GA1UdIwQY MBaAFIrWBnZDL2hyNmLJMleahJNSAUuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUt Mjg0MDM2YTgxZDkwLzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUtMjg0MDM2YTgxZDkw LzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk+fOjsk UVag2AiwOa61jSwRsXvr1oQSNawQhnWHGu+2uR6GF8BKCbLbC/k4xIDwsu+LiQQS PWZhQD51GZnjC02NWj6Duiypk+09ZPnT69Yz43Quf1XS2yNs2EF5btkO+shbRl5D wUv/GeCzT7a3nXv8ya88znVh/JrqIbQ3wVLl+DFQDDq6qhKI4MLkClRT16bI4MMl cssqpo8Q9Lq/j8j+qto7dwQHu3rzVKwgnkcgBiHYVzy8jRfl8melIaY7tX6V0JcK iIZ8zQZo9EedVrRTRitkS2gOrGiDjjRUJYyroRkDYNSrdBUzGsxEH5Nd8hdUHhwb umFq8SpWBz2Yfw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:54 2026 by rpki-client