This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json) Hash identifier: EwTO53Nv3YtZNRHLiiDuWUGCLlojrPvOXjbmW+51Zx0= Subject key identifier: 15:AB:2A:E6:45:43:B6:D7:89:A3:5B:48:39:13:D4:22:87:F2:23:C1 Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe Certificate serial: 019C43FD92002F9942F6A2357D57A14FCB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft Manifest number: 163D Signing time: Mon 09 Feb 2026 20:00:17 +0000 Manifest this update: Mon 09 Feb 2026 20:00:17 +0000 Manifest next update: Tue 10 Feb 2026 20:00:17 +0000 Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: mhAZ95L8hx3ddsW8l2A+bHOglDJyMnbgLkUSnsx2PFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:92:00:2f:99:42:f6:a2:35:7d:57:a1:4f:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe Validity Not Before: Feb 9 20:00:17 2026 GMT Not After : Feb 10 20:00:17 2026 GMT Subject: CN=15ab2ae64543b6d789a35b483913d42287f223c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:70:5f:f7:0e:f4:94:8b:32:65:2e:68:0d: 26:db:c6:eb:32:dd:4e:8b:c9:64:21:50:19:01:68: 3a:99:a4:05:57:0d:1d:5c:5a:57:6d:48:0a:11:18: c0:76:87:4b:81:05:25:58:89:30:68:56:f8:75:87: 00:aa:ab:b8:f8:31:24:e8:33:75:68:d1:cf:10:32: 53:58:04:f1:b9:99:44:d4:d0:01:77:0d:79:c3:df: 7d:0b:16:bf:20:58:4b:25:e7:c0:8f:af:1a:a3:f9: ff:d4:69:f1:ef:3f:8a:6b:e0:3e:ce:5f:7d:3b:d8: b6:a4:0b:50:ef:78:59:ce:31:ce:65:db:20:a7:14: dc:e9:4c:17:d8:93:84:e9:e0:e9:0e:15:4b:64:b4: a7:49:6d:63:12:c3:87:f4:b3:44:7e:29:a7:b2:71: ba:12:d5:b0:26:2d:71:c2:90:0b:c7:53:3e:a7:2f: 58:3b:fc:63:cb:d1:c0:34:04:91:11:8e:e8:0c:fc: 7a:f7:17:dd:df:4e:1f:da:a6:ef:5b:57:5a:3e:aa: 68:3c:96:23:c2:90:df:24:24:fe:2e:00:08:87:9d: 77:97:98:1e:7f:3e:bc:98:a5:68:63:5e:1b:ed:1d: b8:99:11:0b:a7:16:a3:bd:74:77:54:d3:89:d3:b3: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AB:2A:E6:45:43:B6:D7:89:A3:5B:48:39:13:D4:22:87:F2:23:C1 X509v3 Authority Key Identifier: keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:a8:05:78:c4:99:33:a4:8b:67:4a:0b:aa:36:cc:73:25: ad:fb:32:8c:44:df:9d:41:8c:93:83:d9:bd:13:f9:4a:47:5b: 32:b6:f2:fd:b9:5a:90:a4:f9:b9:54:63:2a:da:7d:ba:6c:86: c9:4d:ab:1f:b1:57:76:84:44:76:ea:26:cf:a9:42:b2:87:54: 5d:c9:ed:cd:9e:e9:09:09:30:94:5e:1d:30:87:4b:34:ac:1a: e1:f9:f8:33:ce:59:66:17:6e:28:20:1f:cd:d1:11:83:3e:d3: 89:b9:f0:a7:44:bf:ce:eb:0d:25:ba:93:50:1a:6e:b6:35:f4: 81:14:00:cf:52:ea:59:41:ab:2a:6e:ef:9e:b7:e8:2f:1b:55: ca:71:1b:35:9d:06:98:e5:b3:2a:33:2d:93:d6:9c:bb:bf:9e: 02:52:49:08:9e:a6:e2:b9:f6:be:2b:90:d0:32:58:11:49:4f: 9c:9a:dd:82:a6:a2:5a:f3:1a:98:b6:92:17:f3:34:1a:e3:4e: 18:95:11:78:13:28:c6:61:fe:ed:c9:2b:dc:67:e1:7e:9d:03: 02:57:8d:e0:db:34:71:f5:d3:73:1d:e7:c3:24:f3:db:33:3e: 92:a5:3f:b3:a4:c6:9f:3e:3e:f0:79:12:08:62:09:15:03:38: 5a:67:40:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ZIAL5lC9qI1fVehT8t4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy Mjg3ZmUwHhcNMjYwMjA5MjAwMDE3WhcNMjYwMjEwMjAwMDE3WjAzMTEwLwYDVQQD EygxNWFiMmFlNjQ1NDNiNmQ3ODlhMzViNDgzOTEzZDQyMjg3ZjIyM2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsStwX/cO9JSLMmUuaA0m28brMt1O i8lkIVAZAWg6maQFVw0dXFpXbUgKERjAdodLgQUlWIkwaFb4dYcAqqu4+DEk6DN1 aNHPEDJTWATxuZlE1NABdw15w999Cxa/IFhLJefAj68ao/n/1Gnx7z+Ka+A+zl99 O9i2pAtQ73hZzjHOZdsgpxTc6UwX2JOE6eDpDhVLZLSnSW1jEsOH9LNEfimnsnG6 EtWwJi1xwpALx1M+py9YO/xjy9HANASREY7oDPx69xfd304f2qbvW1daPqpoPJYj wpDfJCT+LgAIh513l5gefz68mKVoY14b7R24mRELpxajvXR3VNOJ07PB2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWrKuZFQ7bXiaNbSDkT1CKH8iPBMB8GA1UdIwQY MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbGoBXjE mTOki2dKC6o2zHMlrfsyjETfnUGMk4PZvRP5SkdbMrby/blakKT5uVRjKtp9umyG yU2rH7FXdoREduomz6lCsodUXcntzZ7pCQkwlF4dMIdLNKwa4fn4M85ZZhduKCAf zdERgz7Tibnwp0S/zusNJbqTUBputjX0gRQAz1LqWUGrKm7vnrfoLxtVynEbNZ0G mOWzKjMtk9acu7+eAlJJCJ6m4rn2viuQ0DJYEUlPnJrdgqaiWvMamLaSF/M0GuNO GJUReBMoxmH+7ckr3Gfhfp0DAleN4Ns0cfXTcx3nwyTz2zM+kqU/s6TGnz4+8HkS CGIJFQM4WmdA2A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:35 2026 by rpki-client