This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json) Hash identifier: GKy0/nnFM+3jNS/wOre/by0nddGeYfLzOMHLrn06j9E= Subject key identifier: A8:35:C9:10:34:22:46:6F:1F:7A:D6:66:87:B0:F5:65:BF:73:06:4F Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Certificate serial: 019C43C6CD03C2F0C490C9215E1CF6DCB1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft Manifest number: 0B19 Signing time: Mon 09 Feb 2026 19:00:27 +0000 Manifest this update: Mon 09 Feb 2026 19:00:27 +0000 Manifest next update: Tue 10 Feb 2026 19:00:27 +0000 Files and hashes: 1: F7Rl3gkShjk9K5KCESdLS7DMA7I.roa (hash: c2n9H0jyH5wMRpTPvaViBcpdlnGbUmhYtVd+x1NbnoM=) 2: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: OPhll6BtqjsQ53h6oIfMJyQJt2xm9OlnkeylH6z4Gf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:cd:03:c2:f0:c4:90:c9:21:5e:1c:f6:dc:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Validity Not Before: Feb 9 19:00:27 2026 GMT Not After : Feb 10 19:00:27 2026 GMT Subject: CN=a835c9103422466f1f7ad66687b0f565bf73064f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:96:f9:9e:a5:18:f1:3d:73:6e:2e:35:64: 34:48:29:0e:11:26:66:07:ff:7d:a6:91:97:7b:68: aa:c0:ae:c3:b9:a4:b6:88:96:c9:0a:0e:94:a4:c8: 63:fe:0c:ad:37:33:79:b8:e0:5e:45:c2:3e:0a:36: 04:5e:77:c0:69:f6:ba:a9:a7:49:24:d9:7b:c6:6f: f3:2b:15:38:16:51:11:bd:75:cb:ca:80:96:32:39: 32:d1:99:b8:e9:fe:00:99:92:28:ed:f2:2e:fe:ef: 60:e1:08:2a:98:4b:9c:c0:72:41:ed:14:75:88:b8: e9:2e:6a:32:82:78:ed:13:83:34:16:c6:75:85:c0: ed:ba:93:45:8d:9b:29:ca:91:e5:68:f7:76:22:d6: 70:cb:7c:28:a5:79:73:35:dd:3f:31:9c:18:52:ad: be:90:91:5c:a9:5f:4b:31:bc:71:d0:d0:6e:72:83: 5a:ec:90:fa:5d:2e:3a:b4:99:65:d8:28:9c:ae:af: 5c:60:34:4f:bb:47:e6:43:c5:6e:00:91:14:1b:39: 44:2b:fd:19:30:71:71:dc:f9:ed:8c:41:d6:94:17: 9a:9a:bb:6b:b4:3e:0c:f5:1f:ad:97:d1:12:fa:a8: f9:a6:8a:4c:28:9a:07:fe:0b:1a:89:e2:08:b9:7a: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:35:C9:10:34:22:46:6F:1F:7A:D6:66:87:B0:F5:65:BF:73:06:4F X509v3 Authority Key Identifier: keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:38:c0:06:83:88:23:0c:31:72:9c:18:3f:61:56:62:af:5a: f6:51:26:e9:2b:45:79:b0:17:be:a8:89:53:94:42:3a:75:8f: 19:4d:7d:49:d8:43:2e:be:87:a2:62:3a:5b:3c:7c:42:8a:b4: 70:8d:83:b4:6d:a0:e1:c4:c7:82:62:69:73:07:f9:2d:c5:63: cf:86:d3:b6:b7:84:af:ee:37:79:0f:df:28:07:6c:a5:75:2a: be:a7:d5:62:7f:e9:ec:10:c0:d9:10:d7:c5:a1:06:bb:0b:99: 02:95:5f:e5:df:15:84:10:a4:a1:21:84:18:44:00:a4:ef:ec: 92:97:e8:df:b7:1e:fb:be:7b:d2:ba:03:ae:69:47:a1:f8:34: ef:de:ce:52:48:cb:83:07:3a:9d:93:37:6d:fa:fe:82:71:0a: c8:06:10:e7:df:0d:85:bb:e4:82:2c:84:7d:b7:f1:30:30:40: 63:49:95:3c:2c:a0:3d:e2:98:89:4e:c4:9f:95:73:18:f3:11: e6:c0:a4:b6:85:fc:12:e7:96:70:36:4f:f3:b9:f4:f4:e5:58: 27:d5:77:af:79:02:1a:8f:29:1f:08:4b:5b:26:10:fd:d8:c1: 3f:3d:10:8d:74:b2:1e:ef:76:ae:25:c2:8d:55:53:a4:9a:88: 3f:d3:3e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxs0DwvDEkMkhXhz23LHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1 OTA0YTAwHhcNMjYwMjA5MTkwMDI3WhcNMjYwMjEwMTkwMDI3WjAzMTEwLwYDVQQD EyhhODM1YzkxMDM0MjI0NjZmMWY3YWQ2NjY4N2IwZjU2NWJmNzMwNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyeW+Z6lGPE9c24uNWQ0SCkOESZm B/99ppGXe2iqwK7DuaS2iJbJCg6UpMhj/gytNzN5uOBeRcI+CjYEXnfAafa6qadJ JNl7xm/zKxU4FlERvXXLyoCWMjky0Zm46f4AmZIo7fIu/u9g4QgqmEucwHJB7RR1 iLjpLmoygnjtE4M0FsZ1hcDtupNFjZspypHlaPd2ItZwy3wopXlzNd0/MZwYUq2+ kJFcqV9LMbxx0NBucoNa7JD6XS46tJll2Cicrq9cYDRPu0fmQ8VuAJEUGzlEK/0Z MHFx3PntjEHWlBeamrtrtD4M9R+tl9ES+qj5popMKJoH/gsaieIIuXpxyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg1yRA0IkZvH3rWZoew9WW/cwZPMB8GA1UdIwQY MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt ZDNjNGY1ZGNiZTRjLzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDjABoOI IwwxcpwYP2FWYq9a9lEm6StFebAXvqiJU5RCOnWPGU19SdhDLr6HomI6Wzx8Qoq0 cI2DtG2g4cTHgmJpcwf5LcVjz4bTtreEr+43eQ/fKAdspXUqvqfVYn/p7BDA2RDX xaEGuwuZApVf5d8VhBCkoSGEGEQApO/skpfo37ce+7570roDrmlHofg0797OUkjL gwc6nZM3bfr+gnEKyAYQ598NhbvkgiyEfbfxMDBAY0mVPCygPeKYiU7En5VzGPMR 5sCktoX8EueWcDZP87n09OVYJ9V3r3kCGo8pHwhLWyYQ/djBPz0QjXSyHu92riXC jVVTpJqIP9M+uA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:41 2026 by rpki-client