This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json) Hash identifier: dOBvJ/l9nLbIekhOczLDRWf+3SdfXHJmm9X4EE8IK1Y= Subject key identifier: DD:53:3A:A5:65:EE:9A:29:AE:59:40:8D:C4:42:07:8C:73:EA:E4:D2 Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019C2774CC33F57103EB916469F0FD16BC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft Manifest number: 08D5 Signing time: Wed 04 Feb 2026 07:01:31 +0000 Manifest this update: Wed 04 Feb 2026 07:01:31 +0000 Manifest next update: Thu 05 Feb 2026 07:01:31 +0000 Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=) 2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: sabgGhilzMM4iSwKlhIhFz6HtqNCaRQwXLGdoH0oADs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:74:cc:33:f5:71:03:eb:91:64:69:f0:fd:16:bc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Feb 4 07:01:31 2026 GMT Not After : Feb 5 07:01:31 2026 GMT Subject: CN=dd533aa565ee9a29ae59408dc442078c73eae4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f2:c3:a5:99:5c:cd:65:b1:45:d3:3b:f2:97: e4:59:af:f2:f6:c4:a2:58:03:8b:4b:78:da:35:f3: 46:04:15:93:5f:b1:2e:5e:95:a3:13:30:69:e1:1a: b5:76:86:75:c8:a1:b9:1a:b4:f8:7b:e2:e7:48:07: 98:0c:13:7c:12:53:fa:f0:f2:9c:ac:81:c2:50:cc: 7c:dd:fe:38:cc:20:b7:a0:2a:7e:0c:29:0f:3a:72: 6f:df:40:56:ae:27:60:5c:e3:81:7c:3f:4b:ec:c4: 7a:ef:2b:36:87:8f:59:f0:a0:b8:8c:d2:bc:66:80: ad:81:84:7c:7c:7e:e4:f5:5c:34:96:35:e5:40:b5: 32:9a:a3:48:37:63:2e:3e:63:e4:e4:98:08:0b:46: fd:b5:f2:74:63:6f:c2:a3:3d:a9:88:35:ed:df:a4: 60:2c:ac:27:22:43:01:67:48:75:10:14:5d:4a:31: 2f:88:29:63:9d:bb:9a:47:12:ff:75:96:f1:a9:9b: 76:ec:e4:8b:b3:d3:c5:6b:fd:e3:98:18:a8:08:e3: a4:db:21:c5:34:46:75:0f:91:28:32:be:7f:fd:a0: fb:56:4a:f0:d3:dd:f5:bb:ae:dd:e7:0c:d6:c6:ef: 13:1a:15:a2:7f:82:2e:d4:a4:24:19:31:47:63:3b: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:3A:A5:65:EE:9A:29:AE:59:40:8D:C4:42:07:8C:73:EA:E4:D2 X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:72:a2:59:6b:35:16:9c:22:64:3f:9b:b5:53:07:e1:a3: 53:14:5a:ca:04:2d:0a:2f:fa:e5:f2:58:6c:ca:60:15:04:a8: 33:7b:0a:b1:93:23:1a:84:79:93:85:15:71:09:f0:61:ef:08: fa:4a:81:60:7f:e1:56:d1:c3:d3:78:45:27:2f:a0:e0:74:e6: fe:88:a5:8a:fe:9d:ff:ba:60:98:48:05:1f:89:0d:21:0e:61: bc:23:8e:d0:d6:61:58:30:de:aa:24:9a:df:38:dc:54:20:48: 62:e2:80:29:2e:78:48:cf:20:77:97:ad:36:fb:50:94:52:75: 45:02:18:63:81:8b:8a:d1:40:03:c2:b8:09:69:d5:73:ec:50: c5:eb:95:f7:0c:a3:27:84:d3:34:f3:0c:38:df:5b:f7:f2:8d: b2:f5:91:73:75:69:a8:9e:fd:fc:6c:4a:0e:70:09:2d:8b:71: 48:4e:66:78:2c:b9:cd:36:18:f4:03:f5:f7:e8:a7:99:ed:4a: 4a:6d:c7:b2:94:7e:37:e9:21:c7:e7:bf:fc:78:f0:f6:0b:95: f3:cd:df:c4:60:eb:99:27:2c:ac:b7:60:a9:04:a9:42:a4:d1: a5:a8:00:25:77:4d:b3:00:a4:a9:45:87:f3:b6:1e:d4:5d:5a: e2:a4:cb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwndMwz9XED65FkafD9FryDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjYwMjA0MDcwMTMxWhcNMjYwMjA1MDcwMTMxWjAzMTEwLwYDVQQD EyhkZDUzM2FhNTY1ZWU5YTI5YWU1OTQwOGRjNDQyMDc4YzczZWFlNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fLDpZlczWWxRdM78pfkWa/y9sSi WAOLS3jaNfNGBBWTX7EuXpWjEzBp4Rq1doZ1yKG5GrT4e+LnSAeYDBN8ElP68PKc rIHCUMx83f44zCC3oCp+DCkPOnJv30BWridgXOOBfD9L7MR67ys2h49Z8KC4jNK8 ZoCtgYR8fH7k9Vw0ljXlQLUymqNIN2MuPmPk5JgIC0b9tfJ0Y2/Coz2piDXt36Rg LKwnIkMBZ0h1EBRdSjEviCljnbuaRxL/dZbxqZt27OSLs9PFa/3jmBioCOOk2yHF NEZ1D5EoMr5//aD7Vkrw0931u67d5wzWxu8TGhWif4Iu1KQkGTFHYzveEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1TOqVl7poprllAjcRCB4xz6uTSMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM1yollr NRacImQ/m7VTB+GjUxRaygQtCi/65fJYbMpgFQSoM3sKsZMjGoR5k4UVcQnwYe8I +kqBYH/hVtHD03hFJy+g4HTm/oiliv6d/7pgmEgFH4kNIQ5hvCOO0NZhWDDeqiSa 3zjcVCBIYuKAKS54SM8gd5etNvtQlFJ1RQIYY4GLitFAA8K4CWnVc+xQxeuV9wyj J4TTNPMMON9b9/KNsvWRc3VpqJ79/GxKDnAJLYtxSE5meCy5zTYY9AP19+inme1K Sm3HspR+N+khx+e//Hjw9guV883fxGDrmScsrLdgqQSpQqTRpagAJXdNswCkqUWH 87Ye1F1a4qTLXQ== -----END CERTIFICATE-----Generated at Wed Feb 4 12:31:19 2026 by rpki-client