This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft File: IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft (raw, json) Hash identifier: 3aClffPf09gPKpuclYPhSh12rXpnlVv+uaVy0prJrZE= Subject key identifier: FB:0B:63:4E:1C:98:36:64:3B:44:3D:1D:F3:EF:56:16:50:20:94:63 Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34 Certificate issuer: /CN=229a038176c796ea4f2769f6be3cace1a3597634 Certificate serial: 019C42EB067824CFA037C203384AD8E6D90B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:24 +0000 Manifest this update: Mon 09 Feb 2026 15:00:24 +0000 Manifest next update: Tue 10 Feb 2026 15:00:24 +0000 Files and hashes: 1: 9muaEb76gYCulXMmMLPDvSg3Tfs.roa (hash: V31luJDNiwqlc5PDFE/H4c6gZhVQ7dVXjrntc2C134k=) 2: IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl (hash: uMX3Z5gli/EBkt5b/8aoVwvYWyYlWKOx/zf7MJK9uyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:06:78:24:cf:a0:37:c2:03:38:4a:d8:e6:d9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634 Validity Not Before: Feb 9 15:00:24 2026 GMT Not After : Feb 10 15:00:24 2026 GMT Subject: CN=fb0b634e1c9836643b443d1df3ef561650209463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:90:8e:74:08:ef:cc:03:ac:98:7b:be:4c: 02:b9:1d:b9:1c:4c:d0:0c:ba:39:00:0d:4f:12:f7: df:94:49:44:66:ed:47:5a:94:c2:2a:3e:5b:72:55: ef:c8:76:06:30:eb:ac:36:cc:cd:ca:4d:ae:ae:2e: d9:3d:89:99:c5:28:72:b1:6f:0b:24:46:28:dd:27: 14:49:3b:cb:57:0f:e5:88:7b:dc:26:99:91:8e:10: 92:9f:c8:8f:5b:5a:b6:a4:04:05:0f:78:18:ce:29: 16:cc:ca:99:bd:8f:5f:28:9f:36:38:44:ac:a0:13: 4d:a8:7c:7e:35:38:bf:90:b1:fb:bd:f7:56:f3:8d: f0:04:e4:f8:de:78:d3:26:1b:76:a7:a5:0f:3f:3a: 67:f6:61:02:f6:b3:d7:dd:2f:ed:5f:a9:75:6c:93: 33:ed:7d:d4:69:2d:cd:4a:e6:81:f4:91:df:5f:41: d7:ba:c8:eb:b7:70:36:ba:14:43:ad:67:a6:0f:a4: bf:0d:28:57:02:70:50:c4:3d:6b:95:ac:8e:77:ed: b1:68:b8:f4:d0:ea:d2:55:06:3e:18:e8:39:12:2a: 3e:39:7a:0a:73:32:6a:fa:82:db:23:60:4c:a2:0a: cc:2c:d7:5c:6f:ae:ff:8d:31:72:d0:1f:91:ec:24: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0B:63:4E:1C:98:36:64:3B:44:3D:1D:F3:EF:56:16:50:20:94:63 X509v3 Authority Key Identifier: keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:f2:da:11:3f:28:b2:0a:ac:86:7f:ac:e2:57:e9:03:37: 78:51:30:ac:0b:95:fe:8d:a2:3e:97:9b:d7:93:69:59:47:c3: 47:b9:68:1e:97:5e:e3:64:27:a7:90:3d:0e:3d:a5:f4:be:1e: fc:43:c3:d6:13:82:a8:d8:06:49:51:e7:6c:fa:a6:b0:a9:f9: 85:c3:17:6f:2b:7f:e3:ea:60:1e:c1:6e:b6:7d:c2:43:7d:f9: 1c:33:ae:f8:00:09:75:a7:22:d3:d0:b5:7e:8d:88:be:d5:30: ea:4b:89:1e:06:d2:29:26:c7:b3:a7:e5:8e:1b:43:cf:9d:a2: 59:37:60:02:55:d1:ed:d2:df:a2:f6:87:4f:17:2e:a3:3d:1b: 2d:6f:a7:0b:6c:f1:a6:f0:a9:89:ea:2e:c1:30:4e:89:47:a4: 13:e4:d2:7a:cb:8b:fd:df:89:25:6e:0d:30:57:16:14:49:81: 3d:2f:dc:c0:57:0f:32:15:c8:d7:fe:72:10:2b:1a:49:b6:10: 5e:b9:4b:27:bb:09:44:c1:d0:82:dc:ae:5a:2b:e2:f2:31:d6: f3:92:cf:c1:99:38:62:b4:b0:b5:3c:59:56:ab:e0:bb:91:d5: 61:ed:a9:21:9b:a3:ff:af:3a:b9:f2:82:24:75:ac:fb:7e:7f: 08:b5:a3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wZ4JM+gN8IDOErY5tkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOWEwMzgxNzZjNzk2ZWE0ZjI3NjlmNmJlM2NhY2UxYTM1 OTc2MzQwHhcNMjYwMjA5MTUwMDI0WhcNMjYwMjEwMTUwMDI0WjAzMTEwLwYDVQQD EyhmYjBiNjM0ZTFjOTgzNjY0M2I0NDNkMWRmM2VmNTYxNjUwMjA5NDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/mQjnQI78wDrJh7vkwCuR25HEzQ DLo5AA1PEvfflElEZu1HWpTCKj5bclXvyHYGMOusNszNyk2uri7ZPYmZxShysW8L JEYo3ScUSTvLVw/liHvcJpmRjhCSn8iPW1q2pAQFD3gYzikWzMqZvY9fKJ82OESs oBNNqHx+NTi/kLH7vfdW843wBOT43njTJht2p6UPPzpn9mEC9rPX3S/tX6l1bJMz 7X3UaS3NSuaB9JHfX0HXusjrt3A2uhRDrWemD6S/DShXAnBQxD1rlayOd+2xaLj0 0OrSVQY+GOg5Eio+OXoKczJq+oLbI2BMogrMLNdcb67/jTFy0B+R7CS7QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsLY04cmDZkO0Q9HfPvVhZQIJRjMB8GA1UdIwQY MBaAFCKaA4F2x5bqTydp9r48rOGjWXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQt ZGMyMzAxZmJiYjdjLzEvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQtZGMyMzAxZmJiYjdj LzEvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0jy2hE/ KLIKrIZ/rOJX6QM3eFEwrAuV/o2iPpeb15NpWUfDR7loHpde42Qnp5A9Dj2l9L4e /EPD1hOCqNgGSVHnbPqmsKn5hcMXbyt/4+pgHsFutn3CQ335HDOu+AAJdaci09C1 fo2IvtUw6kuJHgbSKSbHs6fljhtDz52iWTdgAlXR7dLfovaHTxcuoz0bLW+nC2zx pvCpieouwTBOiUekE+TSesuL/d+JJW4NMFcWFEmBPS/cwFcPMhXI1/5yECsaSbYQ XrlLJ7sJRMHQgtyuWivi8jHW85LPwZk4YrSwtTxZVqvgu5HVYe2pIZuj/686ufKC JHWs+35/CLWj9g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:38 2026 by rpki-client