This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json) Hash identifier: fYyVyB8yrt6x59GoCZd324ys/s9s/60KBYrkaKmlkkg= Subject key identifier: CE:D8:71:E1:FD:69:67:35:63:0D:48:AF:C8:8D:04:FA:65:93:A4:D6 Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d Certificate serial: 019C427D451C0F19F2895B0B19F03859ED94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft Manifest number: 1140 Signing time: Mon 09 Feb 2026 13:00:31 +0000 Manifest this update: Mon 09 Feb 2026 13:00:31 +0000 Manifest next update: Tue 10 Feb 2026 13:00:31 +0000 Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: hKqt2F3zVNg7UFDvD2gARenM64lKsQMXPvVt8qjgsFk=) 2: v2k0Z2ANI4HpUtzeG5E2tPsoW1g.roa (hash: tCUybVD79wplSeTPTl/iXVsu/t1DC6P3qKe+acUwYhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:45:1c:0f:19:f2:89:5b:0b:19:f0:38:59:ed:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d Validity Not Before: Feb 9 13:00:31 2026 GMT Not After : Feb 10 13:00:31 2026 GMT Subject: CN=ced871e1fd696735630d48afc88d04fa6593a4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:68:4b:e7:79:29:a3:de:80:aa:57:7e:4f: 2a:d9:40:55:5d:90:47:f8:fe:31:57:24:82:ad:dc: 67:8e:20:69:a9:2d:53:a2:c4:a5:05:a0:8e:11:6b: 31:32:9f:23:fc:37:73:22:ce:97:a9:b3:3c:79:ae: f1:5a:5a:f6:c3:3c:31:56:01:cd:b3:1c:58:9f:8c: f4:2d:8b:56:b2:fc:87:27:ec:90:de:66:6b:dc:7e: 65:e5:fd:83:52:d3:8d:d7:ff:1c:e9:30:c2:ec:a0: 8a:12:98:e2:a4:41:b5:dd:41:dc:22:c8:a8:87:2f: 24:6a:52:fc:31:fc:95:b1:f5:9f:c8:82:af:53:a5: f7:96:8b:1c:7e:47:07:bc:9c:e8:ef:0f:c2:51:db: a9:88:cb:d5:27:e6:7c:f2:4e:dd:26:3a:dc:b7:77: 3a:12:f2:9f:74:cd:b3:36:14:a7:81:61:96:ed:05: 71:14:cb:6b:ea:c3:45:15:d6:f4:b8:69:6c:02:a3: 56:d8:59:c9:3d:72:a0:39:af:db:f7:cf:a0:ad:e8: 49:b7:b3:39:5c:c9:8c:12:c4:4f:7f:6a:d3:c1:d7: d1:9b:e4:5e:74:53:d8:ef:98:db:8d:8a:0a:85:f3: 87:59:cb:30:5b:05:b1:96:dd:bb:e9:0d:21:5d:f2: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:71:E1:FD:69:67:35:63:0D:48:AF:C8:8D:04:FA:65:93:A4:D6 X509v3 Authority Key Identifier: keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e4:7d:82:3e:36:d2:09:d7:ba:64:37:2a:42:8e:7c:22:04: 05:f8:a1:6a:ec:48:1f:28:98:ce:fe:6e:c2:17:29:e4:0a:f8: 53:1d:f7:ca:d0:f0:6d:79:bf:ba:9b:32:70:7d:79:e5:a0:75: 0a:a6:28:df:82:50:77:10:3e:0c:4a:81:1a:5a:40:c4:2f:be: 1f:90:53:38:51:6f:95:de:d2:e9:c1:9d:a7:04:c6:d7:2b:04: 89:4d:af:f1:8c:df:00:06:0e:96:7b:00:c5:83:61:c0:fe:a4: 80:5b:ef:5d:57:f9:39:28:09:c9:41:da:1f:e4:7b:92:dc:b0: e4:2e:91:cc:4e:6c:2d:aa:68:48:8c:04:d8:da:72:6f:24:ec: 4d:78:6a:55:7f:82:a9:a0:34:3d:89:5e:87:31:86:c1:76:ae: c6:60:11:3d:17:8e:07:5a:24:fa:91:88:d4:57:4f:d2:8b:90: d7:6b:1d:96:9b:01:cb:85:ce:f2:ac:f1:c9:b8:26:6f:e5:33: 18:c4:e0:c4:89:1c:52:d3:f5:f2:ba:9c:8f:07:79:ac:7e:ab: 0e:40:8e:99:2d:c2:78:27:26:bb:d5:fd:a9:bc:fc:ee:51:bb: a6:e0:67:b6:db:17:cc:a1:e7:e1:00:82:fc:4b:a6:38:31:c9: 94:76:41:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUUcDxnyiVsLGfA4We2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm ZjAzOWQwHhcNMjYwMjA5MTMwMDMxWhcNMjYwMjEwMTMwMDMxWjAzMTEwLwYDVQQD EyhjZWQ4NzFlMWZkNjk2NzM1NjMwZDQ4YWZjODhkMDRmYTY1OTNhNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtxoS+d5KaPegKpXfk8q2UBVXZBH +P4xVySCrdxnjiBpqS1TosSlBaCOEWsxMp8j/DdzIs6XqbM8ea7xWlr2wzwxVgHN sxxYn4z0LYtWsvyHJ+yQ3mZr3H5l5f2DUtON1/8c6TDC7KCKEpjipEG13UHcIsio hy8kalL8MfyVsfWfyIKvU6X3loscfkcHvJzo7w/CUdupiMvVJ+Z88k7dJjrct3c6 EvKfdM2zNhSngWGW7QVxFMtr6sNFFdb0uGlsAqNW2FnJPXKgOa/b98+grehJt7M5 XMmMEsRPf2rTwdfRm+RedFPY75jbjYoKhfOHWcswWwWxlt276Q0hXfL6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7YceH9aWc1Yw1Ir8iNBPplk6TWMB8GA1UdIwQY MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOR9gj42 0gnXumQ3KkKOfCIEBfihauxIHyiYzv5uwhcp5Ar4Ux33ytDwbXm/upsycH155aB1 CqYo34JQdxA+DEqBGlpAxC++H5BTOFFvld7S6cGdpwTG1ysEiU2v8YzfAAYOlnsA xYNhwP6kgFvvXVf5OSgJyUHaH+R7ktyw5C6RzE5sLapoSIwE2NpybyTsTXhqVX+C qaA0PYlehzGGwXauxmARPReOB1ok+pGI1FdP0ouQ12sdlpsBy4XO8qzxybgmb+Uz GMTgxIkcUtP18rqcjwd5rH6rDkCOmS3CeCcmu9X9qbz87lG7puBnttsXzKHn4QCC /EumODHJlHZByg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:31 2026 by rpki-client