This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json) Hash identifier: uBBqQwB3IOb8oIzYCcZekJRpI7YZPu6IY1BqQkxJ5o8= Subject key identifier: 31:75:18:B6:7D:46:44:0C:4C:76:33:2A:D2:E8:D5:75:82:DF:03:D3 Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Certificate serial: 019C40FD8E0138E1A420728C3CCD21BE7701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:01:24 +0000 Manifest this update: Mon 09 Feb 2026 06:01:24 +0000 Manifest next update: Tue 10 Feb 2026 06:01:24 +0000 Files and hashes: 1: EkKLuZw4LV_kTAmqXpErqPpsQB0.roa (hash: NBo+lqt+AsFMxVrnLsaa8l21I1AWQ5KFNlmQ5ApE1BQ=) 2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: ue+xvIelem9hMCz8/jbpP+gUP7oL+Z3GU+Ow+BUhjSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:8e:01:38:e1:a4:20:72:8c:3c:cd:21:be:77:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Validity Not Before: Feb 9 06:01:24 2026 GMT Not After : Feb 10 06:01:24 2026 GMT Subject: CN=317518b67d46440c4c76332ad2e8d57582df03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:78:f4:77:c2:dd:89:66:d4:38:ba:3e:5a: 7c:35:6e:5a:50:23:63:05:30:dc:0c:47:da:cb:58: 9e:98:71:be:45:d7:8f:4f:3a:dd:8b:ea:ed:44:61: e0:10:4a:8d:b9:1b:cb:82:e5:a3:55:6d:f4:19:46: 13:38:4f:38:00:56:40:f7:3c:90:4a:59:8b:09:8f: 09:aa:1e:ca:93:f7:8c:e7:bb:10:eb:41:b8:de:05: 33:71:02:0f:88:6d:bd:db:16:6e:07:d7:c7:3e:d2: 69:54:34:59:41:cc:41:7c:58:f2:d2:ed:46:02:b4: 2e:19:f1:39:aa:27:a0:6e:ea:e4:07:fc:76:5a:50: 7b:b7:29:5a:38:f1:2b:1a:1e:1f:63:6c:2a:02:bc: 47:30:f6:05:15:58:8d:e0:51:b8:00:ec:04:0c:c0: 5a:1d:09:96:ac:a2:e1:44:6e:ea:06:f5:f0:2b:53: 83:f8:22:bd:63:a5:9c:13:d8:a0:20:e4:20:e6:d1: 08:1e:3f:38:ff:e6:17:20:e4:5b:79:37:d4:73:58: 32:6b:a7:56:f4:94:51:f1:f1:d0:5f:30:85:ab:05: f0:87:47:fb:4b:1e:bc:18:76:51:ea:05:d8:ff:27: de:9e:fc:42:c1:ff:3e:92:17:14:d8:82:e9:40:07: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:75:18:B6:7D:46:44:0C:4C:76:33:2A:D2:E8:D5:75:82:DF:03:D3 X509v3 Authority Key Identifier: keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:9f:a0:e9:ec:ec:21:e8:8c:e9:11:d1:40:70:30:f8:1b: 00:db:08:54:97:82:ba:f8:4c:62:4a:e0:b4:f7:21:c2:b3:0f: c1:e7:44:b9:57:25:3e:64:04:e4:06:58:9a:7f:69:b7:24:f9: 75:ac:4f:98:1c:a6:6a:f6:6c:42:80:38:80:2d:ba:9b:b9:eb: 11:fd:b9:35:8b:b1:0d:2c:ab:42:f4:54:e7:5e:17:54:97:6e: 64:33:59:b7:94:dc:c9:41:ff:9f:75:9b:3b:20:42:69:55:f1: e5:23:df:95:40:d1:84:d6:f4:5a:f2:e4:29:e3:55:6c:b1:8a: 66:93:9e:15:af:0d:9c:96:d3:bc:24:d0:59:dd:dc:d9:a3:8c: c8:3e:64:ba:a3:33:21:b5:05:97:a9:0d:90:c0:4b:f4:15:51: 67:a3:64:7d:ae:6a:75:2b:95:95:72:22:47:29:74:34:d3:3b: 1c:01:db:9a:82:f7:f4:ee:03:e3:0a:39:8b:09:5e:4f:21:e2: 6b:cd:4d:e0:b6:de:3a:de:a4:9f:bf:99:31:82:ef:12:48:17: c6:5f:80:b2:2f:c9:00:d2:7c:aa:f3:76:71:50:6b:0e:d9:52: f9:96:6e:b9:eb:cb:0d:64:12:f0:9b:76:ac:a1:fd:df:53:71: d4:14:6a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Y4BOOGkIHKMPM0hvncBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz MGM3NTcwHhcNMjYwMjA5MDYwMTI0WhcNMjYwMjEwMDYwMTI0WjAzMTEwLwYDVQQD EygzMTc1MThiNjdkNDY0NDBjNGM3NjMzMmFkMmU4ZDU3NTgyZGYwM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscx49HfC3Ylm1Di6Plp8NW5aUCNj BTDcDEfay1iemHG+RdePTzrdi+rtRGHgEEqNuRvLguWjVW30GUYTOE84AFZA9zyQ SlmLCY8Jqh7Kk/eM57sQ60G43gUzcQIPiG292xZuB9fHPtJpVDRZQcxBfFjy0u1G ArQuGfE5qiegburkB/x2WlB7tylaOPErGh4fY2wqArxHMPYFFViN4FG4AOwEDMBa HQmWrKLhRG7qBvXwK1OD+CK9Y6WcE9igIOQg5tEIHj84/+YXIORbeTfUc1gya6dW 9JRR8fHQXzCFqwXwh0f7Sx68GHZR6gXY/yfenvxCwf8+khcU2ILpQAfP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF1GLZ9RkQMTHYzKtLo1XWC3wPTMB8GA1UdIwQY MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt MzUzNGM4YzVhMzUxLzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWqfoOns 7CHojOkR0UBwMPgbANsIVJeCuvhMYkrgtPchwrMPwedEuVclPmQE5AZYmn9ptyT5 daxPmBymavZsQoA4gC26m7nrEf25NYuxDSyrQvRU514XVJduZDNZt5TcyUH/n3Wb OyBCaVXx5SPflUDRhNb0WvLkKeNVbLGKZpOeFa8NnJbTvCTQWd3c2aOMyD5kuqMz IbUFl6kNkMBL9BVRZ6Nkfa5qdSuVlXIiRyl0NNM7HAHbmoL39O4D4wo5iwleTyHi a81N4LbeOt6kn7+ZMYLvEkgXxl+Asi/JANJ8qvN2cVBrDtlS+ZZuuevLDWQS8Jt2 rKH931Nx1BRq4A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:54 2026 by rpki-client