This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json) Hash identifier: CBD31v4CkyMgfnPV2GSu16Fl9EF7aiKc8lX2xXbu5+Q= Subject key identifier: 74:E8:0A:06:DF:09:84:37:78:EB:93:8D:BC:3C:EE:87:8C:24:2D:67 Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Certificate serial: 019C42B4A16B8B59EA31C8833F484F6428EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:59 +0000 Manifest this update: Mon 09 Feb 2026 14:00:59 +0000 Manifest next update: Tue 10 Feb 2026 14:00:59 +0000 Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=) 2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: yzpWykDp0IC3DJghiUEqmJHVsQwpHOjzSWZUm7VZ4yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:a1:6b:8b:59:ea:31:c8:83:3f:48:4f:64:28:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Validity Not Before: Feb 9 14:00:59 2026 GMT Not After : Feb 10 14:00:59 2026 GMT Subject: CN=74e80a06df09843778eb938dbc3cee878c242d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:8f:34:c6:ac:48:58:e1:9d:a5:3b:f0:4d: e0:29:65:3c:22:e9:38:fd:65:41:a4:1a:f7:99:2e: b2:0b:a6:94:5c:fe:1c:3f:21:c8:0b:f0:5b:f4:cd: 72:6d:3d:7e:79:82:a5:33:0f:9a:d9:40:1f:2c:e9: 9b:00:a6:f4:9d:b7:0a:40:60:3c:66:3c:05:65:22: ca:89:77:5e:e3:8c:f7:6c:de:28:d3:84:70:a1:92: 65:8f:5d:a6:bb:44:ef:44:6d:d6:65:f0:3c:72:74: 94:65:a7:6d:d0:9b:ee:46:2e:a5:5f:bb:9b:c8:c0: 43:da:ae:58:33:78:92:b2:25:04:4f:1c:6c:3f:7e: c8:43:f5:bc:c3:ae:1b:04:fb:f8:c5:a2:fd:b3:e1: e4:1d:5a:17:2c:cc:c8:ce:8b:7e:1c:13:3c:56:09: 2e:be:eb:17:04:e6:6f:9e:b6:7f:d8:39:c0:04:74: 32:ac:52:1c:07:0e:b0:23:32:6b:8c:e6:e1:68:03: 3b:07:b9:be:d3:52:9d:4c:8b:09:27:0b:0c:d1:06: fd:c7:9d:3d:4f:3a:0c:fa:98:bf:36:0c:04:78:45: f2:0b:a4:56:fd:2e:e0:21:2b:e8:d5:c9:63:57:be: 01:2c:0e:0f:58:f5:8c:cd:9c:6c:85:70:cc:c5:64: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:0A:06:DF:09:84:37:78:EB:93:8D:BC:3C:EE:87:8C:24:2D:67 X509v3 Authority Key Identifier: keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:da:c2:f3:ae:d9:7c:81:45:34:bd:05:72:63:a3:8d:69:ea: f4:21:0e:13:87:59:1b:92:5f:5e:2a:ac:d1:bf:a7:ff:cf:e9: c0:cc:aa:71:53:6d:3b:ab:89:18:04:f4:8a:cd:65:9e:83:18: e0:e3:01:01:60:f7:91:36:e7:ed:e1:58:59:3b:b7:93:8b:30: aa:7b:d0:32:00:c4:b3:59:66:50:d4:5d:18:69:14:40:74:ae: f4:9f:0d:50:e0:b0:fd:2c:ba:7e:d8:39:80:b9:46:86:53:fc: b6:92:69:60:7f:22:a3:c4:c0:ce:d6:09:62:5e:fa:81:5e:43: 9d:1e:86:ea:dc:c5:93:57:b5:c7:82:2e:eb:21:0e:2b:da:b7: 6b:f1:db:f0:81:65:58:ea:60:36:bb:3c:4f:e6:a0:a8:7c:b5: a0:2a:21:77:90:31:e1:39:9d:18:4f:1c:61:03:50:62:95:31: 07:ab:38:d3:5c:09:db:60:28:c2:93:40:b4:c1:75:29:2b:18: 0e:9e:84:72:c1:9c:39:73:24:d3:26:ef:69:1d:81:a7:f2:2f: 8f:d2:a0:04:84:71:74:16:e8:04:57:dc:a3:8e:24:0b:f3:35: 75:b9:21:e7:b2:ca:04:50:9e:f8:88:1c:27:55:05:ad:20:aa: 72:da:3f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtKFri1nqMciDP0hPZCjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl ZDBlM2YwHhcNMjYwMjA5MTQwMDU5WhcNMjYwMjEwMTQwMDU5WjAzMTEwLwYDVQQD Eyg3NGU4MGEwNmRmMDk4NDM3NzhlYjkzOGRiYzNjZWU4NzhjMjQyZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ePNMasSFjhnaU78E3gKWU8Iuk4 /WVBpBr3mS6yC6aUXP4cPyHIC/Bb9M1ybT1+eYKlMw+a2UAfLOmbAKb0nbcKQGA8 ZjwFZSLKiXde44z3bN4o04RwoZJlj12mu0TvRG3WZfA8cnSUZadt0JvuRi6lX7ub yMBD2q5YM3iSsiUETxxsP37IQ/W8w64bBPv4xaL9s+HkHVoXLMzIzot+HBM8Vgku vusXBOZvnrZ/2DnABHQyrFIcBw6wIzJrjObhaAM7B7m+01KdTIsJJwsM0Qb9x509 TzoM+pi/NgwEeEXyC6RW/S7gISvo1cljV74BLA4PWPWMzZxshXDMxWTA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHToCgbfCYQ3eOuTjbw87oeMJC1nMB8GA1UdIwQY MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt NGQ4ZTkwZTAzMzNiLzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9rC867Z fIFFNL0FcmOjjWnq9CEOE4dZG5JfXiqs0b+n/8/pwMyqcVNtO6uJGAT0is1lnoMY 4OMBAWD3kTbn7eFYWTu3k4swqnvQMgDEs1lmUNRdGGkUQHSu9J8NUOCw/Sy6ftg5 gLlGhlP8tpJpYH8io8TAztYJYl76gV5DnR6G6tzFk1e1x4Iu6yEOK9q3a/Hb8IFl WOpgNrs8T+agqHy1oCohd5Ax4TmdGE8cYQNQYpUxB6s401wJ22AowpNAtMF1KSsY Dp6EcsGcOXMk0ybvaR2Bp/Ivj9KgBIRxdBboBFfco44kC/M1dbkh57LKBFCe+Igc J1UFrSCqcto/fQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:29 2026 by rpki-client