This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json) Hash identifier: ZMOLfP5sZApnpfdvnZ/l8kN8+/Gbqon28SyCYDWMMhQ= Subject key identifier: 07:BF:19:40:19:86:A6:A7:FC:D0:0D:1A:AF:1F:83:E1:0C:D1:81:B5 Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22 Certificate serial: 019C41D8DA3C362FEB3976A61010A00A95AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 10:00:56 +0000 Manifest this update: Mon 09 Feb 2026 10:00:56 +0000 Manifest next update: Tue 10 Feb 2026 10:00:56 +0000 Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: qWrIy5UmCp6vDLpdm2NpIR72+vL7hN8lLt/ICZW8Sco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:da:3c:36:2f:eb:39:76:a6:10:10:a0:0a:95:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89703a9823512b18d176e362ea023ca824784d22 Validity Not Before: Feb 9 10:00:56 2026 GMT Not After : Feb 10 10:00:56 2026 GMT Subject: CN=07bf19401986a6a7fcd00d1aaf1f83e10cd181b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:00:57:e3:50:ed:8d:88:4f:3a:b0:ff:35: 99:20:31:38:62:c0:d4:4b:df:b4:9a:9e:af:c8:86: 61:79:40:bc:79:5b:53:17:0d:eb:db:24:83:78:bb: 01:73:41:a3:cd:3a:09:90:56:a1:04:30:de:a3:e5: 71:72:9b:f5:e9:31:2d:ec:d7:7c:47:26:67:92:cc: c4:2f:ee:08:0c:c9:93:cf:79:e9:d6:e1:21:dc:15: f0:5c:df:06:70:16:c8:ea:e0:ba:8b:45:29:f4:03: 1d:40:55:48:a5:bd:bb:68:3c:5d:d8:95:bb:7c:a1: 0d:f1:cf:4d:13:da:de:e5:53:13:c5:91:5b:c9:9f: 7d:a9:a7:c5:57:17:31:2d:f8:bb:9d:64:03:fb:50: 44:ec:12:83:7c:d1:f4:03:39:6b:62:74:3c:48:a7: ff:13:48:fa:a9:d6:42:98:31:c9:ec:85:5d:cd:2d: 6e:de:1a:1a:dc:ea:9a:99:bd:7c:b3:18:eb:8d:b7: a5:1a:13:ee:dc:57:d1:6a:5b:f2:35:ef:b6:31:dd: 0f:16:e0:5e:c8:9e:18:97:e0:30:bc:8e:4f:88:d7: 0d:fc:e6:92:9e:8f:ba:3e:2f:ee:1b:0b:af:39:fc: 55:24:2f:e3:15:54:e2:f6:d0:02:ec:0f:79:9a:aa: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BF:19:40:19:86:A6:A7:FC:D0:0D:1A:AF:1F:83:E1:0C:D1:81:B5 X509v3 Authority Key Identifier: keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ec:20:06:aa:bd:8e:da:34:45:49:98:cb:4d:ac:cc:4e:a5: 92:3e:32:64:b5:4b:cd:d4:83:fc:5e:71:48:e4:b1:76:8b:8e: 82:91:8a:ee:cb:4f:27:52:b7:9e:9e:09:8e:20:5e:4b:6d:d3: 32:bd:14:63:ca:4b:52:38:76:59:02:0a:39:3e:dc:db:ba:2e: e4:63:8c:ae:04:62:ee:58:a0:40:87:98:d2:74:ab:85:03:41: a7:c8:ce:9c:74:89:b4:55:32:60:84:00:22:a5:7b:5d:25:54: 77:89:be:43:d1:8f:85:c3:63:4a:1c:9a:58:db:dd:cc:48:60: 09:a6:b6:54:1f:9b:e0:51:b3:ee:a1:93:2d:0c:62:3d:56:84: f0:8b:9b:7f:fd:9b:ba:3a:60:d5:8c:6e:9c:16:3c:f8:77:d1: e2:48:4a:f5:cf:ec:40:62:09:b4:82:95:1d:f8:b4:6c:8a:fd: 04:27:84:f0:ad:77:11:bc:90:62:c9:d4:98:03:4b:28:8a:3a: ab:55:fb:8b:8c:6d:41:3c:6a:7f:87:de:fe:af:df:4e:b2:59: 89:c6:f3:09:4b:2c:2d:35:5e:db:8a:fd:b8:75:02:0d:9e:c8: c1:8f:e6:fe:d0:2e:6c:5f:eb:c9:cc:b0:04:9f:5d:4f:e0:14: af:a8:91:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2No8Ni/rOXamEBCgCpWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzAzYTk4MjM1MTJiMThkMTc2ZTM2MmVhMDIzY2E4MjQ3 ODRkMjIwHhcNMjYwMjA5MTAwMDU2WhcNMjYwMjEwMTAwMDU2WjAzMTEwLwYDVQQD EygwN2JmMTk0MDE5ODZhNmE3ZmNkMDBkMWFhZjFmODNlMTBjZDE4MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA354AV+NQ7Y2ITzqw/zWZIDE4YsDU S9+0mp6vyIZheUC8eVtTFw3r2ySDeLsBc0GjzToJkFahBDDeo+Vxcpv16TEt7Nd8 RyZnkszEL+4IDMmTz3np1uEh3BXwXN8GcBbI6uC6i0Up9AMdQFVIpb27aDxd2JW7 fKEN8c9NE9re5VMTxZFbyZ99qafFVxcxLfi7nWQD+1BE7BKDfNH0AzlrYnQ8SKf/ E0j6qdZCmDHJ7IVdzS1u3hoa3Oqamb18sxjrjbelGhPu3FfRalvyNe+2Md0PFuBe yJ4Yl+AwvI5PiNcN/OaSno+6Pi/uGwuvOfxVJC/jFVTi9tAC7A95mqpLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAe/GUAZhqan/NANGq8fg+EM0YG1MB8GA1UdIwQY MBaAFIlwOpgjUSsY0XbjYuoCPKgkeE0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAt NTIyNjkwYmU1NDhkLzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAtNTIyNjkwYmU1NDhk LzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOwgBqq9 jto0RUmYy02szE6lkj4yZLVLzdSD/F5xSOSxdouOgpGK7stPJ1K3np4JjiBeS23T Mr0UY8pLUjh2WQIKOT7c27ou5GOMrgRi7ligQIeY0nSrhQNBp8jOnHSJtFUyYIQA IqV7XSVUd4m+Q9GPhcNjShyaWNvdzEhgCaa2VB+b4FGz7qGTLQxiPVaE8Iubf/2b ujpg1YxunBY8+HfR4khK9c/sQGIJtIKVHfi0bIr9BCeE8K13EbyQYsnUmANLKIo6 q1X7i4xtQTxqf4fe/q/fTrJZicbzCUssLTVe24r9uHUCDZ7IwY/m/tAubF/rycyw BJ9dT+AUr6iRvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:25 2026 by rpki-client