This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft File: IzwGR7WIf4X8n40UqN5aNp6-5k8.mft (raw, json) Hash identifier: pGCzdjv30roxKIOudSAbl9Abu0ecWciuUCxZ1N5b8K8= Subject key identifier: A5:6C:98:2E:7C:C6:FA:86:91:2A:CE:B7:F1:EB:3B:A5:15:94:38:1C Authority key identifier: 23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F Certificate issuer: /CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f Certificate serial: 019C42B47C7E334C6EF009F918F5015D2B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft Manifest number: 09 Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: IzwGR7WIf4X8n40UqN5aNp6-5k8.crl (hash: eGUzIh2Njec/9BzOO3jRcMqvsH509B45qk160GEia4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7c:7e:33:4c:6e:f0:09:f9:18:f5:01:5d:2b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=a56c982e7cc6fa86912aceb7f1eb3ba51594381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:41:06:4c:ac:0b:18:e4:ce:95:16:df:f2: b0:a7:e7:d3:d6:fa:89:1e:a9:ef:6e:cc:14:0a:0e: 3c:6c:09:b7:06:e7:38:d4:23:c4:86:fd:99:47:47: 8b:8b:d9:2e:eb:60:0c:e8:f8:9f:e9:56:50:be:71: d7:3e:15:2a:ff:4f:1b:7e:2a:b6:45:65:01:b5:2a: b8:e2:70:0b:8e:c1:bd:3a:63:f9:60:92:c3:2a:9c: 9e:1c:33:1a:e3:25:ba:78:b4:8e:3d:25:01:37:ae: 91:32:4d:01:28:84:bc:3c:ee:c4:f5:4b:0c:29:c5: b0:1c:a6:76:92:bd:6e:6e:1e:98:70:8d:5b:6d:0d: 42:42:e5:45:71:67:01:67:3c:fe:9a:93:3c:45:17: d2:3d:c9:82:5b:b5:bd:14:01:4d:bb:3f:1d:90:d2: c8:9b:2d:0c:89:58:f6:a3:cb:2b:09:41:93:43:76: 8f:fa:58:7c:53:85:99:60:be:80:7e:de:ab:ed:3e: aa:30:ae:18:0f:9e:fd:41:f8:63:62:86:fa:85:f7: ab:44:c3:42:a1:97:26:25:f1:e9:b4:a5:8a:e3:85: ad:88:5f:73:d0:bb:d7:6a:41:f7:58:ec:e5:17:a1: dd:fb:3d:ec:8a:fe:3e:af:69:0a:d2:6d:b7:ab:85: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6C:98:2E:7C:C6:FA:86:91:2A:CE:B7:F1:EB:3B:A5:15:94:38:1C X509v3 Authority Key Identifier: keyid:23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:20:8b:52:1c:71:b0:95:6f:3e:f9:97:85:09:81:a8:fb:24: de:fa:ef:f5:fe:e5:e2:68:be:b5:31:cb:6f:a3:81:04:bd:da: 6a:db:8a:fa:e5:65:b3:8f:09:29:50:49:86:4f:8c:6e:6c:b0: fe:17:05:77:25:82:47:43:4d:0d:e3:b4:db:ce:0e:42:bf:a1: 0e:56:5c:4a:36:1c:bc:90:4b:54:b6:62:35:cc:c7:b9:35:f7: 46:ec:e6:01:d2:56:51:31:7d:2d:7f:c7:9b:74:6a:66:f6:e0: d6:d5:ed:d0:79:a6:38:f3:1d:4e:ca:14:fe:79:3b:73:31:78: 55:72:61:76:42:8e:5d:7f:44:86:9b:ac:e0:95:b3:ad:1a:fb: 74:82:b5:ea:e7:d8:bd:b2:72:0c:bc:f5:81:0e:f1:0d:fa:32: 25:63:7c:64:6c:2e:f2:33:b7:b6:10:37:bd:67:6f:9e:62:fa: 80:97:05:b5:37:d9:c6:03:85:5c:76:2e:3f:23:9f:75:4f:d9: 85:11:c3:25:5a:44:9e:62:ee:42:c0:57:26:e3:e2:73:3e:3d: ae:32:fa:fc:27:66:fb:78:0f:8a:c5:9c:6c:9f:fa:ec:76:7e: 4c:24:41:bd:37:3b:91:58:b6:ef:e8:22:26:2f:3e:fe:5c:9c: 20:6d:e3:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHx+M0xu8An5GPUBXSsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2MwNjQ3YjU4ODdmODVmYzlmOGQxNGE4ZGU1YTM2OWVi ZWU2NGYwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EyhhNTZjOTgyZTdjYzZmYTg2OTEyYWNlYjdmMWViM2JhNTE1OTQzODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo9BBkysCxjkzpUW3/Kwp+fT1vqJ HqnvbswUCg48bAm3Buc41CPEhv2ZR0eLi9ku62AM6Pif6VZQvnHXPhUq/08bfiq2 RWUBtSq44nALjsG9OmP5YJLDKpyeHDMa4yW6eLSOPSUBN66RMk0BKIS8PO7E9UsM KcWwHKZ2kr1ubh6YcI1bbQ1CQuVFcWcBZzz+mpM8RRfSPcmCW7W9FAFNuz8dkNLI my0MiVj2o8srCUGTQ3aP+lh8U4WZYL6Aft6r7T6qMK4YD579QfhjYob6hferRMNC oZcmJfHptKWK44WtiF9z0LvXakH3WOzlF6Hd+z3siv4+r2kK0m23q4X3WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVsmC58xvqGkSrOt/HrO6UVlDgcMB8GA1UdIwQY MBaAFCM8Bke1iH+F/J+NFKjeWjaevuZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83ZTJjNjEtNjk4OS00MTRiLWJlY2Yt OWRhY2Y5MzcyNWQxLzEvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83ZTJjNjEtNjk4OS00MTRiLWJlY2YtOWRhY2Y5MzcyNWQx LzEvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSCLUhxx sJVvPvmXhQmBqPsk3vrv9f7l4mi+tTHLb6OBBL3aatuK+uVls48JKVBJhk+Mbmyw /hcFdyWCR0NNDeO0284OQr+hDlZcSjYcvJBLVLZiNczHuTX3RuzmAdJWUTF9LX/H m3RqZvbg1tXt0HmmOPMdTsoU/nk7czF4VXJhdkKOXX9Ehpus4JWzrRr7dIK16ufY vbJyDLz1gQ7xDfoyJWN8ZGwu8jO3thA3vWdvnmL6gJcFtTfZxgOFXHYuPyOfdU/Z hRHDJVpEnmLuQsBXJuPicz49rjL6/Cdm+3gPisWcbJ/67HZ+TCRBvTc7kVi27+gi Ji8+/lycIG3j+w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:58 2026 by rpki-client