This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json) Hash identifier: aaSyUmxIRC/tn1OelHQqhuVXMlHbNeQOxQ48TkYwo28= Subject key identifier: 55:67:DE:DD:F5:53:16:72:FE:FF:9A:A6:31:11:C7:41:94:0C:8E:0C Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430 Certificate serial: 019C420F7743CF8A229CA3C812B7182FFD0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft Manifest number: 131C Signing time: Mon 09 Feb 2026 11:00:35 +0000 Manifest this update: Mon 09 Feb 2026 11:00:35 +0000 Manifest next update: Tue 10 Feb 2026 11:00:35 +0000 Files and hashes: 1: DtLePmxN_wJv4PSLH6EKntHcVY0.roa (hash: U7UziCjdX8EIkcuGoidh45rKj+4qBu43u+i8Cgl9CBQ=) 2: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: /NhZGkfyV1Bu9gBrwz5fU+fqBaIhRPvdZ0ynDZgVMzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:77:43:cf:8a:22:9c:a3:c8:12:b7:18:2f:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430 Validity Not Before: Feb 9 11:00:35 2026 GMT Not After : Feb 10 11:00:35 2026 GMT Subject: CN=5567deddf5531672feff9aa63111c741940c8e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:68:28:ff:25:59:f4:f3:c1:20:e2:80:8a: b3:06:5f:7c:80:11:c9:48:52:61:55:cd:d9:89:bc: bc:c3:af:b3:3b:9f:b5:79:e0:24:43:21:e4:c3:1b: 92:bb:f3:22:7f:29:7a:f4:0a:ed:20:95:36:c7:85: 1b:05:9d:4f:10:e1:2d:96:66:c7:99:69:ac:e2:3c: d2:46:af:3b:9c:39:13:4e:8a:22:f3:00:a0:bd:b8: d9:1a:76:22:43:b3:7a:3c:0a:d9:c6:b6:0f:69:e9: e3:a1:bb:4f:57:b8:17:76:08:65:fa:80:5e:40:d4: bf:55:13:72:22:55:0a:5c:99:ee:f6:3d:a7:bf:51: d3:31:5b:34:eb:5b:3a:92:6e:ae:c7:39:83:2f:f9: f6:9a:3d:85:f8:2c:9e:5f:11:b1:f9:f3:e2:c4:70: 42:5e:a7:40:5b:bb:76:70:ce:33:56:29:e7:24:dd: 7d:d7:b8:f3:4e:43:05:7b:1e:67:35:89:d9:25:00: a6:d0:26:72:88:ab:dd:14:76:42:fe:3c:93:6f:4e: 1a:2a:a3:bb:2d:8c:7e:27:aa:e1:b9:7e:63:88:5f: a7:58:5f:2e:70:e7:c1:2f:e3:42:63:a3:c8:fd:f3: 6e:d7:5b:26:e8:4d:b4:cf:fa:33:a4:c4:19:94:57: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:DE:DD:F5:53:16:72:FE:FF:9A:A6:31:11:C7:41:94:0C:8E:0C X509v3 Authority Key Identifier: keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cb:9e:94:d7:cc:bc:ec:3a:8c:8f:a4:d1:fb:c7:bc:53:af: f7:0b:58:bc:e1:e9:59:9d:7c:56:82:c6:be:95:af:eb:87:53: a0:5a:82:90:73:64:9c:11:9e:23:3c:b8:9d:24:82:15:6c:6e: 13:e9:58:d3:a3:04:7f:a7:e4:fb:3a:92:4e:7e:d8:75:7f:d2: ee:fd:6e:91:f0:ba:2b:16:f5:71:84:f6:a5:9f:a3:ca:cb:39: 47:cc:45:1e:52:3c:5d:70:12:9a:e5:cd:68:c8:e3:65:9e:98: 50:61:15:1c:e2:8f:e9:74:fe:cc:b0:46:ed:ab:75:2a:cd:52: 23:0a:62:52:92:0f:f5:62:66:5c:07:82:c8:9c:c1:48:7c:0e: 3d:07:35:94:41:dd:b0:a0:f8:bc:eb:4a:21:a1:8b:8a:f3:cd: 33:93:d8:47:0a:00:2d:e4:73:4d:92:0d:5c:0d:f4:32:8c:fd: ca:64:c3:07:a7:a0:2c:a0:40:c7:ba:32:76:3d:1c:ba:d1:f7: 33:13:b8:57:a1:23:fe:bd:6b:18:e3:f3:61:fe:db:3e:dd:54: c1:a4:6f:35:d7:88:bc:48:d4:49:d8:6e:d1:85:3c:8a:87:82: 9c:f5:3f:16:45:62:a5:40:26:10:76:bb:20:0f:07:54:b4:c4: 6f:2c:4d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3dDz4oinKPIErcYL/0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy ZTg0MzAwHhcNMjYwMjA5MTEwMDM1WhcNMjYwMjEwMTEwMDM1WjAzMTEwLwYDVQQD Eyg1NTY3ZGVkZGY1NTMxNjcyZmVmZjlhYTYzMTExYzc0MTk0MGM4ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBloKP8lWfTzwSDigIqzBl98gBHJ SFJhVc3Ziby8w6+zO5+1eeAkQyHkwxuSu/Mifyl69ArtIJU2x4UbBZ1PEOEtlmbH mWms4jzSRq87nDkTTooi8wCgvbjZGnYiQ7N6PArZxrYPaenjobtPV7gXdghl+oBe QNS/VRNyIlUKXJnu9j2nv1HTMVs061s6km6uxzmDL/n2mj2F+CyeXxGx+fPixHBC XqdAW7t2cM4zVinnJN1917jzTkMFex5nNYnZJQCm0CZyiKvdFHZC/jyTb04aKqO7 LYx+J6rhuX5jiF+nWF8ucOfBL+NCY6PI/fNu11sm6E20z/ozpMQZlFc/zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVn3t31UxZy/v+apjERx0GUDI4MMB8GA1UdIwQY MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt ODRlMTFlNTFmMTM0LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0 LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMuelNfM vOw6jI+k0fvHvFOv9wtYvOHpWZ18VoLGvpWv64dToFqCkHNknBGeIzy4nSSCFWxu E+lY06MEf6fk+zqSTn7YdX/S7v1ukfC6Kxb1cYT2pZ+jyss5R8xFHlI8XXASmuXN aMjjZZ6YUGEVHOKP6XT+zLBG7at1Ks1SIwpiUpIP9WJmXAeCyJzBSHwOPQc1lEHd sKD4vOtKIaGLivPNM5PYRwoALeRzTZINXA30Moz9ymTDB6egLKBAx7oydj0cutH3 MxO4V6Ej/r1rGOPzYf7bPt1UwaRvNdeIvEjUSdhu0YU8ioeCnPU/FkVipUAmEHa7 IA8HVLTEbyxNRw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:27 2026 by rpki-client