This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json) Hash identifier: KH6MYRAffN31HxoCjz6twH6fSOfVI0Yuj8TSUJVcUQE= Subject key identifier: 0D:70:9A:2F:53:15:60:34:91:57:2A:45:B5:B8:60:52:CA:F0:20:BA Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019C40FD1C564DB8212FF548A69F2EE12DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 06:00:55 +0000 Manifest this update: Mon 09 Feb 2026 06:00:55 +0000 Manifest next update: Tue 10 Feb 2026 06:00:55 +0000 Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: kEwwLdjSo74qYF6zrVH9d8HFnl1lzmPIMNEt3dsVwI0=) 2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=) 3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:1c:56:4d:b8:21:2f:f5:48:a6:9f:2e:e1:2d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Feb 9 06:00:55 2026 GMT Not After : Feb 10 06:00:55 2026 GMT Subject: CN=0d709a2f5315603491572a45b5b86052caf020ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:4a:01:01:a2:69:c7:65:02:44:1d:87:05: ba:14:ad:e5:a4:e3:8f:22:c8:68:58:3f:6c:cc:42: 57:e1:27:48:60:8d:e8:e3:da:46:e1:02:ed:a6:86: b1:1e:44:d8:ad:0f:52:59:35:74:1b:3a:4c:28:ac: d3:d7:c4:41:d7:83:85:03:5e:04:f2:04:a5:db:ab: 76:f9:c4:85:1d:3a:6e:1f:f0:7a:38:f2:36:81:69: fd:c9:6b:f3:01:53:6e:62:02:49:54:11:0c:f8:b6: 5c:b4:a4:b4:b9:d6:74:18:d2:d8:91:d9:2a:91:38: 5a:0d:dd:b6:fe:0b:1d:af:b7:f5:ba:f0:75:26:c5: f6:47:0e:4f:69:c6:5c:6f:2f:a2:50:5b:48:80:c0: 26:5a:f3:0c:00:a1:52:92:a2:60:d4:81:a3:cb:d0: bd:29:5c:2a:01:17:04:8b:84:24:d4:44:ce:e6:1d: 77:34:8d:0d:49:c6:c5:ba:7b:be:bd:c2:76:29:3f: da:2b:91:0a:29:94:55:fa:2c:e8:28:0a:8d:7b:4d: 43:88:d9:fc:35:05:16:e0:7b:ec:c0:df:4b:77:ee: dc:d7:75:ac:99:a9:a0:25:aa:20:ae:f3:32:16:67: 78:24:1b:d0:05:e1:6f:08:23:d7:a4:e9:a7:c5:1b: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:9A:2F:53:15:60:34:91:57:2A:45:B5:B8:60:52:CA:F0:20:BA X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:57:15:93:a1:bd:c1:0e:b4:0a:c4:37:42:6e:a3:c3:13: 75:33:87:06:54:2a:02:e8:34:52:8d:48:25:f9:0a:5f:9e:eb: 4e:b9:e5:e5:55:cc:9c:20:17:e7:c0:44:16:a2:56:30:da:7c: 69:ff:03:ba:39:6f:d5:32:e7:88:c0:04:2e:32:11:e1:77:68: 75:a4:dc:de:98:5f:e3:33:45:1a:1f:14:b6:f8:28:83:41:76: ea:66:0f:3b:1a:74:f4:fb:ac:1d:f8:1a:7d:39:0d:c6:16:6c: 65:b0:15:20:b8:d5:9c:8d:03:51:b9:ff:5d:c6:2b:d9:e4:ee: f5:c2:d3:ca:7c:70:b9:f7:21:41:93:0e:48:fe:66:25:3c:70: 18:b0:67:a8:c6:04:1b:28:0c:fa:ce:44:d2:2d:d7:12:68:c7: a1:dc:4f:29:59:42:63:40:51:10:78:d5:40:22:74:ba:79:c0: 85:2b:6f:2e:8c:80:bf:32:85:1c:c6:7e:92:5e:64:07:d8:34: 63:4b:24:ec:4c:1e:fa:44:5a:25:f3:ab:04:64:07:74:4d:bc: 48:14:ce:bf:17:32:6c:b7:97:5b:f0:ec:c6:92:cd:bf:8b:06: 7a:b0:2a:f5:76:26:da:6e:9d:22:c1:86:2d:0c:a0:9f:aa:7e: d4:45:70:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RxWTbghL/VIpp8u4S2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjYwMjA5MDYwMDU1WhcNMjYwMjEwMDYwMDU1WjAzMTEwLwYDVQQD EygwZDcwOWEyZjUzMTU2MDM0OTE1NzJhNDViNWI4NjA1MmNhZjAyMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxZKAQGiacdlAkQdhwW6FK3lpOOP IshoWD9szEJX4SdIYI3o49pG4QLtpoaxHkTYrQ9SWTV0GzpMKKzT18RB14OFA14E 8gSl26t2+cSFHTpuH/B6OPI2gWn9yWvzAVNuYgJJVBEM+LZctKS0udZ0GNLYkdkq kThaDd22/gsdr7f1uvB1JsX2Rw5PacZcby+iUFtIgMAmWvMMAKFSkqJg1IGjy9C9 KVwqARcEi4Qk1ETO5h13NI0NScbFunu+vcJ2KT/aK5EKKZRV+izoKAqNe01DiNn8 NQUW4HvswN9Ld+7c13WsmamgJaogrvMyFmd4JBvQBeFvCCPXpOmnxRul7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1wmi9TFWA0kVcqRbW4YFLK8CC6MB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOJXFZOh vcEOtArEN0Juo8MTdTOHBlQqAug0Uo1IJfkKX57rTrnl5VXMnCAX58BEFqJWMNp8 af8Dujlv1TLniMAELjIR4XdodaTc3phf4zNFGh8Utvgog0F26mYPOxp09PusHfga fTkNxhZsZbAVILjVnI0DUbn/XcYr2eTu9cLTynxwufchQZMOSP5mJTxwGLBnqMYE GygM+s5E0i3XEmjHodxPKVlCY0BREHjVQCJ0unnAhStvLoyAvzKFHMZ+kl5kB9g0 Y0sk7Ewe+kRaJfOrBGQHdE28SBTOvxcybLeXW/DsxpLNv4sGerAq9XYm2m6dIsGG LQygn6p+1EVwwA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:36 2026 by rpki-client