This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json) Hash identifier: 4hVnHH0Pvn7PwVjSbUr6DHrLtnu2ypDPvSmpupT64sE= Subject key identifier: F3:21:4F:72:25:99:88:1E:DE:13:BF:21:38:F6:40:88:11:AA:90:A5 Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Certificate serial: 019C439068D1BAA2BABC48A75BE7E76551A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft Manifest number: 0689 Signing time: Mon 09 Feb 2026 18:01:03 +0000 Manifest this update: Mon 09 Feb 2026 18:01:03 +0000 Manifest next update: Tue 10 Feb 2026 18:01:03 +0000 Files and hashes: 1: BPaDPKTEMEpX1Fzv_jvryI3ZhZs.roa (hash: dyyBL506kK/U4ZZnY6jdH+HEkq9epTy/PSVjs7aWPIM=) 2: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: bRrx0U46w77xOKjGYpySSHexBSZ+dpUFQodP+3tcXss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:68:d1:ba:a2:ba:bc:48:a7:5b:e7:e7:65:51:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Validity Not Before: Feb 9 18:01:03 2026 GMT Not After : Feb 10 18:01:03 2026 GMT Subject: CN=f3214f722599881ede13bf2138f6408811aa90a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:37:5b:53:b7:3b:45:ad:fb:67:6f:c1:d3: d9:31:d5:db:d9:db:91:ae:52:3b:a8:71:d9:4e:4c: 65:16:70:1f:c2:bf:98:33:6b:07:69:de:ef:29:06: cc:72:5e:30:c9:57:c1:12:0e:ac:61:e6:81:56:e5: 14:46:ee:f5:11:21:b2:3e:5e:6a:df:b4:48:06:94: ab:97:d1:3a:00:46:9d:fe:79:c4:de:d1:a5:4e:7a: e7:92:c0:47:48:df:b7:18:a8:e5:9a:4f:7e:8c:4b: f5:84:cf:a2:31:2e:47:a8:4f:75:39:c4:a7:f7:d2: e7:c6:2b:08:fd:83:eb:c6:8a:b3:f8:53:09:f1:52: ac:1c:20:09:0d:58:9a:10:69:16:b3:3d:57:dc:00: 97:fd:40:09:f7:3f:f9:e0:d1:36:29:e2:26:11:a0: 36:9d:9d:af:fd:9e:64:05:d7:cf:94:f9:c4:c3:b7: 08:c3:cd:cb:47:9a:77:da:08:11:59:30:2c:a0:d1: 05:c9:a2:53:81:bb:5c:42:9e:3d:18:e8:ed:1d:aa: 6d:04:53:59:fd:e3:3e:1e:66:a4:cd:7e:bd:d9:77: 06:b6:5c:59:b0:6a:2f:65:5f:71:4f:23:2c:6b:c7: 0b:2d:22:23:f8:f7:17:1c:14:01:96:e9:9a:3e:04: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:4F:72:25:99:88:1E:DE:13:BF:21:38:F6:40:88:11:AA:90:A5 X509v3 Authority Key Identifier: keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:6a:7a:30:cb:1c:95:d5:e2:09:f2:fe:df:d0:c3:b5:6e: de:51:b4:66:05:4b:79:c4:fc:70:ab:9b:62:43:fd:c9:92:22: 35:3f:6b:8c:e0:d9:f7:00:03:9b:49:bb:f8:12:20:a3:4d:96: 3e:81:37:0a:83:01:3d:5f:eb:6c:f3:9a:d3:10:c3:7e:fe:5a: dd:48:0b:2d:02:ef:bb:5c:8a:10:4a:ee:69:2e:6e:c7:b4:46: ba:61:e8:ec:32:aa:66:f6:5a:bd:8b:6b:ea:71:7e:8d:d0:69: b7:f5:95:56:14:e3:bc:66:d0:b1:37:dc:65:4f:59:a4:f4:7a: 1a:ef:dd:78:e1:e0:b8:45:d6:49:71:8e:59:f0:e5:0f:3d:85: 4a:a8:ab:a8:67:ac:b1:e2:c6:82:dc:8e:19:cd:d9:bf:ef:15: 0a:97:04:04:83:fb:a0:9b:74:99:57:66:f6:76:ae:f3:97:74: a7:f5:ce:54:64:bd:e4:6e:d1:87:a3:2c:77:0b:e8:ee:81:af: 41:fd:39:ae:36:29:c0:22:d3:14:3a:40:d8:78:dc:6c:78:86: f9:91:ad:db:cc:5f:41:aa:b0:b7:2b:1e:62:25:0b:03:01:2d: 66:62:cf:0a:6b:76:3a:6e:c8:1d:23:72:ee:23:4f:67:a0:c3: b7:2d:57:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGjRuqK6vEinW+fnZVGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmY0ODgwMDM4ZDU1YWI5OGQ3Y2I2NmRmY2ZhODk3Yjdi YTExZTgwHhcNMjYwMjA5MTgwMTAzWhcNMjYwMjEwMTgwMTAzWjAzMTEwLwYDVQQD EyhmMzIxNGY3MjI1OTk4ODFlZGUxM2JmMjEzOGY2NDA4ODExYWE5MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdY3W1O3O0Wt+2dvwdPZMdXb2duR rlI7qHHZTkxlFnAfwr+YM2sHad7vKQbMcl4wyVfBEg6sYeaBVuUURu71ESGyPl5q 37RIBpSrl9E6AEad/nnE3tGlTnrnksBHSN+3GKjlmk9+jEv1hM+iMS5HqE91OcSn 99LnxisI/YPrxoqz+FMJ8VKsHCAJDViaEGkWsz1X3ACX/UAJ9z/54NE2KeImEaA2 nZ2v/Z5kBdfPlPnEw7cIw83LR5p32ggRWTAsoNEFyaJTgbtcQp49GOjtHaptBFNZ /eM+HmakzX692XcGtlxZsGovZV9xTyMsa8cLLSIj+PcXHBQBlumaPgQQ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMhT3IlmYge3hO/ITj2QIgRqpClMB8GA1UdIwQY MBaAFItvSIADjVWrmNfLZt/PqJe3uhHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjIt ZmIzMTExZGJkMWNhLzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjItZmIzMTExZGJkMWNh LzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKdqejDL HJXV4gny/t/Qw7Vu3lG0ZgVLecT8cKubYkP9yZIiNT9rjODZ9wADm0m7+BIgo02W PoE3CoMBPV/rbPOa0xDDfv5a3UgLLQLvu1yKEEruaS5ux7RGumHo7DKqZvZavYtr 6nF+jdBpt/WVVhTjvGbQsTfcZU9ZpPR6Gu/deOHguEXWSXGOWfDlDz2FSqirqGes seLGgtyOGc3Zv+8VCpcEBIP7oJt0mVdm9nau85d0p/XOVGS95G7Rh6Msdwvo7oGv Qf05rjYpwCLTFDpA2HjcbHiG+ZGt28xfQaqwtyseYiULAwEtZmLPCmt2Om7IHSNy 7iNPZ6DDty1XeA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:20 2026 by rpki-client