This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json) Hash identifier: sgFpyvtWpI9LK99A+4RRFzRCFxlI27Ggt+qxdb8JbNQ= Subject key identifier: 81:BC:E1:6A:A2:66:3D:DC:D7:4D:0C:7D:EF:8D:DC:20:6C:4D:7B:EE Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e Certificate serial: 019C443531DEE033D852B49CDFA6CB4411AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft Manifest number: 0EB0 Signing time: Mon 09 Feb 2026 21:01:02 +0000 Manifest this update: Mon 09 Feb 2026 21:01:02 +0000 Manifest next update: Tue 10 Feb 2026 21:01:02 +0000 Files and hashes: 1: 1-tufXICD9zpH9q97ukUAVzwwHjE.roa (hash: +wtE5yDBNjZJrgkiWy0XjsbVbjlePoHSNbtSgcMLmc8=) 2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: c7WgbM9dBQpjrM61Q+JFy1f0jFGRtZXO0I3ZAUx2+BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:31:de:e0:33:d8:52:b4:9c:df:a6:cb:44:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e Validity Not Before: Feb 9 21:01:02 2026 GMT Not After : Feb 10 21:01:02 2026 GMT Subject: CN=81bce16aa2663ddcd74d0c7def8ddc206c4d7bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:05:88:8b:48:64:bd:01:3d:ec:b1:d9:85: 0d:1b:1b:19:32:8c:8b:b8:3c:77:58:f0:e7:40:fa: 39:c6:41:59:6f:ca:08:61:70:3c:df:a9:a0:e2:b5: 33:e2:c6:39:58:3d:0b:d9:d3:3e:7d:54:a6:eb:a1: 3a:cc:fb:92:09:c7:3d:4d:df:57:a8:e4:bf:6c:ef: 85:38:cf:c7:65:72:a8:6c:8b:a7:8d:c3:a5:fd:bf: 0b:8d:26:98:85:f3:dd:8d:ff:18:fe:c9:e6:2a:f3: 40:85:6d:92:fe:34:d8:17:76:01:01:56:dc:81:55: 8e:be:aa:65:15:08:98:fa:c6:0d:3b:6d:68:2f:21: 13:95:03:91:5d:5d:d0:22:f3:8c:b7:1f:81:86:75: 55:91:5d:53:a2:68:cb:2a:a4:6f:2e:65:71:3e:60: 5a:3d:87:d1:d5:c4:2c:86:d0:f1:3d:d7:75:c3:73: 8e:7c:4f:02:95:ae:65:fd:b9:9c:5d:f5:ae:0d:8f: 88:27:8d:07:f4:30:a8:ae:d6:b7:d3:fa:7c:df:a1: 0f:51:a8:44:c6:67:aa:fe:17:31:82:3b:af:29:cd: 7b:a1:d6:ac:55:ce:5d:76:c3:84:4d:ce:48:2b:37: a1:6a:d9:48:54:62:87:cb:a9:75:40:cf:e2:5f:35: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:E1:6A:A2:66:3D:DC:D7:4D:0C:7D:EF:8D:DC:20:6C:4D:7B:EE X509v3 Authority Key Identifier: keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:1b:1b:00:41:4d:93:7a:9d:1a:1e:58:58:a8:4a:fb:b7: 5f:36:bb:85:89:61:c0:6e:87:89:d9:e0:51:bf:35:a0:de:ba: e0:54:22:b1:d6:63:66:8c:d5:83:58:09:7e:5d:31:01:70:f4: 53:89:c5:d1:7d:3b:ac:19:e3:5a:f9:95:eb:6c:b4:d1:5b:1b: 01:4c:21:93:8a:a0:67:04:81:99:d3:d6:da:23:14:4e:af:6e: 77:05:69:aa:6a:46:17:c2:10:fa:d3:43:7f:8b:9a:c3:d7:10: 8a:b4:42:05:ec:1e:f7:6c:6b:cc:c0:b2:c3:f3:d0:87:59:05: 61:c6:dc:ad:bb:db:07:58:88:b0:85:2d:69:aa:02:c3:3d:2b: 98:ba:34:97:1f:8d:8a:eb:34:ac:1f:f2:67:12:de:db:47:ed: 32:58:85:39:d4:83:9d:af:47:78:9e:e9:d7:79:d8:9b:da:78: 4d:6e:70:59:9b:c9:93:67:26:c5:e9:90:59:5f:31:a1:06:f6: ef:72:f2:ea:2a:38:e8:35:97:bb:26:8c:fc:c6:9d:b6:07:bc: a6:24:14:c1:34:cd:ba:1b:5d:c6:93:83:eb:7a:5f:48:ef:23: de:b3:ec:5f:44:bf:be:e7:32:74:8f:75:46:05:02:41:66:04: 39:c2:25:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENTHe4DPYUrSc36bLRBGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDFmNjczYzZiMGZmODgzNWVhMDJmYWVkYmE1YjQ5Y2Yx NDIyNGUwHhcNMjYwMjA5MjEwMTAyWhcNMjYwMjEwMjEwMTAyWjAzMTEwLwYDVQQD Eyg4MWJjZTE2YWEyNjYzZGRjZDc0ZDBjN2RlZjhkZGMyMDZjNGQ3YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrgFiItIZL0BPeyx2YUNGxsZMoyL uDx3WPDnQPo5xkFZb8oIYXA836mg4rUz4sY5WD0L2dM+fVSm66E6zPuSCcc9Td9X qOS/bO+FOM/HZXKobIunjcOl/b8LjSaYhfPdjf8Y/snmKvNAhW2S/jTYF3YBAVbc gVWOvqplFQiY+sYNO21oLyETlQORXV3QIvOMtx+BhnVVkV1TomjLKqRvLmVxPmBa PYfR1cQshtDxPdd1w3OOfE8Cla5l/bmcXfWuDY+IJ40H9DCorta30/p836EPUahE xmeq/hcxgjuvKc17odasVc5ddsOETc5IKzehatlIVGKHy6l1QM/iXzXHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG84WqiZj3c100Mfe+N3CBsTXvuMB8GA1UdIwQY MBaAFIkB9nPGsP+INeoC+u26W0nPFCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMt NTNjNGQ1NzYyZDFhLzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMtNTNjNGQ1NzYyZDFh LzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+gbGwBB TZN6nRoeWFioSvu3Xza7hYlhwG6HidngUb81oN664FQisdZjZozVg1gJfl0xAXD0 U4nF0X07rBnjWvmV62y00VsbAUwhk4qgZwSBmdPW2iMUTq9udwVpqmpGF8IQ+tND f4uaw9cQirRCBewe92xrzMCyw/PQh1kFYcbcrbvbB1iIsIUtaaoCwz0rmLo0lx+N ius0rB/yZxLe20ftMliFOdSDna9HeJ7p13nYm9p4TW5wWZvJk2cmxemQWV8xoQb2 73Ly6io46DWXuyaM/Madtge8piQUwTTNuhtdxpOD63pfSO8j3rPsX0S/vucydI91 RgUCQWYEOcIlcQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:50:08 2026 by rpki-client