This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json) Hash identifier: MQlYP6W1wt14zClUQun08cdcYr4llE6gYMf7Djk/hcY= Subject key identifier: 94:3C:B2:EC:E9:9B:5C:09:DC:FE:5A:91:87:FE:99:47:E1:3F:35:A3 Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3 Certificate serial: 019C427DCFC87BD0DEB317DC3DA237BF2331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft Manifest number: 0BB0 Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: gHdyk6YDg2Wpkb81jF/wRyvXit1E3/cCnwRobYezUT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cf:c8:7b:d0:de:b3:17:dc:3d:a2:37:bf:23:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3 Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=943cb2ece99b5c09dcfe5a9187fe9947e13f35a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:e4:42:e6:fc:62:ee:24:58:c4:03:e8:2d: f0:83:7b:08:08:30:ca:eb:7b:29:4b:a6:85:d1:1a: 57:19:d6:4f:d9:6c:dc:03:59:61:18:f3:66:e1:e4: 50:49:b9:da:b6:ad:5a:74:55:e2:94:74:87:cb:2a: f0:6d:8f:e1:2d:af:50:69:cf:01:67:6d:88:28:08: 07:e8:0c:f5:cc:05:76:fd:2e:55:be:a0:1a:bb:b7: 79:8a:03:a4:29:08:6c:32:8e:7c:5b:7c:70:d7:d4: f6:46:5f:fe:48:a1:a6:b1:87:b4:64:98:f3:f3:de: af:b2:34:6c:38:7b:ea:d5:7e:e3:f3:5c:5a:e9:38: ad:d4:6a:ad:90:37:f5:ff:5a:60:88:23:a7:81:15: 41:b8:92:7a:95:52:e7:71:dd:95:42:b3:c9:f3:e9: ee:29:9c:4d:a4:83:b5:a4:33:29:c3:85:7b:f3:61: cf:4f:32:d0:66:0d:9c:c4:81:ef:7a:c2:e0:97:70: 06:93:52:02:5c:b0:3e:af:24:15:b3:7f:18:58:1a: ac:e9:0e:b1:4b:16:95:8b:7b:5d:20:39:e4:f7:1e: 96:a0:4d:ed:68:e8:e2:95:c3:ad:72:ce:be:e8:92: f0:bb:df:b9:a4:46:dd:37:ad:9c:f8:7a:a5:94:f0: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3C:B2:EC:E9:9B:5C:09:DC:FE:5A:91:87:FE:99:47:E1:3F:35:A3 X509v3 Authority Key Identifier: keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8d:d7:a0:0d:5c:74:02:12:9d:62:32:3c:d4:27:3c:e5:97: 90:c6:38:0a:eb:0a:8a:9a:6c:55:87:53:80:79:e6:de:31:62: 55:1b:29:de:02:78:80:ca:f4:70:32:d7:8d:ae:c1:62:85:74: 62:24:ab:c4:e6:6b:23:f5:25:37:c3:22:e6:5e:f7:90:e4:cc: 3c:2d:3b:60:4d:82:2c:56:d6:6c:b5:36:99:0a:af:36:93:db: ee:85:54:c6:29:0c:de:f8:1f:1b:c6:28:0f:d4:14:d9:79:b7: 18:07:99:57:fd:89:2e:5c:f0:aa:e6:49:df:41:ee:b1:7c:f6: 87:a2:ee:f6:ad:03:49:d0:a6:20:97:ed:7e:1d:b6:cf:a5:fd: 69:95:dc:86:2d:ad:e7:4f:a2:9d:0a:6f:4d:ad:36:99:8f:a5: 41:c1:9c:42:42:49:ab:55:67:47:ad:85:da:40:59:ae:37:2c: 3c:e8:4d:b3:35:52:96:0a:97:2b:d4:88:d2:8c:e3:20:ce:74: 97:8e:4f:7b:60:e6:b5:c7:bc:60:9f:fa:db:21:86:ac:7f:59: 77:39:12:60:c6:66:6c:40:49:34:a7:f5:cb:7f:77:04:08:f0: 5e:b0:86:c4:1e:fd:5a:9f:c1:43:dd:44:1c:5a:6d:7f:a6:de: 9f:bc:50:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfc/Ie9DesxfcPaI3vyMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2UzMTFjOGVkNjBiZWYxYjVlNGY3ZDNiODY0MTA3ODE0 NDE4YTMwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD Eyg5NDNjYjJlY2U5OWI1YzA5ZGNmZTVhOTE4N2ZlOTk0N2UxM2YzNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySPkQub8Yu4kWMQD6C3wg3sICDDK 63spS6aF0RpXGdZP2WzcA1lhGPNm4eRQSbnatq1adFXilHSHyyrwbY/hLa9Qac8B Z22IKAgH6Az1zAV2/S5VvqAau7d5igOkKQhsMo58W3xw19T2Rl/+SKGmsYe0ZJjz 896vsjRsOHvq1X7j81xa6Tit1GqtkDf1/1pgiCOngRVBuJJ6lVLncd2VQrPJ8+nu KZxNpIO1pDMpw4V782HPTzLQZg2cxIHvesLgl3AGk1ICXLA+ryQVs38YWBqs6Q6x SxaVi3tdIDnk9x6WoE3taOjilcOtcs6+6JLwu9+5pEbdN62c+HqllPBAmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQ8suzpm1wJ3P5akYf+mUfhPzWjMB8GA1UdIwQY MBaAFCHOMRyO1gvvG15PfTuGQQeBRBijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQt NjAyN2E2ODM5YWU0LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQtNjAyN2E2ODM5YWU0 LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo3XoA1c dAISnWIyPNQnPOWXkMY4CusKippsVYdTgHnm3jFiVRsp3gJ4gMr0cDLXja7BYoV0 YiSrxOZrI/UlN8Mi5l73kOTMPC07YE2CLFbWbLU2mQqvNpPb7oVUxikM3vgfG8Yo D9QU2Xm3GAeZV/2JLlzwquZJ30HusXz2h6Lu9q0DSdCmIJftfh22z6X9aZXchi2t 50+inQpvTa02mY+lQcGcQkJJq1VnR62F2kBZrjcsPOhNszVSlgqXK9SI0ozjIM50 l45Pe2Dmtce8YJ/62yGGrH9ZdzkSYMZmbEBJNKf1y393BAjwXrCGxB79Wp/BQ91E HFptf6ben7xQnA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:23 2026 by rpki-client