This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json) Hash identifier: sKqRiOiQUBxVyelfsUd3o5T9aqpezddMOq8U7qJAJhg= Subject key identifier: 59:DB:07:8B:A8:8B:EE:AF:4E:7E:3A:79:A3:49:31:DA:7E:84:39:7E Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8 Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8 Certificate serial: 019C42B4A54FCCC268DEDA3ED8C2D5F111F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft Manifest number: 0464 Signing time: Mon 09 Feb 2026 14:01:00 +0000 Manifest this update: Mon 09 Feb 2026 14:01:00 +0000 Manifest next update: Tue 10 Feb 2026 14:01:00 +0000 Files and hashes: 1: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: bCvmYUtm3Upmuu2hxlM+42ri7LrK0rEV+vE4I9WMeWc=) 2: yqbpgiw4mc0aMG4KTKCsEcJRG_c.roa (hash: 4YOLQATWZxMITpIV7EuqFyHdneXTCs1dRQuvrVxOZss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:a5:4f:cc:c2:68:de:da:3e:d8:c2:d5:f1:11:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8 Validity Not Before: Feb 9 14:01:00 2026 GMT Not After : Feb 10 14:01:00 2026 GMT Subject: CN=59db078ba88beeaf4e7e3a79a34931da7e84397e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:3f:b7:db:fa:4e:ee:6a:59:a6:68:9b:74: 53:4b:6b:a9:fb:66:5b:14:4b:6d:38:21:71:63:0d: a8:18:ef:f0:d8:a9:29:05:c4:5b:0a:b8:c1:43:f9: 07:f4:99:80:0d:1c:19:d6:a7:db:0f:26:9c:41:d1: 6c:3e:47:84:d3:69:c7:63:d4:fb:8f:7c:8c:ae:ff: 5e:08:59:70:df:fb:9e:c7:cb:12:17:e9:2a:17:e2: a0:30:da:67:07:b4:74:6f:08:e0:ca:03:2e:2b:56: 7c:b1:0a:78:e0:c2:7d:b0:f9:6c:09:66:c5:e7:1c: 35:a9:8e:30:24:0f:2c:e3:35:a4:d1:5d:7a:47:0e: e3:53:de:24:0f:df:39:6f:cf:d8:d2:92:ff:09:62: e3:b0:a7:37:3c:cd:96:dc:c6:6d:ab:1e:0a:4f:91: e4:1d:5a:a0:1b:59:0c:93:e5:ff:79:4f:1d:aa:86: 9a:28:82:ed:c7:a1:4b:ab:e8:92:7a:43:e7:39:49: 9c:4b:12:3f:35:ca:8f:b8:d4:5a:bd:c6:96:5b:1e: a0:4d:b1:d6:94:e5:80:73:d6:8c:4a:e6:9f:ab:06: 2f:42:f8:e1:96:c9:a3:ac:87:da:77:fd:66:79:56: 4f:5a:9f:bf:f5:07:85:d3:c4:4a:d7:71:91:72:52: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:07:8B:A8:8B:EE:AF:4E:7E:3A:79:A3:49:31:DA:7E:84:39:7E X509v3 Authority Key Identifier: keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:38:78:4d:7c:e3:34:94:86:38:f2:51:61:7e:aa:be:7b:fb: fe:61:c1:d9:49:47:8c:be:33:db:0f:50:4a:1b:1e:1f:de:e1: 00:65:d1:11:8b:82:44:d2:36:60:a6:7a:73:78:c9:a8:b2:bc: 08:df:5e:bb:5f:63:eb:41:87:ba:cc:24:48:32:08:90:d0:54: 0c:ba:45:36:69:5d:f0:41:77:47:68:c4:3e:db:78:be:97:58: 43:9c:05:67:f5:1d:92:21:45:e5:98:58:0e:d2:ba:1b:aa:17: 6f:18:99:ab:db:da:8f:49:9a:8c:96:13:9e:3e:c8:4e:e1:3c: 94:0b:f7:bf:4a:c6:ca:77:11:1a:a3:dc:a5:48:bb:54:d1:88: 04:64:cf:fa:21:bd:64:3e:0d:37:18:e0:fe:53:8d:c7:da:cb: 69:a0:cc:02:64:a0:fb:65:50:54:d4:90:8e:83:20:05:aa:42: ea:cf:68:1c:d9:a9:54:9d:c2:99:5c:5e:64:8a:cf:d8:c7:cc: 93:1b:ca:27:9f:8d:5d:7c:c1:4b:56:2e:5e:56:26:f8:0f:18: 95:49:95:f6:2b:f5:6f:01:4c:4b:4c:ef:d2:54:61:0f:46:f2: 5a:dc:60:b8:99:be:5d:b1:b0:74:b3:d0:ce:ce:01:6b:70:60: 7c:96:97:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtKVPzMJo3to+2MLV8RH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy ZGE1ZDgwHhcNMjYwMjA5MTQwMTAwWhcNMjYwMjEwMTQwMTAwWjAzMTEwLwYDVQQD Eyg1OWRiMDc4YmE4OGJlZWFmNGU3ZTNhNzlhMzQ5MzFkYTdlODQzOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX8/t9v6Tu5qWaZom3RTS2up+2Zb FEttOCFxYw2oGO/w2KkpBcRbCrjBQ/kH9JmADRwZ1qfbDyacQdFsPkeE02nHY9T7 j3yMrv9eCFlw3/uex8sSF+kqF+KgMNpnB7R0bwjgygMuK1Z8sQp44MJ9sPlsCWbF 5xw1qY4wJA8s4zWk0V16Rw7jU94kD985b8/Y0pL/CWLjsKc3PM2W3MZtqx4KT5Hk HVqgG1kMk+X/eU8dqoaaKILtx6FLq+iSekPnOUmcSxI/NcqPuNRavcaWWx6gTbHW lOWAc9aMSuafqwYvQvjhlsmjrIfad/1meVZPWp+/9QeF08RK13GRclKFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnbB4uoi+6vTn46eaNJMdp+hDl+MB8GA1UdIwQY MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozh4TXzj NJSGOPJRYX6qvnv7/mHB2UlHjL4z2w9QShseH97hAGXREYuCRNI2YKZ6c3jJqLK8 CN9eu19j60GHuswkSDIIkNBUDLpFNmld8EF3R2jEPtt4vpdYQ5wFZ/UdkiFF5ZhY DtK6G6oXbxiZq9vaj0majJYTnj7ITuE8lAv3v0rGyncRGqPcpUi7VNGIBGTP+iG9 ZD4NNxjg/lONx9rLaaDMAmSg+2VQVNSQjoMgBapC6s9oHNmpVJ3CmVxeZIrP2MfM kxvKJ5+NXXzBS1YuXlYm+A8YlUmV9iv1bwFMS0zv0lRhD0byWtxguJm+XbGwdLPQ zs4Ba3BgfJaX6w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:11 2026 by rpki-client