This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json) Hash identifier: 62L413/FF/CDouc05jNXtGyMo1FPpWrYebJupeKybTo= Subject key identifier: 41:0C:11:64:4E:E2:EB:E4:C7:20:7C:37:04:48:7A:E4:D0:65:41:90 Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155 Certificate serial: 019C43C6D316B2D8E7DBB1ABE2349B3C67B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:00:29 +0000 Manifest this update: Mon 09 Feb 2026 19:00:29 +0000 Manifest next update: Tue 10 Feb 2026 19:00:29 +0000 Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=) 2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: 9yKmfYrG9hhRZfje6c/Dpg94+3yjHqmHn3SzbNGCrlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d3:16:b2:d8:e7:db:b1:ab:e2:34:9b:3c:67:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155 Validity Not Before: Feb 9 19:00:29 2026 GMT Not After : Feb 10 19:00:29 2026 GMT Subject: CN=410c11644ee2ebe4c7207c3704487ae4d0654190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:e5:c5:f3:76:98:4f:41:4a:4b:73:7e:79: cd:93:3b:55:63:5e:05:fe:01:71:ef:02:4a:cc:71: aa:72:75:0d:6a:41:33:a8:2c:be:53:b0:e7:f5:17: 65:aa:c4:03:9e:09:23:b3:aa:46:6c:f6:f4:78:0f: 55:67:7e:02:59:39:61:89:77:04:2e:79:4a:a7:8f: 12:e2:8a:4b:e1:df:c2:88:c1:e7:fb:45:47:b7:09: a7:fe:d1:90:83:bf:b0:01:ce:d6:86:4e:f7:c8:4d: fb:c7:80:85:a4:26:c1:80:45:29:96:86:19:bf:78: d0:e5:f2:cb:22:da:00:49:d1:37:bf:28:2d:52:58: 9e:93:3a:18:92:5b:5b:b1:8c:d8:2e:15:7f:c4:13: 41:ae:1b:53:2e:7d:3b:b3:c6:55:51:1e:13:5f:63: 16:78:63:8f:44:8d:41:d5:e3:e7:5d:4f:b7:88:00: 74:b7:2d:8f:e0:ed:a3:4f:b7:83:2b:71:9c:be:79: 3f:64:4b:6e:b4:60:77:71:22:46:83:03:9c:b1:44: e3:07:9a:0d:4b:5d:f8:d6:aa:f1:7a:ce:88:72:5c: 73:82:08:0e:e7:ff:99:a5:60:73:95:98:16:99:f3: c4:5f:2b:d8:35:02:79:5c:2a:44:19:e6:f2:87:96: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:11:64:4E:E2:EB:E4:C7:20:7C:37:04:48:7A:E4:D0:65:41:90 X509v3 Authority Key Identifier: keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:df:f1:f6:5d:60:c1:7d:d1:70:c5:1b:c5:04:77:ad:63:ee: 83:18:ed:f6:01:34:51:de:e2:da:70:53:f3:c9:c0:20:63:f8: d8:23:12:f5:bc:05:ea:93:48:60:bc:82:c8:f1:6c:8c:63:b9: 0c:8c:56:64:cd:a2:1c:a9:70:54:d7:32:93:f7:da:ef:94:84: 74:83:30:42:60:19:d7:55:b6:be:61:78:8a:b7:2e:56:51:00: dd:f4:22:1c:9b:ac:6d:07:ae:19:0e:20:56:3c:02:03:38:c5: 0c:d8:0f:2c:a8:82:d9:af:5e:46:46:24:95:0d:1c:52:2a:85: 4b:b3:3c:5e:07:dd:28:95:c0:7c:de:be:e4:38:cd:29:2d:0c: cf:11:09:bb:1d:c4:4e:fb:cf:6c:ed:9b:15:7e:bc:9c:c9:ef: 68:48:18:2e:d8:43:7e:d5:5f:38:d2:31:83:26:db:de:28:e4: 27:83:9a:43:60:dd:c1:73:d5:66:f5:01:05:6c:ac:29:dc:f3: 25:e2:6d:34:4d:ba:16:3d:5c:00:de:76:1a:b7:8c:54:d0:97: 27:fc:65:36:9c:ea:36:70:21:06:df:b5:99:88:68:e4:6f:99: de:60:b0:87:aa:11:46:a3:01:7b:8e:30:a2:50:dd:8f:22:ac: 36:06:4c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtMWstjn27Gr4jSbPGewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw NzQxNTUwHhcNMjYwMjA5MTkwMDI5WhcNMjYwMjEwMTkwMDI5WjAzMTEwLwYDVQQD Eyg0MTBjMTE2NDRlZTJlYmU0YzcyMDdjMzcwNDQ4N2FlNGQwNjU0MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWLlxfN2mE9BSktzfnnNkztVY14F /gFx7wJKzHGqcnUNakEzqCy+U7Dn9RdlqsQDngkjs6pGbPb0eA9VZ34CWTlhiXcE LnlKp48S4opL4d/CiMHn+0VHtwmn/tGQg7+wAc7Whk73yE37x4CFpCbBgEUploYZ v3jQ5fLLItoASdE3vygtUliekzoYkltbsYzYLhV/xBNBrhtTLn07s8ZVUR4TX2MW eGOPRI1B1ePnXU+3iAB0ty2P4O2jT7eDK3Gcvnk/ZEtutGB3cSJGgwOcsUTjB5oN S1341qrxes6IclxzgggO5/+ZpWBzlZgWmfPEXyvYNQJ5XCpEGebyh5Zn7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEMEWRO4uvkxyB8NwRIeuTQZUGQMB8GA1UdIwQY MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt ZDY5ZWE5M2NiYWZiLzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9/x9l1g wX3RcMUbxQR3rWPugxjt9gE0Ud7i2nBT88nAIGP42CMS9bwF6pNIYLyCyPFsjGO5 DIxWZM2iHKlwVNcyk/fa75SEdIMwQmAZ11W2vmF4ircuVlEA3fQiHJusbQeuGQ4g VjwCAzjFDNgPLKiC2a9eRkYklQ0cUiqFS7M8XgfdKJXAfN6+5DjNKS0MzxEJux3E TvvPbO2bFX68nMnvaEgYLthDftVfONIxgybb3ijkJ4OaQ2DdwXPVZvUBBWysKdzz JeJtNE26Fj1cAN52GreMVNCXJ/xlNpzqNnAhBt+1mYho5G+Z3mCwh6oRRqMBe44w olDdjyKsNgZMXw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:04:31 2026 by rpki-client