This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json) Hash identifier: j+MMBsjqpLLC/mCqQb1JZ+yRxVbU677tAf3DDr0nKQo= Subject key identifier: A5:57:EF:A1:20:9D:58:CF:94:4A:39:05:38:22:13:11:6F:3F:26:51 Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019C446BB1B1D7FD158B07376504DEC68754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft Manifest number: 0E3D Signing time: Mon 09 Feb 2026 22:00:34 +0000 Manifest this update: Mon 09 Feb 2026 22:00:34 +0000 Manifest next update: Tue 10 Feb 2026 22:00:34 +0000 Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: EXxHeIDb/dyp03p71gAaGjysWZT8gg5xi8tHORoRl4I=) 2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:b1:b1:d7:fd:15:8b:07:37:65:04:de:c6:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Feb 9 22:00:34 2026 GMT Not After : Feb 10 22:00:34 2026 GMT Subject: CN=a557efa1209d58cf944a3905382213116f3f2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:5e:0f:30:93:12:98:36:c9:ab:73:53:09: f5:58:62:d0:80:21:d4:0b:1f:bd:da:88:71:db:8c: c5:3b:d2:d1:62:dd:82:bb:00:68:9b:05:02:39:97: 33:c5:60:f3:ce:2a:25:fc:10:a1:e6:23:fa:24:ef: 72:ae:aa:77:a9:bb:c1:fc:1f:ee:6e:4f:fa:54:e1: 6c:0b:79:b8:24:ad:89:63:61:a2:52:f9:11:d4:a2: 7f:10:43:b8:bd:ed:88:6e:4e:94:83:0a:22:44:9b: b4:05:96:14:e2:29:78:e2:43:fa:12:35:40:cd:67: 7f:73:3b:ff:af:08:b0:59:26:4e:58:0e:63:bc:7e: 0f:bb:4b:b4:3d:28:f1:b5:eb:1e:bd:2f:92:88:fd: b4:98:d5:28:ed:d4:a9:32:4f:f9:77:b3:a0:84:d3: 4d:cc:3e:db:82:00:67:04:68:82:da:94:8f:38:a6: eb:b6:b2:c4:fa:50:c9:e9:7b:31:07:25:1f:25:44: 79:81:2b:4a:43:17:33:d7:40:bd:07:75:9a:2d:e1: 56:c5:f3:de:13:0e:45:d1:84:be:f8:ac:85:e5:d9: 24:8b:22:db:11:fd:65:21:0c:b6:f5:c7:81:b1:74: ec:9a:e2:36:2b:64:1d:f0:07:f1:e9:13:d0:64:f1: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:57:EF:A1:20:9D:58:CF:94:4A:39:05:38:22:13:11:6F:3F:26:51 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:9c:30:6e:88:61:fa:4f:4a:dd:a2:81:76:a7:2c:96:2e: 21:b8:27:d4:9d:8d:16:6d:f3:64:4c:30:0c:a3:c1:12:e5:6a: 5a:34:30:dd:fb:05:65:46:12:67:35:c4:bf:9b:41:0a:6f:a7: 2f:61:72:fa:b6:b5:48:31:10:38:a1:5c:e5:eb:3c:42:8d:4f: d8:d1:69:9c:9f:40:73:5e:f4:a4:2c:74:1f:de:6c:b9:94:9f: 78:53:19:25:6b:58:57:39:f9:e4:f8:7a:2c:d7:d0:af:52:5a: 34:8a:7b:64:76:ea:9b:e1:c0:a6:6a:f8:a8:8d:ee:8f:e5:18: 97:39:19:68:69:3c:bf:ab:0c:01:b7:09:54:ef:18:7a:7f:3e: 63:aa:b9:4f:e1:5a:42:83:c7:3f:0a:89:62:60:99:55:ef:a8: 68:ae:6a:5c:74:53:8e:0d:e0:07:8b:67:d6:0d:ed:af:75:37: 02:7c:68:5a:fd:23:99:45:31:9d:72:7e:49:b1:40:ce:94:f4: 65:1d:2b:61:f0:01:02:8a:ce:41:0c:08:b1:ca:46:9d:2b:4d: de:bb:27:40:06:01:ac:5b:85:18:41:39:ad:6a:0f:4c:97:78: 14:b0:90:75:15:f2:71:7c:7d:fc:1f:5c:18:a5:f6:49:05:8f: 76:d7:fb:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa7Gx1/0Viwc3ZQTexodUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjYwMjA5MjIwMDM0WhcNMjYwMjEwMjIwMDM0WjAzMTEwLwYDVQQD EyhhNTU3ZWZhMTIwOWQ1OGNmOTQ0YTM5MDUzODIyMTMxMTZmM2YyNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA1eDzCTEpg2yatzUwn1WGLQgCHU Cx+92ohx24zFO9LRYt2CuwBomwUCOZczxWDzziol/BCh5iP6JO9yrqp3qbvB/B/u bk/6VOFsC3m4JK2JY2GiUvkR1KJ/EEO4ve2Ibk6UgwoiRJu0BZYU4il44kP6EjVA zWd/czv/rwiwWSZOWA5jvH4Pu0u0PSjxtesevS+SiP20mNUo7dSpMk/5d7OghNNN zD7bggBnBGiC2pSPOKbrtrLE+lDJ6XsxByUfJUR5gStKQxcz10C9B3WaLeFWxfPe Ew5F0YS++KyF5dkkiyLbEf1lIQy29ceBsXTsmuI2K2Qd8Afx6RPQZPHzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVX76EgnVjPlEo5BTgiExFvPyZRMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb6cMG6I YfpPSt2igXanLJYuIbgn1J2NFm3zZEwwDKPBEuVqWjQw3fsFZUYSZzXEv5tBCm+n L2Fy+ra1SDEQOKFc5es8Qo1P2NFpnJ9Ac170pCx0H95suZSfeFMZJWtYVzn55Ph6 LNfQr1JaNIp7ZHbqm+HApmr4qI3uj+UYlzkZaGk8v6sMAbcJVO8Yen8+Y6q5T+Fa QoPHPwqJYmCZVe+oaK5qXHRTjg3gB4tn1g3tr3U3AnxoWv0jmUUxnXJ+SbFAzpT0 ZR0rYfABAorOQQwIscpGnStN3rsnQAYBrFuFGEE5rWoPTJd4FLCQdRXycXx9/B9c GKX2SQWPdtf7vg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:09 2026 by rpki-client