This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft File: mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft (raw, json) Hash identifier: UQei45ivT6OzKuc++qZNwlGB5dBs0lNA6hW+MHMgiaU= Subject key identifier: 19:98:BC:74:94:6E:2E:58:73:63:E0:30:A0:7C:61:7B:80:43:F1:EF Authority key identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF Certificate issuer: /CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef Certificate serial: 019C4358BF96875E42C94EB9B88BB4E0CC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft Manifest number: 43 Signing time: Mon 09 Feb 2026 17:00:15 +0000 Manifest this update: Mon 09 Feb 2026 17:00:15 +0000 Manifest next update: Tue 10 Feb 2026 17:00:15 +0000 Files and hashes: 1: AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa (hash: jfOg1jyji1rFCzF9opIEWmOgvVGmxRn37HA911nURHY=) 2: mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl (hash: +KzbcNdXsJWto2IMeOMlXMC/7/TYw5T8tIaNipbhRy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bf:96:87:5e:42:c9:4e:b9:b8:8b:b4:e0:cc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef Validity Not Before: Feb 9 17:00:15 2026 GMT Not After : Feb 10 17:00:15 2026 GMT Subject: CN=1998bc74946e2e587363e030a07c617b8043f1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:63:c6:e6:45:9b:0c:f6:67:7e:af:b2:a1: 95:b8:8b:93:6f:db:eb:36:f9:4a:b6:70:1f:73:d7: f2:ab:08:8b:32:6d:45:92:ce:36:d1:d3:87:23:85: 77:31:81:cd:41:16:f6:bc:13:2d:4e:56:66:b2:f9: 14:3d:c6:29:29:9f:d2:ce:d8:e4:a5:e0:69:63:97: 10:36:e5:02:ec:9e:31:bf:ea:1b:7b:29:2a:86:73: 05:49:db:6b:23:2f:f0:b3:77:ce:22:f3:7f:b2:04: e2:52:8c:fb:e6:52:2f:3b:f7:ce:47:3f:f6:6d:a5: 9d:d0:05:92:55:75:d9:06:bd:45:41:0b:1d:5a:8f: 00:ef:2e:3c:fa:aa:82:2d:97:07:97:a9:65:92:cf: 69:c8:37:90:d4:64:69:13:a1:ab:a3:e3:ae:e9:80: 13:18:b6:8d:d7:ac:c2:4b:6f:89:18:ad:92:0d:6d: 5b:5c:36:e2:fc:54:cb:a0:d3:ca:f5:21:2c:a9:25: 14:cb:b6:73:d3:68:52:9f:92:e4:36:0b:a7:8d:49: 3c:a8:31:71:e2:14:4d:d8:cc:ab:e3:5f:2d:59:c2: e7:df:a6:8e:71:93:7f:9e:5a:ef:9f:c3:5d:48:c9: c7:f7:12:6e:bf:58:c9:6e:ac:5d:82:7e:b6:80:e1: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:98:BC:74:94:6E:2E:58:73:63:E0:30:A0:7C:61:7B:80:43:F1:EF X509v3 Authority Key Identifier: keyid:99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d3:59:c7:40:98:f5:ce:27:b3:53:8c:24:21:d6:61:64:db: 67:ef:c9:fc:eb:fd:bc:cf:32:10:e3:d4:ed:8d:ee:48:e9:57: 72:84:63:69:6a:3f:e8:42:2d:a4:d3:58:ee:7d:8f:ff:44:0f: 7b:64:5d:ef:6b:98:01:fb:59:be:b3:61:05:2a:ed:03:a6:92: 25:6b:b5:14:80:7b:05:95:62:e5:b9:e9:25:b3:4b:84:28:26: 13:7d:02:6e:67:7a:1b:22:8a:34:31:a9:56:94:d3:b4:97:43: a1:0c:21:ae:42:5b:14:c5:f4:cb:81:54:ee:7c:2a:b0:94:76: 20:bc:46:34:f1:aa:44:41:7b:a0:ac:48:06:67:48:36:dd:fd: a4:92:6c:e4:e4:38:8a:c9:70:7d:60:e9:eb:06:cc:ba:1c:f4: d0:6b:27:bf:8a:33:cc:da:40:14:a9:bd:94:9a:d5:0d:3b:03: f6:69:05:a7:9c:61:a6:67:df:a7:36:b0:63:c0:c0:39:04:4d: e0:96:35:20:12:6e:bf:b4:c2:52:1a:bb:98:8d:9e:f5:8a:4f: 71:c5:da:c2:6d:5a:ed:7a:e9:ae:93:af:6f:1c:7c:66:c0:ef: a8:ab:f9:34:cb:9b:56:fb:41:55:15:6c:c6:c0:90:89:f5:15: d9:b3:1b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWL+Wh15CyU65uIu04MwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NWVkMTI5YWIyZjUxMGY2OGJiYzhiM2ZjZjFjOWExZWU3 ZWRkZWYwHhcNMjYwMjA5MTcwMDE1WhcNMjYwMjEwMTcwMDE1WjAzMTEwLwYDVQQD EygxOTk4YmM3NDk0NmUyZTU4NzM2M2UwMzBhMDdjNjE3YjgwNDNmMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjhjxuZFmwz2Z36vsqGVuIuTb9vr NvlKtnAfc9fyqwiLMm1Fks420dOHI4V3MYHNQRb2vBMtTlZmsvkUPcYpKZ/Sztjk peBpY5cQNuUC7J4xv+obeykqhnMFSdtrIy/ws3fOIvN/sgTiUoz75lIvO/fORz/2 baWd0AWSVXXZBr1FQQsdWo8A7y48+qqCLZcHl6llks9pyDeQ1GRpE6Gro+Ou6YAT GLaN16zCS2+JGK2SDW1bXDbi/FTLoNPK9SEsqSUUy7Zz02hSn5LkNgunjUk8qDFx 4hRN2Myr418tWcLn36aOcZN/nlrvn8NdSMnH9xJuv1jJbqxdgn62gOGA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmYvHSUbi5Yc2PgMKB8YXuAQ/HvMB8GA1UdIwQY MBaAFJle0SmrL1EPaLvIs/zxyaHuft3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2Et YjIyODM0NWMzYjZkLzEvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2EtYjIyODM0NWMzYjZk LzEvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9NZx0CY 9c4ns1OMJCHWYWTbZ+/J/Ov9vM8yEOPU7Y3uSOlXcoRjaWo/6EItpNNY7n2P/0QP e2Rd72uYAftZvrNhBSrtA6aSJWu1FIB7BZVi5bnpJbNLhCgmE30Cbmd6GyKKNDGp VpTTtJdDoQwhrkJbFMX0y4FU7nwqsJR2ILxGNPGqREF7oKxIBmdINt39pJJs5OQ4 islwfWDp6wbMuhz00Gsnv4ozzNpAFKm9lJrVDTsD9mkFp5xhpmffpzawY8DAOQRN 4JY1IBJuv7TCUhq7mI2e9YpPccXawm1a7XrprpOvbxx8ZsDvqKv5NMubVvtBVRVs xsCQifUV2bMbvg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:46 2026 by rpki-client