This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json) Hash identifier: 7KiNPxBoK+QnIKp1QBfPAyH0fUKl/UwnQUmqr6DLrZ8= Subject key identifier: 7A:30:69:55:1F:C6:0C:37:EA:01:C5:18:AB:76:D8:53:33:A3:78:4C Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019C427D5E3289685AFA121A685F0F6D8BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft Manifest number: 0233 Signing time: Mon 09 Feb 2026 13:00:38 +0000 Manifest this update: Mon 09 Feb 2026 13:00:38 +0000 Manifest next update: Tue 10 Feb 2026 13:00:38 +0000 Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=) 2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: bpcBK3hjNJUeeqfUq0p/rOvkPS/e/Ng+wwcKvjDaSbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5e:32:89:68:5a:fa:12:1a:68:5f:0f:6d:8b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Feb 9 13:00:38 2026 GMT Not After : Feb 10 13:00:38 2026 GMT Subject: CN=7a3069551fc60c37ea01c518ab76d85333a3784c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:59:57:e9:a0:a2:63:63:a4:0a:c5:0e:5a: eb:55:8e:4e:e0:d5:0b:24:a0:f6:44:7e:6a:7b:0a: 3a:cd:25:04:b9:16:8f:ad:98:c3:45:63:42:bb:11: 6f:d9:c6:ca:43:ac:23:0a:75:0e:94:e3:8d:39:2a: fd:34:13:e1:f7:65:ef:33:e9:06:48:86:3d:de:de: dc:7c:cb:a5:2f:d7:30:c3:e3:94:ab:23:45:05:e0: f7:4c:67:8d:6c:02:c3:18:45:a4:c1:d8:d7:e1:a0: 9d:ae:ff:92:62:1a:37:37:fd:00:cb:67:8a:84:fb: f4:2f:a7:5d:00:f2:98:90:00:bd:d2:65:95:b1:c1: c6:f5:24:e7:ee:af:98:c7:8f:8c:c8:93:1c:eb:5e: c4:29:fc:41:7b:26:89:45:b8:d0:88:62:6b:d9:74: 62:76:99:35:81:06:f8:ac:48:0b:f3:38:6f:5d:90: ed:02:5f:f9:da:b7:17:c0:5c:23:58:4b:0c:b7:99: 22:ae:42:1f:f2:73:df:0c:71:50:8a:74:46:99:b1: 8d:19:2a:5c:af:a9:7e:ec:3b:c1:84:7a:c7:9b:dd: 93:78:68:eb:9e:62:8d:97:c9:13:b9:f3:26:a8:e5: cd:2d:09:d9:51:6f:42:15:d2:80:f9:77:f0:ce:72: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:30:69:55:1F:C6:0C:37:EA:01:C5:18:AB:76:D8:53:33:A3:78:4C X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:64:07:af:14:42:39:d5:8e:76:5b:2a:98:82:0f:aa:64:cc: f6:ab:c1:f0:cd:07:3e:ca:5d:70:ed:30:23:83:ba:9a:74:47: fd:4a:cc:e1:3d:05:0e:26:ab:43:75:56:91:1c:ce:e7:7e:58: 0c:57:0c:ff:ab:70:96:94:8c:a4:81:91:0d:85:c8:32:0f:24: 5f:40:ba:38:03:0d:da:7e:b9:96:d9:4d:34:14:3a:0f:9c:d8: 50:89:40:27:67:a8:ea:f4:18:99:30:b1:b1:88:e9:ee:74:3c: e5:e0:c7:75:31:29:0c:37:c1:ef:9f:64:43:f1:ae:c8:f9:e0: 57:e8:de:7c:43:16:27:60:05:0e:e3:d6:89:16:63:20:1e:c5: c0:e2:b2:ec:26:3a:06:38:05:6a:a6:d9:c7:a0:38:a7:5f:ae: fc:92:43:31:53:aa:29:b3:8f:f8:c0:11:60:e4:d2:ef:1b:15: 20:c7:ce:f8:fe:f8:1a:49:f3:47:54:e7:4b:0d:aa:dd:83:67: b9:92:1b:fb:66:e4:4d:ce:67:0e:2a:1e:66:11:da:72:b4:e5: 18:d1:da:d5:ee:d7:18:9a:64:8a:03:55:7b:b0:26:6a:5e:50: c8:46:94:0d:75:3b:48:7d:ab:26:d9:dc:bf:6c:6b:76:f3:0e: 6c:93:c8:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfV4yiWha+hIaaF8PbYu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjYwMjA5MTMwMDM4WhcNMjYwMjEwMTMwMDM4WjAzMTEwLwYDVQQD Eyg3YTMwNjk1NTFmYzYwYzM3ZWEwMWM1MThhYjc2ZDg1MzMzYTM3ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9xZV+mgomNjpArFDlrrVY5O4NUL JKD2RH5qewo6zSUEuRaPrZjDRWNCuxFv2cbKQ6wjCnUOlOONOSr9NBPh92XvM+kG SIY93t7cfMulL9cww+OUqyNFBeD3TGeNbALDGEWkwdjX4aCdrv+SYho3N/0Ay2eK hPv0L6ddAPKYkAC90mWVscHG9STn7q+Yx4+MyJMc617EKfxBeyaJRbjQiGJr2XRi dpk1gQb4rEgL8zhvXZDtAl/52rcXwFwjWEsMt5kirkIf8nPfDHFQinRGmbGNGSpc r6l+7DvBhHrHm92TeGjrnmKNl8kTufMmqOXNLQnZUW9CFdKA+XfwznIb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHowaVUfxgw36gHFGKt22FMzo3hMMB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWQHrxRC OdWOdlsqmIIPqmTM9qvB8M0HPspdcO0wI4O6mnRH/UrM4T0FDiarQ3VWkRzO535Y DFcM/6twlpSMpIGRDYXIMg8kX0C6OAMN2n65ltlNNBQ6D5zYUIlAJ2eo6vQYmTCx sYjp7nQ85eDHdTEpDDfB759kQ/GuyPngV+jefEMWJ2AFDuPWiRZjIB7FwOKy7CY6 BjgFaqbZx6A4p1+u/JJDMVOqKbOP+MARYOTS7xsVIMfO+P74GknzR1TnSw2q3YNn uZIb+2bkTc5nDioeZhHacrTlGNHa1e7XGJpkigNVe7Amal5QyEaUDXU7SH2rJtnc v2xrdvMObJPIPA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:13 2026 by rpki-client