This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json) Hash identifier: 2LOcl8sR0NpCulGrwz+eZYPy4uWiRqhvG7MqplR4E60= Subject key identifier: 06:4F:37:CB:D9:D2:4F:0B:1B:02:AD:24:7B:97:62:FF:6D:7C:0F:BB Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a Certificate serial: 019C43FDA5D0CF164B3210142C48CA167BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:00:22 +0000 Manifest this update: Mon 09 Feb 2026 20:00:22 +0000 Manifest next update: Tue 10 Feb 2026 20:00:22 +0000 Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: BfaPCExa8xa8qByJASE/bjRbLMu3FP85CWH3XFZRa/k=) 2: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (hash: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:a5:d0:cf:16:4b:32:10:14:2c:48:ca:16:7b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a Validity Not Before: Feb 9 20:00:22 2026 GMT Not After : Feb 10 20:00:22 2026 GMT Subject: CN=064f37cbd9d24f0b1b02ad247b9762ff6d7c0fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:eb:3f:8b:0e:51:0f:dc:8a:5c:a5:b5:0d: cd:71:a4:e4:e9:3d:24:6e:71:ae:13:27:cf:ff:10: f8:55:e1:d5:5c:a8:bd:9c:94:47:d9:9c:7c:21:1c: 73:44:74:96:d6:47:10:75:e1:48:6c:43:75:99:1b: d5:bf:ab:ba:94:bb:53:48:3f:fe:4a:83:b1:c3:af: 23:69:91:4f:9e:b1:d5:ba:24:83:ed:7f:bb:58:b0: af:a7:7d:c8:07:b8:53:6a:33:96:b0:e1:2c:5b:98: cb:f8:39:c2:5d:9e:63:6f:0c:1a:97:c7:16:4f:0a: 71:eb:69:03:4d:df:1b:8e:44:bc:d5:97:c4:bb:5b: 77:b6:c8:a3:35:6e:e3:02:c9:73:90:0d:8b:06:95: a3:a2:e4:13:9f:1d:54:9b:0c:24:04:a7:15:ba:87: 5b:58:37:88:77:d5:3e:9c:86:b4:ca:08:e0:11:77: c5:7a:99:cf:78:0f:83:d5:5b:82:79:3f:41:fc:2f: 02:6e:62:18:d8:92:40:5f:e3:a9:c5:77:41:af:86: 2c:54:54:80:93:a1:97:2d:0b:7b:88:f4:3b:1e:f8: c7:25:ed:71:7f:74:1c:0d:4a:19:94:ce:aa:27:12: 6d:96:3e:7b:da:2d:8e:d6:ab:67:a3:a9:ad:18:7d: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4F:37:CB:D9:D2:4F:0B:1B:02:AD:24:7B:97:62:FF:6D:7C:0F:BB X509v3 Authority Key Identifier: keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:34:02:b1:18:ff:52:2a:29:70:00:50:f8:1b:97:63:3a:b6: 72:42:65:d9:bb:49:96:41:3c:9b:a5:a9:1d:c7:9d:58:26:07: 1f:1a:01:15:47:34:7d:e9:55:63:ef:fb:33:c5:db:25:96:fe: 9e:8f:12:93:7c:92:3b:ad:2d:58:fb:6c:35:5f:58:94:46:66: 63:23:54:cd:98:2d:4e:e5:7b:11:15:87:ef:cc:b1:43:eb:d3: fc:51:dc:d1:99:1d:9a:e4:e0:46:94:5f:d7:7d:61:56:2a:13: 8f:b3:3f:58:95:cd:22:9a:7e:0a:75:f8:ad:4a:81:f4:cb:1b: 8d:c5:ac:c0:0a:8f:b3:db:21:35:2d:1e:5e:12:ef:cb:1c:c4: 87:af:f2:e9:57:07:f3:55:07:cc:7a:92:63:98:94:ed:fe:f3: bf:df:ad:c1:8b:34:ba:3a:6c:a8:02:b3:cf:51:5a:32:b6:0f: 67:ac:71:eb:5e:58:39:d6:b9:83:16:4a:d7:90:ff:30:2c:6e: 91:e7:c1:e7:a8:b1:cd:b5:f8:eb:e7:a0:ab:c6:fb:26:cf:19: c0:34:d5:d7:75:35:ce:2c:c5:99:9e:40:0a:ca:a1:af:60:0f: 91:a6:25:0d:d1:87:65:75:c9:d2:f3:84:26:67:4e:65:46:8f: b6:d4:69:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/aXQzxZLMhAULEjKFnu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MDQ2MTA4YjU0MjYxNDQyNDIyYzBmYmM4MGIzZmE5ODZl YmU5M2EwHhcNMjYwMjA5MjAwMDIyWhcNMjYwMjEwMjAwMDIyWjAzMTEwLwYDVQQD EygwNjRmMzdjYmQ5ZDI0ZjBiMWIwMmFkMjQ3Yjk3NjJmZjZkN2MwZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfrP4sOUQ/cilyltQ3NcaTk6T0k bnGuEyfP/xD4VeHVXKi9nJRH2Zx8IRxzRHSW1kcQdeFIbEN1mRvVv6u6lLtTSD/+ SoOxw68jaZFPnrHVuiSD7X+7WLCvp33IB7hTajOWsOEsW5jL+DnCXZ5jbwwal8cW Twpx62kDTd8bjkS81ZfEu1t3tsijNW7jAslzkA2LBpWjouQTnx1UmwwkBKcVuodb WDeId9U+nIa0ygjgEXfFepnPeA+D1VuCeT9B/C8CbmIY2JJAX+OpxXdBr4YsVFSA k6GXLQt7iPQ7HvjHJe1xf3QcDUoZlM6qJxJtlj572i2O1qtno6mtGH0G9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZPN8vZ0k8LGwKtJHuXYv9tfA+7MB8GA1UdIwQY MBaAFJQEYQi1QmFEJCLA+8gLP6mG6+k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQt OTM5NDkyNGMzYzc2LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQtOTM5NDkyNGMzYzc2 LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzQCsRj/ UiopcABQ+BuXYzq2ckJl2btJlkE8m6WpHcedWCYHHxoBFUc0felVY+/7M8XbJZb+ no8Sk3ySO60tWPtsNV9YlEZmYyNUzZgtTuV7ERWH78yxQ+vT/FHc0ZkdmuTgRpRf 131hVioTj7M/WJXNIpp+CnX4rUqB9MsbjcWswAqPs9shNS0eXhLvyxzEh6/y6VcH 81UHzHqSY5iU7f7zv9+twYs0ujpsqAKzz1FaMrYPZ6xx615YOda5gxZK15D/MCxu kefB56ixzbX46+egq8b7Js8ZwDTV13U1zizFmZ5ACsqhr2APkaYlDdGHZXXJ0vOE JmdOZUaPttRpGQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:14 2026 by rpki-client