This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json) Hash identifier: whAuVkMuJqk8VfOZ/peQ/DmJYPdN9+h0hE0Dcxgbe14= Subject key identifier: 32:D9:61:9F:10:DC:40:22:B8:78:76:BB:F8:A6:86:36:93:1A:F4:96 Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Certificate serial: 019C420F72256D52E9A5B21F45FDA66CF1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft Manifest number: 014E Signing time: Mon 09 Feb 2026 11:00:34 +0000 Manifest this update: Mon 09 Feb 2026 11:00:34 +0000 Manifest next update: Tue 10 Feb 2026 11:00:34 +0000 Files and hashes: 1: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: c5FEoRfx4ZSdNA4/BEXQdPRML30Q8ZbDkxRBNc6gsRE=) 2: jpo0P1bv75byvE6Uc1iS5rsp5PQ.roa (hash: orgmNk1notPErLnn1LIBwRtRE9IlZLvNrZGm1ZGrDr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:72:25:6d:52:e9:a5:b2:1f:45:fd:a6:6c:f1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Validity Not Before: Feb 9 11:00:34 2026 GMT Not After : Feb 10 11:00:34 2026 GMT Subject: CN=32d9619f10dc4022b87876bbf8a68636931af496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:19:d2:f9:b4:da:17:e9:e6:33:bd:bf:88: 4c:7d:6f:d9:d3:0a:de:fb:67:0c:f4:2c:7a:99:65: 6e:49:32:54:08:3e:0b:c1:f1:8a:a5:9d:c3:14:71: 01:06:31:40:3b:cd:b8:e4:02:ff:64:5a:1b:f6:c5: 42:bc:76:ca:01:44:8a:a8:d7:ae:5d:30:af:29:59: 5b:91:78:f1:c0:be:27:bd:15:fa:6d:ce:24:0f:88: fa:69:e9:77:21:85:00:a6:63:72:4f:61:74:b4:a4: 32:fe:e7:56:c1:39:18:0d:bf:77:2d:53:ea:dd:ba: 91:db:b9:24:05:40:58:47:a9:97:57:ab:0c:ee:c1: 5c:e1:e6:7c:ad:98:2e:51:97:4b:d0:c8:4c:c9:40: c0:5e:c1:53:17:18:77:c2:af:a7:7e:f8:8d:ff:61: bb:25:76:b4:c7:16:f6:6a:e8:7a:6c:b3:9e:cc:06: b3:0c:a4:ed:6b:70:c5:f6:b3:c0:59:ee:56:49:46: 8b:80:19:d7:25:a4:40:b8:91:6c:a7:5a:e9:46:05: 17:2c:ba:a4:b0:71:a9:1e:d6:1a:03:04:cd:fc:16: 2a:b9:79:39:38:26:14:e6:dd:7a:2d:b2:15:3d:72: 76:84:8f:ce:4b:0c:11:e3:c5:3a:16:a3:b8:84:bd: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:61:9F:10:DC:40:22:B8:78:76:BB:F8:A6:86:36:93:1A:F4:96 X509v3 Authority Key Identifier: keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:31:06:fe:5b:9e:06:a2:9a:c2:22:87:90:e0:44:0a:f6: f3:97:b2:de:1d:74:83:de:a0:33:ae:ad:9e:ab:81:62:6d:ae: 48:56:f1:f1:af:f7:e8:01:30:aa:22:c1:09:62:d4:f9:fe:61: cb:5d:3c:c9:df:72:62:80:0d:3b:b5:46:83:38:29:f2:79:fd: 01:4a:a0:eb:be:b5:84:97:79:7e:bb:a7:41:8f:fd:e2:95:a4: 6f:74:f9:b0:40:be:d0:9b:a2:71:eb:3c:f2:f8:1b:09:7c:77: fe:84:7a:f6:e1:77:a4:95:d4:d3:6d:47:f4:89:fb:77:05:b5: 67:a5:9e:6c:58:0e:6e:ad:7f:29:34:a1:52:ed:a1:f9:c3:48: 56:53:36:f5:0e:bf:e0:2e:2a:d4:8d:85:dc:85:06:c2:2e:e1: 9b:1d:0b:10:c9:68:95:e1:e2:27:bb:58:f2:7b:a4:2d:b8:9e: d6:6d:ea:db:5f:27:20:d5:09:63:c4:b1:00:80:d0:2d:57:2e: f3:49:e9:bb:e5:c0:44:8e:fa:13:23:f0:20:36:f9:bd:3d:54: a8:d6:b3:73:a9:08:92:53:0e:f3:93:0b:e8:e9:b4:5a:37:ed: ab:a6:7d:ec:ce:8b:e8:d9:3f:e5:b7:d9:d6:9f:29:b6:d4:02: 8a:3d:c0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3IlbVLppbIfRf2mbPG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm NzhhOTEwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD EygzMmQ5NjE5ZjEwZGM0MDIyYjg3ODc2YmJmOGE2ODYzNjkzMWFmNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5QZ0vm02hfp5jO9v4hMfW/Z0wre +2cM9Cx6mWVuSTJUCD4LwfGKpZ3DFHEBBjFAO8245AL/ZFob9sVCvHbKAUSKqNeu XTCvKVlbkXjxwL4nvRX6bc4kD4j6ael3IYUApmNyT2F0tKQy/udWwTkYDb93LVPq 3bqR27kkBUBYR6mXV6sM7sFc4eZ8rZguUZdL0MhMyUDAXsFTFxh3wq+nfviN/2G7 JXa0xxb2auh6bLOezAazDKTta3DF9rPAWe5WSUaLgBnXJaRAuJFsp1rpRgUXLLqk sHGpHtYaAwTN/BYquXk5OCYU5t16LbIVPXJ2hI/OSwwR48U6FqO4hL0olwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLZYZ8Q3EAiuHh2u/imhjaTGvSWMB8GA1UdIwQY MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJkxBv5b ngaimsIih5DgRAr285ey3h10g96gM66tnquBYm2uSFbx8a/36AEwqiLBCWLU+f5h y108yd9yYoANO7VGgzgp8nn9AUqg6761hJd5frunQY/94pWkb3T5sEC+0Juices8 8vgbCXx3/oR69uF3pJXU021H9In7dwW1Z6WebFgObq1/KTShUu2h+cNIVlM29Q6/ 4C4q1I2F3IUGwi7hmx0LEMloleHiJ7tY8nukLbie1m3q218nINUJY8SxAIDQLVcu 80npu+XARI76EyPwIDb5vT1UqNazc6kIklMO85ML6Om0Wjftq6Z97M6L6Nk/5bfZ 1p8pttQCij3AyA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:48 2026 by rpki-client