This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json) Hash identifier: Qb1ue3DRZ3+y54kcU5aGkzx6h7no2EcfTgbNgl9b6LE= Subject key identifier: 9D:17:4C:65:80:5F:FD:33:00:D8:1D:61:CC:A6:B6:A6:EA:19:9B:18 Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04 Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04 Certificate serial: 019C4358FDB5B22369746AD706A3AA4E6A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft Manifest number: 1616 Signing time: Mon 09 Feb 2026 17:00:31 +0000 Manifest this update: Mon 09 Feb 2026 17:00:31 +0000 Manifest next update: Tue 10 Feb 2026 17:00:31 +0000 Files and hashes: 1: G2OQOrRbStQFRQnBFH5JsZK3fzk.roa (hash: J+Ruik9jZ8APiFx+KnGjdD7/sHBg8DbjFfn6BOTSsX4=) 2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: keD7pcKKeYBU8v3UNPD4/iy39RSBfNQZHE7CmGWMktI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:fd:b5:b2:23:69:74:6a:d7:06:a3:aa:4e:6a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04 Validity Not Before: Feb 9 17:00:31 2026 GMT Not After : Feb 10 17:00:31 2026 GMT Subject: CN=9d174c65805ffd3300d81d61cca6b6a6ea199b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:e9:a4:ed:0c:ae:8b:ed:f5:31:35:54:b4: 34:2a:1a:bc:bc:1e:5e:ab:c4:a6:95:24:e0:b2:1a: 45:b0:5f:93:51:7a:1d:aa:30:a7:7a:51:09:57:36: 60:2c:be:74:e8:13:ff:c2:12:af:f2:6b:29:6a:10: a0:f1:e5:ad:aa:06:4a:42:e7:e6:c2:f1:f5:c5:91: 24:7d:c6:06:6b:ce:b5:44:1f:0a:b5:5d:c3:fe:26: 4d:07:58:5e:c4:cb:35:73:4a:43:f8:66:be:e1:ba: 51:b1:f6:03:94:7e:fc:51:da:06:75:74:5b:0e:8d: d7:6f:69:57:c5:f9:60:0f:dc:8f:95:bf:de:54:02: 11:fc:01:2a:48:e1:81:7a:57:64:0c:fd:d2:29:dd: 82:a1:60:ea:c7:b0:17:dc:e2:0d:cb:d3:9c:4e:2f: 67:93:a8:af:d9:10:c5:c8:35:94:1f:a4:f3:16:2b: 99:26:b3:77:fb:e3:c2:c1:1c:d0:dc:f5:97:6a:23: 2d:e1:81:62:9c:10:09:e3:1d:9b:0e:b3:9d:8e:1b: f8:78:bd:70:7d:07:49:da:bb:9c:03:43:fa:f5:cf: 61:d7:4c:68:70:3b:70:b6:05:5e:1b:f4:88:5c:b7: 0d:56:7a:01:a2:e9:d4:a3:df:69:ca:37:ff:f9:c2: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:4C:65:80:5F:FD:33:00:D8:1D:61:CC:A6:B6:A6:EA:19:9B:18 X509v3 Authority Key Identifier: keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e5:65:3e:81:37:38:a1:80:07:26:b4:87:c8:60:71:3a:df: 27:67:3c:ee:8a:85:ad:b2:a4:a2:de:a3:3f:c3:b8:39:8d:ff: cf:ab:05:9b:5b:53:da:36:61:f7:3a:cb:03:76:9e:b5:67:a8: de:8c:31:2b:5e:97:0d:45:b8:fd:60:df:4d:aa:28:38:8d:79: 91:4a:82:73:80:88:66:4f:0b:1a:10:ac:b3:bc:09:e2:e5:33: 30:b7:9f:b6:5b:38:db:aa:98:97:96:56:a4:87:5d:58:2f:44: 80:0c:4b:07:52:e8:a3:aa:87:67:bf:be:ec:2a:c7:c6:e6:87: 4a:fb:07:42:62:c9:3b:cb:09:98:db:c0:96:66:ef:49:62:66: f9:36:79:ef:41:d6:56:cc:4d:ac:42:a1:3c:68:ce:c8:75:f4: 28:fe:55:54:68:63:b3:b3:c7:99:18:0f:81:a4:a9:ec:43:28: 6a:ef:89:d1:95:21:f2:1e:62:0d:4e:ce:24:9c:63:0a:70:e1: f3:8d:67:54:8b:bb:38:60:17:b2:d9:ce:c6:88:ed:a9:52:49: 8d:28:d9:d4:db:2d:99:30:88:ed:40:5b:47:13:a8:b5:ea:08: dd:43:48:f2:bd:71:5a:ec:eb:d2:69:e8:d4:56:f3:2d:d2:a5: 82:67:c9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWP21siNpdGrXBqOqTmpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzkyZGU3MGYzM2I4Mjg4MjU0MmJlZjIzYjE4ZGE5NzUz OGNhMDQwHhcNMjYwMjA5MTcwMDMxWhcNMjYwMjEwMTcwMDMxWjAzMTEwLwYDVQQD Eyg5ZDE3NGM2NTgwNWZmZDMzMDBkODFkNjFjY2E2YjZhNmVhMTk5YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0nppO0Mrovt9TE1VLQ0Khq8vB5e q8SmlSTgshpFsF+TUXodqjCnelEJVzZgLL506BP/whKv8mspahCg8eWtqgZKQufm wvH1xZEkfcYGa861RB8KtV3D/iZNB1hexMs1c0pD+Ga+4bpRsfYDlH78UdoGdXRb Do3Xb2lXxflgD9yPlb/eVAIR/AEqSOGBeldkDP3SKd2CoWDqx7AX3OINy9OcTi9n k6iv2RDFyDWUH6TzFiuZJrN3++PCwRzQ3PWXaiMt4YFinBAJ4x2bDrOdjhv4eL1w fQdJ2rucA0P69c9h10xocDtwtgVeG/SIXLcNVnoBounUo99pyjf/+cJUUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0XTGWAX/0zANgdYcymtqbqGZsYMB8GA1UdIwQY MBaAFJt5LecPM7goglQr7yOxjal1OMoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgt MDcxN2RhMDUzNTg1LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wYTRjMWUtMWZjNS00MDdhLWJkMDgtMDcxN2RhMDUzNTg1 LzEvbTNrdDV3OHp1Q2lDVkN2dkk3R05xWFU0eWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOVlPoE3 OKGABya0h8hgcTrfJ2c87oqFrbKkot6jP8O4OY3/z6sFm1tT2jZh9zrLA3aetWeo 3owxK16XDUW4/WDfTaooOI15kUqCc4CIZk8LGhCss7wJ4uUzMLeftls426qYl5ZW pIddWC9EgAxLB1Loo6qHZ7++7CrHxuaHSvsHQmLJO8sJmNvAlmbvSWJm+TZ570HW VsxNrEKhPGjOyHX0KP5VVGhjs7PHmRgPgaSp7EMoau+J0ZUh8h5iDU7OJJxjCnDh 841nVIu7OGAXstnOxojtqVJJjSjZ1NstmTCI7UBbRxOoteoI3UNI8r1xWuzr0mno 1FbzLdKlgmfJMg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:33 2026 by rpki-client