This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json) Hash identifier: XR+GXI8dJNKnVY90gGxEa6Mzj34iLTp9cA6WiRefZbY= Subject key identifier: CF:FF:4D:B4:B7:A4:BB:28:D1:B1:53:31:D7:1A:5A:C4:D9:AE:33:8E Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Certificate serial: 019C427D87000B21E66896AAC2BABA148ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft Manifest number: 0EFB Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=) 2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: 0q0Bu13hTb1PdeB2KqcBsCbeVbG1j6bVQeLGwlxlRCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:87:00:0b:21:e6:68:96:aa:c2:ba:ba:14:8e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=cfff4db4b7a4bb28d1b15331d71a5ac4d9ae338e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:25:76:a9:a4:9c:55:63:fd:e0:14:bc:67:f1: 03:cd:37:39:ea:9e:02:24:68:e9:54:b7:a9:50:c2: 71:f8:30:72:e3:a1:94:e8:c6:63:96:34:25:27:08: d2:11:f6:30:9a:7b:80:8c:cd:cd:87:b8:9b:4d:ea: d8:46:c4:a1:a0:15:9e:e5:e9:62:04:31:80:74:b1: 8f:b1:81:93:e2:52:67:a3:21:04:df:4b:e9:35:42: 82:97:d6:c6:d0:ea:f2:bd:be:49:73:82:75:f2:f7: 3f:e7:49:0d:5d:1a:f3:a1:25:0f:8c:a5:71:5e:ac: 37:ae:05:50:9c:86:1a:26:c7:af:9c:c2:ed:b9:97: e3:14:82:c2:59:61:f2:dd:3a:ae:f8:a1:d5:33:9a: 96:be:b6:bf:37:40:a1:65:c7:1c:41:4a:7c:38:35: 72:2e:20:a7:6d:fb:50:0d:71:24:47:06:00:1b:95: 82:18:dd:dc:d7:b1:9f:71:6a:1e:4b:e9:dd:16:ff: 65:fa:27:19:0e:25:80:62:10:ed:a8:b9:c8:bf:71: ee:c1:58:c0:d0:54:72:43:ea:62:0a:f4:84:10:b0: ca:f8:77:28:34:a6:39:b0:bf:ae:7e:bb:bf:9b:21: 6d:f8:62:fc:a3:84:86:fb:b0:e5:88:ec:1a:4f:6a: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:4D:B4:B7:A4:BB:28:D1:B1:53:31:D7:1A:5A:C4:D9:AE:33:8E X509v3 Authority Key Identifier: keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:d7:ce:38:21:05:af:81:38:fb:f2:08:9e:f4:56:ca:f5: 5f:c3:73:3f:cd:ce:f4:46:f8:ad:68:2a:48:f7:57:71:c7:b9: a7:12:3a:9a:88:58:e5:8b:d4:ad:e2:07:8d:c2:89:d2:08:97: 50:df:e1:88:fe:bf:c2:ab:14:12:c5:ed:1a:d1:0d:00:3b:8d: d0:72:09:f8:0e:91:c9:11:87:08:f0:ed:1b:dd:39:8a:49:54: c1:c2:34:18:59:c8:27:c4:d1:00:88:9d:88:a9:3c:58:32:ca: 93:be:89:93:2b:42:d1:81:a5:82:3a:14:23:3c:6f:ed:bf:10: 5b:c9:96:ec:0d:4c:c4:24:d9:58:8d:9c:62:db:89:64:f3:16: a0:3c:a4:bc:d1:40:e8:15:77:2a:5a:0d:89:95:0a:4d:1e:ab: 0e:84:60:5e:5e:c1:55:f6:8f:2d:22:f6:89:ac:09:61:98:e5: d1:67:47:30:8f:a3:47:cc:78:29:31:de:16:d8:64:0d:dc:99: 4f:a2:af:e4:73:31:a9:13:10:4f:8a:47:7a:2d:93:79:a9:5b: 61:3f:10:9c:d5:f2:d9:f5:ee:ae:91:c5:13:1a:cb:e7:05:3e: 2f:27:d2:85:41:77:80:ff:05:f2:6c:8a:00:1d:66:2e:02:f5: 26:f8:3b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYcACyHmaJaqwrq6FI7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1 MmUzMTUwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD EyhjZmZmNGRiNGI3YTRiYjI4ZDFiMTUzMzFkNzFhNWFjNGQ5YWUzMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SV2qaScVWP94BS8Z/EDzTc56p4C JGjpVLepUMJx+DBy46GU6MZjljQlJwjSEfYwmnuAjM3Nh7ibTerYRsShoBWe5eli BDGAdLGPsYGT4lJnoyEE30vpNUKCl9bG0Oryvb5Jc4J18vc/50kNXRrzoSUPjKVx Xqw3rgVQnIYaJsevnMLtuZfjFILCWWHy3Tqu+KHVM5qWvra/N0ChZcccQUp8ODVy LiCnbftQDXEkRwYAG5WCGN3c17GfcWoeS+ndFv9l+icZDiWAYhDtqLnIv3HuwVjA 0FRyQ+piCvSEELDK+HcoNKY5sL+ufru/myFt+GL8o4SG+7DliOwaT2r0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM//TbS3pLso0bFTMdcaWsTZrjOOMB8GA1UdIwQY MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct NjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH/Xzjgh Ba+BOPvyCJ70Vsr1X8NzP83O9Eb4rWgqSPdXcce5pxI6mohY5YvUreIHjcKJ0giX UN/hiP6/wqsUEsXtGtENADuN0HIJ+A6RyRGHCPDtG905iklUwcI0GFnIJ8TRAIid iKk8WDLKk76JkytC0YGlgjoUIzxv7b8QW8mW7A1MxCTZWI2cYtuJZPMWoDykvNFA 6BV3KloNiZUKTR6rDoRgXl7BVfaPLSL2iawJYZjl0WdHMI+jR8x4KTHeFthkDdyZ T6Kv5HMxqRMQT4pHei2TealbYT8QnNXy2fXurpHFExrL5wU+LyfShUF3gP8F8myK AB1mLgL1Jvg7Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:08 2026 by rpki-client