This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json) Hash identifier: 8EEQG6JiaPQwPBaBGLi6AxHFWLWMd4MPaXW1oXAnTYs= Subject key identifier: 33:6C:F5:F4:BB:8E:8D:66:09:F3:F2:7B:95:6A:D8:D4:50:64:95:AD Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Certificate serial: 019C43FE27726759D8EC3D2D2F9F5117720A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft Manifest number: 0854 Signing time: Mon 09 Feb 2026 20:00:55 +0000 Manifest this update: Mon 09 Feb 2026 20:00:55 +0000 Manifest next update: Tue 10 Feb 2026 20:00:55 +0000 Files and hashes: 1: RqkjHn1__XEjnWyHvV0T7PxyWK0.roa (hash: Ssqz1V4GBD9MzNBS/3Ky31egjDUQPgdZXUNSxQFlN6Y=) 2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: a4CbOoorxkXaWuSr6PPg3IgrVn8YznnoIXK+EGqQOeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:27:72:67:59:d8:ec:3d:2d:2f:9f:51:17:72:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Validity Not Before: Feb 9 20:00:55 2026 GMT Not After : Feb 10 20:00:55 2026 GMT Subject: CN=336cf5f4bb8e8d6609f3f27b956ad8d4506495ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:e6:e6:5d:22:71:70:a5:fe:83:6e:f9:3b: 7a:a6:f9:5c:42:e7:11:46:b7:59:33:4c:6a:e7:19: e4:3c:80:06:a2:81:ef:88:4e:f2:f5:6c:c7:7d:23: da:94:24:07:0b:74:fe:30:d9:7e:3a:59:fe:41:dc: b8:a2:a3:0b:e5:9f:da:e1:8a:2a:77:54:e8:de:66: c3:4f:78:01:12:9a:62:83:29:9b:99:17:6b:61:78: 02:97:3a:bf:02:64:a7:12:3d:df:27:20:5b:ab:c8: 19:ab:7a:ee:33:68:f6:02:c7:e4:ec:c4:01:d1:4b: 80:3f:7c:7c:21:75:2f:1d:78:8a:a9:ae:cd:75:a1: cc:7a:5d:c0:1f:4b:b0:4c:4b:95:c1:41:ff:9d:3f: f8:92:e3:1d:df:e0:2a:ef:30:01:92:0b:e4:2e:0b: e9:90:b7:47:28:dc:4f:c9:a5:9c:a6:11:97:f7:bd: 4d:cd:c0:20:04:ad:41:50:95:82:e7:bc:fe:9f:db: 40:02:33:09:45:b7:5c:0e:d5:f8:ab:cf:0c:03:fe: af:64:b3:d8:17:d5:e6:ab:f4:da:80:dc:02:09:b1: 71:b1:d0:77:11:f4:ee:69:64:96:24:2b:68:0e:9e: dd:c5:23:46:18:3e:6f:73:60:0e:95:70:76:dc:78: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6C:F5:F4:BB:8E:8D:66:09:F3:F2:7B:95:6A:D8:D4:50:64:95:AD X509v3 Authority Key Identifier: keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:59:36:f8:7f:2d:e8:87:1d:8b:db:91:2b:17:b0:72:d3: f1:51:c3:0c:3d:0d:0e:f3:fe:86:49:8c:59:55:8c:6a:b9:6a: 6b:11:52:2c:88:4e:29:bd:1b:34:c7:bf:22:e9:ce:51:a8:b0: eb:c1:e1:0d:2c:a1:f2:35:45:c4:e9:ac:27:a6:c2:fd:09:ba: d4:91:40:55:28:8d:25:ac:b9:94:22:60:8e:ff:de:48:67:df: 32:05:54:2b:4c:ad:7f:35:61:a7:4e:a1:99:3f:25:e1:d5:aa: 84:29:3c:86:8b:1d:ed:1a:ae:49:eb:b7:c1:8e:01:48:d6:ff: c4:c0:27:b7:51:eb:ff:b5:3e:ec:ad:a3:68:f1:09:c8:79:1a: ef:1f:18:2e:ed:d7:9f:2f:5d:70:0c:ef:61:7e:05:fa:7b:81: 78:51:d8:1d:91:d9:72:4a:e1:b6:03:8f:b5:f3:62:3a:84:b5: da:8a:0c:7b:57:5e:1c:61:45:66:c4:40:01:42:bb:62:67:15: a2:2e:09:03:3e:d6:0d:82:88:6c:1d:07:6f:96:ca:c7:03:a7: 4f:f3:36:0d:dd:14:f3:26:b9:85:e1:5b:ef:7a:1a:5e:c1:44: ed:9e:39:5f:a6:ff:85:92:16:40:ab:7c:32:32:76:b6:1b:cd: 5d:92:06:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/idyZ1nY7D0tL59RF3IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz YjMwZWUwHhcNMjYwMjA5MjAwMDU1WhcNMjYwMjEwMjAwMDU1WjAzMTEwLwYDVQQD EygzMzZjZjVmNGJiOGU4ZDY2MDlmM2YyN2I5NTZhZDhkNDUwNjQ5NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkofm5l0icXCl/oNu+Tt6pvlcQucR RrdZM0xq5xnkPIAGooHviE7y9WzHfSPalCQHC3T+MNl+Oln+Qdy4oqML5Z/a4Yoq d1To3mbDT3gBEppigymbmRdrYXgClzq/AmSnEj3fJyBbq8gZq3ruM2j2Asfk7MQB 0UuAP3x8IXUvHXiKqa7NdaHMel3AH0uwTEuVwUH/nT/4kuMd3+Aq7zABkgvkLgvp kLdHKNxPyaWcphGX971NzcAgBK1BUJWC57z+n9tAAjMJRbdcDtX4q88MA/6vZLPY F9Xmq/TagNwCCbFxsdB3EfTuaWSWJCtoDp7dxSNGGD5vc2AOlXB23Hg8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNs9fS7jo1mCfPye5Vq2NRQZJWtMB8GA1UdIwQY MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3 LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvdZNvh/ LeiHHYvbkSsXsHLT8VHDDD0NDvP+hkmMWVWMarlqaxFSLIhOKb0bNMe/IunOUaiw 68HhDSyh8jVFxOmsJ6bC/Qm61JFAVSiNJay5lCJgjv/eSGffMgVUK0ytfzVhp06h mT8l4dWqhCk8hosd7RquSeu3wY4BSNb/xMAnt1Hr/7U+7K2jaPEJyHka7x8YLu3X ny9dcAzvYX4F+nuBeFHYHZHZckrhtgOPtfNiOoS12ooMe1deHGFFZsRAAUK7YmcV oi4JAz7WDYKIbB0Hb5bKxwOnT/M2Dd0U8ya5heFb73oaXsFE7Z45X6b/hZIWQKt8 MjJ2thvNXZIGHg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:34 2026 by rpki-client