This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json) Hash identifier: +VsxbQUAQXvBTkg1uA5/eDlEEbEgi8I57YaFmgXR61M= Subject key identifier: E2:FD:86:6F:AB:70:CF:62:02:DA:22:6F:0F:4E:31:76:18:0C:93:CA Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Certificate serial: 019C43C6BF7AB6C6BF9CDAE3DA54BE80A280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft Manifest number: 0EE9 Signing time: Mon 09 Feb 2026 19:00:24 +0000 Manifest this update: Mon 09 Feb 2026 19:00:24 +0000 Manifest next update: Tue 10 Feb 2026 19:00:24 +0000 Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: sWd97tVRTV6ZMqe46Y/WMyTINQnsLonjDkgljaUMjpk=) 2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:bf:7a:b6:c6:bf:9c:da:e3:da:54:be:80:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Validity Not Before: Feb 9 19:00:24 2026 GMT Not After : Feb 10 19:00:24 2026 GMT Subject: CN=e2fd866fab70cf6202da226f0f4e3176180c93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:cf:5e:12:00:cc:0b:00:44:a3:ca:03:68: 79:d9:ce:5a:f6:3e:47:6a:20:d7:80:54:3c:14:d2: 50:d7:1c:f0:64:33:80:34:43:0b:cc:ea:5c:36:84: c9:f0:1c:d9:5c:5d:76:6b:f5:2e:64:e8:35:fe:c9: 2e:d7:2f:17:c7:dd:49:c6:d6:0e:ea:a5:a8:34:9e: 2a:a9:46:d4:50:dc:84:61:c4:97:8a:e9:dc:9f:54: f9:32:dd:d7:7e:9f:d1:cb:43:56:4b:08:91:cb:73: 85:2d:a4:e6:ea:0b:58:dc:cc:1a:e7:7d:3a:fe:9a: 27:9d:af:10:1c:2a:3b:e9:2e:1e:ce:8d:7b:cb:f7: de:1a:c8:f2:a8:93:23:83:fc:46:a0:a5:18:0e:e3: b6:06:69:c8:6a:8e:c2:38:a0:ab:ab:c4:1d:62:b4: 70:c0:c1:4b:43:02:d6:ac:79:e1:db:79:b9:f6:3c: ef:13:59:a5:07:6c:98:e4:82:e8:bd:91:b5:1b:17: fb:21:e8:0d:69:c0:00:13:54:78:37:80:4b:18:a9: 4b:7c:c8:d4:6c:e3:96:9d:40:c2:11:53:c1:08:8d: ab:15:98:5a:0d:93:92:61:66:8c:9e:39:ae:e3:e5: 31:b3:61:17:6f:f2:78:25:93:3f:96:f0:06:3d:7c: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:86:6F:AB:70:CF:62:02:DA:22:6F:0F:4E:31:76:18:0C:93:CA X509v3 Authority Key Identifier: keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:d5:29:3d:fe:fe:77:52:01:3d:4a:7c:e1:f2:1c:bb:24: d9:84:76:0e:a7:8a:64:66:6d:15:0a:cf:0d:9f:2f:d4:3e:23: 20:04:57:cc:1c:af:0b:cf:d5:a6:98:a7:d4:fc:3e:8f:fa:d7: 94:e9:a8:5f:e3:95:4f:c2:99:2e:25:1f:b2:04:75:e9:85:bf: 99:8e:a2:d2:11:94:f1:c1:40:ab:e4:df:f9:4c:5f:5d:0b:66: 56:94:f1:36:34:19:af:8f:77:8d:37:2d:54:dd:50:61:31:8e: 1b:4e:bb:89:d1:a9:d6:6f:26:b8:c3:ea:06:eb:f1:b2:1d:80: 9b:41:d7:79:ea:63:ad:be:87:09:6d:0d:c6:96:66:4b:92:b6: f1:de:c4:40:d0:2e:a1:b8:02:9d:92:d0:66:af:77:f0:a9:a1: f2:98:4c:73:78:ba:9d:6a:8e:3e:90:e3:0b:81:62:e4:da:94: 67:7e:88:49:3a:e1:8e:f0:cc:a9:e1:44:c1:f2:9c:7f:9e:0c: 3f:1d:8a:8e:a5:4c:0e:f0:39:dc:09:dd:ff:1c:f3:83:3d:66: cd:84:14:a9:02:b4:4c:fc:99:09:07:36:06:83:00:41:74:35: 7b:e6:05:ce:6d:e9:27:54:26:ac:d1:9c:96:a0:6d:2c:a3:03: 2c:30:6b:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxr96tsa/nNrj2lS+gKKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MWViNTNjYjU2NzE4ZGYwZDk0NzZjZDk4NGFhYzQ0MzJi OTBmNmMwHhcNMjYwMjA5MTkwMDI0WhcNMjYwMjEwMTkwMDI0WjAzMTEwLwYDVQQD EyhlMmZkODY2ZmFiNzBjZjYyMDJkYTIyNmYwZjRlMzE3NjE4MGM5M2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjvPXhIAzAsARKPKA2h52c5a9j5H aiDXgFQ8FNJQ1xzwZDOANEMLzOpcNoTJ8BzZXF12a/UuZOg1/sku1y8Xx91JxtYO 6qWoNJ4qqUbUUNyEYcSXiuncn1T5Mt3Xfp/Ry0NWSwiRy3OFLaTm6gtY3Mwa5306 /ponna8QHCo76S4ezo17y/feGsjyqJMjg/xGoKUYDuO2BmnIao7COKCrq8QdYrRw wMFLQwLWrHnh23m59jzvE1mlB2yY5ILovZG1Gxf7IegNacAAE1R4N4BLGKlLfMjU bOOWnUDCEVPBCI2rFZhaDZOSYWaMnjmu4+Uxs2EXb/J4JZM/lvAGPXxuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL9hm+rcM9iAtoibw9OMXYYDJPKMB8GA1UdIwQY MBaAFNYetTy1ZxjfDZR2zZhKrEQyuQ9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTIt OWFlM2RmZTk3NDgxLzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTItOWFlM2RmZTk3NDgx LzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHePVKT3+ /ndSAT1KfOHyHLsk2YR2DqeKZGZtFQrPDZ8v1D4jIARXzByvC8/Vppin1Pw+j/rX lOmoX+OVT8KZLiUfsgR16YW/mY6i0hGU8cFAq+Tf+UxfXQtmVpTxNjQZr493jTct VN1QYTGOG067idGp1m8muMPqBuvxsh2Am0HXeepjrb6HCW0NxpZmS5K28d7EQNAu obgCnZLQZq938Kmh8phMc3i6nWqOPpDjC4Fi5NqUZ36ISTrhjvDMqeFEwfKcf54M Px2KjqVMDvA53And/xzzgz1mzYQUqQK0TPyZCQc2BoMAQXQ1e+YFzm3pJ1QmrNGc lqBtLKMDLDBrOg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:32 2026 by rpki-client