This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json) Hash identifier: 1LdfPIIT6Z2Uk27mMvejEc0LUW0GVwgVLVCoZB5s2Gg= Subject key identifier: 75:9B:FA:CA:04:17:8D:E6:69:4B:75:F0:E7:B4:74:6F:5E:9B:9B:9F Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Certificate serial: 019C438FBE7EC717C2060A70E42D586F72AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 18:00:19 +0000 Manifest this update: Mon 09 Feb 2026 18:00:19 +0000 Manifest next update: Tue 10 Feb 2026 18:00:19 +0000 Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: qyjDBirm1//fALAJeZJsVHOKksYCayn1KWZJFZTpQuo=) 2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:be:7e:c7:17:c2:06:0a:70:e4:2d:58:6f:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06 Validity Not Before: Feb 9 18:00:19 2026 GMT Not After : Feb 10 18:00:19 2026 GMT Subject: CN=759bfaca04178de6694b75f0e7b4746f5e9b9b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c5:f1:6b:40:26:0b:45:32:83:c8:13:75:b2: 48:47:d9:db:8f:51:ae:78:4a:8d:f1:d9:9e:c0:c8: 16:91:02:82:25:1a:0b:fd:7b:ff:98:82:6d:b5:76: 04:65:f3:c6:15:1d:70:97:3a:73:5f:1d:23:2b:d8: 8d:b5:9d:a3:12:8b:66:12:bc:75:a9:a1:a2:de:57: 34:a3:b9:24:bb:f8:74:05:1f:9d:72:aa:3d:90:1f: c6:f6:79:53:55:85:45:b7:4f:7e:59:fc:c8:46:4d: 6c:86:5f:92:62:94:8e:20:71:ad:93:7c:36:6a:8f: 6d:05:2e:f6:2a:6b:84:29:21:02:0a:30:f3:c5:7a: fd:e7:ad:e1:3b:41:fd:19:64:ca:8c:cf:50:3c:d4: 47:ba:79:99:e3:30:ae:2b:6e:fe:6a:89:46:89:a7: 79:22:63:4d:b3:dc:fc:31:46:4a:30:d7:31:43:14: 70:02:2b:c7:e9:46:6d:3d:f9:30:53:aa:40:e4:f5: e7:01:20:d0:c7:55:db:7c:76:bf:97:20:51:13:e9: 4f:ff:08:93:99:9e:21:7f:f3:0c:f0:d0:e8:77:31: de:6c:d9:85:bb:0f:c4:e0:33:e4:80:25:db:09:4a: f0:83:c7:55:7a:93:d8:e6:0e:d5:ae:0a:d0:62:0d: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9B:FA:CA:04:17:8D:E6:69:4B:75:F0:E7:B4:74:6F:5E:9B:9B:9F X509v3 Authority Key Identifier: keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:c2:ca:b4:4c:88:ff:1d:ed:b9:f2:1f:d1:30:15:96:26: 28:06:7b:37:bb:6b:50:d0:0d:ad:00:1f:f1:6d:d1:e2:97:0e: 5e:f5:76:6c:33:a6:ba:34:a0:1d:47:29:ab:69:92:f9:86:02: 00:4b:94:c6:2c:49:ff:15:56:18:cf:48:ad:68:30:4e:0e:26: b6:d5:b5:6d:96:ae:32:9d:56:46:55:ad:11:b7:dc:d0:31:5e: 21:39:54:dc:c7:71:63:a8:b8:41:1e:e6:46:7a:00:e8:36:06: d7:96:f4:92:16:82:ec:f0:9f:e6:c8:76:ce:9c:05:6e:6f:30: b7:5a:54:53:0e:22:ee:a5:a0:e8:a1:d4:a5:bd:2d:d8:ee:32: a3:0b:bd:23:d5:7a:97:2e:30:19:1b:49:4e:01:99:af:1b:7a: 1f:4e:6e:17:6c:30:5d:46:63:1b:fd:9b:cb:8c:62:29:d9:20: e2:ee:54:56:2b:7a:64:e8:0d:c6:1f:d4:95:b0:1b:46:89:94: 97:50:64:8b:46:8e:99:91:ce:5b:10:d1:65:7e:30:b2:e9:a9: 4b:26:b7:1c:62:83:2d:83:6f:55:02:b9:39:1b:b2:7e:2c:67: 65:54:6e:59:e0:c9:3b:81:bc:c2:9a:20:c6:d7:c8:13:6c:d5: 59:39:72:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj75+xxfCBgpw5C1Yb3KsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk N2NmMDYwHhcNMjYwMjA5MTgwMDE5WhcNMjYwMjEwMTgwMDE5WjAzMTEwLwYDVQQD Eyg3NTliZmFjYTA0MTc4ZGU2Njk0Yjc1ZjBlN2I0NzQ2ZjVlOWI5YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MXxa0AmC0Uyg8gTdbJIR9nbj1Gu eEqN8dmewMgWkQKCJRoL/Xv/mIJttXYEZfPGFR1wlzpzXx0jK9iNtZ2jEotmErx1 qaGi3lc0o7kku/h0BR+dcqo9kB/G9nlTVYVFt09+WfzIRk1shl+SYpSOIHGtk3w2 ao9tBS72KmuEKSECCjDzxXr9563hO0H9GWTKjM9QPNRHunmZ4zCuK27+aolGiad5 ImNNs9z8MUZKMNcxQxRwAivH6UZtPfkwU6pA5PXnASDQx1XbfHa/lyBRE+lP/wiT mZ4hf/MM8NDodzHebNmFuw/E4DPkgCXbCUrwg8dVepPY5g7VrgrQYg17aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWb+soEF43maUt18Oe0dG9em5ufMB8GA1UdIwQY MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt ZmY4MDllN2RhZWNhLzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrfCyrRM iP8d7bnyH9EwFZYmKAZ7N7trUNANrQAf8W3R4pcOXvV2bDOmujSgHUcpq2mS+YYC AEuUxixJ/xVWGM9IrWgwTg4mttW1bZauMp1WRlWtEbfc0DFeITlU3MdxY6i4QR7m RnoA6DYG15b0khaC7PCf5sh2zpwFbm8wt1pUUw4i7qWg6KHUpb0t2O4yowu9I9V6 ly4wGRtJTgGZrxt6H05uF2wwXUZjG/2by4xiKdkg4u5UVit6ZOgNxh/UlbAbRomU l1Bki0aOmZHOWxDRZX4wsumpSya3HGKDLYNvVQK5ORuyfixnZVRuWeDJO4G8wpog xtfIE2zVWTly0A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:26 2026 by rpki-client