This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json) Hash identifier: RSAT9m0uvI5WFCjtVSwPvMYCEnkEKotKGWjLOir/g7Q= Subject key identifier: 17:22:F3:83:94:3F:5E:F0:D4:02:9D:05:A0:5C:D1:A3:73:CD:3C:DD Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Certificate serial: 019C42EBAC64A0AE676CFB95290041134DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft Manifest number: 14D2 Signing time: Mon 09 Feb 2026 15:01:07 +0000 Manifest this update: Mon 09 Feb 2026 15:01:07 +0000 Manifest next update: Tue 10 Feb 2026 15:01:07 +0000 Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=) 2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: NWX58xM/LEiIxAUDATHeL+vnpH69+pfbYmrJ59tCr9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:ac:64:a0:ae:67:6c:fb:95:29:00:41:13:4d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Validity Not Before: Feb 9 15:01:07 2026 GMT Not After : Feb 10 15:01:07 2026 GMT Subject: CN=1722f383943f5ef0d4029d05a05cd1a373cd3cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:e9:04:6c:c4:a3:d1:fc:16:a1:1f:e7:33: e8:14:3d:c8:2c:7a:71:46:61:29:33:98:43:99:f1: 9f:e7:56:dc:d3:95:6c:7c:8d:48:0d:c2:76:e6:da: 54:82:cc:95:88:fd:32:ca:e2:0d:14:42:67:bc:d7: 15:7c:e1:9a:7d:6b:d8:42:b7:2b:f4:be:25:9f:a8: e7:0b:5c:b2:95:13:62:7e:8c:8d:9e:b2:9f:7b:c1: e2:32:57:8f:b7:41:22:3e:13:96:1f:c4:dc:1e:b5: 3a:a6:4b:12:a9:ee:3e:31:a0:4f:02:08:ed:46:38: fc:f7:e0:8d:bc:b7:34:9b:1b:99:12:53:7b:d2:c6: 7f:8a:a0:0f:18:f4:cd:de:11:a7:77:21:5b:13:d9: 9b:6d:67:99:68:fb:97:36:cf:58:4f:85:b3:90:ba: 98:18:a6:3d:93:82:ec:cc:e3:62:b8:50:ad:8d:92: 18:0e:0f:8e:f8:be:ed:24:9c:37:65:83:d9:d3:22: de:80:65:cc:0b:81:92:ae:7d:33:fd:82:c6:5f:9e: 17:13:db:ec:3a:6f:e9:af:2e:ff:06:65:3e:f6:6d: 14:85:7d:85:7c:9a:53:95:ae:78:00:de:a6:2b:b3: 7b:82:26:19:3e:65:5c:b1:ae:7d:de:63:4c:d8:d4: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:22:F3:83:94:3F:5E:F0:D4:02:9D:05:A0:5C:D1:A3:73:CD:3C:DD X509v3 Authority Key Identifier: keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7c:b1:ce:86:3a:c2:1d:64:ca:18:6e:46:5e:2b:d2:89:51: 87:b6:6f:30:7b:e0:d7:de:11:88:86:cb:7e:63:71:d4:56:6c: 38:da:1c:15:0d:2a:04:a6:6a:bb:b3:3d:32:09:f7:4e:05:fd: 26:6d:b9:7a:cd:61:05:24:cc:27:86:ef:3a:bf:99:e1:34:aa: 08:aa:ca:be:db:25:b1:87:c4:9f:1f:62:4e:b9:02:2d:32:ae: 72:9d:b2:15:01:c4:eb:02:f9:c9:75:19:8f:ea:37:81:af:63: 04:a8:7a:cb:82:89:2f:f6:f6:6c:39:29:2c:d0:8e:5a:6c:48: cb:c5:51:2c:94:79:9c:1d:75:f2:a1:af:22:17:77:64:f4:df: 2a:53:47:22:ba:3e:71:c7:43:f6:08:ea:ef:27:18:62:5a:8b: 76:9e:4b:6a:0a:ae:43:3f:09:ea:e7:cd:97:ab:b8:76:70:16: f5:04:8a:00:df:9f:9b:06:50:eb:50:06:e0:33:ec:3b:5a:63: a5:1a:2a:ca:df:11:39:9f:7c:76:a2:1b:f4:cf:25:c8:34:cf: bc:48:c5:db:5b:59:fd:0e:34:a6:75:e9:ad:7c:e1:a0:4f:18: 72:0a:9f:21:13:3a:a4:b9:5d:6a:68:22:15:31:cf:7f:f9:ac: 29:ac:86:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66xkoK5nbPuVKQBBE02pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm MzVjMTkwHhcNMjYwMjA5MTUwMTA3WhcNMjYwMjEwMTUwMTA3WjAzMTEwLwYDVQQD EygxNzIyZjM4Mzk0M2Y1ZWYwZDQwMjlkMDVhMDVjZDFhMzczY2QzY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24zpBGzEo9H8FqEf5zPoFD3ILHpx RmEpM5hDmfGf51bc05VsfI1IDcJ25tpUgsyViP0yyuINFEJnvNcVfOGafWvYQrcr 9L4ln6jnC1yylRNifoyNnrKfe8HiMlePt0EiPhOWH8TcHrU6pksSqe4+MaBPAgjt Rjj89+CNvLc0mxuZElN70sZ/iqAPGPTN3hGndyFbE9mbbWeZaPuXNs9YT4WzkLqY GKY9k4LszONiuFCtjZIYDg+O+L7tJJw3ZYPZ0yLegGXMC4GSrn0z/YLGX54XE9vs Om/pry7/BmU+9m0UhX2FfJpTla54AN6mK7N7giYZPmVcsa593mNM2NRIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBci84OUP17w1AKdBaBc0aNzzTzdMB8GA1UdIwQY MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3yxzoY6 wh1kyhhuRl4r0olRh7ZvMHvg194RiIbLfmNx1FZsONocFQ0qBKZqu7M9Mgn3TgX9 Jm25es1hBSTMJ4bvOr+Z4TSqCKrKvtslsYfEnx9iTrkCLTKucp2yFQHE6wL5yXUZ j+o3ga9jBKh6y4KJL/b2bDkpLNCOWmxIy8VRLJR5nB118qGvIhd3ZPTfKlNHIro+ ccdD9gjq7ycYYlqLdp5LagquQz8J6ufNl6u4dnAW9QSKAN+fmwZQ61AG4DPsO1pj pRoqyt8ROZ98dqIb9M8lyDTPvEjF21tZ/Q40pnXprXzhoE8YcgqfIRM6pLldamgi FTHPf/msKayGgA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:00 2026 by rpki-client