This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json) Hash identifier: mKRsuSH1N/TzDVaafuxsXcwr2kow4nef0lJbLRAFlwc= Subject key identifier: 1A:C3:BF:6F:A2:47:68:B4:AC:4F:FA:58:88:09:B0:66:E9:4E:86:58 Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Certificate serial: 019C420FD9138B47EE23965649A77328F397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 11:01:00 +0000 Manifest this update: Mon 09 Feb 2026 11:01:00 +0000 Manifest next update: Tue 10 Feb 2026 11:01:00 +0000 Files and hashes: 1: 2tvfGtmx8dnYbCqgNfYYoEuFSmQ.roa (hash: dB+mwPmyjYo+G09vPTtEL8PzXYu39MOAVRZ8TcykmPg=) 2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: v9zcMWgzpeWsf4ily35Y2YtcmWFwVbw2vSgvxt76KyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d9:13:8b:47:ee:23:96:56:49:a7:73:28:f3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Validity Not Before: Feb 9 11:01:00 2026 GMT Not After : Feb 10 11:01:00 2026 GMT Subject: CN=1ac3bf6fa24768b4ac4ffa588809b066e94e8658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:ce:0f:8e:cf:d3:d3:0d:bc:26:62:43:66: 5c:66:88:1b:d7:07:79:57:63:a0:d4:0f:3c:68:5b: 15:3f:4d:b3:ac:b3:6b:0b:88:07:d1:45:9d:be:af: 65:5a:4a:a0:c2:9c:d5:c4:17:a5:95:27:74:e8:91: 00:f6:07:3e:5e:f6:3a:8f:6f:09:6c:7b:d4:67:b6: 19:c4:67:46:51:31:a4:d1:ef:c3:58:37:a7:ab:e8: 02:de:10:92:12:14:96:12:dd:42:d4:10:48:c3:0f: cf:4b:08:71:0a:1f:57:76:6d:fd:c2:dd:03:a4:75: 57:c8:91:58:7a:87:f3:22:3f:7e:86:0e:11:52:ae: 1c:0f:26:b2:be:c8:ef:c2:df:e8:6b:86:17:51:b9: b9:d1:00:fe:d5:0c:ac:cc:04:18:e3:21:01:01:86: 00:6e:c1:23:36:e8:85:31:a3:c6:e2:0a:a4:9e:cc: fa:7a:7f:76:70:7c:c6:74:e7:10:73:30:f7:fa:b6: bb:a0:d3:ea:aa:0c:a0:92:2d:d4:1d:1f:a8:96:c9: 96:8a:1e:9b:fc:59:68:48:3f:9c:33:56:07:33:df: 55:1c:92:bc:4c:99:9f:47:27:58:11:6f:43:59:b9: 8b:92:ff:11:69:53:05:5a:ad:5d:8c:00:d1:86:8a: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:BF:6F:A2:47:68:B4:AC:4F:FA:58:88:09:B0:66:E9:4E:86:58 X509v3 Authority Key Identifier: keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9a:a3:f9:cb:71:1f:35:4b:64:58:01:74:0e:b7:00:49:b3: b0:23:ca:a1:75:d1:75:ea:92:e3:fd:e8:f3:98:a1:a7:70:cb: b7:e2:68:0d:b6:23:b2:83:ea:e5:bf:a9:82:8c:ca:74:31:28: 30:71:62:ed:a2:f6:c1:0d:8b:34:ae:d4:52:ba:20:b7:43:c4: e0:6f:fd:7f:f3:a1:3c:d0:c3:c0:65:dd:b8:5c:84:38:c9:fb: a4:70:9c:11:77:93:7b:a8:c4:33:cb:ee:11:96:a1:c3:eb:06: 9e:94:c6:ec:7b:c8:48:46:f3:6a:6d:91:c8:aa:d4:c1:10:ac: c1:a2:80:c4:ed:92:eb:f0:66:7d:39:9d:15:19:33:c0:26:0e: dd:c9:e3:45:7a:0c:86:b6:40:39:19:d8:15:1f:13:fb:d7:d1: ef:57:fb:b9:a6:f6:7d:be:b9:21:2c:c4:fc:e4:d8:79:65:00: 39:7f:3c:2a:37:4e:8d:b8:d6:52:fa:86:b4:d1:2c:f5:88:c5: 74:bd:e2:e9:d6:19:92:b8:07:e4:91:f9:7a:4f:72:58:78:97: b4:42:97:d2:d6:8b:b9:77:6a:71:06:fe:4b:22:b5:5d:d5:f9: 93:ff:d2:dc:55:29:ef:b5:15:21:a9:60:4d:1f:fa:69:f8:fb: 5b:03:02:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9kTi0fuI5ZWSadzKPOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzY0ZDhkM2FlNzI1YjQ1ZTBkNDgwN2Y2MTJlYzNkMWYy YTNmNGYwHhcNMjYwMjA5MTEwMTAwWhcNMjYwMjEwMTEwMTAwWjAzMTEwLwYDVQQD EygxYWMzYmY2ZmEyNDc2OGI0YWM0ZmZhNTg4ODA5YjA2NmU5NGU4NjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1HOD47P09MNvCZiQ2ZcZogb1wd5 V2Og1A88aFsVP02zrLNrC4gH0UWdvq9lWkqgwpzVxBellSd06JEA9gc+XvY6j28J bHvUZ7YZxGdGUTGk0e/DWDenq+gC3hCSEhSWEt1C1BBIww/PSwhxCh9Xdm39wt0D pHVXyJFYeofzIj9+hg4RUq4cDyayvsjvwt/oa4YXUbm50QD+1QyszAQY4yEBAYYA bsEjNuiFMaPG4gqknsz6en92cHzGdOcQczD3+ra7oNPqqgygki3UHR+olsmWih6b /FloSD+cM1YHM99VHJK8TJmfRydYEW9DWbmLkv8RaVMFWq1djADRhooxGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrDv2+iR2i0rE/6WIgJsGbpToZYMB8GA1UdIwQY MBaAFJp2TY065yW0Xg1IB/YS7D0fKj9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEt ZjVmZjlhZmMzMjY2LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEtZjVmZjlhZmMzMjY2 LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpqj+ctx HzVLZFgBdA63AEmzsCPKoXXRdeqS4/3o85ihp3DLt+JoDbYjsoPq5b+pgozKdDEo MHFi7aL2wQ2LNK7UUrogt0PE4G/9f/OhPNDDwGXduFyEOMn7pHCcEXeTe6jEM8vu EZahw+sGnpTG7HvISEbzam2RyKrUwRCswaKAxO2S6/BmfTmdFRkzwCYO3cnjRXoM hrZAORnYFR8T+9fR71f7uab2fb65ISzE/OTYeWUAOX88KjdOjbjWUvqGtNEs9YjF dL3i6dYZkrgH5JH5ek9yWHiXtEKX0taLuXdqcQb+SyK1XdX5k//S3FUp77UVIalg TR/6afj7WwMC2g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:32 2026 by rpki-client