This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json) Hash identifier: xDll3ZOkJ2UCe0ktIbAIT6FiPBA8o41fuAbkhA5ttmY= Subject key identifier: 5F:B9:48:EB:9D:95:4B:EF:BA:B9:14:08:59:65:C4:80:9E:A8:A9:36 Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Certificate serial: 019C446C77D8B2C2F1216E77C715D44DE17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft Manifest number: 0F7E Signing time: Mon 09 Feb 2026 22:01:24 +0000 Manifest this update: Mon 09 Feb 2026 22:01:24 +0000 Manifest next update: Tue 10 Feb 2026 22:01:24 +0000 Files and hashes: 1: CyxtWweyEqgpd8gBxUUhj5fN2MI.roa (hash: E3T6yiukB1U6Qm/DfmLG5nf8+AunKSeI83VF6XZj4IY=) 2: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: qIc4yNdLOqXv13jCA2dyqOCxo7YXgUXTvPXdsjSFA4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:77:d8:b2:c2:f1:21:6e:77:c7:15:d4:4d:e1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Validity Not Before: Feb 9 22:01:24 2026 GMT Not After : Feb 10 22:01:24 2026 GMT Subject: CN=5fb948eb9d954befbab914085965c4809ea8a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:91:c4:92:19:56:09:61:ec:46:97:94:b0: 41:41:8d:fd:36:97:fe:bf:7a:90:87:3a:bd:65:ff: de:1b:0b:94:de:aa:07:a3:26:97:77:d0:ea:6b:d3: 28:fc:27:be:76:d8:d9:8c:a8:41:0a:c1:bc:0c:10: f4:8c:8a:4c:8a:ef:8a:92:c2:af:c0:a9:be:b6:9e: b7:5d:a4:1d:b8:ce:ef:9f:db:ab:20:66:a4:bb:a5: 7e:4e:50:53:92:b5:83:79:e0:b1:22:e0:d8:d4:cb: 9a:2b:0c:ca:d4:a0:d9:55:57:65:ba:8d:30:4b:c1: 77:2a:e8:ec:cc:1c:5d:1f:f4:d5:1f:61:23:eb:a7: d5:da:9f:3f:45:d9:b8:c5:ad:0b:d5:11:ee:fa:54: 3f:d8:12:09:00:a1:33:13:07:a6:b8:98:87:f3:ae: 38:2d:19:5e:c2:2a:ea:b1:30:29:b4:fc:87:fc:b3: 04:8d:ef:66:90:fd:65:27:17:51:d0:c6:82:e9:f5: e1:c0:2a:3c:b2:22:22:9e:ea:2e:89:0f:dd:48:ad: 28:4c:54:cd:7a:be:03:73:8a:ec:85:61:f5:9d:76: 44:ae:ff:23:f1:d2:21:75:d6:09:ce:44:77:5b:28: b5:7c:fb:f7:b0:95:d3:fb:c4:93:4f:74:c7:65:f9: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:48:EB:9D:95:4B:EF:BA:B9:14:08:59:65:C4:80:9E:A8:A9:36 X509v3 Authority Key Identifier: keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:43:93:c5:c0:ae:87:d6:8b:ef:8f:06:19:ed:ab:86:1d:da: 4e:48:f2:22:b0:40:70:b2:5f:b3:a5:6b:d8:f4:38:da:91:94: eb:20:eb:e7:12:a3:b3:b3:39:79:0e:42:9d:20:eb:b9:1b:70: 75:ff:a2:c5:c0:75:17:22:9b:a2:d3:ce:1d:8b:47:97:95:07: 6d:ec:9e:4b:64:2c:4b:9e:c1:8c:88:2d:c0:35:43:2e:59:83: 8c:8c:08:ca:44:cc:47:bf:32:b2:6e:e3:c8:08:0a:58:85:ec: aa:4f:c7:a7:80:b3:95:f2:bb:90:e3:6e:a4:86:a8:86:dd:cd: 25:dc:f1:22:fc:43:a7:0b:75:0f:2f:ca:73:2c:84:12:5b:0f: b1:40:26:74:f6:9f:44:55:22:c1:91:7b:2b:67:11:53:42:b1: a8:84:f4:81:4c:82:af:ba:af:8b:9d:cc:d7:b1:39:95:6a:37: ab:f5:ad:75:fa:4c:c4:49:5b:7c:aa:8e:cd:d7:07:7a:96:3c: 17:9a:4a:d3:83:a0:eb:e6:c8:e3:5c:b5:46:8d:e5:84:8a:c5: b5:e9:d4:09:20:ff:b8:f5:bc:ab:ba:8b:2a:f2:dc:0d:29:6c: 15:36:9b:05:42:e0:4b:08:20:cc:ea:21:2c:a9:df:f2:9e:8d: 1c:a2:a2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHfYssLxIW53xxXUTeF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm NGE2NTQwHhcNMjYwMjA5MjIwMTI0WhcNMjYwMjEwMjIwMTI0WjAzMTEwLwYDVQQD Eyg1ZmI5NDhlYjlkOTU0YmVmYmFiOTE0MDg1OTY1YzQ4MDllYThhOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWmRxJIZVglh7EaXlLBBQY39Npf+ v3qQhzq9Zf/eGwuU3qoHoyaXd9Dqa9Mo/Ce+dtjZjKhBCsG8DBD0jIpMiu+KksKv wKm+tp63XaQduM7vn9urIGaku6V+TlBTkrWDeeCxIuDY1MuaKwzK1KDZVVdluo0w S8F3KujszBxdH/TVH2Ej66fV2p8/Rdm4xa0L1RHu+lQ/2BIJAKEzEwemuJiH8644 LRlewirqsTAptPyH/LMEje9mkP1lJxdR0MaC6fXhwCo8siIinuouiQ/dSK0oTFTN er4Dc4rshWH1nXZErv8j8dIhddYJzkR3Wyi1fPv3sJXT+8STT3THZfngmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+5SOudlUvvurkUCFllxICeqKk2MB8GA1UdIwQY MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEOTxcCu h9aL748GGe2rhh3aTkjyIrBAcLJfs6Vr2PQ42pGU6yDr5xKjs7M5eQ5CnSDruRtw df+ixcB1FyKbotPOHYtHl5UHbeyeS2QsS57BjIgtwDVDLlmDjIwIykTMR78ysm7j yAgKWIXsqk/Hp4CzlfK7kONupIaoht3NJdzxIvxDpwt1Dy/KcyyEElsPsUAmdPaf RFUiwZF7K2cRU0KxqIT0gUyCr7qvi53M17E5lWo3q/WtdfpMxElbfKqOzdcHepY8 F5pK04Og6+bI41y1Ro3lhIrFtenUCSD/uPW8q7qLKvLcDSlsFTabBULgSwggzOoh LKnf8p6NHKKiow== -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:21 2026 by rpki-client