This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json) Hash identifier: Yqrc8d6kdAjmSM7f3YMg/lF2k2Q3C15VeYKMQpTx2Nw= Subject key identifier: 99:C1:A1:B5:52:23:57:4C:73:95:A6:01:8C:52:88:7C:A8:FB:0F:05 Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Certificate serial: 019C4246B12C336FD320ECC9CC8AF1636FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:54 +0000 Manifest this update: Mon 09 Feb 2026 12:00:54 +0000 Manifest next update: Tue 10 Feb 2026 12:00:54 +0000 Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=) 2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: pcnDTCtJVCx4qT4QN3e5GBaUqUIE18ZVLUwI6FUKwQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b1:2c:33:6f:d3:20:ec:c9:cc:8a:f1:63:6f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Validity Not Before: Feb 9 12:00:54 2026 GMT Not After : Feb 10 12:00:54 2026 GMT Subject: CN=99c1a1b55223574c7395a6018c52887ca8fb0f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:79:23:3b:7d:47:11:87:2e:ac:ab:5c:37: ab:c3:9a:fc:40:b3:6d:f3:53:6a:70:49:8b:c6:18: fd:77:97:64:41:69:7f:48:ad:e2:7f:9b:37:6a:0f: ba:0f:48:08:db:7a:2b:41:d0:a0:8c:ad:e9:80:9a: 99:fc:83:64:da:7f:3b:df:b7:fe:a5:63:db:1e:b6: ca:ee:49:1b:dd:f9:21:f1:d4:70:3b:1e:92:2f:7d: 08:fb:d9:dc:59:99:1c:46:6f:8f:0c:8f:88:bb:a1: 48:7a:e3:b5:34:45:75:81:08:ea:c3:ce:72:b8:15: 59:cb:62:bf:c8:29:4b:9c:c3:5a:7c:d5:11:be:e4: 22:bd:26:8d:25:22:5a:75:89:07:c8:49:88:f5:d6: 08:dd:78:de:6f:98:78:63:f2:7b:0b:b1:2b:c2:d9: 1f:0d:d0:55:d9:b1:8c:84:fd:17:e7:fc:bc:d3:a7: 9f:b0:44:0a:eb:fd:9f:dd:42:2c:b9:9e:af:fb:fb: f4:6b:b5:e3:16:15:cd:65:bc:ba:59:f2:7b:4a:c8: e6:22:fd:66:17:70:aa:00:81:87:ca:d3:5f:d1:2d: c1:92:d2:11:b5:c8:2f:d2:90:4e:b2:ed:7e:ab:d7: b9:af:14:d5:fa:5b:77:8d:39:47:16:63:16:3b:62: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:A1:B5:52:23:57:4C:73:95:A6:01:8C:52:88:7C:A8:FB:0F:05 X509v3 Authority Key Identifier: keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:0b:02:c8:6b:0c:53:db:b7:5f:42:bc:5e:63:9d:7a:10:03: dc:e3:2f:7f:c8:e9:67:20:fe:5e:90:06:ec:22:32:70:cc:f9: 29:16:93:ae:61:f3:94:3e:21:78:7b:72:96:f3:81:00:79:c3: fd:56:bb:14:e7:49:c5:98:93:77:05:f1:33:96:72:d4:e5:06: fe:b7:98:5f:81:f5:97:95:56:b9:f2:ea:9a:97:0f:3c:c8:7f: 32:e0:d6:ef:a4:41:69:b1:12:c9:6c:cb:68:6d:68:3e:b1:dc: 70:4c:89:71:58:76:3d:2b:f6:fb:0c:d4:02:f2:de:2e:9e:f7: 07:43:71:e0:07:7d:31:cc:bd:a4:c4:7e:31:13:4a:e9:7e:02: f3:2b:ae:92:02:0d:64:81:70:38:94:ff:b0:5f:7c:cd:df:25: 69:3b:73:30:0c:f9:db:42:81:ac:13:c4:73:f2:9f:be:b5:93: b3:66:d6:1c:00:e9:d7:84:54:06:81:84:d1:fa:1f:72:1c:97: 42:25:19:ce:75:20:c2:2b:d2:b9:f5:f9:cd:0c:70:eb:e3:0b: f9:24:db:e6:34:45:e5:65:7d:49:0e:07:19:4a:09:66:03:59: 14:12:84:a9:fc:56:3d:a9:7b:60:9b:6d:c2:aa:2f:89:8d:8a: 95:7b:95:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrEsM2/TIOzJzIrxY2/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl OGFhNDMwHhcNMjYwMjA5MTIwMDU0WhcNMjYwMjEwMTIwMDU0WjAzMTEwLwYDVQQD Eyg5OWMxYTFiNTUyMjM1NzRjNzM5NWE2MDE4YzUyODg3Y2E4ZmIwZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+55Izt9RxGHLqyrXDerw5r8QLNt 81NqcEmLxhj9d5dkQWl/SK3if5s3ag+6D0gI23orQdCgjK3pgJqZ/INk2n8737f+ pWPbHrbK7kkb3fkh8dRwOx6SL30I+9ncWZkcRm+PDI+Iu6FIeuO1NEV1gQjqw85y uBVZy2K/yClLnMNafNURvuQivSaNJSJadYkHyEmI9dYI3Xjeb5h4Y/J7C7Erwtkf DdBV2bGMhP0X5/y806efsEQK6/2f3UIsuZ6v+/v0a7XjFhXNZby6WfJ7SsjmIv1m F3CqAIGHytNf0S3BktIRtcgv0pBOsu1+q9e5rxTV+lt3jTlHFmMWO2KN4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnBobVSI1dMc5WmAYxSiHyo+w8FMB8GA1UdIwQY MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1 LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4wsCyGsM U9u3X0K8XmOdehAD3OMvf8jpZyD+XpAG7CIycMz5KRaTrmHzlD4heHtylvOBAHnD /Va7FOdJxZiTdwXxM5Zy1OUG/reYX4H1l5VWufLqmpcPPMh/MuDW76RBabESyWzL aG1oPrHccEyJcVh2PSv2+wzUAvLeLp73B0Nx4Ad9Mcy9pMR+MRNK6X4C8yuukgIN ZIFwOJT/sF98zd8laTtzMAz520KBrBPEc/KfvrWTs2bWHADp14RUBoGE0fofchyX QiUZznUgwivSufX5zQxw6+ML+STb5jRF5WV9SQ4HGUoJZgNZFBKEqfxWPal7YJtt wqoviY2KlXuVSg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:39 2026 by rpki-client