This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json) Hash identifier: vTo21pyV8CR2QJLrBXUjtiHtcYCb/t2wpjve1PTHupI= Subject key identifier: D8:DB:E5:20:BC:C4:5D:73:80:D8:91:96:82:B2:09:18:95:B2:DE:BE Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Certificate serial: 019C42B42C781794B5BF2E14416A6D920C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft Manifest number: 11F7 Signing time: Mon 09 Feb 2026 14:00:29 +0000 Manifest this update: Mon 09 Feb 2026 14:00:29 +0000 Manifest next update: Tue 10 Feb 2026 14:00:29 +0000 Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: coVummK/47CLG5hBMQk6RESe1etQ/n5S7oJtg2XWgs4=) 2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2c:78:17:94:b5:bf:2e:14:41:6a:6d:92:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Validity Not Before: Feb 9 14:00:29 2026 GMT Not After : Feb 10 14:00:29 2026 GMT Subject: CN=d8dbe520bcc45d7380d8919682b2091895b2debe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:dc:f0:f5:92:7a:c1:eb:74:1a:11:77:94: 2f:c7:f3:6f:a8:d7:34:14:99:77:2e:e3:d8:3c:74: ff:80:b6:16:d4:5e:3a:59:41:8c:21:fa:79:e7:29: fa:fe:29:9f:4b:1f:0d:cc:73:c0:ac:a9:ae:1c:4c: 6e:d5:18:d5:b5:ef:77:c2:ee:de:22:2c:9c:35:d8: 20:e6:09:64:e6:d3:b0:23:13:28:04:e1:c6:98:44: 51:dc:da:f5:84:fc:03:7e:86:93:1e:c6:1a:67:36: 25:34:be:87:83:6f:35:74:05:03:08:5c:90:38:32: 04:6f:8c:74:65:52:e9:37:c2:e6:95:4c:12:c6:93: 41:fa:fc:98:04:d9:a0:aa:ec:c7:0f:26:59:97:56: 9e:bf:9e:e7:21:86:c8:2f:8f:0a:9c:f5:19:32:8e: fa:b9:8a:c3:47:6e:b2:d8:15:23:69:f6:f0:e9:ad: 4c:e8:cf:f5:ad:08:d0:7a:bc:87:9e:e7:15:37:f7: b0:8e:11:63:29:f5:c1:66:cf:2a:ea:c2:b6:3a:8e: 68:f6:ac:76:08:8a:90:43:77:91:b0:28:14:52:e0: 3a:49:bd:9f:a1:00:cb:cf:7d:e9:e7:15:57:38:f5: 8f:40:7a:2e:7a:bb:6d:b1:aa:c9:7c:cb:f4:fe:2a: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DB:E5:20:BC:C4:5D:73:80:D8:91:96:82:B2:09:18:95:B2:DE:BE X509v3 Authority Key Identifier: keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:9b:76:68:7d:90:f2:a4:23:20:8d:58:99:86:92:ab:09: f1:6e:9c:73:d7:0e:bb:74:12:e6:c4:db:3d:f9:22:74:97:f1: 08:ba:74:4f:69:53:67:94:94:69:91:61:c8:80:ca:8b:a2:89: 5e:75:39:2b:e6:52:65:a3:35:4d:5e:0e:93:6c:34:84:66:8a: 54:b1:74:6a:c6:06:14:86:51:6a:32:ff:72:6e:93:78:d8:62: de:03:ee:34:d1:1d:68:60:1e:ba:d8:54:2d:d9:10:62:67:6a: 21:7d:bb:e0:d3:c5:98:a2:77:28:4b:ea:b9:22:21:ad:85:8b: f2:30:f5:f2:46:91:9a:85:d0:03:b2:04:fe:38:75:2d:8b:5d: 7f:7d:e7:84:cc:da:4d:ef:38:48:b6:1a:c1:79:0c:4e:58:9d: a5:fa:dd:18:47:d8:71:24:a3:ec:62:26:4e:f1:07:bb:97:da: 84:d9:29:83:2d:94:09:b6:72:be:9d:c2:74:a1:cc:24:79:ce: d9:6a:00:81:6e:55:84:fe:1f:ab:38:15:7b:13:25:46:8e:5a: 6a:b6:56:8e:20:26:3d:8d:61:ad:dd:05:2a:19:4a:dd:68:1e: 51:01:74:80:18:a7:b7:1d:8f:66:06:ce:f4:97:b2:25:15:cb: 1c:5a:7f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCx4F5S1vy4UQWptkgyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh NDZmZGMwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD EyhkOGRiZTUyMGJjYzQ1ZDczODBkODkxOTY4MmIyMDkxODk1YjJkZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3c8PWSesHrdBoRd5Qvx/NvqNc0 FJl3LuPYPHT/gLYW1F46WUGMIfp55yn6/imfSx8NzHPArKmuHExu1RjVte93wu7e IiycNdgg5glk5tOwIxMoBOHGmERR3Nr1hPwDfoaTHsYaZzYlNL6Hg281dAUDCFyQ ODIEb4x0ZVLpN8LmlUwSxpNB+vyYBNmgquzHDyZZl1aev57nIYbIL48KnPUZMo76 uYrDR26y2BUjafbw6a1M6M/1rQjQeryHnucVN/ewjhFjKfXBZs8q6sK2Oo5o9qx2 CIqQQ3eRsCgUUuA6Sb2foQDLz33p5xVXOPWPQHouerttsarJfMv0/irdkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjb5SC8xF1zgNiRloKyCRiVst6+MB8GA1UdIwQY MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt Zjg5YWI5ZjEyODZjLzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDabdmh9 kPKkIyCNWJmGkqsJ8W6cc9cOu3QS5sTbPfkidJfxCLp0T2lTZ5SUaZFhyIDKi6KJ XnU5K+ZSZaM1TV4Ok2w0hGaKVLF0asYGFIZRajL/cm6TeNhi3gPuNNEdaGAeuthU LdkQYmdqIX274NPFmKJ3KEvquSIhrYWL8jD18kaRmoXQA7IE/jh1LYtdf33nhMza Te84SLYawXkMTlidpfrdGEfYcSSj7GImTvEHu5fahNkpgy2UCbZyvp3CdKHMJHnO 2WoAgW5VhP4fqzgVexMlRo5aarZWjiAmPY1hrd0FKhlK3WgeUQF0gBintx2PZgbO 9JeyJRXLHFp/3A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:25 2026 by rpki-client