This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json) Hash identifier: 3KLINaUF/9DDafNhtFFQFfIoLdlaXE2TnluPud7AfBM= Subject key identifier: AA:E0:83:EB:06:87:6E:16:0A:EA:E0:A3:7B:B5:8F:DC:03:5E:D4:7F Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Certificate serial: 019C427E2C4AD940A9B45052243403A0DDBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:01:30 +0000 Manifest this update: Mon 09 Feb 2026 13:01:30 +0000 Manifest next update: Tue 10 Feb 2026 13:01:30 +0000 Files and hashes: 1: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (hash: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk=) 2: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: K8vWSeB+hNXGmOMBBgn22j7YZJZPbzPWKZQAgqP82Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:2c:4a:d9:40:a9:b4:50:52:24:34:03:a0:dd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Validity Not Before: Feb 9 13:01:30 2026 GMT Not After : Feb 10 13:01:30 2026 GMT Subject: CN=aae083eb06876e160aeae0a37bb58fdc035ed47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3b:4f:f2:81:69:31:7d:5d:f1:c3:f8:66:9a: e5:0e:ef:d7:01:a6:03:c7:e8:30:51:cf:38:dd:a3: d2:be:1c:d0:3c:d2:b0:3e:84:d8:13:56:1f:23:7e: 0f:e9:e8:5d:96:25:8e:98:7c:ae:e3:4f:b6:07:6c: 89:10:bd:a5:f8:18:07:ed:89:15:31:16:da:0c:0a: b0:6e:40:96:25:af:0b:2e:c3:56:37:c3:97:d5:98: dd:0f:c7:fb:79:6b:63:b7:37:6f:58:1d:8f:14:09: b8:be:70:0f:f8:2a:78:f9:34:c8:2f:56:41:69:c4: 79:dd:63:6e:79:04:1c:eb:63:f1:2d:27:84:66:59: 82:fb:b2:ae:aa:a2:99:43:0b:0b:2b:2f:57:a9:52: 49:73:2a:34:6d:de:5c:fb:34:f4:d8:17:50:6a:77: 72:a0:31:50:dd:dc:14:5a:33:53:4b:81:e7:82:92: 54:70:c1:c0:32:54:f6:42:b9:7e:1d:5e:5e:15:db: 64:d3:4c:8b:97:c9:b4:0c:35:55:74:58:c2:3b:6f: 2c:61:4a:3a:b3:bc:b2:30:47:00:06:df:32:ab:ff: 4e:c3:aa:db:91:17:44:86:8f:f8:14:0a:db:a0:40: 2f:be:8c:2e:65:a5:eb:a2:00:40:61:a8:40:77:42: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:83:EB:06:87:6E:16:0A:EA:E0:A3:7B:B5:8F:DC:03:5E:D4:7F X509v3 Authority Key Identifier: keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:fd:44:4f:bb:40:0f:fa:d4:b7:79:5b:ce:c5:06:c7:90: 9a:d9:9d:0a:b9:3f:63:05:ec:41:5f:a9:4b:fd:09:ab:4a:bb: 64:36:b2:14:22:36:fc:0d:ea:28:af:af:e1:f7:23:53:36:43: 42:27:6c:e4:71:9c:12:26:c2:fd:b0:24:80:05:03:8c:d5:a6: 4f:52:e8:7e:e5:63:bf:37:a9:e0:00:ff:47:47:1a:58:3b:80: 9a:cb:cc:b0:af:aa:f9:54:99:e7:34:05:28:76:5e:b2:1f:7d: 75:96:6e:4e:43:a6:e0:36:cc:5f:36:89:29:c2:68:72:23:c3: b5:01:f0:53:b1:7b:e5:76:3f:c8:76:e8:c1:5f:f5:c6:86:ee: 63:14:4d:62:68:f6:f2:4b:91:70:f1:83:63:ae:a2:45:51:72: 8c:d6:9f:34:98:30:56:6a:0f:7b:f2:2b:e3:92:32:e0:9a:95: 68:ff:cd:b0:d7:d8:40:c6:2f:69:a3:68:86:78:9d:99:05:95: 55:62:fc:6e:10:3d:3a:80:5b:1b:ca:19:ab:e4:b7:16:20:a3: 06:b1:b9:83:49:c6:d8:36:13:26:cb:4a:61:fd:4b:35:94:2f: bc:9b:a8:97:e1:d4:25:c2:88:b5:a4:b3:0e:a8:9c:9d:6b:2c: dd:7c:d4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfixK2UCptFBSJDQDoN2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl ZDI2NmQwHhcNMjYwMjA5MTMwMTMwWhcNMjYwMjEwMTMwMTMwWjAzMTEwLwYDVQQD EyhhYWUwODNlYjA2ODc2ZTE2MGFlYWUwYTM3YmI1OGZkYzAzNWVkNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jtP8oFpMX1d8cP4ZprlDu/XAaYD x+gwUc843aPSvhzQPNKwPoTYE1YfI34P6ehdliWOmHyu40+2B2yJEL2l+BgH7YkV MRbaDAqwbkCWJa8LLsNWN8OX1ZjdD8f7eWtjtzdvWB2PFAm4vnAP+Cp4+TTIL1ZB acR53WNueQQc62PxLSeEZlmC+7KuqqKZQwsLKy9XqVJJcyo0bd5c+zT02BdQandy oDFQ3dwUWjNTS4HngpJUcMHAMlT2Qrl+HV5eFdtk00yLl8m0DDVVdFjCO28sYUo6 s7yyMEcABt8yq/9Ow6rbkRdEho/4FArboEAvvowuZaXrogBAYahAd0LUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrgg+sGh24WCurgo3u1j9wDXtR/MB8GA1UdIwQY MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5 LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuz9RE+7 QA/61Ld5W87FBseQmtmdCrk/YwXsQV+pS/0Jq0q7ZDayFCI2/A3qKK+v4fcjUzZD Qids5HGcEibC/bAkgAUDjNWmT1LofuVjvzep4AD/R0caWDuAmsvMsK+q+VSZ5zQF KHZesh99dZZuTkOm4DbMXzaJKcJociPDtQHwU7F75XY/yHbowV/1xobuYxRNYmj2 8kuRcPGDY66iRVFyjNafNJgwVmoPe/Ir45Iy4JqVaP/NsNfYQMYvaaNohnidmQWV VWL8bhA9OoBbG8oZq+S3FiCjBrG5g0nG2DYTJstKYf1LNZQvvJuol+HUJcKItaSz DqicnWss3XzUfg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:48 2026 by rpki-client