This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json) Hash identifier: oYuwdzQ9Tf7f67Baj1dNnW+ARV/SOPKh0Qsv/iho09k= Subject key identifier: F6:EB:C8:97:16:5D:2F:49:F1:E2:01:65:52:D7:2F:54:B7:6B:43:46 Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Certificate serial: 019C420F2113E8739D12B85EFEE47C2339BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: RNlB4EtsLbHNLq8254Dp52EczPLF6iQ7EWIKTbzYs/w=) 2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:21:13:e8:73:9d:12:b8:5e:fe:e4:7c:23:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=f6ebc897165d2f49f1e2016552d72f54b76b4346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:b5:7a:0b:07:b6:97:29:1e:93:dd:c9:76: 0e:20:46:8c:b4:ee:86:60:a4:24:7e:8a:48:ba:c3: 63:0a:aa:0e:5f:34:a6:87:c2:54:bd:53:f7:d5:ac: 90:e1:bb:5d:e6:11:5d:8c:e9:27:50:f4:8f:8f:a5: bc:bf:5c:5d:7e:1a:39:89:a3:04:62:00:20:2f:f5: 14:2e:ea:2f:63:19:a8:d7:86:fb:a1:0a:be:87:a4: 94:ca:18:e2:7b:dd:b3:9d:4e:29:f5:ec:9a:15:da: 0c:1b:e7:44:07:ac:36:92:e8:07:1d:19:d0:bf:ac: b2:b6:ec:8b:f0:1d:ee:5d:07:7e:49:6a:9c:b3:fd: fe:6d:ab:a4:2f:75:f1:72:63:7a:46:78:8a:3a:e6: 83:d0:4a:d1:3a:4f:0c:b9:b6:28:e2:43:6d:03:27: da:ed:31:c6:0d:33:e0:24:44:74:ad:26:d1:88:eb: 44:ea:5d:7e:94:57:44:ac:6e:33:71:f7:74:21:a4: 78:54:a9:54:7b:aa:4b:90:79:47:ed:d5:91:d7:92: d2:fb:cc:fe:bc:a4:6f:f6:bf:aa:c4:ab:1a:1d:c4: 57:ba:21:4c:a9:85:a1:3c:05:ce:a9:83:5f:6e:90: 3d:1e:f3:25:fd:11:b5:73:ff:ef:06:cb:64:7c:68: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EB:C8:97:16:5D:2F:49:F1:E2:01:65:52:D7:2F:54:B7:6B:43:46 X509v3 Authority Key Identifier: keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:40:db:7a:70:df:88:28:cc:51:a6:89:2f:7f:ee:1d:a4: cd:75:53:19:03:8e:1a:c7:15:55:f9:1f:5b:45:e9:b4:e9:1d: 33:22:20:b7:79:cb:e7:79:2a:99:55:77:4c:11:0b:5e:11:fd: 29:db:2e:96:e3:7e:30:ae:6d:73:e9:5e:1f:b4:df:f1:bd:5a: 61:f3:68:e1:77:a3:b1:42:cd:45:52:69:76:53:30:74:07:07: a0:0e:6e:71:c4:22:42:f5:e5:21:1d:fb:b0:8e:a4:ac:c9:51: 46:c2:0e:79:ef:60:d0:de:66:bf:b2:a9:70:29:71:31:3b:b6: 33:75:22:0c:61:f9:11:e3:45:89:43:e9:81:8b:fc:c5:93:e9: 0c:41:a8:ee:99:10:b5:7c:4f:a1:08:4e:67:90:c2:e7:6e:b8: 7b:c5:59:14:e8:b1:df:dd:05:c5:bd:f9:16:03:39:2b:6b:90: 2a:93:38:2e:19:5f:5c:37:ca:d8:42:f2:70:f1:41:4b:ea:ab: f3:18:3f:3e:3a:cd:44:65:ef:0d:74:0f:5d:a9:d7:3c:53:a0: 29:45:96:8e:2e:79:14:7a:5a:16:fd:1b:fa:ad:ab:48:49:3d: 92:d8:4c:03:77:0f:9d:fe:e3:54:1c:f4:14:12:be:9d:0f:08: 05:1f:fb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyET6HOdErhe/uR8Izm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi Mzg4N2EwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EyhmNmViYzg5NzE2NWQyZjQ5ZjFlMjAxNjU1MmQ3MmY1NGI3NmI0MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ei1egsHtpcpHpPdyXYOIEaMtO6G YKQkfopIusNjCqoOXzSmh8JUvVP31ayQ4btd5hFdjOknUPSPj6W8v1xdfho5iaME YgAgL/UULuovYxmo14b7oQq+h6SUyhjie92znU4p9eyaFdoMG+dEB6w2kugHHRnQ v6yytuyL8B3uXQd+SWqcs/3+baukL3XxcmN6RniKOuaD0ErROk8MubYo4kNtAyfa 7THGDTPgJER0rSbRiOtE6l1+lFdErG4zcfd0IaR4VKlUe6pLkHlH7dWR15LS+8z+ vKRv9r+qxKsaHcRXuiFMqYWhPAXOqYNfbpA9HvMl/RG1c//vBstkfGjq3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbryJcWXS9J8eIBZVLXL1S3a0NGMB8GA1UdIwQY MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt NTZjNmQ1NTFhOTMyLzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmVA23pw 34gozFGmiS9/7h2kzXVTGQOOGscVVfkfW0XptOkdMyIgt3nL53kqmVV3TBELXhH9 KdsuluN+MK5tc+leH7Tf8b1aYfNo4XejsULNRVJpdlMwdAcHoA5uccQiQvXlIR37 sI6krMlRRsIOee9g0N5mv7KpcClxMTu2M3UiDGH5EeNFiUPpgYv8xZPpDEGo7pkQ tXxPoQhOZ5DC5264e8VZFOix390Fxb35FgM5K2uQKpM4LhlfXDfK2ELycPFBS+qr 8xg/PjrNRGXvDXQPXanXPFOgKUWWji55FHpaFv0b+q2rSEk9kthMA3cPnf7jVBz0 FBK+nQ8IBR/7rQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:47 2026 by rpki-client