This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json) Hash identifier: NIIa99jeI8JAYXNRbx8O9Xj7A2dYKhH22hQVuqi+/AM= Subject key identifier: CF:10:9D:62:BD:D5:9A:92:A6:A8:ED:87:66:A0:A1:0C:0C:9A:CE:62 Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575 Certificate serial: 019C438FA8709436CD711F03B7079DF43E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft Manifest number: 01D1 Signing time: Mon 09 Feb 2026 18:00:14 +0000 Manifest this update: Mon 09 Feb 2026 18:00:14 +0000 Manifest next update: Tue 10 Feb 2026 18:00:14 +0000 Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: k6w5lXpAf/Zm//GW8hs1qOCkGw3HTLlgDMdM1BjiL+0=) 2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:a8:70:94:36:cd:71:1f:03:b7:07:9d:f4:3e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7c2562038f081d18d85269407131c984003e575 Validity Not Before: Feb 9 18:00:14 2026 GMT Not After : Feb 10 18:00:14 2026 GMT Subject: CN=cf109d62bdd59a92a6a8ed8766a0a10c0c9ace62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:b8:b3:97:ca:00:b6:fc:8d:1a:6d:50:55: 17:11:02:e3:89:0b:a3:df:98:09:66:02:02:b9:8a: 46:00:07:40:82:3b:ff:e7:ac:76:60:b5:96:60:35: 64:41:4c:cf:73:12:c2:09:a3:de:1d:51:9c:02:f1: b3:84:a4:01:15:39:bc:ac:89:fb:e0:4b:1d:ae:76: 23:96:38:02:6c:86:76:27:7d:9c:cb:45:54:03:25: 82:23:d1:8a:45:50:d9:a2:1d:fb:ac:d6:a6:5f:ef: 53:fa:b0:59:3b:c7:5d:28:fc:af:df:76:c0:d1:8a: 2a:a2:1a:0c:31:3a:ff:79:a5:fb:6b:6f:12:50:e2: c8:8e:27:27:83:39:e6:e5:9a:c2:50:ce:eb:a0:d8: d3:6a:98:18:ce:eb:7b:2c:3c:89:7d:f7:6f:c2:a1: 50:7e:4f:1b:0c:d1:4e:e7:2d:ff:d3:b5:13:9e:4b: 5a:3f:ef:28:23:91:8c:3b:44:41:6f:cc:d5:e7:8d: 7e:80:f8:7d:ff:65:80:e9:04:06:0a:6d:51:6d:a1: 99:c4:64:3e:45:ed:80:a0:fa:4f:5b:4e:3f:96:62: 2d:9f:2f:c8:8c:d2:83:22:5c:b3:cf:43:0a:df:91: 2e:8b:e4:2c:17:41:59:f5:fc:06:18:34:16:6c:81: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:10:9D:62:BD:D5:9A:92:A6:A8:ED:87:66:A0:A1:0C:0C:9A:CE:62 X509v3 Authority Key Identifier: keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:bd:e9:23:23:fb:65:24:8e:91:cd:09:5a:51:fd:32:c5:2e: 7a:4b:ad:c4:09:57:7f:37:ef:25:25:45:88:15:ff:20:78:9d: 1d:eb:59:aa:35:03:33:f0:2c:d8:63:cb:e4:61:78:b2:0f:e7: 83:34:a1:02:22:f7:ea:ae:2d:ec:7a:6a:b3:fc:0d:e1:f4:b5: e7:c1:0e:89:28:a1:51:61:89:86:3e:20:7c:4c:72:94:c0:47: 74:50:7a:22:66:2d:57:f0:2c:e4:62:fc:02:c6:91:c5:51:6e: 9b:52:55:48:26:7b:05:43:40:7c:05:c5:90:9e:ba:4d:7f:16: a5:ef:8e:6c:d9:66:06:2a:1d:4f:1c:34:fe:f4:84:5b:c0:81: 9a:a4:b6:2f:e2:e7:38:4c:fb:67:c2:5a:78:1c:8f:6a:cc:b6: 87:be:df:e7:ea:0a:55:4e:78:e4:03:e8:61:55:84:a2:a5:d5: af:da:93:8a:21:e5:26:a9:4b:02:b2:99:12:de:29:02:62:7f: 6d:54:1b:50:3b:29:97:cf:fd:7f:29:aa:6a:74:58:d7:a5:56: 73:1e:30:7a:a6:d1:8b:e9:7e:7b:07:f8:d7:80:3a:db:b1:b7: da:37:5c:34:96:07:7a:38:39:95:8a:f1:cb:cb:b9:ca:9a:74: 51:b0:a4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6hwlDbNcR8Dtwed9D6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YzI1NjIwMzhmMDgxZDE4ZDg1MjY5NDA3MTMxYzk4NDAw M2U1NzUwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD EyhjZjEwOWQ2MmJkZDU5YTkyYTZhOGVkODc2NmEwYTEwYzBjOWFjZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJy4s5fKALb8jRptUFUXEQLjiQuj 35gJZgICuYpGAAdAgjv/56x2YLWWYDVkQUzPcxLCCaPeHVGcAvGzhKQBFTm8rIn7 4EsdrnYjljgCbIZ2J32cy0VUAyWCI9GKRVDZoh37rNamX+9T+rBZO8ddKPyv33bA 0YoqohoMMTr/eaX7a28SUOLIjicngznm5ZrCUM7roNjTapgYzut7LDyJffdvwqFQ fk8bDNFO5y3/07UTnktaP+8oI5GMO0RBb8zV541+gPh9/2WA6QQGCm1RbaGZxGQ+ Re2AoPpPW04/lmItny/IjNKDIlyzz0MK35Eui+QsF0FZ9fwGGDQWbIHp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8QnWK91ZqSpqjth2agoQwMms5iMB8GA1UdIwQY MBaAFPfCViA48IHRjYUmlAcTHJhAA+V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDIt YWQwOTRiMzE0ZTBmLzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDItYWQwOTRiMzE0ZTBm LzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0L3pIyP7 ZSSOkc0JWlH9MsUuekutxAlXfzfvJSVFiBX/IHidHetZqjUDM/As2GPL5GF4sg/n gzShAiL36q4t7Hpqs/wN4fS158EOiSihUWGJhj4gfExylMBHdFB6ImYtV/As5GL8 AsaRxVFum1JVSCZ7BUNAfAXFkJ66TX8Wpe+ObNlmBiodTxw0/vSEW8CBmqS2L+Ln OEz7Z8JaeByPasy2h77f5+oKVU545APoYVWEoqXVr9qTiiHlJqlLArKZEt4pAmJ/ bVQbUDspl8/9fymqanRY16VWcx4weqbRi+l+ewf414A627G32jdcNJYHejg5lYrx y8u5ypp0UbCkaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:41 2026 by rpki-client