This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json) Hash identifier: vCaVA74AqL9oUwc6nLUNqRM3xX7K/1ZmkyCrcz8UGDE= Subject key identifier: 11:BA:C6:FE:1E:43:D0:4D:81:AA:B0:87:82:F8:1C:92:51:69:50:6F Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f Certificate serial: 019C43909F7F6E8685668E8722A2F810D65B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: ABh0npJK6Ok1THzfKga5OSAILHPHzkkxR1a8EZDh0iQ=) 2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:9f:7f:6e:86:85:66:8e:87:22:a2:f8:10:d6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=11bac6fe1e43d04d81aab08782f81c925169506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:2e:9e:35:45:f0:35:17:f0:16:27:f9:60: a6:38:41:1a:cb:f2:ac:d6:ee:f1:cb:26:b5:11:41: 1d:05:6b:e7:9c:68:47:2d:33:15:ae:ab:be:fe:ff: cd:fe:c2:51:97:31:65:af:31:3b:4f:d6:05:5a:6b: 94:df:57:bd:52:e6:3a:b3:b7:fa:ec:ae:7d:1b:88: 2c:52:00:98:b4:fc:f0:d5:71:87:7f:7c:c5:b4:e8: 6b:02:28:e5:52:49:17:2f:ff:a5:16:7b:ea:20:35: 11:35:4e:6a:31:c7:03:e3:73:fe:3a:cc:82:d3:bb: 5f:76:dc:98:02:5d:ae:5f:67:df:d5:d6:c8:d2:fc: 28:09:79:c8:5d:7b:90:74:c0:e6:52:97:25:d4:cf: 84:c6:cc:25:ff:93:4a:ef:91:ef:c4:e6:59:f1:fa: 7f:19:75:30:3c:3a:ea:f7:13:6a:96:d4:31:f3:db: 5f:ff:cb:82:54:6b:3c:a3:30:9f:db:3e:5b:04:09: 82:85:aa:9d:2e:ec:67:cf:a0:17:30:a3:f2:7d:c8: db:5f:e0:6b:90:6a:1e:99:96:5b:3f:8d:68:0b:c7: 4c:00:aa:59:43:f4:47:ad:7a:ce:9b:d7:43:f0:15: de:f1:68:03:2e:36:92:79:8a:21:37:71:13:2d:dd: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:C6:FE:1E:43:D0:4D:81:AA:B0:87:82:F8:1C:92:51:69:50:6F X509v3 Authority Key Identifier: keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:79:62:d2:de:ca:b6:20:9b:b7:b7:66:d9:33:dd:4e:d7:08: 37:e8:54:18:29:e1:96:1c:e5:50:72:60:3e:4e:13:58:55:5b: 94:bc:ee:a5:63:55:98:40:96:42:a7:e3:bb:e8:f6:ff:a1:0f: b1:48:a3:6d:cc:3a:b3:56:a6:ae:77:58:d1:7a:0b:78:9a:b8: b8:27:d4:c0:ca:8f:e0:c7:a4:6e:64:90:31:30:11:94:02:16: fe:4b:4e:c3:d0:83:1a:95:7a:b0:40:ed:f6:25:f9:05:93:21: cd:da:be:3d:cf:76:ab:d7:1a:c6:2c:59:d7:79:3a:f2:a5:63: 64:39:72:a2:60:96:e0:89:2a:08:73:ca:41:ba:9c:28:31:5b: b5:e8:b4:74:74:a6:41:85:b0:4f:ae:9b:a7:0e:d0:9a:bd:f6: 69:12:c3:c8:61:6b:83:4c:40:52:bd:1e:5e:b6:50:76:c6:b2: d7:8d:aa:dc:b5:48:a6:25:c3:df:3e:46:e7:35:08:32:5e:b4: f4:77:e0:ee:57:72:64:e4:cc:24:8b:aa:e4:e1:66:07:2f:47: 4e:54:c7:51:3d:b5:d6:7d:3f:0f:ee:53:6d:96:08:bf:ea:05: 61:83:57:0c:41:c0:a0:0e:90:5f:21:7e:fa:b8:8a:2e:bb:6f: c5:8e:01:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJ9/boaFZo6HIqL4ENZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2 YjUwMGYwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD EygxMWJhYzZmZTFlNDNkMDRkODFhYWIwODc4MmY4MWM5MjUxNjk1MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIunjVF8DUX8BYn+WCmOEEay/Ks 1u7xyya1EUEdBWvnnGhHLTMVrqu+/v/N/sJRlzFlrzE7T9YFWmuU31e9UuY6s7f6 7K59G4gsUgCYtPzw1XGHf3zFtOhrAijlUkkXL/+lFnvqIDURNU5qMccD43P+OsyC 07tfdtyYAl2uX2ff1dbI0vwoCXnIXXuQdMDmUpcl1M+Exswl/5NK75HvxOZZ8fp/ GXUwPDrq9xNqltQx89tf/8uCVGs8ozCf2z5bBAmChaqdLuxnz6AXMKPyfcjbX+Br kGoemZZbP41oC8dMAKpZQ/RHrXrOm9dD8BXe8WgDLjaSeYohN3ETLd3tkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG6xv4eQ9BNgaqwh4L4HJJRaVBvMB8GA1UdIwQY MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1 LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHli0t7K tiCbt7dm2TPdTtcIN+hUGCnhlhzlUHJgPk4TWFVblLzupWNVmECWQqfju+j2/6EP sUijbcw6s1amrndY0XoLeJq4uCfUwMqP4MekbmSQMTARlAIW/ktOw9CDGpV6sEDt 9iX5BZMhzdq+Pc92q9caxixZ13k68qVjZDlyomCW4IkqCHPKQbqcKDFbtei0dHSm QYWwT66bpw7Qmr32aRLDyGFrg0xAUr0eXrZQdsay142q3LVIpiXD3z5G5zUIMl60 9Hfg7ldyZOTMJIuq5OFmBy9HTlTHUT211n0/D+5TbZYIv+oFYYNXDEHAoA6QXyF+ +riKLrtvxY4Bhw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:06 2026 by rpki-client