This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json) Hash identifier: unPopmkKErzUs5tJBV3aWhMBhfmMKUmNaqKQSPI8Nng= Subject key identifier: 41:93:53:59:0E:B9:88:BB:28:31:2F:0A:9F:91:C6:74:78:53:32:78 Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a Certificate serial: 019C40FD251B6D1A01B31E97C9473CC89C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft Manifest number: 154C Signing time: Mon 09 Feb 2026 06:00:57 +0000 Manifest this update: Mon 09 Feb 2026 06:00:57 +0000 Manifest next update: Tue 10 Feb 2026 06:00:57 +0000 Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: +qTJdLfmaUNv15b6/idFCySMNlu+1g2iLJ+0Vex6+Gc=) 2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:25:1b:6d:1a:01:b3:1e:97:c9:47:3c:c8:9c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a Validity Not Before: Feb 9 06:00:57 2026 GMT Not After : Feb 10 06:00:57 2026 GMT Subject: CN=419353590eb988bb28312f0a9f91c67478533278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:7a:0a:ef:cb:55:90:cc:a6:72:66:a3:29: 1b:6e:26:79:88:0d:0d:da:97:c5:85:cc:c7:ed:a7: b2:c3:90:25:48:52:00:35:ad:a3:97:ab:38:50:70: 86:7c:04:9a:6e:9c:c5:4a:a8:f9:6e:74:26:22:ac: 1d:5e:04:24:6b:0e:95:47:ac:4a:75:15:07:6d:47: 21:c1:ff:5c:a8:18:f5:ac:a9:4e:8d:59:72:02:54: a9:7e:f4:e2:2e:6c:28:5a:a1:d4:72:ba:db:56:a6: b8:1b:96:09:64:5a:5c:1b:6b:e1:b0:c5:12:ec:7c: ac:f8:68:01:a2:9e:a5:14:68:57:59:e6:f0:85:86: a2:f0:cb:90:97:bc:af:94:2d:82:f6:32:32:3c:d2: cb:c9:f3:9d:2c:17:92:36:ae:16:08:55:c1:20:c9: ab:8b:ed:a6:95:25:49:01:09:12:b7:a9:2d:4b:57: 20:71:bb:11:b3:25:73:87:04:61:db:b2:07:06:00: 26:be:6a:9d:0f:fb:fa:59:68:bc:d4:57:83:72:17: 01:24:7c:72:b5:ac:a7:45:25:dd:6f:38:8b:4a:5f: 65:dd:7d:81:f9:58:79:f4:77:55:51:10:2f:fe:0b: a8:f8:83:e8:40:9e:c2:8d:68:20:65:35:5a:fb:9c: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:93:53:59:0E:B9:88:BB:28:31:2F:0A:9F:91:C6:74:78:53:32:78 X509v3 Authority Key Identifier: keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:78:4b:7a:1f:71:2a:7a:fd:ee:cb:c8:6b:64:e3:52:36:fe: a6:ca:33:f6:a2:f3:27:6a:33:71:6a:b8:ab:ac:74:99:38:87: 66:d0:25:5b:6b:dc:90:9c:0d:b1:a2:8b:c2:65:14:42:fa:9a: 38:22:90:a1:83:94:c3:67:d5:cd:5c:8b:2f:39:c0:f6:e6:a2: aa:a1:90:cd:6b:9a:13:d2:62:39:4c:92:ce:0e:f2:b9:07:53: 27:09:cb:e1:c7:2d:07:48:09:6a:84:e0:87:76:d0:9a:68:29: 3a:0a:a8:1c:ae:84:7e:b4:4b:ac:85:1f:68:7a:fc:8c:6d:f4: d0:8d:34:05:a8:f9:79:5b:de:f1:4b:f9:c8:14:12:f1:4f:66: fe:d4:88:1f:69:79:2f:9a:35:0a:3b:6a:33:91:90:cc:67:ac: d1:84:0e:aa:f1:44:63:2f:75:d3:3b:8c:97:ff:a8:4a:0b:1a: 10:ed:e1:eb:b0:a8:09:f2:30:af:36:3d:96:3d:28:d1:d1:d4: 06:49:2e:32:7c:b6:e2:5a:cc:3d:de:1d:d4:ef:43:fd:ad:22: 0d:30:fd:91:01:96:99:49:81:55:fc:d6:c7:82:90:3f:dd:93: 98:9d:ef:9e:79:10:81:76:cf:1c:08:57:42:43:b8:5e:d0:18: d8:c3:f8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/SUbbRoBsx6XyUc8yJycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWIyNjIzYTM5ZDU1NmM1MGI3MDQ2ZDM2NDQ3ZmI2MjFh Zjk3NGEwHhcNMjYwMjA5MDYwMDU3WhcNMjYwMjEwMDYwMDU3WjAzMTEwLwYDVQQD Eyg0MTkzNTM1OTBlYjk4OGJiMjgzMTJmMGE5ZjkxYzY3NDc4NTMzMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRN6Cu/LVZDMpnJmoykbbiZ5iA0N 2pfFhczH7aeyw5AlSFIANa2jl6s4UHCGfASabpzFSqj5bnQmIqwdXgQkaw6VR6xK dRUHbUchwf9cqBj1rKlOjVlyAlSpfvTiLmwoWqHUcrrbVqa4G5YJZFpcG2vhsMUS 7Hys+GgBop6lFGhXWebwhYai8MuQl7yvlC2C9jIyPNLLyfOdLBeSNq4WCFXBIMmr i+2mlSVJAQkSt6ktS1cgcbsRsyVzhwRh27IHBgAmvmqdD/v6WWi81FeDchcBJHxy taynRSXdbziLSl9l3X2B+Vh59HdVURAv/guo+IPoQJ7CjWggZTVa+5xXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGTU1kOuYi7KDEvCp+RxnR4UzJ4MB8GA1UdIwQY MBaAFNBbJiOjnVVsULcEbTZEf7Yhr5dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEt MDY1Y2ExZjM2MzEwLzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEtMDY1Y2ExZjM2MzEw LzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXhLeh9x Knr97svIa2TjUjb+psoz9qLzJ2ozcWq4q6x0mTiHZtAlW2vckJwNsaKLwmUUQvqa OCKQoYOUw2fVzVyLLznA9uaiqqGQzWuaE9JiOUySzg7yuQdTJwnL4cctB0gJaoTg h3bQmmgpOgqoHK6EfrRLrIUfaHr8jG300I00Baj5eVve8Uv5yBQS8U9m/tSIH2l5 L5o1CjtqM5GQzGes0YQOqvFEYy910zuMl/+oSgsaEO3h67CoCfIwrzY9lj0o0dHU BkkuMny24lrMPd4d1O9D/a0iDTD9kQGWmUmBVfzWx4KQP92TmJ3vnnkQgXbPHAhX QkO4XtAY2MP4jA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:01 2026 by rpki-client