This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json) Hash identifier: BCuxKMosWNVfJM0ZKkX7eaCImxu8awxzJ2T3dpS4U9k= Subject key identifier: A5:E6:4F:6E:57:16:D6:33:25:19:01:9D:1C:6E:CD:8E:D2:62:FD:01 Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2 Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2 Certificate serial: 019C42EB36ED6582E3F6C0930A339928781D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft Manifest number: 1447 Signing time: Mon 09 Feb 2026 15:00:37 +0000 Manifest this update: Mon 09 Feb 2026 15:00:37 +0000 Manifest next update: Tue 10 Feb 2026 15:00:37 +0000 Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: LY7q7zSL+S79RNAi05acLLH7tcsPQ/5Vsg8d8HbjLeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:36:ed:65:82:e3:f6:c0:93:0a:33:99:28:78:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2 Validity Not Before: Feb 9 15:00:37 2026 GMT Not After : Feb 10 15:00:37 2026 GMT Subject: CN=a5e64f6e5716d6332519019d1c6ecd8ed262fd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:d9:d5:10:f5:e9:8f:e2:4d:85:13:01:36: 1d:b7:64:9a:30:e2:74:7b:38:96:a7:a9:ea:d7:4d: 91:d0:96:d7:fd:ea:50:f6:69:a1:e3:7a:63:5d:b5: 96:70:46:ca:ff:82:c9:04:a4:07:8e:73:0a:36:eb: 39:5b:04:f6:41:58:ab:10:7b:1f:dd:89:eb:9d:62: 54:8c:7d:55:f6:90:be:90:c1:de:c0:9e:a2:8f:60: 33:91:6c:b5:7e:75:93:d8:45:64:5e:c9:b1:e9:46: 99:40:93:5b:1a:8d:bd:1d:48:c9:4d:85:77:fc:f4: 73:61:4d:e8:a1:b0:59:3a:36:8a:29:82:7b:b9:18: 80:47:e3:88:10:3b:ba:63:f3:f1:a6:4b:d2:3f:e9: 2e:00:82:4e:67:20:24:ef:e3:a4:ac:d6:13:f4:b5: 2b:65:7a:a8:86:b7:2d:47:88:1e:29:4b:b1:8e:f4: 3d:d5:ad:2b:e2:f0:61:5b:47:97:1e:a9:ad:2d:69: 18:cd:8f:d4:6b:63:c7:dc:77:37:66:a4:7e:ea:e2: 26:d9:d2:13:84:26:04:13:82:ba:1c:c6:b5:e5:5b: bd:86:ed:94:9a:e8:0c:51:4f:91:e2:0c:91:3b:d1: 8b:eb:10:1d:f2:49:87:45:5b:ad:4b:29:b6:02:c8: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E6:4F:6E:57:16:D6:33:25:19:01:9D:1C:6E:CD:8E:D2:62:FD:01 X509v3 Authority Key Identifier: keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:65:a7:cf:14:bf:8e:fb:cc:7e:f1:37:a5:a8:aa:13:e3:1d: 58:4a:48:96:39:e8:c2:0d:ab:dc:76:cd:5b:2b:fb:2e:98:d7: bf:7f:fb:dc:be:7c:af:4b:03:32:67:01:61:ed:08:bb:db:37: e5:25:3c:ea:c9:b9:94:a0:15:15:85:09:a3:9e:1b:8d:06:14: e3:fd:83:ac:69:42:4c:38:2a:31:9a:a1:5f:c4:47:8b:0a:dd: 6f:86:9e:a3:4f:d3:f1:b2:77:b0:ca:10:40:6d:5d:6a:73:67: 35:62:64:fe:db:e1:24:ba:43:05:f3:5d:17:91:59:f2:86:9c: 28:c2:c6:45:ab:b1:63:ab:df:d6:72:20:60:77:1e:4b:29:a5: 3f:85:fb:e8:13:b7:96:d0:da:3c:d4:14:1e:11:f1:1f:e9:c3: 47:1e:bf:b8:b2:f5:41:84:c9:c5:6b:00:6a:4d:df:c6:bf:e1: 6d:ad:1e:fb:9a:ff:38:43:8a:6f:10:d8:43:43:af:06:18:b9: 52:ce:7e:eb:7f:ce:43:30:62:c5:5d:6b:99:bd:10:63:6b:80: 24:74:5c:6c:be:c3:25:b7:a0:1f:9a:a8:ea:45:cb:c8:d7:39: 7a:e3:5b:1f:bb:ad:f6:da:60:8b:db:b3:ee:3c:30:09:40:22: b9:8f:4b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zbtZYLj9sCTCjOZKHgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm YzNhZDIwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD EyhhNWU2NGY2ZTU3MTZkNjMzMjUxOTAxOWQxYzZlY2Q4ZWQyNjJmZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/Z1RD16Y/iTYUTATYdt2SaMOJ0 eziWp6nq102R0JbX/epQ9mmh43pjXbWWcEbK/4LJBKQHjnMKNus5WwT2QVirEHsf 3YnrnWJUjH1V9pC+kMHewJ6ij2AzkWy1fnWT2EVkXsmx6UaZQJNbGo29HUjJTYV3 /PRzYU3oobBZOjaKKYJ7uRiAR+OIEDu6Y/PxpkvSP+kuAIJOZyAk7+OkrNYT9LUr ZXqohrctR4geKUuxjvQ91a0r4vBhW0eXHqmtLWkYzY/Ua2PH3Hc3ZqR+6uIm2dIT hCYEE4K6HMa15Vu9hu2UmugMUU+R4gyRO9GL6xAd8kmHRVutSym2AsiSvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXmT25XFtYzJRkBnRxuzY7SYv0BMB8GA1UdIwQY MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGWnzxS/ jvvMfvE3paiqE+MdWEpIljnowg2r3HbNWyv7LpjXv3/73L58r0sDMmcBYe0Iu9s3 5SU86sm5lKAVFYUJo54bjQYU4/2DrGlCTDgqMZqhX8RHiwrdb4aeo0/T8bJ3sMoQ QG1danNnNWJk/tvhJLpDBfNdF5FZ8oacKMLGRauxY6vf1nIgYHceSymlP4X76BO3 ltDaPNQUHhHxH+nDRx6/uLL1QYTJxWsAak3fxr/hba0e+5r/OEOKbxDYQ0OvBhi5 Us5+63/OQzBixV1rmb0QY2uAJHRcbL7DJbegH5qo6kXLyNc5euNbH7ut9tpgi9uz 7jwwCUAiuY9LMw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:53 2026 by rpki-client