This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json) Hash identifier: 6IpiMh1bACxDkHfno6ZHkd5WQ6LiEH0sxgzhx/j5qmk= Subject key identifier: F5:43:06:E7:C8:3E:42:2E:7B:20:70:89:AD:18:BC:85:03:B6:00:40 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019C420F65B3D412F2DFD589A3AA337B5210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft Manifest number: 158E Signing time: Mon 09 Feb 2026 11:00:31 +0000 Manifest this update: Mon 09 Feb 2026 11:00:31 +0000 Manifest next update: Tue 10 Feb 2026 11:00:31 +0000 Files and hashes: 1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=) 2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=) 3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: qm5AEQzuFp+cuv9Z0tXDJTdna+727vOA2vqN0SiIe+Y=) 4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=) 5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=) 6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=) 7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:65:b3:d4:12:f2:df:d5:89:a3:aa:33:7b:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Feb 9 11:00:31 2026 GMT Not After : Feb 10 11:00:31 2026 GMT Subject: CN=f54306e7c83e422e7b207089ad18bc8503b60040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:d5:30:94:ff:64:57:99:dd:20:63:6f:4a: 5b:56:27:95:bc:68:a6:4e:8b:43:7a:67:5a:f7:61: 76:10:4a:4e:66:5a:44:0d:61:94:a1:d1:4b:11:ac: 80:c4:47:7b:82:4c:ee:dc:d1:8a:82:7d:e4:f4:67: 79:8e:4b:c9:7d:57:a8:17:c3:e4:9f:55:31:73:54: 0c:b7:f5:2b:ab:58:9c:63:f9:97:ad:c8:8d:8b:41: 71:17:9e:68:55:06:4f:57:3b:81:32:59:33:54:66: d3:66:3c:68:94:d3:15:88:42:08:78:9e:b3:b5:47: 1a:49:43:1b:0d:be:d8:02:25:f2:bc:7d:f8:ca:d3: 35:63:ce:b9:55:65:ce:54:e2:b9:90:76:6c:f0:3e: fa:a0:70:c4:b1:b9:70:5b:94:b7:2e:8c:e3:cb:45: 34:d6:cc:9b:ab:81:e2:36:ac:4b:47:18:d2:a7:4f: 3f:3a:60:66:80:78:17:67:10:95:79:3e:7a:38:b9: 8b:ba:ed:2c:65:e1:bb:ed:1b:45:98:d2:59:98:31: bd:3d:1e:f7:0e:b6:37:f0:ea:b2:68:27:c2:f7:8f: 20:1c:08:39:f6:7c:da:54:14:63:bb:70:f8:84:aa: d9:1a:e8:7f:ea:32:66:b1:99:0a:d5:9b:5d:62:42: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:06:E7:C8:3E:42:2E:7B:20:70:89:AD:18:BC:85:03:B6:00:40 X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:74:f9:9e:e2:1c:de:e9:d6:50:38:79:10:e3:1b:8f:6e:d7: 7e:1e:48:0f:a4:3c:ba:14:1d:2c:f1:1a:11:94:97:9c:f4:cd: b5:ba:4f:32:61:5a:9f:73:82:ee:00:48:1f:fc:5e:68:ee:8d: 86:7a:58:29:63:47:15:83:05:47:b2:24:34:87:87:4a:e1:c5: 8f:5e:17:56:86:96:6d:56:88:db:ea:1a:67:68:61:e8:b1:b6: f3:06:2e:3a:0b:07:44:5d:b3:b9:84:81:80:95:58:34:4d:e8: 7c:4b:8f:02:9e:c9:11:f1:b3:25:27:d9:d7:e6:e1:39:0a:bd: 67:ae:eb:ec:40:99:45:30:c8:95:42:c0:91:3f:54:dd:93:9b: e5:44:5b:87:bb:7c:d7:db:d8:66:64:cf:46:78:69:c3:0e:ad: 80:63:d9:94:bf:bc:3a:c3:25:77:28:06:2a:1b:04:72:60:0a: d0:b4:aa:5c:fc:5e:60:31:6b:fd:8e:47:63:32:5f:7e:fe:a6: 66:ce:39:4e:dc:25:23:00:aa:60:6c:8a:d9:b5:03:33:55:7d: fd:8c:b0:76:e6:97:0f:e5:5b:e5:d6:b4:b3:11:50:9f:41:dc: bd:ab:1b:fd:00:fa:7b:8d:e6:7b:bc:9b:79:4e:e1:d2:67:89: 9b:e7:4d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2Wz1BLy39WJo6oze1IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD EyhmNTQzMDZlN2M4M2U0MjJlN2IyMDcwODlhZDE4YmM4NTAzYjYwMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTVMJT/ZFeZ3SBjb0pbVieVvGim TotDemda92F2EEpOZlpEDWGUodFLEayAxEd7gkzu3NGKgn3k9Gd5jkvJfVeoF8Pk n1Uxc1QMt/Urq1icY/mXrciNi0FxF55oVQZPVzuBMlkzVGbTZjxolNMViEIIeJ6z tUcaSUMbDb7YAiXyvH34ytM1Y865VWXOVOK5kHZs8D76oHDEsblwW5S3Lozjy0U0 1sybq4HiNqxLRxjSp08/OmBmgHgXZxCVeT56OLmLuu0sZeG77RtFmNJZmDG9PR73 DrY38OqyaCfC948gHAg59nzaVBRju3D4hKrZGuh/6jJmsZkK1ZtdYkJD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVDBufIPkIueyBwia0YvIUDtgBAMB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3T5nuIc 3unWUDh5EOMbj27Xfh5ID6Q8uhQdLPEaEZSXnPTNtbpPMmFan3OC7gBIH/xeaO6N hnpYKWNHFYMFR7IkNIeHSuHFj14XVoaWbVaI2+oaZ2hh6LG28wYuOgsHRF2zuYSB gJVYNE3ofEuPAp7JEfGzJSfZ1+bhOQq9Z67r7ECZRTDIlULAkT9U3ZOb5URbh7t8 19vYZmTPRnhpww6tgGPZlL+8OsMldygGKhsEcmAK0LSqXPxeYDFr/Y5HYzJffv6m Zs45TtwlIwCqYGyK2bUDM1V9/YywduaXD+Vb5da0sxFQn0Hcvasb/QD6e43me7yb eU7h0meJm+dN5A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:21 2026 by rpki-client