This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json) Hash identifier: Wf8lsxPA7mSICNtx87v7Bk+ykgy2ladmYi0VnxZoB9M= Subject key identifier: B9:A3:05:AF:52:34:F9:26:64:51:AD:4F:10:DC:72:57:79:45:54:A2 Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0 Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0 Certificate serial: 019C4322DB50B3E4575A059591516A8A5E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft Manifest number: 024E Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: KEev86svpAueO8veqiaCNQVfz30.roa (hash: RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=) 2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: kiFDc5uhNQl2VMeTesfleIJSsLTCPNO105A3v5AKlSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:db:50:b3:e4:57:5a:05:95:91:51:6a:8a:5e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0 Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=b9a305af5234f9266451ad4f10dc7257794554a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:91:d8:f6:dd:d2:01:6b:06:ef:b8:27:27: 3a:cb:a5:83:bb:31:bc:69:61:da:63:34:c8:a2:a2: ab:9e:cf:ed:90:6e:95:6d:0a:77:2d:c7:bf:4b:3d: 73:63:79:ca:c0:de:0f:18:c5:4d:0c:00:98:2e:57: 00:c5:d8:62:46:7d:cf:9e:dc:75:5b:ee:d8:a5:27: 71:a9:24:1b:37:4b:b7:62:bf:a6:ca:d7:1b:07:56: b8:59:c2:fe:d3:6a:57:fb:55:f0:59:90:e2:ff:8c: db:ed:2b:6b:9d:01:21:9e:a1:cb:8c:76:b1:b9:58: 10:b2:75:b7:9d:a2:f8:03:79:d8:92:6b:b3:71:97: 37:fd:34:4f:f1:dd:6f:70:f6:16:89:53:ec:e8:bb: 30:e2:12:74:90:e4:40:ba:d3:e1:4e:47:6d:e3:6f: 01:ea:a6:88:6a:a8:ba:7a:0b:7c:fc:c3:49:d9:54: 4a:3a:1b:f2:d1:24:da:a0:8a:a7:f2:c2:db:8d:3d: fb:bd:f1:d2:21:16:ba:00:78:d0:cb:d0:40:dd:cd: 2a:81:81:71:e3:92:9b:c5:ed:69:a2:7f:92:20:a5: 23:cc:c3:cb:76:cc:08:76:37:c3:44:ab:6c:48:80: 3b:f4:fb:06:1d:86:89:5d:ce:6f:5b:83:33:b1:cb: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:05:AF:52:34:F9:26:64:51:AD:4F:10:DC:72:57:79:45:54:A2 X509v3 Authority Key Identifier: keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:98:fe:4c:f4:21:33:76:9b:b9:87:29:b7:46:1a:ad:56:bc: 64:7b:79:36:83:fd:79:16:43:06:27:43:98:eb:81:ad:8a:26: 62:45:2f:4f:e1:2c:a8:70:36:56:0e:11:60:8b:27:e4:37:4c: 42:e1:b3:d0:5e:93:c8:0d:1d:ba:b0:da:20:3c:1c:e4:44:a1: 01:25:76:d9:aa:da:b3:85:50:bb:25:5b:99:63:ef:77:6e:44: 97:28:f6:aa:3c:aa:e6:0c:26:7e:e6:f3:f2:2e:30:73:99:f8: 6a:c1:55:a1:29:5e:f5:e5:72:f5:b3:a7:60:0c:01:5d:db:b7: 0e:a7:2f:dd:05:8b:a3:75:ec:b6:b3:52:4d:f3:0e:41:40:f6: 54:f3:ae:1d:f4:f3:d8:a5:8e:58:04:75:80:c2:cf:9a:54:17: d8:77:18:91:c1:17:ca:b0:f9:1a:18:d5:01:4c:ba:7e:0b:32: f8:9c:49:32:dc:74:f5:4e:dd:9f:57:cc:71:a7:f1:72:cc:92: b9:e3:0d:f6:2d:d9:8b:f6:e6:a4:90:cd:52:32:12:20:75:67: 55:6c:6d:5a:be:bf:c7:82:bc:48:00:fc:3d:30:d5:12:c3:76: d5:50:02:14:a9:e8:5e:b3:19:93:ae:73:b6:5f:9c:74:4f:3c: 72:81:dc:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIttQs+RXWgWVkVFqil5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDhhY2NlOTBkNDc1YTBmYWExMWQyODU0ODZhNDUzNTIw YjgxZjAwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD EyhiOWEzMDVhZjUyMzRmOTI2NjQ1MWFkNGYxMGRjNzI1Nzc5NDU1NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXCR2Pbd0gFrBu+4Jyc6y6WDuzG8 aWHaYzTIoqKrns/tkG6VbQp3Lce/Sz1zY3nKwN4PGMVNDACYLlcAxdhiRn3Pntx1 W+7YpSdxqSQbN0u3Yr+mytcbB1a4WcL+02pX+1XwWZDi/4zb7StrnQEhnqHLjHax uVgQsnW3naL4A3nYkmuzcZc3/TRP8d1vcPYWiVPs6Lsw4hJ0kORAutPhTkdt428B 6qaIaqi6egt8/MNJ2VRKOhvy0STaoIqn8sLbjT37vfHSIRa6AHjQy9BA3c0qgYFx 45Kbxe1pon+SIKUjzMPLdswIdjfDRKtsSIA79PsGHYaJXc5vW4Mzscv9OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmjBa9SNPkmZFGtTxDccld5RVSiMB8GA1UdIwQY MBaAFHAIrM6Q1HWg+qEdKFSGpFNSC4HwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTkt YTMxODkzYjBlYWZjLzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTktYTMxODkzYjBlYWZj LzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJj+TPQh M3abuYcpt0YarVa8ZHt5NoP9eRZDBidDmOuBrYomYkUvT+EsqHA2Vg4RYIsn5DdM QuGz0F6TyA0durDaIDwc5EShASV22aras4VQuyVbmWPvd25Elyj2qjyq5gwmfubz 8i4wc5n4asFVoSle9eVy9bOnYAwBXdu3Dqcv3QWLo3XstrNSTfMOQUD2VPOuHfTz 2KWOWAR1gMLPmlQX2HcYkcEXyrD5GhjVAUy6fgsy+JxJMtx09U7dn1fMcafxcsyS ueMN9i3Zi/bmpJDNUjISIHVnVWxtWr6/x4K8SAD8PTDVEsN21VACFKnoXrMZk65z tl+cdE88coHcSA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:19 2026 by rpki-client