This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json) Hash identifier: gpCfrZokLGDVmcZ78FZl8gbtRCfFfy2gmA+ldnrYjK8= Subject key identifier: 9D:12:D5:1A:66:76:8F:28:B0:30:4E:DD:48:88:87:35:0B:92:34:DB Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Certificate serial: 019C427D8113935187C4B1D19DCAE0196560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft Manifest number: 034B Signing time: Mon 09 Feb 2026 13:00:47 +0000 Manifest this update: Mon 09 Feb 2026 13:00:47 +0000 Manifest next update: Tue 10 Feb 2026 13:00:47 +0000 Files and hashes: 1: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: Agsball0Uo+cFYE7FTpZO8sQAVHVkX3x9xEchhsNS4Y=) 2: tFPfs4xpIocrr9F_alsNUwh6dNs.roa (hash: EmNlyy0F+FzqmqEZRdQGTBdexRs7cZ0YpJygNUDJNHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:81:13:93:51:87:c4:b1:d1:9d:ca:e0:19:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Validity Not Before: Feb 9 13:00:47 2026 GMT Not After : Feb 10 13:00:47 2026 GMT Subject: CN=9d12d51a66768f28b0304edd488887350b9234db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:bd:b1:3a:8f:f8:f3:64:2e:39:cb:2b:14: 8e:75:63:a8:2d:58:8e:a9:a2:82:96:75:cd:76:65: 79:b2:48:82:b6:ee:be:f3:21:12:b2:9b:6f:72:92: af:f1:28:76:cc:c9:1b:65:7e:b6:6b:b2:3f:56:21: 49:5c:bf:7e:99:2d:0e:5c:86:c5:ef:51:36:22:ff: 51:0a:4a:24:6b:40:14:da:fe:a4:f2:75:14:99:d3: e9:39:e0:3e:4c:51:3e:a1:db:4a:ae:21:f9:5a:1f: eb:75:cc:c4:24:72:f2:c8:f4:38:d4:41:31:76:ff: 6c:7f:5d:8b:6d:8c:d6:32:a7:b4:e1:4b:01:d5:69: ac:90:b7:81:6b:50:05:eb:6d:3b:c5:a1:96:dc:4e: 6d:ea:80:c4:dd:9c:d2:0a:56:bc:3e:9a:5b:03:29: 7a:ca:59:51:54:39:d9:33:8f:e0:8f:6b:d3:23:ec: 71:e2:48:d7:14:82:cd:5c:96:68:dc:65:58:61:1a: e7:64:6c:cd:5b:27:bc:c8:2d:98:5c:f1:62:2b:82: 39:f1:10:84:3d:e8:12:0c:67:59:e1:8a:67:c9:74: 13:ac:f6:ff:e7:5c:1d:62:13:16:5d:07:69:c9:dd: a2:26:50:1f:91:fd:82:a7:32:ad:c1:97:10:49:c8: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:D5:1A:66:76:8F:28:B0:30:4E:DD:48:88:87:35:0B:92:34:DB X509v3 Authority Key Identifier: keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:49:e2:2b:6f:d5:5e:58:12:4e:91:c0:c1:21:7e:01:fb:e4: 63:f5:2e:8c:13:7c:c8:d5:27:75:fd:34:a8:75:d1:5e:c2:92: 17:25:25:a0:38:1a:48:d0:40:10:e5:23:12:f7:57:1c:71:5a: 5d:77:77:1f:b3:63:1a:61:35:46:ab:d6:41:4c:2e:4f:18:34: d4:23:10:8c:28:fd:33:c6:60:ae:a1:25:63:6f:20:52:8a:61: 3d:75:eb:d2:d7:90:7e:24:f0:20:48:8a:71:ac:0a:19:35:f3: 75:ed:c0:9c:1e:45:78:15:3c:7b:e4:9d:ce:e6:db:b8:69:29: e8:75:d5:a1:13:1c:75:1c:de:f4:0a:3f:18:fc:a1:9d:0b:5e: 69:9c:50:8e:1b:81:38:5a:16:2d:dd:21:b8:d9:b3:93:8a:1b: 56:59:cf:eb:b4:06:ba:c3:72:0d:1b:e8:e0:46:be:38:48:f0: 5b:f0:29:eb:9c:81:48:e3:92:ec:c0:55:fd:6e:4a:11:ea:7c: d0:94:86:bb:b3:99:54:ea:9c:52:ec:81:57:50:68:e6:12:b3: 1a:bf:58:f8:26:d3:d8:71:d9:92:61:38:95:b9:5f:27:5b:b8: e9:d6:fd:f1:0f:f1:c2:52:73:bf:0a:aa:fc:0e:44:4d:5f:b6: 23:92:e6:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYETk1GHxLHRncrgGWVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzAwNGZkYmMxZDllM2EzYzFlN2UwNjU5MWFjYTRiOTRi NmMyZjgwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD Eyg5ZDEyZDUxYTY2NzY4ZjI4YjAzMDRlZGQ0ODg4ODczNTBiOTIzNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUm9sTqP+PNkLjnLKxSOdWOoLViO qaKClnXNdmV5skiCtu6+8yESsptvcpKv8Sh2zMkbZX62a7I/ViFJXL9+mS0OXIbF 71E2Iv9RCkoka0AU2v6k8nUUmdPpOeA+TFE+odtKriH5Wh/rdczEJHLyyPQ41EEx dv9sf12LbYzWMqe04UsB1WmskLeBa1AF6207xaGW3E5t6oDE3ZzSCla8PppbAyl6 yllRVDnZM4/gj2vTI+xx4kjXFILNXJZo3GVYYRrnZGzNWye8yC2YXPFiK4I58RCE PegSDGdZ4YpnyXQTrPb/51wdYhMWXQdpyd2iJlAfkf2CpzKtwZcQSchnKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0S1Rpmdo8osDBO3UiIhzULkjTbMB8GA1UdIwQY MBaAFJpwBP28HZ46PB5+BlkaykuUtsL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMt YjdmYTM5M2RiMWQxLzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMtYjdmYTM5M2RiMWQx LzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkniK2/V XlgSTpHAwSF+AfvkY/UujBN8yNUndf00qHXRXsKSFyUloDgaSNBAEOUjEvdXHHFa XXd3H7NjGmE1RqvWQUwuTxg01CMQjCj9M8ZgrqElY28gUophPXXr0teQfiTwIEiK cawKGTXzde3AnB5FeBU8e+SdzubbuGkp6HXVoRMcdRze9Ao/GPyhnQteaZxQjhuB OFoWLd0huNmzk4obVlnP67QGusNyDRvo4Ea+OEjwW/Ap65yBSOOS7MBV/W5KEep8 0JSGu7OZVOqcUuyBV1Bo5hKzGr9Y+CbT2HHZkmE4lblfJ1u46db98Q/xwlJzvwqq /A5ETV+2I5Lm6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:20 2026 by rpki-client