This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json) Hash identifier: reDplXpTD6O7N1yk690tKigb5kf4sfKbmDeGKlDSMbs= Subject key identifier: B0:EE:65:5D:EB:AD:19:C0:51:DB:E6:4E:F2:80:F1:C7:47:80:3B:6C Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Certificate serial: 019C41A222CB5E74FEF70E3744B565699C4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 09:01:10 +0000 Manifest this update: Mon 09 Feb 2026 09:01:10 +0000 Manifest next update: Tue 10 Feb 2026 09:01:10 +0000 Files and hashes: 1: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: dzhaAFwcFR223BS3PAzkgQulm1crZFlJKhJwEC+KMjg=) 2: vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa (hash: vGuE++T51Grc7iV5G51jVBx+3DOtyMCoT9ihsAdCu8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:22:cb:5e:74:fe:f7:0e:37:44:b5:65:69:9c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Validity Not Before: Feb 9 09:01:10 2026 GMT Not After : Feb 10 09:01:10 2026 GMT Subject: CN=b0ee655debad19c051dbe64ef280f1c747803b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:04:af:8b:4e:34:30:69:70:bc:b9:ed:2e: cb:a8:d6:6b:f1:af:83:32:af:60:00:75:70:65:4d: b5:a7:7d:b1:8f:f2:d1:bb:41:aa:a4:bd:c9:4c:9b: c7:f2:72:78:f8:78:7a:73:e3:c7:20:fa:97:25:d9: 65:ce:a1:57:98:e1:8c:93:5b:ed:ac:62:6f:b4:62: f1:28:55:62:44:be:b0:d7:7f:17:ad:f7:5c:94:66: 06:c8:e7:0e:24:88:a1:92:da:3b:a9:33:ce:ab:e5: 56:d6:ad:a9:9a:5d:76:33:ff:15:e2:b7:f7:ed:db: 52:8b:3b:b5:84:e8:0b:cc:09:3b:07:74:31:9a:d2: 92:cf:0d:c1:f2:97:c7:b0:0a:2f:b6:b4:78:0d:67: 71:26:17:b5:83:28:83:e6:42:ec:d1:b9:63:be:0e: b8:09:46:ce:04:6a:1e:f5:6d:06:3f:a3:37:d5:75: c4:6e:ca:7f:aa:ff:b0:48:44:97:77:f0:c8:25:3a: 15:dd:54:76:17:66:ef:75:7d:a8:c2:e2:83:74:a9: bf:8d:86:48:ec:c0:72:bf:47:fe:ba:13:d2:81:80: 79:88:d4:fa:c8:a3:99:6e:36:ab:e0:4d:e2:d6:e7: dd:3e:24:79:c3:ae:34:b7:fd:24:0f:02:65:46:a4: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EE:65:5D:EB:AD:19:C0:51:DB:E6:4E:F2:80:F1:C7:47:80:3B:6C X509v3 Authority Key Identifier: keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:ae:ed:70:d2:1d:4c:56:7a:9f:bd:c6:01:d5:5e:2c:5d: 5e:5a:79:bf:3c:df:24:5b:1e:63:0e:ce:99:e7:39:20:cd:46: b4:ea:b7:36:b2:df:e6:10:db:8f:7d:6c:26:a6:f7:27:4e:7b: 60:8f:32:1a:22:90:16:22:6e:de:57:a4:64:15:0a:10:6a:b8: 00:e1:58:eb:ff:f2:c7:ed:17:b5:66:f0:26:ec:2e:a7:e8:a4: 95:53:44:fa:b2:ee:15:1e:2b:e8:10:76:de:a2:1f:b1:f5:2a: df:31:fc:5a:53:97:a1:28:ea:42:f6:05:26:c7:80:f2:d9:6a: d5:5f:8a:8b:5d:22:57:22:22:74:0b:d4:ea:10:31:7e:eb:b2: 4f:62:ac:f3:c4:72:c9:7c:d0:78:d3:67:f7:f9:f5:6c:a5:0c: 22:22:bd:3b:84:bb:7b:54:4d:b4:87:70:3d:8c:87:33:31:69: a7:c5:20:d7:9c:db:03:10:8f:dc:ad:70:66:59:72:b5:e5:0a: 3f:72:86:e1:35:f5:9f:80:bf:e4:57:62:e7:51:5c:3b:cf:19: 9b:26:a4:de:71:64:63:16:b0:d7:1a:ea:c5:86:67:91:4b:ee: ab:d2:6c:19:a9:44:4b:12:d9:65:d7:3d:45:b5:b5:d9:a6:27: de:a2:53:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiLLXnT+9w43RLVlaZxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi M2M4MjkwHhcNMjYwMjA5MDkwMTEwWhcNMjYwMjEwMDkwMTEwWjAzMTEwLwYDVQQD EyhiMGVlNjU1ZGViYWQxOWMwNTFkYmU2NGVmMjgwZjFjNzQ3ODAzYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQEr4tONDBpcLy57S7LqNZr8a+D Mq9gAHVwZU21p32xj/LRu0GqpL3JTJvH8nJ4+Hh6c+PHIPqXJdllzqFXmOGMk1vt rGJvtGLxKFViRL6w138XrfdclGYGyOcOJIihkto7qTPOq+VW1q2pml12M/8V4rf3 7dtSizu1hOgLzAk7B3QxmtKSzw3B8pfHsAovtrR4DWdxJhe1gyiD5kLs0bljvg64 CUbOBGoe9W0GP6M31XXEbsp/qv+wSESXd/DIJToV3VR2F2bvdX2owuKDdKm/jYZI 7MByv0f+uhPSgYB5iNT6yKOZbjar4E3i1ufdPiR5w640t/0kDwJlRqR/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDuZV3rrRnAUdvmTvKA8cdHgDtsMB8GA1UdIwQY MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt NjkzNGNhZmI2YmNkLzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp6u7XDS HUxWep+9xgHVXixdXlp5vzzfJFseYw7Omec5IM1GtOq3NrLf5hDbj31sJqb3J057 YI8yGiKQFiJu3lekZBUKEGq4AOFY6//yx+0XtWbwJuwup+iklVNE+rLuFR4r6BB2 3qIfsfUq3zH8WlOXoSjqQvYFJseA8tlq1V+Ki10iVyIidAvU6hAxfuuyT2Ks88Ry yXzQeNNn9/n1bKUMIiK9O4S7e1RNtIdwPYyHMzFpp8Ug15zbAxCP3K1wZllyteUK P3KG4TX1n4C/5Fdi51FcO88Zmyak3nFkYxaw1xrqxYZnkUvuq9JsGalESxLZZdc9 RbW12aYn3qJTXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:22 2026 by rpki-client