This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json) Hash identifier: nDGF0UXqn2ImxnDk/FfnWSO90hhgnA3h+IuWljtVT7c= Subject key identifier: 21:11:42:65:61:D6:4B:F2:97:FC:26:84:D9:F0:A5:49:44:B1:FB:08 Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Certificate serial: 019C43FE5631A232AC972F9D310D96FC868E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft Manifest number: 0844 Signing time: Mon 09 Feb 2026 20:01:07 +0000 Manifest this update: Mon 09 Feb 2026 20:01:07 +0000 Manifest next update: Tue 10 Feb 2026 20:01:07 +0000 Files and hashes: 1: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (hash: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=) 2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: o5D92yLHTZLW9cfZUBqnqVXpU1mc/fOyA/uCZqeVdJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:56:31:a2:32:ac:97:2f:9d:31:0d:96:fc:86:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Validity Not Before: Feb 9 20:01:07 2026 GMT Not After : Feb 10 20:01:07 2026 GMT Subject: CN=2111426561d64bf297fc2684d9f0a54944b1fb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:04:3a:8e:c5:b7:d2:45:68:d4:13:48:5d: 6e:77:16:a7:24:db:29:f2:0f:c3:b7:29:a2:11:b3: 9b:f8:01:a2:1c:9b:47:f6:9a:ed:5a:f7:51:c9:5a: dd:c7:53:18:27:5b:2e:39:ef:53:8d:39:5f:bd:9d: 2c:50:1c:e3:86:a2:3f:4f:b0:44:b4:0f:53:af:e8: 1b:50:86:7a:08:9e:19:2f:2b:09:79:f7:e4:de:8f: f4:a6:c7:18:58:51:88:ce:3c:96:82:24:d0:42:67: d4:68:4a:ec:04:5a:38:a9:85:20:c2:48:36:e1:89: ac:24:47:41:e8:2f:18:32:1b:ae:12:15:13:33:75: 96:3d:45:35:59:14:c0:32:cc:e0:08:c9:09:b9:b4: 94:4d:63:16:8a:7a:f8:c4:fa:e4:da:87:14:0a:9c: 84:82:60:f9:8f:08:04:28:6b:80:cc:c7:d9:2f:b2: e7:76:d6:c9:39:63:82:d1:6c:be:13:f3:f8:61:13: d6:8e:cc:5d:20:fd:fb:f3:25:20:35:06:73:ec:5d: e6:bf:18:24:da:48:76:60:e5:db:f2:77:58:24:f4: 99:b0:92:4b:8d:bb:d1:85:fc:14:80:4e:b3:42:9c: 1c:61:bb:f5:04:9c:6c:22:4e:9b:34:5c:9d:97:b7: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:42:65:61:D6:4B:F2:97:FC:26:84:D9:F0:A5:49:44:B1:FB:08 X509v3 Authority Key Identifier: keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:00:f0:31:1b:a9:53:7c:7a:4c:b3:05:fb:44:03:c1:17:db: 42:89:c9:36:74:bb:1a:e4:5c:cb:5b:a6:de:d7:59:05:82:c8: 97:06:eb:0e:83:d3:8a:9d:05:2e:3d:14:5e:95:38:23:64:d3: 25:0d:b5:b5:5f:68:8f:27:c7:62:95:21:81:48:ab:d9:4d:cb: 77:4a:37:01:53:da:02:86:ab:61:d8:0d:e7:7e:1f:02:85:6a: ab:97:90:28:7e:9b:ad:de:b6:9e:a2:36:15:d4:8a:f4:10:ec: d3:b9:28:b4:3c:2b:5c:b9:54:f2:b7:5e:ee:bf:a9:c4:c2:a5: 1e:50:bb:78:b1:c8:a0:d3:c3:1a:ec:bb:92:59:4a:5e:9d:9d: dc:72:b8:7d:eb:4b:6b:ed:46:6e:13:7f:88:97:e6:bf:51:6e: 09:ad:0c:e3:67:87:b7:a4:15:35:70:87:ad:29:82:6b:47:c0: e9:91:3a:d0:8d:e8:2d:10:3c:da:56:84:69:1c:65:f6:d7:c4: 63:05:86:a5:e0:dd:72:14:d1:6f:1b:ca:b5:65:c6:4a:bd:62: df:37:9e:0c:62:a3:1a:d6:4a:c8:0d:f8:03:96:3f:26:5d:2f: ce:8f:b3:fe:01:bc:94:3e:10:a2:5a:0a:c6:db:c4:40:6e:23: d1:84:a0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lYxojKsly+dMQ2W/IaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWQzMGU5NmVhNTZiOTgwZTZiNzkzZDFhODZjNjJkZDVj MGJjMWYwHhcNMjYwMjA5MjAwMTA3WhcNMjYwMjEwMjAwMTA3WjAzMTEwLwYDVQQD EygyMTExNDI2NTYxZDY0YmYyOTdmYzI2ODRkOWYwYTU0OTQ0YjFmYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+UEOo7Ft9JFaNQTSF1udxanJNsp 8g/DtymiEbOb+AGiHJtH9prtWvdRyVrdx1MYJ1suOe9TjTlfvZ0sUBzjhqI/T7BE tA9Tr+gbUIZ6CJ4ZLysJeffk3o/0pscYWFGIzjyWgiTQQmfUaErsBFo4qYUgwkg2 4YmsJEdB6C8YMhuuEhUTM3WWPUU1WRTAMszgCMkJubSUTWMWinr4xPrk2ocUCpyE gmD5jwgEKGuAzMfZL7LndtbJOWOC0Wy+E/P4YRPWjsxdIP378yUgNQZz7F3mvxgk 2kh2YOXb8ndYJPSZsJJLjbvRhfwUgE6zQpwcYbv1BJxsIk6bNFydl7fwYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCERQmVh1kvyl/wmhNnwpUlEsfsIMB8GA1UdIwQY MBaAFLftMOlupWuYDmt5PRqGxi3VwLwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQt OTU1NTM3Y2I2OWYyLzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQtOTU1NTM3Y2I2OWYy LzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQDwMRup U3x6TLMF+0QDwRfbQonJNnS7GuRcy1um3tdZBYLIlwbrDoPTip0FLj0UXpU4I2TT JQ21tV9ojyfHYpUhgUir2U3Ld0o3AVPaAoarYdgN534fAoVqq5eQKH6brd62nqI2 FdSK9BDs07kotDwrXLlU8rde7r+pxMKlHlC7eLHIoNPDGuy7kllKXp2d3HK4fetL a+1GbhN/iJfmv1FuCa0M42eHt6QVNXCHrSmCa0fA6ZE60I3oLRA82laEaRxl9tfE YwWGpeDdchTRbxvKtWXGSr1i3zeeDGKjGtZKyA34A5Y/Jl0vzo+z/gG8lD4QoloK xtvEQG4j0YSgdw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:16 2026 by rpki-client