This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json) Hash identifier: 8IGzemdEoF2m132Qq5Lsomzx4VTRfy+QqdAA9wlq9xg= Subject key identifier: C5:F6:0C:95:40:FA:54:7E:12:A3:31:FB:23:15:86:FC:96:FC:EE:06 Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a Certificate serial: 019C43FE71D2E2242262D20F2B0CE7FBB950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft Manifest number: 0936 Signing time: Mon 09 Feb 2026 20:01:14 +0000 Manifest this update: Mon 09 Feb 2026 20:01:14 +0000 Manifest next update: Tue 10 Feb 2026 20:01:14 +0000 Files and hashes: 1: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: G9+4H5PW0x0b0ZBHif+B1hPm/367QtKOHd50jEfgByk=) 2: betqUpBNxt2fw8P1gRb-nmRchZ0.roa (hash: TA1LiGt+yd3esB5iVavjPJEuxZ2ixHs066seZWy0AXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:71:d2:e2:24:22:62:d2:0f:2b:0c:e7:fb:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a Validity Not Before: Feb 9 20:01:14 2026 GMT Not After : Feb 10 20:01:14 2026 GMT Subject: CN=c5f60c9540fa547e12a331fb231586fc96fcee06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:7f:1c:44:80:49:09:36:8b:e3:dc:7f:17: f1:d6:78:9e:8e:f7:5a:fa:ae:1e:58:3f:c9:ac:1e: 8b:d8:32:05:62:4e:71:6e:64:1a:f1:9a:1d:21:83: ad:f0:5c:24:f8:a4:ae:87:fc:77:44:cf:57:96:ee: 55:38:54:65:00:72:93:56:2b:3f:35:f6:c1:d7:67: 1c:e3:f2:dc:b9:5d:3c:ba:d1:5b:cc:85:db:79:68: 15:b9:76:6e:29:9a:d5:6e:f5:05:98:31:e3:3b:a5: e4:79:ee:38:f4:eb:91:17:11:0f:be:e5:50:2c:65: 85:fc:4b:98:ca:fd:8e:f7:2b:85:bf:03:33:e2:1c: ac:bd:fc:29:2e:ad:fc:6e:24:d3:69:bb:55:62:00: 56:e8:95:29:c3:08:c7:32:57:14:a4:52:66:a7:ec: 2b:ac:4a:77:35:c3:72:2c:c5:42:10:b1:e7:37:a3: 75:34:df:84:4f:e3:0a:56:22:2e:3a:e9:66:a2:93: e9:34:ec:75:85:3f:82:72:eb:44:b3:31:af:cd:be: 41:05:6e:c1:e3:95:33:d4:3a:72:30:cb:80:48:cb: a2:12:f9:31:23:10:2e:b3:77:10:9c:b4:a3:34:1e: c4:03:86:11:a9:ba:e2:4a:b0:f5:3b:2b:dd:67:ff: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:0C:95:40:FA:54:7E:12:A3:31:FB:23:15:86:FC:96:FC:EE:06 X509v3 Authority Key Identifier: keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d8:9d:3d:2d:63:92:9f:76:d9:98:75:b7:77:30:c3:ea:22: 77:ed:c5:e4:26:3f:81:0f:f4:71:0e:b6:65:a1:98:d2:52:04: 72:5d:49:fb:ae:e1:80:d7:fe:b6:86:90:da:9c:cf:7b:78:ac: d0:fa:5b:c1:bf:9d:c7:30:44:1e:b3:12:c2:f6:c0:7d:c1:9e: e4:e0:e2:da:6b:65:05:4a:af:ed:0d:d7:ce:e3:ce:f8:b6:52: d6:43:84:1e:bd:6f:99:a2:1a:28:ce:2c:1e:86:f4:79:a9:ab: 49:87:4c:3f:e9:0e:60:70:3b:cc:ff:9c:a1:56:70:bd:1f:77: 80:29:57:f4:bc:c3:46:df:18:a6:d8:d7:2f:24:77:95:69:af: a3:78:35:0f:3d:d5:33:cf:6a:01:fc:b7:f7:ec:4f:65:3c:15: 86:8d:b3:ed:0b:6f:0c:10:c1:20:63:1b:8a:8f:9d:4d:dd:9c: 98:ef:70:74:86:24:fd:f6:84:9e:ea:a7:91:8d:ba:bc:f6:21: bf:4d:d6:6e:97:b3:f4:75:87:21:ac:88:ef:92:fe:23:f0:ab: 0c:de:96:4d:05:4c:bf:27:56:ab:7c:54:0e:81:dd:78:20:b3: e4:3f:76:16:fb:0c:47:d8:d5:73:bb:b4:cb:b1:40:35:c2:c9: 67:ee:30:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nHS4iQiYtIPKwzn+7lQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1 OTEzNGEwHhcNMjYwMjA5MjAwMTE0WhcNMjYwMjEwMjAwMTE0WjAzMTEwLwYDVQQD EyhjNWY2MGM5NTQwZmE1NDdlMTJhMzMxZmIyMzE1ODZmYzk2ZmNlZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoN/HESASQk2i+Pcfxfx1niejvda +q4eWD/JrB6L2DIFYk5xbmQa8ZodIYOt8Fwk+KSuh/x3RM9Xlu5VOFRlAHKTVis/ NfbB12cc4/LcuV08utFbzIXbeWgVuXZuKZrVbvUFmDHjO6Xkee449OuRFxEPvuVQ LGWF/EuYyv2O9yuFvwMz4hysvfwpLq38biTTabtVYgBW6JUpwwjHMlcUpFJmp+wr rEp3NcNyLMVCELHnN6N1NN+ET+MKViIuOulmopPpNOx1hT+CcutEszGvzb5BBW7B 45Uz1DpyMMuASMuiEvkxIxAus3cQnLSjNB7EA4YRqbriSrD1OyvdZ//82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX2DJVA+lR+EqMx+yMVhvyW/O4GMB8GA1UdIwQY MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2 LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9idPS1j kp922Zh1t3cww+oid+3F5CY/gQ/0cQ62ZaGY0lIEcl1J+67hgNf+toaQ2pzPe3is 0Ppbwb+dxzBEHrMSwvbAfcGe5ODi2mtlBUqv7Q3XzuPO+LZS1kOEHr1vmaIaKM4s Hob0eamrSYdMP+kOYHA7zP+coVZwvR93gClX9LzDRt8YptjXLyR3lWmvo3g1Dz3V M89qAfy39+xPZTwVho2z7QtvDBDBIGMbio+dTd2cmO9wdIYk/faEnuqnkY26vPYh v03Wbpez9HWHIayI75L+I/CrDN6WTQVMvydWq3xUDoHdeCCz5D92FvsMR9jVc7u0 y7FANcLJZ+4weQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:53 2026 by rpki-client