This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json) Hash identifier: 4jdaNAGDxiDZvzvmEaxTrah8NynuuRT9djTARCj8uFs= Subject key identifier: EA:53:6D:9D:99:3E:9B:F0:27:73:A6:DB:5D:F0:D3:E0:D4:C6:B2:35 Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Certificate serial: 019C4390151854F4C56902AC80E22699DBAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft Manifest number: 0A66 Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 9pUHT0O8SinOARsqdaTstXFUpwFQdoMIK3sxpYKQEqg=) 2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:15:18:54:f4:c5:69:02:ac:80:e2:26:99:db:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=ea536d9d993e9bf02773a6db5df0d3e0d4c6b235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:d6:e5:6a:a6:62:f7:10:88:ce:e3:7f:71: 9b:d8:1b:37:7d:29:4a:88:f8:08:f8:fb:10:96:25: de:65:e5:b4:38:75:b9:c5:c0:3d:dd:05:ea:c2:0f: b1:29:7e:26:24:a7:ba:65:ab:c5:8a:12:84:8b:12: 36:4b:fb:83:37:90:67:e1:3e:e2:f7:78:b4:56:0e: 0d:d4:21:30:a4:64:35:42:c9:17:de:09:24:a0:5c: 55:6d:0b:2f:4e:05:0a:c2:92:17:ba:43:3a:86:27: d6:9c:48:de:63:45:a9:27:3a:4f:2b:ae:01:bb:49: a7:df:99:77:01:a8:34:35:7d:82:6d:62:07:ed:9f: 70:c3:3b:0a:29:79:7a:ce:a8:8e:f2:eb:e5:3a:44: bd:60:69:a0:27:19:4d:66:bd:07:a3:b6:06:8d:0c: 67:e1:ed:7c:79:ea:49:8d:4a:27:59:ab:25:c9:e1: 0a:f7:ea:bd:c0:3a:0c:75:c5:fc:c3:09:b2:cd:96: c2:7d:bc:75:c3:c9:7a:22:fb:68:c7:79:4f:7e:43: 2e:a2:9b:ec:cf:ef:7b:0d:85:b8:c3:5e:c1:13:ab: 32:47:c9:d7:51:e9:6e:38:46:da:ba:99:3a:a2:9a: 06:b5:0a:57:af:c9:be:49:7c:4d:fc:37:0e:86:15: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:6D:9D:99:3E:9B:F0:27:73:A6:DB:5D:F0:D3:E0:D4:C6:B2:35 X509v3 Authority Key Identifier: keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:cb:22:9f:68:c2:c2:8c:12:3a:f4:25:2d:3f:49:f8:c6: e7:41:d1:9e:52:2b:4f:fd:b1:69:22:89:6b:48:c4:98:3b:68: 35:28:78:be:6a:9f:ef:22:7a:02:e2:b4:09:20:cf:2e:83:46: a7:52:99:35:44:d7:f2:11:15:38:ee:28:8d:11:7e:3b:1f:5d: 68:e1:dd:82:36:00:f8:f1:d8:2c:d0:dc:cc:92:32:91:75:d5: 83:f7:b1:a8:65:93:e1:5f:e9:ee:e3:03:e3:88:eb:06:54:9e: f7:29:74:d2:30:45:00:23:ad:74:fa:e1:f7:05:20:2a:76:4d: 78:30:90:a4:4d:1d:d6:28:68:8b:b5:2f:5e:5d:0e:6b:e9:0d: df:37:47:16:c8:d2:04:e8:b1:77:dc:55:0e:7c:4d:de:b2:91: 63:1e:03:be:6c:2c:98:50:a2:21:e5:bb:69:fb:82:a2:25:59: 78:11:cc:6e:95:9a:fc:c5:a5:b2:53:cf:81:00:6e:d2:c2:4b: f1:b4:24:05:35:71:5e:ab:7e:09:a5:ae:3d:84:b2:65:fe:6f: af:b7:de:7f:98:0b:6f:b8:b9:02:08:db:ec:28:6a:b7:09:34: 8e:00:3d:aa:29:ae:7f:8e:02:16:76:1f:76:98:71:26:69:05: 2d:fc:38:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBUYVPTFaQKsgOImmdutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3 YjAyNmIwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD EyhlYTUzNmQ5ZDk5M2U5YmYwMjc3M2E2ZGI1ZGYwZDNlMGQ0YzZiMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowLW5WqmYvcQiM7jf3Gb2Bs3fSlK iPgI+PsQliXeZeW0OHW5xcA93QXqwg+xKX4mJKe6ZavFihKEixI2S/uDN5Bn4T7i 93i0Vg4N1CEwpGQ1QskX3gkkoFxVbQsvTgUKwpIXukM6hifWnEjeY0WpJzpPK64B u0mn35l3Aag0NX2CbWIH7Z9wwzsKKXl6zqiO8uvlOkS9YGmgJxlNZr0Ho7YGjQxn 4e18eepJjUonWaslyeEK9+q9wDoMdcX8wwmyzZbCfbx1w8l6Ivtox3lPfkMuopvs z+97DYW4w17BE6syR8nXUeluOEbaupk6opoGtQpXr8m+SXxN/DcOhhXCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpTbZ2ZPpvwJ3Om213w0+DUxrI1MB8GA1UdIwQY MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt Y2JkYWVkMGQwMGFkLzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKTLIp9o wsKMEjr0JS0/SfjG50HRnlIrT/2xaSKJa0jEmDtoNSh4vmqf7yJ6AuK0CSDPLoNG p1KZNUTX8hEVOO4ojRF+Ox9daOHdgjYA+PHYLNDczJIykXXVg/exqGWT4V/p7uMD 44jrBlSe9yl00jBFACOtdPrh9wUgKnZNeDCQpE0d1ihoi7UvXl0Oa+kN3zdHFsjS BOixd9xVDnxN3rKRYx4DvmwsmFCiIeW7afuCoiVZeBHMbpWa/MWlslPPgQBu0sJL 8bQkBTVxXqt+CaWuPYSyZf5vr7fef5gLb7i5Agjb7Chqtwk0jgA9qimuf44CFnYf dphxJmkFLfw4XA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:38 2026 by rpki-client