This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json) Hash identifier: yiE3zgEWFWl8Wh5ZKI5SGJYkJTTPIgxD6u4QQk7hrX0= Subject key identifier: 76:09:75:25:13:FB:22:1C:EE:E4:7D:B9:BA:00:B3:68:27:90:17:01 Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26 Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926 Certificate serial: 019C432215A9680414DDE7E4D630BBC3C746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft Manifest number: 09FE Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: rlG9nzzdgTaNPx5vFGjgmpwuOhu7XeAt2klWLNyaHdw=) 2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:15:a9:68:04:14:dd:e7:e4:d6:30:bb:c3:c7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926 Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=7609752513fb221ceee47db9ba00b36827901701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:77:70:d0:30:c0:78:97:e9:96:f6:42:fc: 54:38:e8:55:c6:0f:40:66:30:8a:f9:bc:8a:fc:14: 9d:ca:1e:3e:91:98:17:12:83:f2:f7:3e:5c:70:d5: 17:4b:99:d8:ec:73:b8:db:35:07:25:40:60:52:21: 31:34:5f:35:9a:d7:78:28:b6:fd:6c:24:43:9b:17: 58:c5:f9:1b:42:63:60:3a:27:e1:ca:4d:d7:f1:72: 21:85:29:55:9e:6a:04:82:98:ce:c8:61:2d:9d:07: 80:cb:75:6f:af:d7:4f:66:55:e2:ea:97:38:39:d9: 6b:2c:22:16:96:b6:3a:0a:d1:12:74:0c:3f:9d:9d: a0:76:25:6e:2e:62:f0:c5:3a:81:1d:96:e1:16:cd: 1e:88:e8:fb:86:01:e5:88:09:52:cf:9f:b2:ea:9d: d9:84:bf:f5:2e:40:1a:96:6a:82:9a:c8:e3:32:28: 3b:ba:e7:e4:45:df:01:b7:e1:46:e0:93:58:25:6f: 01:11:a6:34:00:ef:70:7c:78:15:7d:72:e3:78:98: 79:f6:75:8a:f1:cb:87:b2:24:21:d7:f0:76:d6:dc: 08:68:db:98:96:13:fd:c6:f5:80:23:b0:ac:ac:fc: c0:e1:bb:d4:c6:b2:b3:47:ca:ee:2f:71:f9:aa:08: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:09:75:25:13:FB:22:1C:EE:E4:7D:B9:BA:00:B3:68:27:90:17:01 X509v3 Authority Key Identifier: keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:5e:a6:70:64:07:bf:9f:8b:ec:b1:44:a6:a2:fe:40:8f: cb:ca:63:09:8a:17:4d:e0:73:b5:5d:a0:ae:99:e4:4b:bd:e5: 75:ae:d8:54:82:77:a7:d3:7d:af:c3:80:25:95:83:17:24:03: 1c:f8:f6:97:ce:dc:73:a9:db:a8:bf:0f:56:56:db:98:e5:8d: 7d:28:ae:cc:ad:c8:50:36:45:01:b4:6f:b9:d0:19:13:95:eb: 53:c2:fd:8b:2e:f7:90:ea:ab:84:a1:63:03:86:6a:ff:10:93: 82:33:90:24:ee:e5:6a:6c:13:82:ff:b4:67:92:63:af:47:4d: 69:ee:53:d0:08:95:1d:ca:38:4d:59:3d:9d:2c:ac:6c:0c:1d: ab:99:b7:b4:d5:48:8d:1a:0b:21:91:8f:35:cd:24:0d:9e:5a: a4:15:8f:6f:7b:f1:92:4f:1c:c5:db:ef:61:3f:29:f4:26:ec: 37:49:b9:06:26:e9:f7:0d:b7:25:14:e0:f7:e9:a4:47:b4:c3: f1:49:93:37:1e:73:e5:01:a2:19:ee:19:af:19:ea:75:44:4b: 8a:b8:c7:ad:f7:3d:57:0a:94:67:1c:85:14:e4:e0:db:d5:6f: 03:8a:46:c2:0a:b1:19:36:fd:87:20:40:4f:ac:a5:d7:f2:25: c6:e5:73:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhWpaAQU3efk1jC7w8dGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk ODE5MjYwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD Eyg3NjA5NzUyNTEzZmIyMjFjZWVlNDdkYjliYTAwYjM2ODI3OTAxNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0N3cNAwwHiX6Zb2QvxUOOhVxg9A ZjCK+byK/BSdyh4+kZgXEoPy9z5ccNUXS5nY7HO42zUHJUBgUiExNF81mtd4KLb9 bCRDmxdYxfkbQmNgOifhyk3X8XIhhSlVnmoEgpjOyGEtnQeAy3Vvr9dPZlXi6pc4 OdlrLCIWlrY6CtESdAw/nZ2gdiVuLmLwxTqBHZbhFs0eiOj7hgHliAlSz5+y6p3Z hL/1LkAalmqCmsjjMig7uufkRd8Bt+FG4JNYJW8BEaY0AO9wfHgVfXLjeJh59nWK 8cuHsiQh1/B21twIaNuYlhP9xvWAI7CsrPzA4bvUxrKzR8ruL3H5qggWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYJdSUT+yIc7uR9uboAs2gnkBcBMB8GA1UdIwQY MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxZepnBk B7+fi+yxRKai/kCPy8pjCYoXTeBztV2grpnkS73lda7YVIJ3p9N9r8OAJZWDFyQD HPj2l87cc6nbqL8PVlbbmOWNfSiuzK3IUDZFAbRvudAZE5XrU8L9iy73kOqrhKFj A4Zq/xCTgjOQJO7lamwTgv+0Z5Jjr0dNae5T0AiVHco4TVk9nSysbAwdq5m3tNVI jRoLIZGPNc0kDZ5apBWPb3vxkk8cxdvvYT8p9CbsN0m5Bibp9w23JRTg9+mkR7TD 8UmTNx5z5QGiGe4ZrxnqdURLirjHrfc9VwqUZxyFFOTg29VvA4pGwgqxGTb9hyBA T6yl1/IlxuVzXA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:33 2026 by rpki-client