This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: 0NMAZFCI+ilKSz0M8ndPxIkqi/Lo06X3hLl0ldAR140= Subject key identifier: B1:EC:0D:B4:AB:C0:8B:E4:86:A3:08:9C:B9:E8:93:42:05:D0:1A:FC Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019C43C6AB59993CC879E08E029949C942DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 049C Signing time: Mon 09 Feb 2026 19:00:19 +0000 Manifest this update: Mon 09 Feb 2026 19:00:19 +0000 Manifest next update: Tue 10 Feb 2026 19:00:19 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: PhRA9QxRUfO3mP18OPW+PgVUv5JvK4ms8tB857OUov4=) 2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:ab:59:99:3c:c8:79:e0:8e:02:99:49:c9:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Feb 9 19:00:19 2026 GMT Not After : Feb 10 19:00:19 2026 GMT Subject: CN=b1ec0db4abc08be486a3089cb9e8934205d01afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:da:32:65:d9:49:c9:ef:2a:2f:75:cc:3f: 05:34:4a:98:97:79:3d:8f:59:93:10:5b:2e:ce:35: e8:16:d9:d0:c7:f7:c4:d4:fb:35:1b:74:12:99:49: cd:16:1d:d6:54:02:7a:56:3d:39:21:65:3a:58:5c: 16:dc:e4:a6:e9:34:9f:7e:e6:e0:cc:f0:3a:a5:bd: 5d:d9:9b:3f:33:51:ed:71:d2:28:2e:64:9e:07:18: f2:da:56:c5:e7:b3:df:3c:2f:0d:c7:ef:69:70:b2: 66:58:69:57:40:5e:d5:93:9e:cf:bd:b2:3a:02:91: c7:01:a8:ef:34:43:e7:97:75:c2:dc:ad:99:32:09: 1c:b2:96:18:55:b7:da:7a:94:ac:bc:dc:9f:20:c0: 06:65:57:89:1b:40:bf:2e:6e:81:d5:04:d3:82:aa: 42:ae:c6:16:91:e9:fc:11:87:ff:d1:97:99:a6:4b: f9:a9:13:56:d0:d3:b4:61:ec:8b:bb:fb:fb:61:9a: f6:bd:96:5c:3a:1f:48:63:46:1d:5a:65:bb:9e:0a: a9:0d:24:dd:39:36:2b:14:9f:27:d1:29:d9:25:0b: 58:7a:95:bb:ab:8c:38:c5:06:f6:e0:dd:aa:92:de: 05:73:be:88:aa:c0:cb:c9:ca:d3:40:83:60:4f:98: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EC:0D:B4:AB:C0:8B:E4:86:A3:08:9C:B9:E8:93:42:05:D0:1A:FC X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:af:8d:e2:19:ae:63:8f:70:d5:2f:2e:6d:e3:58:9c:65: 49:9e:5f:ce:4a:62:cc:a4:01:f4:07:c8:6b:e6:c8:f9:bf:db: e5:7b:df:f9:88:ad:00:fe:b5:c0:db:81:9b:18:8a:28:e9:98: 01:a3:17:0c:29:9a:e4:6e:b5:fb:45:af:23:d8:97:4c:e2:9d: a7:20:cc:03:01:64:33:e4:72:ad:57:1f:76:e0:2b:7a:91:89: 87:2e:c7:7c:7e:13:07:a5:92:f4:98:f1:69:c7:66:06:ef:50: de:af:2d:92:0d:4b:83:cc:aa:fc:62:e6:51:5d:4b:42:f6:5b: d6:20:36:a5:9a:d1:19:56:d7:3d:7c:25:d9:46:05:ad:7c:dc: 14:6e:4f:01:6b:79:36:e0:fb:eb:cd:13:42:73:76:40:d3:ae: a8:27:54:1f:b2:ad:ae:28:e3:2f:87:af:c6:b5:e2:67:5d:e5: 84:46:dd:ea:12:7c:48:a5:62:1a:ed:7d:a7:31:84:19:59:2e: c1:66:7a:d1:f5:53:df:02:0a:a3:00:f4:a5:c4:63:60:59:2c: 34:be:35:4f:8b:19:53:b4:47:2e:a4:63:28:e2:4d:bd:3d:95: 90:b2:0c:de:17:cc:12:44:87:25:56:5f:4a:72:65:93:21:40: 53:a6:bc:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxqtZmTzIeeCOAplJyULbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjYwMjA5MTkwMDE5WhcNMjYwMjEwMTkwMDE5WjAzMTEwLwYDVQQD EyhiMWVjMGRiNGFiYzA4YmU0ODZhMzA4OWNiOWU4OTM0MjA1ZDAxYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5TaMmXZScnvKi91zD8FNEqYl3k9 j1mTEFsuzjXoFtnQx/fE1Ps1G3QSmUnNFh3WVAJ6Vj05IWU6WFwW3OSm6TSffubg zPA6pb1d2Zs/M1HtcdIoLmSeBxjy2lbF57PfPC8Nx+9pcLJmWGlXQF7Vk57PvbI6 ApHHAajvNEPnl3XC3K2ZMgkcspYYVbfaepSsvNyfIMAGZVeJG0C/Lm6B1QTTgqpC rsYWken8EYf/0ZeZpkv5qRNW0NO0YeyLu/v7YZr2vZZcOh9IY0YdWmW7ngqpDSTd OTYrFJ8n0SnZJQtYepW7q4w4xQb24N2qkt4Fc76IqsDLycrTQINgT5iouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHsDbSrwIvkhqMInLnok0IF0Br8MB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwKvjeIZ rmOPcNUvLm3jWJxlSZ5fzkpizKQB9AfIa+bI+b/b5Xvf+YitAP61wNuBmxiKKOmY AaMXDCma5G61+0WvI9iXTOKdpyDMAwFkM+RyrVcfduArepGJhy7HfH4TB6WS9Jjx acdmBu9Q3q8tkg1Lg8yq/GLmUV1LQvZb1iA2pZrRGVbXPXwl2UYFrXzcFG5PAWt5 NuD7680TQnN2QNOuqCdUH7KtrijjL4evxrXiZ13lhEbd6hJ8SKViGu19pzGEGVku wWZ60fVT3wIKowD0pcRjYFksNL41T4sZU7RHLqRjKOJNvT2VkLIM3hfMEkSHJVZf SnJlkyFAU6a8IA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:34 2026 by rpki-client