This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json) Hash identifier: Hxtq8uWwqsqwVu8cBFXgqysKrOJjPqMWu1LTh9RjGfE= Subject key identifier: 86:9D:0E:39:DB:BB:54:D7:A4:A3:A9:60:2F:5B:7C:E2:59:89:DC:AA Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c Certificate serial: 019C42EB43842BE482BC760BC8C275CC2438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft Manifest number: 1818 Signing time: Mon 09 Feb 2026 15:00:40 +0000 Manifest this update: Mon 09 Feb 2026 15:00:40 +0000 Manifest next update: Tue 10 Feb 2026 15:00:40 +0000 Files and hashes: 1: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: gWM5pECcQ6O8Y2jDIa3rtF7SfQXtOOk5xFDpWGFmj0c=) 2: hKVvr_-aCZpRix4ibxuUNSgCtto.roa (hash: rliNtwotXP1DxwetaWAK+AjUBqpkTMwr5I+2We2lWL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:43:84:2b:e4:82:bc:76:0b:c8:c2:75:cc:24:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c Validity Not Before: Feb 9 15:00:40 2026 GMT Not After : Feb 10 15:00:40 2026 GMT Subject: CN=869d0e39dbbb54d7a4a3a9602f5b7ce25989dcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:e3:06:20:23:d2:14:ab:7a:c5:0b:52:d2: 60:6e:eb:55:8a:7c:c9:7e:bd:c8:eb:89:b4:0f:84: 3b:cc:94:a2:17:fe:43:9d:c3:5a:a3:fe:91:8d:cc: 20:28:64:51:04:3a:11:32:02:c8:20:fe:33:cf:c2: 6e:07:6b:2d:6e:cb:bb:36:3f:42:22:b2:6a:ae:d5: 34:98:15:2c:20:c2:13:60:25:62:66:6a:b1:c8:4c: 78:05:f6:de:c3:4d:88:27:3d:86:b6:1b:c7:b8:e1: 2e:66:aa:41:a1:92:e5:4c:49:e3:2e:4b:55:d4:ff: 2d:20:4c:dc:23:08:bc:3a:93:1d:b7:18:e4:46:75: 52:29:03:dd:60:12:96:c3:6b:1b:50:f1:66:bd:f5: c8:c1:14:e1:d5:58:74:73:35:3f:e9:c8:4e:c1:63: 72:e7:70:2f:9d:5d:2e:d3:00:38:6c:c0:4d:64:fe: 0f:f9:11:ec:d9:78:a8:8c:ae:2c:4b:c8:75:84:0b: 95:b1:64:15:91:d7:50:dc:5f:77:4f:d6:8b:47:38: 7b:eb:78:02:e2:33:8f:58:8b:30:4f:af:03:b4:79: 36:e3:5d:f5:85:d2:e8:2a:d7:76:b2:18:45:0b:c6: a9:e3:df:d3:ad:5e:e6:e0:99:07:a3:ac:47:33:1a: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9D:0E:39:DB:BB:54:D7:A4:A3:A9:60:2F:5B:7C:E2:59:89:DC:AA X509v3 Authority Key Identifier: keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:02:43:21:9b:cf:23:58:4b:c0:6b:80:82:8d:7c:b7:17:f0: 32:c1:12:c1:be:fe:fa:da:e1:68:95:31:db:18:21:d4:96:5f: c4:6c:dd:81:2c:53:c9:44:8d:3d:43:cd:39:40:30:8e:2d:55: 3c:df:da:f5:93:2f:fc:24:f4:13:5c:01:6d:e0:80:ca:1c:82: d7:1f:19:84:9c:59:3c:25:2b:fc:b9:da:ba:fa:6e:23:e1:24: 15:99:78:e0:a0:b5:1f:57:0b:42:82:63:24:e7:61:85:14:13: 33:5b:48:5b:14:ea:39:f1:b9:29:71:14:b7:56:17:09:b7:23: d6:0b:c7:41:7c:62:43:af:32:cd:24:4f:a7:70:57:12:a4:f8: 56:95:16:6f:cf:3e:17:ab:5b:f8:83:60:a3:fd:8a:f6:11:b7: 4d:b1:2a:2f:b4:bd:94:97:11:36:3d:99:54:8a:36:45:8c:fd: 3b:e9:a4:92:ca:66:0f:34:8e:bb:45:3a:3b:17:82:33:b0:d0: ba:ad:29:93:9a:8d:be:b2:82:26:f8:4f:c9:04:56:47:2b:25: 08:dc:be:29:e0:06:ad:0f:64:92:dc:e6:b2:38:56:05:6f:41: 43:f8:be:ab:22:0a:9f:10:59:ff:99:d1:6e:97:88:05:2f:c0: db:19:36:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60OEK+SCvHYLyMJ1zCQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw M2RiMWMwHhcNMjYwMjA5MTUwMDQwWhcNMjYwMjEwMTUwMDQwWjAzMTEwLwYDVQQD Eyg4NjlkMGUzOWRiYmI1NGQ3YTRhM2E5NjAyZjViN2NlMjU5ODlkY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrbjBiAj0hSresULUtJgbutVinzJ fr3I64m0D4Q7zJSiF/5DncNao/6RjcwgKGRRBDoRMgLIIP4zz8JuB2stbsu7Nj9C IrJqrtU0mBUsIMITYCViZmqxyEx4Bfbew02IJz2GthvHuOEuZqpBoZLlTEnjLktV 1P8tIEzcIwi8OpMdtxjkRnVSKQPdYBKWw2sbUPFmvfXIwRTh1Vh0czU/6chOwWNy 53AvnV0u0wA4bMBNZP4P+RHs2XiojK4sS8h1hAuVsWQVkddQ3F93T9aLRzh763gC 4jOPWIswT68DtHk24131hdLoKtd2shhFC8ap49/TrV7m4JkHo6xHMxpKqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIadDjnbu1TXpKOpYC9bfOJZidyqMB8GA1UdIwQY MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt MWYxOWE4YmRhM2VkLzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgJDIZvP I1hLwGuAgo18txfwMsESwb7++trhaJUx2xgh1JZfxGzdgSxTyUSNPUPNOUAwji1V PN/a9ZMv/CT0E1wBbeCAyhyC1x8ZhJxZPCUr/LnauvpuI+EkFZl44KC1H1cLQoJj JOdhhRQTM1tIWxTqOfG5KXEUt1YXCbcj1gvHQXxiQ68yzSRPp3BXEqT4VpUWb88+ F6tb+INgo/2K9hG3TbEqL7S9lJcRNj2ZVIo2RYz9O+mkkspmDzSOu0U6OxeCM7DQ uq0pk5qNvrKCJvhPyQRWRyslCNy+KeAGrQ9kktzmsjhWBW9BQ/i+qyIKnxBZ/5nR bpeIBS/A2xk2Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:08 2026 by rpki-client