This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json) Hash identifier: LPCg/8Ds4/45L0sK9rSogcNXJtptSue70kcCv1cLFys= Subject key identifier: AF:1C:F5:41:D0:15:51:45:D0:3A:80:C2:69:2A:E3:10:B2:AA:39:89 Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a Certificate serial: 019C43903376D8CF4757F1F800B9D005CF19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 18:00:49 +0000 Manifest this update: Mon 09 Feb 2026 18:00:49 +0000 Manifest next update: Tue 10 Feb 2026 18:00:49 +0000 Files and hashes: 1: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (hash: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk=) 2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: zfRrq3e3jF8S1S50NUgOhIQdmM4aZVGacf+5yO4uv1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:33:76:d8:cf:47:57:f1:f8:00:b9:d0:05:cf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a Validity Not Before: Feb 9 18:00:49 2026 GMT Not After : Feb 10 18:00:49 2026 GMT Subject: CN=af1cf541d0155145d03a80c2692ae310b2aa3989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:60:2c:a4:54:0e:16:a1:5c:06:e9:dd:99: e5:93:ad:c9:dd:24:04:be:d0:23:c1:34:fa:fc:56: 07:4e:d6:c5:48:84:d8:20:90:1d:0a:21:94:e4:71: 75:a8:1f:7f:e9:35:63:2e:b8:ae:17:8e:ee:a1:a4: ed:e6:f1:89:00:07:2f:9d:99:0b:6c:02:74:ab:74: b4:3c:c4:df:e9:fa:b1:66:55:5f:6f:1b:62:f6:f2: f8:ce:3b:ba:48:de:f7:c8:35:ad:9b:c9:b1:20:a3: f6:dc:db:e9:f2:c8:63:86:29:83:57:51:ef:14:af: 40:76:3f:e4:52:19:42:c1:32:4a:09:c0:7f:f8:59: 05:d6:d6:87:40:63:3b:57:f3:7f:6c:a9:af:d0:9c: b8:59:fd:04:7d:dd:c1:08:05:87:e6:fa:41:94:b0: 5e:f1:50:32:37:89:6d:92:2d:e5:ae:5e:aa:94:10: 4d:12:25:df:16:f3:df:62:fd:cb:bd:c4:7e:51:64: 24:4b:02:4b:d3:42:cd:4b:06:f9:0d:71:62:4a:b3: 3d:56:96:4e:7c:36:e5:8c:8a:08:42:f9:93:db:82: 54:90:60:b1:a0:30:89:ec:52:bf:5b:b9:5d:c9:89: 12:8a:4b:42:10:a7:17:31:c2:5a:a5:d0:b7:55:3a: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:F5:41:D0:15:51:45:D0:3A:80:C2:69:2A:E3:10:B2:AA:39:89 X509v3 Authority Key Identifier: keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:95:28:6c:2e:0d:5f:d4:64:2a:c6:2c:d8:13:cd:c1:f8:94: 23:2f:36:34:cf:29:18:63:d2:ed:dc:4b:1c:21:f9:dd:95:52: 3d:58:89:87:2e:b2:b7:cc:d4:9d:d0:8f:b4:6b:89:44:6a:8c: 27:47:cc:b3:66:3f:47:23:31:0f:86:11:ec:fd:d9:3f:5d:16: 16:2e:48:d3:f0:a0:8a:85:52:79:a5:b6:ff:80:7d:95:03:2b: d9:9b:d8:2a:12:05:18:16:9e:33:0e:33:8a:fb:b2:a6:ac:b8: 48:cb:d8:35:16:e0:86:ba:58:37:15:6c:24:0f:ab:cb:a9:c5: 3b:5d:b3:10:09:60:eb:3f:76:4e:9e:e1:0e:6f:df:d7:48:4c: db:7f:28:54:df:07:ee:bd:e1:a1:00:57:bb:88:4e:99:dd:8e: 88:db:53:5d:60:12:0f:44:c4:a2:bf:80:e3:c9:cb:78:f7:f9: 4a:fb:16:38:7d:6b:52:0f:ec:0c:b7:ca:d2:9f:42:fb:cf:32: 38:f1:59:78:4f:77:f0:20:16:71:e9:e1:c5:15:9d:4e:d8:80: d1:7c:53:f2:cc:a7:d5:63:0f:d4:82:ce:be:1e:4d:fd:ae:a6: 1c:80:92:c2:37:d2:7a:c9:21:c8:b8:58:9b:df:74:b0:2d:2b: 08:40:ec:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDN22M9HV/H4ALnQBc8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3 NGNlM2EwHhcNMjYwMjA5MTgwMDQ5WhcNMjYwMjEwMTgwMDQ5WjAzMTEwLwYDVQQD EyhhZjFjZjU0MWQwMTU1MTQ1ZDAzYTgwYzI2OTJhZTMxMGIyYWEzOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QFgLKRUDhahXAbp3Znlk63J3SQE vtAjwTT6/FYHTtbFSITYIJAdCiGU5HF1qB9/6TVjLriuF47uoaTt5vGJAAcvnZkL bAJ0q3S0PMTf6fqxZlVfbxti9vL4zju6SN73yDWtm8mxIKP23Nvp8shjhimDV1Hv FK9Adj/kUhlCwTJKCcB/+FkF1taHQGM7V/N/bKmv0Jy4Wf0Efd3BCAWH5vpBlLBe 8VAyN4ltki3lrl6qlBBNEiXfFvPfYv3LvcR+UWQkSwJL00LNSwb5DXFiSrM9VpZO fDbljIoIQvmT24JUkGCxoDCJ7FK/W7ldyYkSiktCEKcXMcJapdC3VTooIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8c9UHQFVFF0DqAwmkq4xCyqjmJMB8GA1UdIwQY MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5UobC4N X9RkKsYs2BPNwfiUIy82NM8pGGPS7dxLHCH53ZVSPViJhy6yt8zUndCPtGuJRGqM J0fMs2Y/RyMxD4YR7P3ZP10WFi5I0/CgioVSeaW2/4B9lQMr2ZvYKhIFGBaeMw4z ivuypqy4SMvYNRbghrpYNxVsJA+ry6nFO12zEAlg6z92Tp7hDm/f10hM238oVN8H 7r3hoQBXu4hOmd2OiNtTXWASD0TEor+A48nLePf5SvsWOH1rUg/sDLfK0p9C+88y OPFZeE938CAWcenhxRWdTtiA0XxT8syn1WMP1ILOvh5N/a6mHICSwjfSeskhyLhY m990sC0rCEDs4w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:03 2026 by rpki-client