This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json) Hash identifier: 8dT9A9AKCaM1mhJ9uZ5i2OYuS61x7RM4dMR4r/zAR6Q= Subject key identifier: A1:B5:B2:88:B4:C3:9D:D3:16:FE:E4:44:2B:E7:4E:29:15:33:9D:6A Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Certificate serial: 019C41D8BB6EEAC1809A91DE226211766723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft Manifest number: 078B Signing time: Mon 09 Feb 2026 10:00:48 +0000 Manifest this update: Mon 09 Feb 2026 10:00:48 +0000 Manifest next update: Tue 10 Feb 2026 10:00:48 +0000 Files and hashes: 1: 6Y_Q_XYNyE3ONOEUbtEBa-B0Ffc.roa (hash: ZASDjsooOVaChWwIP1atzMXETDhEIRoxPGVrC5Frz3o=) 2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: SKvUWPlF3OKOCxS6lb30TIAeVJRW5uluTQjk23jaXyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:bb:6e:ea:c1:80:9a:91:de:22:62:11:76:67:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Validity Not Before: Feb 9 10:00:48 2026 GMT Not After : Feb 10 10:00:48 2026 GMT Subject: CN=a1b5b288b4c39dd316fee4442be74e2915339d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:e2:93:b9:7e:41:85:9b:34:73:a0:eb:42: f7:e5:d4:c4:79:cb:db:29:20:70:5e:a8:08:8a:9f: f3:d5:69:fc:d3:b6:1b:4a:03:43:8f:b3:b7:f1:e3: b2:ad:f3:cb:87:92:8e:07:ed:96:1c:43:d3:2b:c5: 1b:c9:b0:1d:54:dc:a3:45:38:9c:f0:3a:e7:70:30: de:88:69:17:a4:70:e7:f7:b9:46:22:a3:b1:b3:8b: 9c:98:80:65:37:01:fb:54:47:06:00:04:71:57:6c: 8e:65:f8:28:30:f8:01:7b:63:29:e7:99:f3:1f:78: e5:92:27:6a:36:7d:9a:6e:39:ba:aa:3e:8e:bb:c2: 1f:6e:1b:6d:97:d2:05:22:d3:51:2d:6b:31:b2:f1: 6b:40:7c:03:ac:bf:9f:be:88:41:b3:62:c7:70:db: 01:90:3b:61:22:2a:b8:a1:72:50:62:0c:29:68:5a: 2e:fd:a3:f2:a2:36:50:52:2b:f0:88:11:eb:a8:a2: 5c:4e:c3:11:10:d0:73:55:f2:b5:51:05:25:4c:d6: 31:18:ba:82:f1:f2:2b:f4:14:6c:6a:06:b3:42:e2: ae:4d:8c:d3:e1:35:c5:7b:91:a1:e3:ea:5e:ff:a2: 95:98:ce:2c:dd:cd:55:ed:c8:9f:ba:f1:7d:d6:88: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B5:B2:88:B4:C3:9D:D3:16:FE:E4:44:2B:E7:4E:29:15:33:9D:6A X509v3 Authority Key Identifier: keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2e:37:b8:6e:f6:47:5c:3e:27:d9:68:60:2c:c6:06:d3:05: 8e:5f:1b:44:ca:1c:ba:fb:fc:b5:81:b3:63:64:5b:7d:89:e9: 92:60:14:d5:b8:46:e4:65:c8:9b:eb:0a:3b:ed:80:81:61:24: 19:68:9c:2c:d6:a0:48:cc:04:78:7a:10:3a:ec:7c:26:f9:03: ae:7a:76:de:86:d4:97:01:3c:46:bc:e6:f4:85:9c:31:61:36: ac:29:6f:01:e4:fd:53:cc:82:73:c3:03:2d:19:36:7e:25:46: d2:99:0a:8f:aa:4f:5f:2a:88:a8:3d:43:21:3f:5c:00:d8:80: 6e:0f:91:a2:29:b5:23:08:f6:b7:5d:ba:5c:ba:2b:77:d9:9d: cc:5a:13:d5:f4:b3:51:99:87:4f:e7:c3:e3:c8:8c:f0:13:9c: 8b:4e:2a:ca:e7:22:a4:aa:72:d1:55:59:4e:7a:15:1a:66:37: 27:ad:12:a1:b3:55:af:f4:ec:59:fa:d4:b5:e6:51:61:10:99: 53:d9:50:be:5b:09:40:6b:03:0b:4c:12:4a:be:52:12:d7:34: ca:39:40:4f:0f:57:47:6a:c7:b8:49:b4:18:92:93:0a:ae:48: 12:ef:7a:9d:96:f1:b1:b5:db:b1:79:3c:0d:bd:ab:19:15:7f: 25:4b:53:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ltu6sGAmpHeImIRdmcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm NGQxNWYwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD EyhhMWI1YjI4OGI0YzM5ZGQzMTZmZWU0NDQyYmU3NGUyOTE1MzM5ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfvik7l+QYWbNHOg60L35dTEecvb KSBwXqgIip/z1Wn807YbSgNDj7O38eOyrfPLh5KOB+2WHEPTK8UbybAdVNyjRTic 8DrncDDeiGkXpHDn97lGIqOxs4ucmIBlNwH7VEcGAARxV2yOZfgoMPgBe2Mp55nz H3jlkidqNn2abjm6qj6Ou8Ifbhttl9IFItNRLWsxsvFrQHwDrL+fvohBs2LHcNsB kDthIiq4oXJQYgwpaFou/aPyojZQUivwiBHrqKJcTsMRENBzVfK1UQUlTNYxGLqC 8fIr9BRsagazQuKuTYzT4TXFe5Gh4+pe/6KVmM4s3c1V7cifuvF91oiKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG1soi0w53TFv7kRCvnTikVM51qMB8GA1UdIwQY MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt NTAwN2RkZTM1MDQ1LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1 LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS43uG72 R1w+J9loYCzGBtMFjl8bRMocuvv8tYGzY2RbfYnpkmAU1bhG5GXIm+sKO+2AgWEk GWicLNagSMwEeHoQOux8JvkDrnp23obUlwE8Rrzm9IWcMWE2rClvAeT9U8yCc8MD LRk2fiVG0pkKj6pPXyqIqD1DIT9cANiAbg+Roim1Iwj2t126XLord9mdzFoT1fSz UZmHT+fD48iM8BOci04qyucipKpy0VVZTnoVGmY3J60SobNVr/TsWfrUteZRYRCZ U9lQvlsJQGsDC0wSSr5SEtc0yjlATw9XR2rHuEm0GJKTCq5IEu96nZbxsbXbsXk8 Db2rGRV/JUtTtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:33 2026 by rpki-client