This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json) Hash identifier: JWpXMivE6U/xubBQhW1GNYtqhJj7LFS0qF3R/9r3xTw= Subject key identifier: C2:04:C5:DE:CE:96:66:B6:B7:5C:05:96:03:E8:36:8B:30:F7:3A:0F Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21 Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21 Certificate serial: 019C42B4802FEBECC45C8A554F1C69657366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 14:00:51 +0000 Manifest this update: Mon 09 Feb 2026 14:00:51 +0000 Manifest next update: Tue 10 Feb 2026 14:00:51 +0000 Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: uX7YTmSNIO8vgpRnkjsXYxK4pBdXN/gWg+/IUxyhnlM=) 2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:80:2f:eb:ec:c4:5c:8a:55:4f:1c:69:65:73:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21 Validity Not Before: Feb 9 14:00:51 2026 GMT Not After : Feb 10 14:00:51 2026 GMT Subject: CN=c204c5dece9666b6b75c059603e8368b30f73a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:d4:be:33:bf:98:03:0a:d8:6b:dd:9d:79: 3e:18:e2:5e:53:79:01:f8:e4:2e:7e:1c:4a:91:8d: 71:47:89:03:76:6e:37:57:cb:a4:24:0f:48:3f:c0: 2c:af:00:59:65:06:73:cb:74:23:d0:37:7c:68:17: bf:02:fe:91:a9:3f:79:20:65:13:42:37:0b:f9:ec: e3:de:73:d2:58:3e:11:69:d9:8a:75:04:8f:db:85: 49:12:b0:3f:45:44:4a:16:b6:d2:37:08:f6:0e:d6: 16:dc:36:46:0d:e6:df:ce:a2:36:09:c9:67:d2:d8: 2d:50:ad:ca:69:ba:ed:3b:55:88:a0:81:50:c5:79: c4:bf:38:b9:4c:89:5a:64:89:60:25:ac:a6:ba:aa: f6:26:6c:34:50:78:b9:75:87:b4:07:8b:3b:0f:83: fc:0e:0e:83:88:a8:6f:d7:a4:7b:08:32:52:c9:10: 8d:ef:b2:d2:04:87:c2:55:0c:f3:bb:0f:cc:c7:eb: fe:a4:a8:3d:d2:a1:d4:5d:5a:21:0c:a5:78:24:ec: e6:f5:07:61:39:29:18:48:c3:d6:03:ff:89:f1:ce: 59:5b:6d:ae:31:05:ce:e6:15:8c:5d:92:7d:44:1d: 6b:4b:c4:2a:87:34:58:47:18:0e:8c:2c:89:2a:99: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:04:C5:DE:CE:96:66:B6:B7:5C:05:96:03:E8:36:8B:30:F7:3A:0F X509v3 Authority Key Identifier: keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1d:79:ca:90:da:9b:c1:5d:d0:4b:19:3f:b1:b0:b8:4e:5e: f0:8f:0e:27:5a:e3:49:c9:00:e4:9f:16:77:19:ea:97:4b:a1: c1:f0:72:57:de:e1:35:94:1c:02:ab:c2:35:75:92:9d:49:6f: a3:4d:ff:a0:5f:44:e9:b4:57:2e:20:88:18:d7:cb:af:cd:f5: 8d:32:72:c4:93:bf:f4:a0:32:3f:9c:76:64:e8:5b:3f:f8:0e: b3:59:cf:f0:fb:6d:9e:7c:b6:58:7a:c5:64:ea:64:bf:83:ae: 5f:7a:43:7e:05:3f:3b:a1:77:9f:7e:06:b9:9d:8c:d7:74:55: 45:e4:e7:3e:4f:4b:07:9c:71:ea:e0:a8:44:0e:d1:83:d7:57: 76:99:1a:36:17:55:ed:21:79:43:90:93:ee:6a:2d:90:94:a8: 21:a8:ee:b9:2c:5b:4e:8c:8f:ab:70:d1:6d:44:e7:95:d5:b8: 44:30:cc:d5:ae:32:54:9f:9c:47:30:76:06:a1:0c:a4:f9:d7: da:70:05:dc:ca:d4:a7:d9:35:16:f2:bf:e2:39:58:d0:2b:04: 7c:9e:7e:c3:8a:7b:19:7e:e5:87:3d:79:97:c0:ce:c9:b7:f4: 14:bb:a3:82:17:4b:2d:6e:0f:b0:9f:6a:4b:58:79:e1:71:27: 95:61:87:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIAv6+zEXIpVTxxpZXNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3 NDNlMjEwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD EyhjMjA0YzVkZWNlOTY2NmI2Yjc1YzA1OTYwM2U4MzY4YjMwZjczYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqzUvjO/mAMK2GvdnXk+GOJeU3kB +OQufhxKkY1xR4kDdm43V8ukJA9IP8AsrwBZZQZzy3Qj0Dd8aBe/Av6RqT95IGUT QjcL+ezj3nPSWD4RadmKdQSP24VJErA/RURKFrbSNwj2DtYW3DZGDebfzqI2Ccln 0tgtUK3KabrtO1WIoIFQxXnEvzi5TIlaZIlgJaymuqr2Jmw0UHi5dYe0B4s7D4P8 Dg6DiKhv16R7CDJSyRCN77LSBIfCVQzzuw/Mx+v+pKg90qHUXVohDKV4JOzm9Qdh OSkYSMPWA/+J8c5ZW22uMQXO5hWMXZJ9RB1rS8QqhzRYRxgOjCyJKpmx/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIExd7Olma2t1wFlgPoNosw9zoPMB8GA1UdIwQY MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt NjJjZTg0ZjcwNzVlLzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR15ypDa m8Fd0EsZP7GwuE5e8I8OJ1rjSckA5J8Wdxnql0uhwfByV97hNZQcAqvCNXWSnUlv o03/oF9E6bRXLiCIGNfLr831jTJyxJO/9KAyP5x2ZOhbP/gOs1nP8Pttnny2WHrF ZOpkv4OuX3pDfgU/O6F3n34GuZ2M13RVReTnPk9LB5xx6uCoRA7Rg9dXdpkaNhdV 7SF5Q5CT7motkJSoIajuuSxbToyPq3DRbUTnldW4RDDM1a4yVJ+cRzB2BqEMpPnX 2nAF3MrUp9k1FvK/4jlY0CsEfJ5+w4p7GX7lhz15l8DOybf0FLujghdLLW4PsJ9q S1h54XEnlWGH8A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:25 2026 by rpki-client