This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json) Hash identifier: COaGsPT+isJzBKXpjNnSYskuxPef8F6u2XdIkYeUniM= Subject key identifier: A4:14:8F:04:69:9B:8E:52:74:BD:49:2F:6B:CB:1E:1C:76:8A:BE:23 Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Certificate serial: 019C41D8B5B870EC119E23D2A42C41980419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft Manifest number: 0CEF Signing time: Mon 09 Feb 2026 10:00:47 +0000 Manifest this update: Mon 09 Feb 2026 10:00:47 +0000 Manifest next update: Tue 10 Feb 2026 10:00:47 +0000 Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=) 2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: xYG8bSzKZAP/G7ALqNCQ5xthWshmasBB3fNqIF5DskQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b5:b8:70:ec:11:9e:23:d2:a4:2c:41:98:04:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Validity Not Before: Feb 9 10:00:47 2026 GMT Not After : Feb 10 10:00:47 2026 GMT Subject: CN=a4148f04699b8e5274bd492f6bcb1e1c768abe23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:d0:a4:a4:4d:e0:e2:38:e5:29:f2:45:b6: 89:2d:b0:2b:a6:27:4a:c2:d9:15:04:34:08:0e:e4: e0:aa:38:8e:2b:4f:58:98:f9:e0:8e:20:bf:c6:8d: 30:21:a3:c9:af:24:93:01:d5:3a:2d:ca:ba:f1:59: 1a:64:a3:73:c5:d9:0d:50:72:7d:8c:2d:d4:f1:b3: a1:4b:07:bf:e5:33:54:a6:28:83:87:d1:7e:ed:db: fe:e7:ae:d5:e6:03:f5:69:6e:65:c7:9f:df:2b:e3: 8c:01:d1:9b:0d:7b:3c:3a:82:65:6f:b5:26:57:95: 60:8d:6c:bd:0a:af:7f:75:23:cc:9b:88:7b:a3:6e: 91:c4:41:35:30:2c:8a:de:ba:5c:84:7e:a9:b7:e7: 35:9d:7b:b8:80:f2:46:67:12:d0:a4:41:cb:24:a6: 87:f6:25:46:44:5e:00:82:c8:7f:fd:ec:ae:99:5b: 96:dc:c7:88:0b:39:af:d6:28:9f:26:dc:cb:d3:fb: 0a:f5:42:d1:51:af:5c:30:a8:a9:85:5b:f4:f9:4a: 6c:de:b8:e7:91:a1:d8:b8:75:dc:d6:e5:3e:9b:e6: 27:58:67:a3:cd:eb:b5:37:aa:e9:df:d1:c6:87:67: 41:ab:e4:6e:31:92:b6:a5:dd:23:37:93:a1:e5:2a: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:14:8F:04:69:9B:8E:52:74:BD:49:2F:6B:CB:1E:1C:76:8A:BE:23 X509v3 Authority Key Identifier: keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b5:cd:5d:46:77:90:79:2a:4c:1e:4e:94:de:21:2b:36:5d: ec:cb:7f:fc:c3:0d:cb:24:ee:19:ab:e5:61:2d:ee:9b:18:47: 98:9a:24:74:9a:c3:76:d0:bf:3d:da:53:04:3f:05:be:ec:19: 21:73:c5:89:18:47:bd:46:b9:07:41:e2:17:05:4f:5b:9a:0f: 4e:72:1a:0e:63:4a:65:f9:dc:45:18:6d:b5:cb:03:38:c0:73: ec:6e:8c:75:f6:8a:90:bb:89:9b:99:77:35:c2:c1:05:95:8a: 3a:e2:06:68:05:12:02:74:c5:ee:b6:0e:8a:99:e4:87:92:fc: 4c:dc:c0:4f:96:28:c8:81:8b:c6:0e:3c:fa:a2:23:ac:b3:e5: 4f:96:c1:60:d7:9b:f4:dd:1e:21:39:c5:63:23:78:3d:51:3d: 0e:db:b9:05:de:0e:0a:b8:6b:38:6f:0e:09:80:c9:bb:f5:94: c9:fc:db:e6:a9:23:78:00:44:87:0c:e9:e4:c2:d4:94:2e:7a: 3b:b4:f1:f9:ef:45:4c:8b:b0:04:ed:7a:08:a7:57:34:f4:81: d5:7b:fe:e4:52:e8:e2:3c:54:08:5e:ba:ba:ca:5c:7c:07:27: f2:e5:20:55:0c:12:8a:0f:79:91:6f:88:d2:66:98:7b:e8:49: 09:19:d4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LW4cOwRniPSpCxBmAQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDc3M2YyNDBjZDYyNjljMjUxYjY1MTcwYWE3ZTI5OGFl OGM0MWYwHhcNMjYwMjA5MTAwMDQ3WhcNMjYwMjEwMTAwMDQ3WjAzMTEwLwYDVQQD EyhhNDE0OGYwNDY5OWI4ZTUyNzRiZDQ5MmY2YmNiMWUxYzc2OGFiZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb7QpKRN4OI45SnyRbaJLbArpidK wtkVBDQIDuTgqjiOK09YmPngjiC/xo0wIaPJrySTAdU6Lcq68VkaZKNzxdkNUHJ9 jC3U8bOhSwe/5TNUpiiDh9F+7dv+567V5gP1aW5lx5/fK+OMAdGbDXs8OoJlb7Um V5VgjWy9Cq9/dSPMm4h7o26RxEE1MCyK3rpchH6pt+c1nXu4gPJGZxLQpEHLJKaH 9iVGRF4Agsh//eyumVuW3MeICzmv1iifJtzL0/sK9ULRUa9cMKiphVv0+Ups3rjn kaHYuHXc1uU+m+YnWGejzeu1N6rp39HGh2dBq+RuMZK2pd0jN5Oh5SqPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQUjwRpm45SdL1JL2vLHhx2ir4jMB8GA1UdIwQY MBaAFG9Hc/JAzWJpwlG2UXCqfimK6MQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMt NzY5Y2Q3ZGNjOTM4LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMtNzY5Y2Q3ZGNjOTM4 LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbXNXUZ3 kHkqTB5OlN4hKzZd7Mt//MMNyyTuGavlYS3umxhHmJokdJrDdtC/PdpTBD8FvuwZ IXPFiRhHvUa5B0HiFwVPW5oPTnIaDmNKZfncRRhttcsDOMBz7G6MdfaKkLuJm5l3 NcLBBZWKOuIGaAUSAnTF7rYOipnkh5L8TNzAT5YoyIGLxg48+qIjrLPlT5bBYNeb 9N0eITnFYyN4PVE9Dtu5Bd4OCrhrOG8OCYDJu/WUyfzb5qkjeABEhwzp5MLUlC56 O7Tx+e9FTIuwBO16CKdXNPSB1Xv+5FLo4jxUCF66uspcfAcn8uUgVQwSig95kW+I 0maYe+hJCRnUqg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:47 2026 by rpki-client