This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json) Hash identifier: dyqz0/+1ZJSSUNp7jI2Y8+oDJZSMNEppmZWNuQkrvLA= Subject key identifier: D0:7B:FC:36:D1:2C:26:B5:B9:65:07:26:FA:EA:3E:52:E1:86:27:76 Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Certificate serial: 019C43C72AF62B6CB4A09B7CD5F8FCC9FD41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft Manifest number: 04AC Signing time: Mon 09 Feb 2026 19:00:51 +0000 Manifest this update: Mon 09 Feb 2026 19:00:51 +0000 Manifest next update: Tue 10 Feb 2026 19:00:51 +0000 Files and hashes: 1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=) 2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: gsiNdB8ve/ckeNx60sN4GQ+eZBh6N/yZ5ArrNadmnGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2a:f6:2b:6c:b4:a0:9b:7c:d5:f8:fc:c9:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Validity Not Before: Feb 9 19:00:51 2026 GMT Not After : Feb 10 19:00:51 2026 GMT Subject: CN=d07bfc36d12c26b5b9650726faea3e52e1862776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:29:31:cf:50:32:bc:6a:5f:1a:9c:b7:21: b7:3d:19:a9:3d:d7:e8:87:73:c2:71:76:b6:11:e6: 4e:c5:eb:12:f4:df:dd:73:e4:9a:02:60:d3:d7:a2: 61:44:28:61:4f:2b:f6:e5:00:1f:99:9a:8f:1e:53: 40:3a:c9:b7:2e:81:2e:b4:7c:18:20:3a:dc:4a:43: 34:41:df:05:97:43:ae:5f:e3:8c:b8:b4:93:e0:b8: 8f:03:0d:91:c8:4d:5e:3d:e3:35:cd:c7:1b:68:2e: 26:28:ac:74:3d:a4:38:74:65:c0:05:5a:dd:31:8f: 32:e3:77:81:d7:b2:15:7e:f7:ce:ea:61:f3:f8:1c: 38:5c:66:40:10:f9:bc:dd:92:2a:e6:7a:1a:0b:cc: 5f:0a:5d:e6:93:a9:2d:a6:fe:e7:df:87:29:b5:75: 84:09:59:11:4d:f3:77:9a:43:7a:fa:a1:5a:0c:2a: ac:ae:4a:91:9e:86:68:03:d5:15:3e:b8:6b:cd:9e: 20:f3:71:c0:31:ce:64:ec:78:b2:de:9e:34:65:25: 31:b8:d4:3e:05:b9:3e:79:a0:ce:a3:0e:71:f8:12: dc:f2:e5:36:2e:6b:87:1b:dc:45:25:f3:03:04:8c: 87:4c:cf:b9:ab:4b:86:f4:86:d9:ab:ad:24:66:8e: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:FC:36:D1:2C:26:B5:B9:65:07:26:FA:EA:3E:52:E1:86:27:76 X509v3 Authority Key Identifier: keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bf:48:ec:87:d3:21:e8:39:45:8c:28:c5:91:fd:1e:6a:9e: 4c:37:aa:58:ea:01:89:4f:4a:88:83:11:e7:a6:cd:23:d6:15: 8a:21:c4:0c:9c:1c:b2:1b:8c:1e:d6:3b:c7:d9:e4:81:0d:44: cf:37:d1:85:ba:bb:23:70:15:ab:5d:80:c7:37:1e:19:b6:0b: b3:23:11:ca:64:1d:38:32:25:2e:ad:ed:d4:bc:84:cd:8d:f6: 1e:80:6e:86:82:fc:60:c0:7e:89:f3:de:3a:de:9d:8e:86:59: f9:d2:7e:b9:22:b9:58:12:7b:50:94:1a:6e:44:8f:fc:f9:2e: 57:df:ec:55:bc:c7:d1:a8:75:a8:9b:0a:e2:55:2c:ac:1f:eb: 3a:24:19:41:bb:08:59:66:45:73:d3:f1:18:b8:16:08:8f:98: f2:65:ab:94:a2:1a:98:82:49:11:41:da:71:76:36:0c:25:d1: 18:ca:ff:33:40:d3:c2:62:fb:7d:d5:5f:59:37:fc:8a:1f:d4: 3c:0e:3e:c0:5c:29:0d:84:cd:c0:5b:b3:c6:11:f1:6e:29:6a: cf:59:0b:c9:fc:f6:5d:19:0b:d1:f3:be:a2:da:93:71:98:35: 9c:39:90:1b:45:c6:9d:c1:ec:34:23:79:5c:98:74:dc:ad:59: 0d:32:fc:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyr2K2y0oJt81fj8yf1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTA3NWI4ZTQyZTQ1MTRlZjQ5ZDNmZWEyZjE4NzI2NGU3 NGZiMmUwHhcNMjYwMjA5MTkwMDUxWhcNMjYwMjEwMTkwMDUxWjAzMTEwLwYDVQQD EyhkMDdiZmMzNmQxMmMyNmI1Yjk2NTA3MjZmYWVhM2U1MmUxODYyNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTopMc9QMrxqXxqctyG3PRmpPdfo h3PCcXa2EeZOxesS9N/dc+SaAmDT16JhRChhTyv25QAfmZqPHlNAOsm3LoEutHwY IDrcSkM0Qd8Fl0OuX+OMuLST4LiPAw2RyE1ePeM1zccbaC4mKKx0PaQ4dGXABVrd MY8y43eB17IVfvfO6mHz+Bw4XGZAEPm83ZIq5noaC8xfCl3mk6ktpv7n34cptXWE CVkRTfN3mkN6+qFaDCqsrkqRnoZoA9UVPrhrzZ4g83HAMc5k7Hiy3p40ZSUxuNQ+ Bbk+eaDOow5x+BLc8uU2LmuHG9xFJfMDBIyHTM+5q0uG9IbZq60kZo6YkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB7/DbRLCa1uWUHJvrqPlLhhid2MB8GA1UdIwQY MBaAFKVQdbjkLkUU70nT/qLxhyZOdPsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUt N2JmZGE2MjU0NGNlLzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUtN2JmZGE2MjU0NGNl LzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr9I7IfT Ieg5RYwoxZH9HmqeTDeqWOoBiU9KiIMR56bNI9YViiHEDJwcshuMHtY7x9nkgQ1E zzfRhbq7I3AVq12AxzceGbYLsyMRymQdODIlLq3t1LyEzY32HoBuhoL8YMB+ifPe Ot6djoZZ+dJ+uSK5WBJ7UJQabkSP/PkuV9/sVbzH0ah1qJsK4lUsrB/rOiQZQbsI WWZFc9PxGLgWCI+Y8mWrlKIamIJJEUHacXY2DCXRGMr/M0DTwmL7fdVfWTf8ih/U PA4+wFwpDYTNwFuzxhHxbilqz1kLyfz2XRkL0fO+otqTcZg1nDmQG0XGncHsNCN5 XJh03K1ZDTL8hg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:59 2026 by rpki-client