This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json) Hash identifier: jN/u5XuM0xkEDKggffdUpf74l+4P1W7JnotXWO51BGY= Subject key identifier: 95:ED:AF:88:43:AD:55:4F:61:11:4F:2D:41:5C:A6:DD:8F:88:BA:A8 Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Certificate serial: 019C42103AD77EDAB2889BCA351B42CE5114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:01:25 +0000 Manifest this update: Mon 09 Feb 2026 11:01:25 +0000 Manifest next update: Tue 10 Feb 2026 11:01:25 +0000 Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: bRLBzIj4JfJ0yK9g7sPbtJIfHB3Vq31vJo7WcfCqM0Y=) 2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3a:d7:7e:da:b2:88:9b:ca:35:1b:42:ce:51:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Validity Not Before: Feb 9 11:01:25 2026 GMT Not After : Feb 10 11:01:25 2026 GMT Subject: CN=95edaf8843ad554f61114f2d415ca6dd8f88baa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:fb:97:c2:94:86:c5:36:05:09:b5:21:32: 43:14:bb:01:30:4b:24:51:3c:48:2e:d4:a5:e7:e5: f9:e7:87:44:19:d2:a1:ad:d4:37:1f:70:97:60:7d: 7a:07:d6:f5:83:34:21:b2:1d:68:c2:47:20:79:4d: 63:6d:c8:b0:1d:7b:ec:2d:eb:ef:fa:e5:95:15:03: bb:e7:5f:83:eb:a5:76:79:f0:44:9c:80:06:95:87: fd:a0:eb:40:e2:6f:f8:29:52:aa:e6:be:eb:3e:56: 0c:c4:a8:81:c0:09:cf:4d:a3:3f:30:bb:4f:05:2f: 3d:05:25:ee:71:35:79:44:81:7d:28:06:07:40:28: 40:82:6a:52:e1:bd:58:e2:03:87:9f:41:8a:35:9a: 77:35:2f:e7:a2:3d:9d:b2:66:98:bf:66:c9:14:c4: a9:ae:8d:6e:ba:b4:d7:42:41:ab:b3:8b:78:4f:51: b6:2a:64:bd:a8:81:76:2a:eb:4e:42:6c:46:68:9f: 63:ab:e0:9f:6a:8f:74:f5:65:da:e2:98:7e:67:b4: 0b:5c:42:1f:da:db:c4:ec:d0:89:12:a3:43:19:ce: 5d:d0:6b:c0:b3:91:56:4d:8d:23:6e:a0:9a:ef:5c: 5d:e0:86:0f:8b:85:87:d3:e6:ce:38:0e:c5:13:80: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:AF:88:43:AD:55:4F:61:11:4F:2D:41:5C:A6:DD:8F:88:BA:A8 X509v3 Authority Key Identifier: keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:55:59:d1:56:a4:0b:29:a8:16:a2:d3:9c:6e:ac:83:4e:8a: aa:f2:95:99:16:31:ba:b7:c9:24:8a:3f:f1:c4:0b:cc:75:e8: b5:c9:01:b2:66:06:b7:09:8a:36:70:dd:ad:ed:31:df:57:f1: 98:49:52:d3:29:0f:2f:93:7d:d0:a0:30:2e:de:27:0a:c7:5f: 51:df:9f:df:e3:e9:49:30:28:6e:dc:82:00:64:f5:14:8c:69: ea:05:c6:56:e7:fd:ab:09:bf:ca:17:dd:df:0d:ff:15:88:b2: f0:e7:73:bc:80:f5:15:53:ce:da:f0:aa:3c:c5:fb:33:13:bb: ac:76:f3:fb:c9:a1:da:3f:00:de:c0:9b:dd:23:cf:b6:21:20: 65:52:b4:7a:60:44:dd:c4:c5:7f:8d:11:6e:f0:c3:7c:1f:bc: ca:64:6d:54:c0:90:5a:36:fd:37:d0:a3:ad:24:17:65:6e:b2: 73:ca:d4:da:10:46:ae:d3:2f:3d:b0:a9:5d:d1:dc:35:81:9e: 4d:ce:c9:a0:a5:44:fa:39:3e:31:a5:a4:48:3e:56:77:66:4a: c2:48:fd:2f:d8:a8:76:b9:20:24:4e:2e:5d:98:4f:86:e0:33: 72:e3:e6:94:33:49:ec:0a:ba:c2:0f:a1:eb:16:87:18:d1:58: 3e:04:cc:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDrXftqyiJvKNRtCzlEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh NGEwODIwHhcNMjYwMjA5MTEwMTI1WhcNMjYwMjEwMTEwMTI1WjAzMTEwLwYDVQQD Eyg5NWVkYWY4ODQzYWQ1NTRmNjExMTRmMmQ0MTVjYTZkZDhmODhiYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzD7l8KUhsU2BQm1ITJDFLsBMEsk UTxILtSl5+X554dEGdKhrdQ3H3CXYH16B9b1gzQhsh1owkcgeU1jbciwHXvsLevv +uWVFQO751+D66V2efBEnIAGlYf9oOtA4m/4KVKq5r7rPlYMxKiBwAnPTaM/MLtP BS89BSXucTV5RIF9KAYHQChAgmpS4b1Y4gOHn0GKNZp3NS/noj2dsmaYv2bJFMSp ro1uurTXQkGrs4t4T1G2KmS9qIF2KutOQmxGaJ9jq+Cfao909WXa4ph+Z7QLXEIf 2tvE7NCJEqNDGc5d0GvAs5FWTY0jbqCa71xd4IYPi4WH0+bOOA7FE4Bh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXtr4hDrVVPYRFPLUFcpt2PiLqoMB8GA1UdIwQY MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1VZ0Vak CymoFqLTnG6sg06KqvKVmRYxurfJJIo/8cQLzHXotckBsmYGtwmKNnDdre0x31fx mElS0ykPL5N90KAwLt4nCsdfUd+f3+PpSTAobtyCAGT1FIxp6gXGVuf9qwm/yhfd 3w3/FYiy8OdzvID1FVPO2vCqPMX7MxO7rHbz+8mh2j8A3sCb3SPPtiEgZVK0emBE 3cTFf40RbvDDfB+8ymRtVMCQWjb9N9CjrSQXZW6yc8rU2hBGrtMvPbCpXdHcNYGe Tc7JoKVE+jk+MaWkSD5Wd2ZKwkj9L9iodrkgJE4uXZhPhuAzcuPmlDNJ7Aq6wg+h 6xaHGNFYPgTMkg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:27 2026 by rpki-client