This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json) Hash identifier: Vs53dQbzIE0K9PT52Riv11riSACd9dDdvRdzt7KQJA8= Subject key identifier: 89:A5:2D:6B:B1:0C:63:25:5E:18:2A:DD:1E:BF:CB:A0:F9:27:F6:1B Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a Certificate serial: 019C43904A496757C01792B8CC75655F8ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft Manifest number: 11D6 Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: +kEejmBkqNaBK0ffX1udRx6+eBjeN6QUYWgC6+vtJU0=) 2: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (hash: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4a:49:67:57:c0:17:92:b8:cc:75:65:5f:8a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=89a52d6bb10c63255e182add1ebfcba0f927f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:6a:15:11:0e:f2:c1:ee:8c:7d:0d:26:7a: 25:61:18:b0:70:27:3e:aa:48:ce:2e:c0:ac:77:d7: d7:23:57:f1:7b:5a:d4:d3:06:e4:f8:17:41:c2:7c: c0:08:52:7c:c4:35:25:80:4f:e6:90:89:1c:33:b0: 44:59:92:67:d0:4c:fa:91:d6:75:a7:b7:65:5b:a9: 3c:92:4a:84:59:fd:0a:96:aa:26:1a:d6:d2:d3:64: 71:f1:c6:8c:a0:ed:ac:39:7a:80:db:ab:df:03:2e: cd:43:68:42:ff:37:c1:d0:16:d6:b0:85:15:53:b5: a9:3f:19:e5:8a:00:45:4b:a5:da:ce:05:17:18:58: f4:ec:17:b2:84:29:4b:ca:1e:3c:0d:e4:18:0b:24: a2:a4:26:c6:09:c2:1d:3e:f7:71:50:a9:e2:db:c9: 4e:46:b2:0f:af:d0:da:c9:80:f1:05:7e:5f:8e:a6: 76:9e:da:59:7f:77:85:3c:6e:21:6e:40:23:5b:8f: f2:0c:6e:6a:33:ec:76:fa:f3:67:90:d3:af:4b:4d: 42:9d:9a:c2:2d:10:d6:fd:e3:21:09:f1:a9:cd:dc: 4e:19:5f:a1:f4:a1:90:45:2a:8b:ea:50:68:e6:b4: 4c:6b:4f:6b:81:87:23:f1:cf:39:80:99:a8:4d:e8: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:2D:6B:B1:0C:63:25:5E:18:2A:DD:1E:BF:CB:A0:F9:27:F6:1B X509v3 Authority Key Identifier: keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e9:a5:34:c5:bb:a1:bb:48:77:56:1d:1b:d5:7d:62:87:46: dc:3c:65:26:f9:f0:32:7b:45:0f:04:9f:6b:4e:90:a2:6a:c5: 8c:9c:dd:75:e6:d5:6b:a5:16:00:ce:94:11:da:4f:2e:64:34: 5e:9a:c2:de:f4:cc:96:06:48:89:c8:bd:75:02:b9:ee:90:b5: 92:95:8f:f7:c4:df:e3:e8:3d:cb:f1:21:3e:ed:5b:bf:79:ab: aa:cf:8e:24:fe:e4:f2:4f:f0:e3:3e:e4:cb:2d:96:62:41:c4: 25:19:35:36:fc:29:79:37:8d:93:1d:89:ac:23:1f:1e:20:4c: 92:a2:b9:bf:83:7f:f3:70:85:27:0e:31:84:d7:f3:31:ee:e3: af:22:df:d1:3e:a4:68:5a:33:b7:bb:fb:c6:e8:08:9b:96:de: 73:9c:8f:2e:90:09:d6:a1:e7:f9:27:ef:4d:6c:f3:6d:1e:dd: bd:f3:62:c5:17:09:06:4d:5e:e7:28:a9:17:1d:eb:0d:8d:f2: 57:d4:cd:43:53:e7:be:d7:b1:b5:9a:1f:63:97:be:1c:e3:8f: 23:7c:dc:c9:81:30:f1:1d:38:b5:0f:75:3b:22:f1:d8:b3:e5: ff:87:aa:63:f5:95:ff:42:1e:b8:5e:b2:d2:66:d2:dd:75:b7: 54:53:4f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEpJZ1fAF5K4zHVlX4q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDM1ZTBkYTQzOWJlYTY1YzQ4MzI5Y2U5ZThiMTA5M2Y3 MjMwMGEwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD Eyg4OWE1MmQ2YmIxMGM2MzI1NWUxODJhZGQxZWJmY2JhMGY5MjdmNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtExqFREO8sHujH0NJnolYRiwcCc+ qkjOLsCsd9fXI1fxe1rU0wbk+BdBwnzACFJ8xDUlgE/mkIkcM7BEWZJn0Ez6kdZ1 p7dlW6k8kkqEWf0KlqomGtbS02Rx8caMoO2sOXqA26vfAy7NQ2hC/zfB0BbWsIUV U7WpPxnligBFS6XazgUXGFj07BeyhClLyh48DeQYCySipCbGCcIdPvdxUKni28lO RrIPr9DayYDxBX5fjqZ2ntpZf3eFPG4hbkAjW4/yDG5qM+x2+vNnkNOvS01CnZrC LRDW/eMhCfGpzdxOGV+h9KGQRSqL6lBo5rRMa09rgYcj8c85gJmoTegULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImlLWuxDGMlXhgq3R6/y6D5J/YbMB8GA1UdIwQY MBaAFKzTXg2kOb6mXEgynOnosQk/cjAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYt NjViYjFhODlmMjU5LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYtNjViYjFhODlmMjU5 LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+mlNMW7 obtId1YdG9V9YodG3DxlJvnwMntFDwSfa06QomrFjJzddebVa6UWAM6UEdpPLmQ0 XprC3vTMlgZIici9dQK57pC1kpWP98Tf4+g9y/EhPu1bv3mrqs+OJP7k8k/w4z7k yy2WYkHEJRk1NvwpeTeNkx2JrCMfHiBMkqK5v4N/83CFJw4xhNfzMe7jryLf0T6k aFozt7v7xugIm5bec5yPLpAJ1qHn+SfvTWzzbR7dvfNixRcJBk1e5yipFx3rDY3y V9TNQ1PnvtextZofY5e+HOOPI3zcyYEw8R04tQ91OyLx2LPl/4eqY/WV/0IeuF6y 0mbS3XW3VFNP6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:34 2026 by rpki-client