This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json) Hash identifier: QCobDU9W1UNhR9pLJHUJwDgeYITfVNB3+I1+9W6bjc0= Subject key identifier: B8:20:E7:F3:E2:AF:6B:A3:3C:2C:AB:41:B4:78:8C:9F:AE:2E:2B:A5 Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Certificate serial: 019C439019EF1984F542AF0CCB5A9CB44A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft Manifest number: 1415 Signing time: Mon 09 Feb 2026 18:00:43 +0000 Manifest this update: Mon 09 Feb 2026 18:00:43 +0000 Manifest next update: Tue 10 Feb 2026 18:00:43 +0000 Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: vwu8480zP4Pziof7+R6snI2ylG1T/6JrQrLobFVu0kM=) 2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:19:ef:19:84:f5:42:af:0c:cb:5a:9c:b4:4a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Validity Not Before: Feb 9 18:00:43 2026 GMT Not After : Feb 10 18:00:43 2026 GMT Subject: CN=b820e7f3e2af6ba33c2cab41b4788c9fae2e2ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:59:df:b1:97:1a:44:cc:93:fa:ea:6e:70: fc:a3:cd:73:06:b6:6b:48:9e:59:5d:bb:1b:e7:a5: cb:84:1e:f9:9e:66:fc:60:81:36:00:cc:42:61:3e: 65:17:39:35:41:be:36:9b:22:0f:88:60:2d:2f:0b: c8:18:70:58:17:f7:3f:74:e5:3d:18:8b:83:2e:a6: bf:b1:89:ea:05:e4:13:90:06:35:01:e5:6a:1a:01: 29:d0:e7:97:e4:09:27:9d:75:29:ca:bf:65:47:01: 06:91:2d:b3:77:3f:8a:00:5a:01:61:6f:42:8c:94: 3a:fa:9a:52:f5:53:c5:c6:9a:94:79:8e:d9:28:38: 01:45:f6:bc:aa:d4:30:c5:7c:a9:50:ef:d9:c6:2d: 69:ae:de:a0:4d:7b:61:2f:d2:49:01:18:43:b5:e3: 0b:2d:41:c8:32:f5:e0:80:23:1b:fe:a4:67:d5:1c: 3e:b4:b8:cc:9f:c5:f1:9c:3e:32:5e:a5:14:53:fe: 13:56:da:1c:07:25:09:6f:4f:e3:77:b7:8a:00:2f: 84:82:db:28:d2:6f:4a:93:e7:d4:9d:30:f4:78:eb: 72:b4:1d:c5:9f:8c:7f:a2:77:b4:b1:9a:ae:b0:d6: b6:95:49:86:4a:34:f5:a8:dd:58:85:88:de:35:d1: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:E7:F3:E2:AF:6B:A3:3C:2C:AB:41:B4:78:8C:9F:AE:2E:2B:A5 X509v3 Authority Key Identifier: keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a8:fe:ca:30:b9:6c:20:a9:d2:f3:87:cd:36:c8:44:5f:30: 9f:8a:fd:d9:3c:da:1d:bf:e0:43:06:77:a8:3a:1e:01:c1:37: 05:79:25:51:d9:e0:58:e8:45:fb:48:06:87:d5:f4:90:b9:e0: fc:40:b5:88:96:78:8b:10:fe:81:f4:83:ba:75:17:67:00:db: da:24:37:7e:f6:e3:e3:09:34:ab:fc:e7:62:77:31:b1:fa:88: 82:ee:06:d5:bc:85:79:57:34:55:b6:b4:7c:18:6d:cc:b1:61: b4:26:e5:34:8a:76:0d:47:be:0f:87:7f:77:58:79:05:d0:4b: bf:76:19:f9:9a:96:da:09:53:bc:4e:7c:26:20:18:97:0d:78: 3b:2b:0f:cf:b2:25:bb:6b:b6:47:ff:c9:fd:5a:39:91:43:fb: 29:f7:53:54:9d:df:45:26:ce:2e:8c:6c:6f:e3:c3:6f:8d:cf: 2a:a7:78:14:38:33:e1:ac:14:cb:34:49:e3:fd:8f:25:02:66: 7c:38:63:17:30:f7:b2:e8:bf:45:5a:99:95:d0:58:f6:48:1b: 13:ac:44:0b:2b:44:a0:ab:cf:c0:59:fa:2a:1d:eb:95:65:b9: 02:86:77:04:a8:c9:99:dc:c0:67:e4:90:46:51:0d:0b:86:6d: 22:63:c1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBnvGYT1Qq8My1qctEoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNDg1ZmJkYjBiMWEwNGQ1MmU4MWRjZGI5NTg1ODkxNmEx ZGRhZTQwHhcNMjYwMjA5MTgwMDQzWhcNMjYwMjEwMTgwMDQzWjAzMTEwLwYDVQQD EyhiODIwZTdmM2UyYWY2YmEzM2MyY2FiNDFiNDc4OGM5ZmFlMmUyYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFZ37GXGkTMk/rqbnD8o81zBrZr SJ5ZXbsb56XLhB75nmb8YIE2AMxCYT5lFzk1Qb42myIPiGAtLwvIGHBYF/c/dOU9 GIuDLqa/sYnqBeQTkAY1AeVqGgEp0OeX5AknnXUpyr9lRwEGkS2zdz+KAFoBYW9C jJQ6+ppS9VPFxpqUeY7ZKDgBRfa8qtQwxXypUO/Zxi1prt6gTXthL9JJARhDteML LUHIMvXggCMb/qRn1Rw+tLjMn8XxnD4yXqUUU/4TVtocByUJb0/jd7eKAC+Egtso 0m9Kk+fUnTD0eOtytB3Fn4x/one0sZqusNa2lUmGSjT1qN1YhYjeNdHk7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgg5/Pir2ujPCyrQbR4jJ+uLiulMB8GA1UdIwQY MBaAFANIX72wsaBNUugdzblYWJFqHdrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDkt NDQ5MTg0NWRjZDQ3LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDktNDQ5MTg0NWRjZDQ3 LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6j+yjC5 bCCp0vOHzTbIRF8wn4r92TzaHb/gQwZ3qDoeAcE3BXklUdngWOhF+0gGh9X0kLng /EC1iJZ4ixD+gfSDunUXZwDb2iQ3fvbj4wk0q/znYncxsfqIgu4G1byFeVc0Vba0 fBhtzLFhtCblNIp2DUe+D4d/d1h5BdBLv3YZ+ZqW2glTvE58JiAYlw14OysPz7Il u2u2R//J/Vo5kUP7KfdTVJ3fRSbOLoxsb+PDb43PKqd4FDgz4awUyzRJ4/2PJQJm fDhjFzD3sui/RVqZldBY9kgbE6xECytEoKvPwFn6Kh3rlWW5AoZ3BKjJmdzAZ+SQ RlENC4ZtImPBFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:57 2026 by rpki-client