This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json) Hash identifier: gg+X8P01JtsHscaLmayKL1mRuEjmz67sZOBdsEJXeso= Subject key identifier: A2:9B:6B:EB:22:3F:A1:87:A7:6F:49:C5:76:68:AB:1E:3A:5E:DC:02 Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397 Certificate serial: 019C4322AFA90FDD4B272545A3DFBF18F011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft Manifest number: 0F49 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: Dw0w330xCE05CnejRXVv0MhjY0s+6ivN+2oKo0v6uYY=) 2: oMQuRCoxL-6bEDFKF42iZlXxZyM.roa (hash: d0Ky8A74nhXB4jJ/jzKdX0aqd/0D99oCVxcWYNjjXPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:af:a9:0f:dd:4b:27:25:45:a3:df:bf:18:f0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397 Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=a29b6beb223fa187a76f49c57668ab1e3a5edc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:5b:1c:23:f1:dc:2e:ab:9e:f7:5e:7b:d1: 7b:ba:04:c1:37:70:37:51:84:5a:d2:bb:1c:67:b4: f2:91:e1:ab:1e:ab:a3:2d:af:14:6f:7b:7c:bb:09: 69:4f:51:11:a7:f7:43:82:bc:17:ed:9f:8a:20:4f: d1:95:9d:13:09:60:b2:b1:c9:e3:7f:a8:49:c0:4a: f8:f5:43:4f:ee:e6:c6:5e:02:4b:1b:18:15:61:cb: fb:bb:f0:30:41:71:22:93:05:fc:b0:80:3d:9c:ad: b6:ac:50:ed:16:74:91:8f:ae:e4:f4:e3:80:50:49: 87:5e:05:8e:d2:c8:0b:83:dd:86:0b:df:81:f2:e6: 79:f3:37:c6:5d:96:91:21:0b:a1:7e:8c:35:ae:5f: 88:52:c4:e5:ad:48:77:83:35:53:c0:9a:f2:fb:4b: 99:57:f3:0b:3d:a8:af:a7:b7:06:48:b7:97:31:17: 17:6c:66:00:d5:be:8a:52:00:46:f9:7c:e4:fa:bc: 3b:01:20:8f:69:d6:41:0a:70:d1:37:6f:ab:be:dd: 32:cd:3d:b8:67:94:ab:f6:94:f6:b8:dd:67:b4:1c: 31:e0:84:f5:de:44:19:10:64:76:da:12:32:2b:0e: a3:d9:62:85:16:26:df:45:0a:1b:63:3a:7b:89:b8: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9B:6B:EB:22:3F:A1:87:A7:6F:49:C5:76:68:AB:1E:3A:5E:DC:02 X509v3 Authority Key Identifier: keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:16:4b:21:e2:71:4f:25:da:41:9d:48:ab:01:99:32:6a: 5a:1f:83:83:bd:16:6a:3d:a4:e9:58:a8:9e:08:3e:50:5f:ce: e4:e7:e5:4e:6a:e2:1d:16:39:77:73:54:dd:66:02:81:48:00: cf:c7:21:63:38:7d:49:26:e3:e7:a3:7b:2d:af:7b:20:09:2c: 2e:7b:ed:d4:62:23:7e:b9:72:62:7d:95:8e:d3:9f:17:44:ea: 3d:d8:70:33:ee:bf:73:f9:d8:ed:f6:f5:03:ee:ce:e1:35:e0: d4:4f:53:c4:9c:25:b4:b4:85:29:62:96:c6:c5:14:1d:73:45: bc:a8:b3:b2:ed:d7:df:9e:75:6f:af:7f:70:b6:f9:c0:0e:34: 0c:58:67:0d:29:b2:90:15:47:fd:57:cc:bc:d0:3d:19:26:d7: de:86:e6:99:20:a0:d5:c3:28:d5:8e:a7:b5:36:cf:8b:5d:31: e2:ae:07:17:74:07:61:e7:f4:dd:bd:1b:c3:7d:02:10:e4:25: c7:91:93:46:60:ba:cb:3e:27:be:78:56:1b:84:53:37:7b:9a: 6c:35:e4:c5:d9:8d:1b:b8:05:c4:b6:50:25:70:39:5e:1d:96: 71:58:2e:58:98:26:49:ff:90:7a:a3:18:57:68:1b:2c:9a:ee: 01:97:34:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq+pD91LJyVFo9+/GPARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk ZjEzOTcwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD EyhhMjliNmJlYjIyM2ZhMTg3YTc2ZjQ5YzU3NjY4YWIxZTNhNWVkYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoFbHCPx3C6rnvdee9F7ugTBN3A3 UYRa0rscZ7TykeGrHqujLa8Ub3t8uwlpT1ERp/dDgrwX7Z+KIE/RlZ0TCWCyscnj f6hJwEr49UNP7ubGXgJLGxgVYcv7u/AwQXEikwX8sIA9nK22rFDtFnSRj67k9OOA UEmHXgWO0sgLg92GC9+B8uZ58zfGXZaRIQuhfow1rl+IUsTlrUh3gzVTwJry+0uZ V/MLPaivp7cGSLeXMRcXbGYA1b6KUgBG+Xzk+rw7ASCPadZBCnDRN2+rvt0yzT24 Z5Sr9pT2uN1ntBwx4IT13kQZEGR22hIyKw6j2WKFFibfRQobYzp7ibhi/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKba+siP6GHp29JxXZoqx46XtwCMB8GA1UdIwQY MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqREWSyHi cU8l2kGdSKsBmTJqWh+Dg70Waj2k6Viongg+UF/O5OflTmriHRY5d3NU3WYCgUgA z8chYzh9SSbj56N7La97IAksLnvt1GIjfrlyYn2VjtOfF0TqPdhwM+6/c/nY7fb1 A+7O4TXg1E9TxJwltLSFKWKWxsUUHXNFvKizsu3X3551b69/cLb5wA40DFhnDSmy kBVH/VfMvNA9GSbX3obmmSCg1cMo1Y6ntTbPi10x4q4HF3QHYef03b0bw30CEOQl x5GTRmC6yz4nvnhWG4RTN3uabDXkxdmNG7gFxLZQJXA5Xh2WcVguWJgmSf+QeqMY V2gbLJruAZc0+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:46 2026 by rpki-client