This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json) Hash identifier: FeAMSEAHXkIQ4f/KJKRTNSW/iy2v7Ygv3HIdb6hN2ik= Subject key identifier: B9:72:3B:48:53:00:12:6B:EC:7B:53:75:81:07:8A:BC:3F:BE:92:A5 Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Certificate serial: 019C420FF7B42EFF9A316448C2DA21738625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft Manifest number: 041E Signing time: Mon 09 Feb 2026 11:01:08 +0000 Manifest this update: Mon 09 Feb 2026 11:01:08 +0000 Manifest next update: Tue 10 Feb 2026 11:01:08 +0000 Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=) 2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: Nr8Qpkd8cxR5JRRwI7GZGSnhxw7xUvEhpoT8Tqbc03E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f7:b4:2e:ff:9a:31:64:48:c2:da:21:73:86:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Validity Not Before: Feb 9 11:01:08 2026 GMT Not After : Feb 10 11:01:08 2026 GMT Subject: CN=b9723b485300126bec7b537581078abc3fbe92a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:e4:d4:05:1d:34:9c:88:dc:e4:31:e5:97: 4a:5f:1c:fa:ed:24:3e:55:89:8b:66:91:2a:43:d3: d1:14:fb:39:e4:cf:f0:98:cd:6f:ca:15:a4:69:92: d8:81:d0:2d:32:b1:05:69:b4:2f:da:5c:f2:4d:63: 1c:81:a5:4b:12:c6:45:79:7c:4b:4e:62:e2:fb:5d: 3d:ee:50:f9:db:05:5e:79:01:c6:4f:25:89:df:98: 1d:a2:3b:8d:07:e7:3f:ea:d1:97:bd:e8:11:10:61: 1b:0e:27:33:c6:36:b3:68:54:3f:22:3c:95:85:81: 0f:d1:31:7a:c0:16:21:c4:b0:5e:73:14:61:48:c2: e1:c8:e0:06:db:b1:10:8c:ce:ff:2b:62:6a:a0:72: 40:ae:b6:18:e9:05:36:71:00:ad:83:bb:ba:c6:05: db:67:d2:de:f0:fc:b3:97:21:86:31:96:84:c2:80: 4c:ac:75:5a:e8:f4:a7:28:8d:b0:de:26:26:b6:66: 14:60:cf:26:09:4a:a4:9f:41:48:7e:e8:b9:b5:98: 44:88:18:1f:bf:a8:88:db:59:47:b9:ae:4f:e8:98: d9:71:f5:12:d4:9f:71:0b:41:bb:f2:9c:68:a0:1e: 3e:53:9f:a2:b8:c0:10:b8:34:d4:82:16:19:98:9e: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:72:3B:48:53:00:12:6B:EC:7B:53:75:81:07:8A:BC:3F:BE:92:A5 X509v3 Authority Key Identifier: keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bf:d6:50:c9:bf:8a:8c:87:69:0c:3e:95:5b:66:f5:ac:19: 5f:ad:0e:89:ed:96:4d:a5:e5:79:6c:9c:da:62:2f:54:58:ea: f6:c7:59:f1:5a:c3:c6:2a:9b:db:a3:20:da:c6:1b:d5:32:22: fe:75:16:84:3d:02:5a:de:19:cd:66:a5:83:f2:cf:fa:15:cf: da:34:ed:c8:bc:27:5e:87:5d:ec:da:01:ac:5d:cb:cd:13:ab: 1f:43:72:ca:00:7d:c0:cc:c3:a1:38:e0:c4:d2:ad:c0:67:bc: 1c:bc:94:9e:7a:a2:a7:d5:fd:2d:40:38:d3:1b:8d:d3:e2:b0: 3d:09:ee:79:da:f2:3c:cf:a8:b1:8a:30:2e:a3:21:53:a7:a5: b1:0b:3d:42:93:35:33:2c:3c:f5:a7:9d:79:b4:15:a6:24:6e: d4:41:4b:36:e1:ac:dd:58:74:18:a3:cd:49:dc:4b:c8:c1:aa: 5e:e3:1d:09:01:d8:a4:ef:52:ab:ec:07:cc:92:16:08:42:bd: b0:69:38:1c:2d:4c:c6:a5:a9:11:8d:9d:72:e4:ce:f8:fb:bc: 87:cd:46:5a:26:34:91:9b:c3:6e:e8:88:81:30:b8:22:38:51: 1f:34:94:dc:66:15:c4:0d:e0:1c:e2:f2:2f:fb:5c:8f:50:65: a9:4f:2d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/e0Lv+aMWRIwtohc4YlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx YWJmZGEwHhcNMjYwMjA5MTEwMTA4WhcNMjYwMjEwMTEwMTA4WjAzMTEwLwYDVQQD EyhiOTcyM2I0ODUzMDAxMjZiZWM3YjUzNzU4MTA3OGFiYzNmYmU5MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I7k1AUdNJyI3OQx5ZdKXxz67SQ+ VYmLZpEqQ9PRFPs55M/wmM1vyhWkaZLYgdAtMrEFabQv2lzyTWMcgaVLEsZFeXxL TmLi+1097lD52wVeeQHGTyWJ35gdojuNB+c/6tGXvegREGEbDiczxjazaFQ/IjyV hYEP0TF6wBYhxLBecxRhSMLhyOAG27EQjM7/K2JqoHJArrYY6QU2cQCtg7u6xgXb Z9Le8PyzlyGGMZaEwoBMrHVa6PSnKI2w3iYmtmYUYM8mCUqkn0FIfui5tZhEiBgf v6iI21lHua5P6JjZcfUS1J9xC0G78pxooB4+U5+iuMAQuDTUghYZmJ6OTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlyO0hTABJr7HtTdYEHirw/vpKlMB8GA1UdIwQY MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7/WUMm/ ioyHaQw+lVtm9awZX60Oie2WTaXleWyc2mIvVFjq9sdZ8VrDxiqb26Mg2sYb1TIi /nUWhD0CWt4ZzWalg/LP+hXP2jTtyLwnXodd7NoBrF3LzROrH0NyygB9wMzDoTjg xNKtwGe8HLyUnnqip9X9LUA40xuN0+KwPQnuedryPM+osYowLqMhU6elsQs9QpM1 Myw89aedebQVpiRu1EFLNuGs3Vh0GKPNSdxLyMGqXuMdCQHYpO9Sq+wHzJIWCEK9 sGk4HC1MxqWpEY2dcuTO+Pu8h81GWiY0kZvDbuiIgTC4IjhRHzSU3GYVxA3gHOLy L/tcj1BlqU8tTA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:06 2026 by rpki-client