This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json) Hash identifier: gBtdWnZ7u5Z6RrNQZyxQ68N4+RDsWaH4/daxA2X8WU8= Subject key identifier: 4A:CB:13:A3:81:DD:EC:EE:47:52:F0:5C:D7:48:9A:18:35:06:39:D8 Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Certificate serial: 019C3BD6294C4FA4EDA4ADDA09A2AE82D493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft Manifest number: 1810 Signing time: Sun 08 Feb 2026 06:00:16 +0000 Manifest this update: Sun 08 Feb 2026 06:00:16 +0000 Manifest next update: Mon 09 Feb 2026 06:00:16 +0000 Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: qqVwimzLIi/35E4chC05XHkstgNVnE16AOQ1gqlaxDA=) 2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3b:d6:29:4c:4f:a4:ed:a4:ad:da:09:a2:ae:82:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Validity Not Before: Feb 8 06:00:16 2026 GMT Not After : Feb 9 06:00:16 2026 GMT Subject: CN=4acb13a381ddecee4752f05cd7489a18350639d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:c5:79:e8:30:72:5d:91:6f:45:8c:fb:f4: 2d:72:8a:54:d0:ea:1a:3e:06:49:0b:12:31:95:e6: f2:93:e1:25:73:ca:f5:a4:94:e8:62:a4:86:64:4b: c0:fb:21:a9:b0:66:41:38:89:cc:f7:0f:d5:cc:18: 7f:03:80:ef:83:1c:c1:81:80:42:fb:73:69:b6:ca: 1c:1c:db:04:35:4d:6e:c9:5a:9e:f7:3f:61:43:68: 3d:30:22:44:39:de:7c:e0:be:97:79:fe:19:b7:13: f4:d5:36:fe:e3:a5:71:5b:7b:05:33:15:71:9a:0b: 16:13:8f:40:e1:20:fe:02:76:73:59:7e:4c:60:ff: 84:84:d3:10:56:d1:4e:2d:45:34:57:3f:88:cd:60: 43:9f:09:f9:76:be:31:c2:d1:fb:6f:4c:0e:01:4b: 6c:39:a0:f4:67:8f:df:3d:eb:3e:84:20:2b:76:74: 36:92:15:ed:f4:0b:d3:c6:e4:00:35:14:9f:ce:7e: bd:6e:14:7c:0f:43:d4:14:76:de:6d:db:ef:99:bf: 6d:ce:04:78:42:16:f0:50:be:de:19:1d:33:15:c6: 00:91:a2:ed:4b:f8:b2:9c:5b:19:3c:6a:e9:d5:63: 0d:46:0f:38:9a:76:30:44:89:54:b8:e2:a6:7c:04: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:13:A3:81:DD:EC:EE:47:52:F0:5C:D7:48:9A:18:35:06:39:D8 X509v3 Authority Key Identifier: keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9b:8f:b6:80:65:0a:95:14:61:fd:c1:0f:7a:6b:ae:e8:2b: 3d:8e:80:34:4f:6e:3f:7a:8f:b5:85:cb:58:78:f1:4c:7f:a4: c7:b9:1d:79:f4:85:bb:a6:ae:d9:5b:84:22:83:e5:9a:da:74: c8:bb:5e:b4:ce:2c:cb:67:0a:84:29:2e:96:4a:b9:34:63:5b: ce:ad:c5:a3:24:59:3e:0b:39:ee:e5:d5:50:a9:6f:a2:30:14: e3:86:51:56:78:a2:fc:27:53:da:03:da:8f:11:24:2a:81:d3: 86:88:8b:62:80:e8:38:99:c5:9d:67:de:57:fb:93:ec:2b:9e: fd:49:8a:9d:ea:28:7d:61:14:bc:12:0e:96:e6:56:c0:04:4e: 7e:ab:d7:7e:53:e1:8d:51:d1:87:a3:44:13:0d:92:38:b7:4f: ab:ce:ae:86:c2:e1:a3:82:20:78:63:12:22:4c:bf:24:1b:55: 42:f1:d0:b5:a0:0a:28:6b:0d:d7:f3:26:49:38:fd:f9:d0:d6: 27:70:06:b5:1b:89:05:8e:bc:9b:10:29:bf:62:f1:08:49:0e: db:a4:f5:e1:e8:13:e1:22:d6:6e:18:42:7f:31:e2:7d:2b:3d: 63:97:16:9c:0a:dc:5f:5e:b8:b7:00:c1:79:bf:05:b9:36:86: a8:73:b0:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw71ilMT6TtpK3aCaKugtSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz NjQxODUwHhcNMjYwMjA4MDYwMDE2WhcNMjYwMjA5MDYwMDE2WjAzMTEwLwYDVQQD Eyg0YWNiMTNhMzgxZGRlY2VlNDc1MmYwNWNkNzQ4OWExODM1MDYzOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskTFeegwcl2Rb0WM+/QtcopU0Ooa PgZJCxIxlebyk+Elc8r1pJToYqSGZEvA+yGpsGZBOInM9w/VzBh/A4DvgxzBgYBC +3NptsocHNsENU1uyVqe9z9hQ2g9MCJEOd584L6Xef4ZtxP01Tb+46VxW3sFMxVx mgsWE49A4SD+AnZzWX5MYP+EhNMQVtFOLUU0Vz+IzWBDnwn5dr4xwtH7b0wOAUts OaD0Z4/fPes+hCArdnQ2khXt9AvTxuQANRSfzn69bhR8D0PUFHbebdvvmb9tzgR4 QhbwUL7eGR0zFcYAkaLtS/iynFsZPGrp1WMNRg84mnYwRIlUuOKmfASRpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErLE6OB3ezuR1LwXNdImhg1BjnYMB8GA1UdIwQY MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1 LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZuPtoBl CpUUYf3BD3prrugrPY6ANE9uP3qPtYXLWHjxTH+kx7kdefSFu6au2VuEIoPlmtp0 yLtetM4sy2cKhCkulkq5NGNbzq3FoyRZPgs57uXVUKlvojAU44ZRVnii/CdT2gPa jxEkKoHThoiLYoDoOJnFnWfeV/uT7Cue/UmKneoofWEUvBIOluZWwAROfqvXflPh jVHRh6NEEw2SOLdPq86uhsLho4IgeGMSIky/JBtVQvHQtaAKKGsN1/MmSTj9+dDW J3AGtRuJBY68mxApv2LxCEkO26T14egT4SLWbhhCfzHifSs9Y5cWnArcX164twDB eb8FuTaGqHOw9Q== -----END CERTIFICATE-----Generated at Sun Feb 8 13:09:33 2026 by rpki-client