This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json) Hash identifier: 6yfnpst3RUKXjHCbXMFeFCwdvkhK7MUGP3NCWN+jfO4= Subject key identifier: 8D:18:FC:CE:EC:81:0D:66:4C:FE:A6:2C:49:59:32:31:F6:51:22:B8 Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083 Certificate serial: 019C420F7E78AA7686273AD47D2AFCAFA884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: W+CIfXuZDQ9zdGkE1HozR8Y2hXMB39XzXdIoXrtwcyo=) 2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7e:78:aa:76:86:27:3a:d4:7d:2a:fc:af:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083 Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=8d18fcceec810d664cfea62c49593231f65122b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:97:16:a3:8a:b8:6e:ae:36:00:86:05:a4: 42:5d:61:82:df:6c:ba:68:10:b0:40:37:b2:89:d3: a5:90:21:e3:f4:ec:8f:0f:ee:f5:6a:d8:ec:55:55: 3b:42:a7:44:ca:4b:1c:2a:c1:be:ed:a8:1c:80:dd: cf:d4:62:ef:45:e3:c6:05:23:9d:92:18:1a:e1:5a: 22:f9:a0:45:69:6a:88:0b:77:17:d4:b5:13:84:eb: 26:08:5d:1b:2b:eb:4f:2c:60:9d:13:02:4e:a3:65: cc:aa:b7:7f:56:ef:a8:59:80:20:7f:8b:44:51:ae: ea:e7:d8:52:59:e8:49:0a:05:9a:f9:b4:fb:c1:02: a2:8d:9b:5d:28:1e:ec:18:89:a3:5f:19:6a:e8:06: 44:97:ed:b1:f5:fc:5d:d4:09:57:01:4a:db:07:30: 79:ba:c6:1f:b4:8d:df:dd:d4:e9:db:ee:7f:5a:a6: 6c:30:2a:b3:89:d1:16:e5:a2:20:01:01:45:b0:3e: f3:72:46:f3:85:29:66:52:90:fd:b2:ac:8e:9b:ca: 41:a3:f6:53:90:97:53:e1:76:95:e7:4e:bc:f4:c0: 7b:e1:79:bf:56:64:25:b2:50:bf:17:57:eb:02:da: 42:ae:7b:b5:d6:74:05:e0:cc:a9:6c:b9:f1:25:4d: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:18:FC:CE:EC:81:0D:66:4C:FE:A6:2C:49:59:32:31:F6:51:22:B8 X509v3 Authority Key Identifier: keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1c:12:6b:4b:f3:af:45:15:93:d8:42:b6:80:7c:4b:81:4b: 6c:83:e0:5b:fa:07:7f:56:eb:5b:92:d1:10:8a:13:15:f4:02: 92:a2:39:21:8f:69:b0:23:36:94:c9:93:5c:7f:8d:3a:21:12: 4e:cd:53:bf:cb:77:c3:5a:fa:54:08:da:00:54:7e:94:16:64: b4:15:f5:39:aa:55:c7:51:7b:9e:20:2b:28:9a:c8:b7:61:05: 2c:7a:ab:0d:3e:06:44:92:e5:3f:89:04:0a:86:77:07:ed:44: 0e:e3:c6:33:30:f9:73:8a:22:3a:8d:e2:8a:bf:28:25:d5:70: a3:e4:cb:47:12:81:50:85:98:de:c0:f1:90:84:63:cd:42:b5: 62:7f:26:34:96:39:a0:23:64:ff:89:d1:ef:02:5d:68:93:32: d3:05:27:fe:bc:8f:ae:5b:bd:f0:17:e1:f6:d2:58:4f:c7:65: 6d:c1:ec:89:5a:e3:7e:c6:5c:23:68:6e:b6:d8:c4:96:01:86: 24:25:55:bb:55:a6:9d:8e:25:d9:14:6c:21:1b:48:5e:6f:fc: b7:4f:8f:35:cc:5d:37:35:8e:f9:29:22:6d:6a:36:13:63:f4: f2:9e:92:ee:38:97:a8:8a:cb:1f:72:a7:34:53:35:67:75:dc: 6e:1d:1c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD354qnaGJzrUfSr8r6iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTI5ZGVjNWMwZjIzYWRkOWJhZWVlYTdiYjM5YWM4N2E3 MjkwODMwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD Eyg4ZDE4ZmNjZWVjODEwZDY2NGNmZWE2MmM0OTU5MzIzMWY2NTEyMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvumXFqOKuG6uNgCGBaRCXWGC32y6 aBCwQDeyidOlkCHj9OyPD+71atjsVVU7QqdEykscKsG+7agcgN3P1GLvRePGBSOd khga4Voi+aBFaWqIC3cX1LUThOsmCF0bK+tPLGCdEwJOo2XMqrd/Vu+oWYAgf4tE Ua7q59hSWehJCgWa+bT7wQKijZtdKB7sGImjXxlq6AZEl+2x9fxd1AlXAUrbBzB5 usYftI3f3dTp2+5/WqZsMCqzidEW5aIgAQFFsD7zckbzhSlmUpD9sqyOm8pBo/ZT kJdT4XaV50689MB74Xm/VmQlslC/F1frAtpCrnu11nQF4MypbLnxJU1ZtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Y/M7sgQ1mTP6mLElZMjH2USK4MB8GA1UdIwQY MBaAFNuSnexcDyOt2bru6nuzmsh6cpCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMt ZDMwYjdlMjVhZTBiLzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMtZDMwYjdlMjVhZTBi LzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxwSa0vz r0UVk9hCtoB8S4FLbIPgW/oHf1brW5LREIoTFfQCkqI5IY9psCM2lMmTXH+NOiES Ts1Tv8t3w1r6VAjaAFR+lBZktBX1OapVx1F7niArKJrIt2EFLHqrDT4GRJLlP4kE CoZ3B+1EDuPGMzD5c4oiOo3iir8oJdVwo+TLRxKBUIWY3sDxkIRjzUK1Yn8mNJY5 oCNk/4nR7wJdaJMy0wUn/ryPrlu98Bfh9tJYT8dlbcHsiVrjfsZcI2huttjElgGG JCVVu1WmnY4l2RRsIRtIXm/8t0+PNcxdNzWO+SkibWo2E2P08p6S7jiXqIrLH3Kn NFM1Z3Xcbh0c7A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:02 2026 by rpki-client