This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json) Hash identifier: ljIc5K4R7p4isD8ksBOhrXieVfM7KIQ512bxrNyMbVM= Subject key identifier: 6D:18:67:DE:9E:D9:81:B6:6C:C6:BE:8C:F2:77:A8:46:7C:A4:DB:16 Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Certificate serial: 019C43FDCB4D6F632B912CA05C435BF3B3CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 20:00:31 +0000 Manifest this update: Mon 09 Feb 2026 20:00:31 +0000 Manifest next update: Tue 10 Feb 2026 20:00:31 +0000 Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: oiw7Y6IViYpYCZ3m9jBljFrP8s/AsRg6sberEgCIhE4=) 2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:cb:4d:6f:63:2b:91:2c:a0:5c:43:5b:f3:b3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Validity Not Before: Feb 9 20:00:31 2026 GMT Not After : Feb 10 20:00:31 2026 GMT Subject: CN=6d1867de9ed981b66cc6be8cf277a8467ca4db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:e9:17:d6:f3:93:b0:cb:ee:4a:16:ca:31: 0a:59:bd:3e:5a:9a:c4:70:b1:82:a2:73:9a:eb:3a: ef:d5:d4:38:4c:92:4f:31:18:05:8a:75:f8:3e:72: ce:c0:14:42:1a:df:ea:f1:a1:b9:7d:b6:a0:5e:17: c9:ca:2f:bf:4e:87:19:3e:bd:55:5d:fa:5a:1c:5b: 75:4d:f2:0d:f1:d1:ab:c4:e9:a2:a7:81:cf:ca:6c: 9a:74:33:4d:d2:a6:5a:72:df:60:a5:cc:f2:e6:1c: 25:04:41:f8:33:c5:41:09:bd:9b:fb:58:1e:12:ca: 73:fc:ad:53:84:b2:d3:1d:fb:fb:8c:d3:35:85:09: 7c:9a:1a:01:4e:c1:10:59:31:88:11:82:bc:43:2f: b5:5e:c4:07:0f:54:42:0e:31:df:b5:92:0b:0e:7e: d6:ae:9a:4d:a7:ce:b2:6a:03:c4:d3:da:23:a6:7b: 9e:80:fe:1a:49:f1:69:9b:10:7d:81:70:71:77:e9: a2:85:29:88:3c:6d:4b:f5:93:c7:4c:2d:8b:f2:87: 96:3d:5e:2a:be:72:e3:78:fa:b6:b0:a0:80:06:32: 25:45:dc:61:28:e3:d3:c9:90:70:21:8e:50:ff:b9: 7b:d4:7d:45:3f:2a:40:b5:b3:08:8d:55:7e:15:4d: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:67:DE:9E:D9:81:B6:6C:C6:BE:8C:F2:77:A8:46:7C:A4:DB:16 X509v3 Authority Key Identifier: keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:e7:cd:ea:e6:19:ec:4d:29:7b:74:d0:88:05:18:70:5b: 87:12:e1:00:03:ff:20:73:ca:1e:1e:63:88:6c:91:dc:3a:f8: 39:c8:43:ad:e5:b5:e3:c0:7b:ec:a8:1f:8e:ed:2f:79:d4:cd: e4:e9:51:3c:3b:91:62:ff:2a:b0:89:5a:4d:46:f1:4d:3b:8a: e3:8b:5e:04:10:54:b5:24:16:e6:79:25:f1:67:e2:c1:16:d9: 99:66:64:0f:bf:5f:eb:89:d0:3c:b9:ba:67:ab:2d:77:8b:d6: ec:fb:6a:01:22:fb:30:77:15:dc:89:fd:5e:7f:49:15:bc:22: 0a:c4:98:71:9f:2f:a2:ca:05:6d:81:9c:89:ff:57:16:fb:87: 0e:17:58:3f:53:55:93:47:46:44:ce:d1:65:b3:e0:36:71:1b: 27:10:17:23:f8:64:63:4b:eb:0b:92:b6:5a:7d:04:9b:b1:5a: 8a:9e:cf:ca:1d:e5:a1:f8:ff:a5:d2:e0:a5:0b:23:03:9d:cb: 2d:ef:b0:59:65:6b:c1:74:b0:b4:9b:42:cf:88:e6:cb:32:cc: fe:e5:5e:97:42:fb:3d:40:80:d5:62:19:b2:4a:ba:3b:10:96: 94:a2:4b:0a:a9:9a:b7:e8:5a:77:83:36:ea:e7:6e:9b:ca:3f: c2:86:08:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ctNb2MrkSygXENb87PKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll OWQ0YzkwHhcNMjYwMjA5MjAwMDMxWhcNMjYwMjEwMjAwMDMxWjAzMTEwLwYDVQQD Eyg2ZDE4NjdkZTllZDk4MWI2NmNjNmJlOGNmMjc3YTg0NjdjYTRkYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UzpF9bzk7DL7koWyjEKWb0+WprE cLGConOa6zrv1dQ4TJJPMRgFinX4PnLOwBRCGt/q8aG5fbagXhfJyi+/TocZPr1V XfpaHFt1TfIN8dGrxOmip4HPymyadDNN0qZact9gpczy5hwlBEH4M8VBCb2b+1ge Espz/K1ThLLTHfv7jNM1hQl8mhoBTsEQWTGIEYK8Qy+1XsQHD1RCDjHftZILDn7W rppNp86yagPE09ojpnuegP4aSfFpmxB9gXBxd+mihSmIPG1L9ZPHTC2L8oeWPV4q vnLjePq2sKCABjIlRdxhKOPTyZBwIY5Q/7l71H1FPypAtbMIjVV+FU2/jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0YZ96e2YG2bMa+jPJ3qEZ8pNsWMB8GA1UdIwQY MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAC/nzerm GexNKXt00IgFGHBbhxLhAAP/IHPKHh5jiGyR3Dr4OchDreW148B77Kgfju0vedTN 5OlRPDuRYv8qsIlaTUbxTTuK44teBBBUtSQW5nkl8WfiwRbZmWZkD79f64nQPLm6 Z6std4vW7PtqASL7MHcV3In9Xn9JFbwiCsSYcZ8vosoFbYGcif9XFvuHDhdYP1NV k0dGRM7RZbPgNnEbJxAXI/hkY0vrC5K2Wn0Em7Faip7Pyh3lofj/pdLgpQsjA53L Le+wWWVrwXSwtJtCz4jmyzLM/uVel0L7PUCA1WIZskq6OxCWlKJLCqmat+had4M2 6udum8o/woYIkw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:37 2026 by rpki-client