This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json) Hash identifier: Coy/eM/HQq9XGG2mQOrPGbSLsXym0mEk7Jcomiod7f8= Subject key identifier: 2F:E3:8B:95:73:65:9A:88:E7:40:12:1B:A6:F4:83:45:A3:26:A9:12 Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Certificate serial: 019C43C6EAE1295B71A512742E3D28A4439D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft Manifest number: 0EF1 Signing time: Mon 09 Feb 2026 19:00:35 +0000 Manifest this update: Mon 09 Feb 2026 19:00:35 +0000 Manifest next update: Tue 10 Feb 2026 19:00:35 +0000 Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: gHzQKWBvqpeepvoNY1zGnccXVOLJa6y3s+z1me1Y6rw=) 2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:ea:e1:29:5b:71:a5:12:74:2e:3d:28:a4:43:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Validity Not Before: Feb 9 19:00:35 2026 GMT Not After : Feb 10 19:00:35 2026 GMT Subject: CN=2fe38b9573659a88e740121ba6f48345a326a912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:a3:59:9a:c9:af:2b:94:c2:66:0f:50:69: be:30:e5:39:06:a0:18:52:db:bc:92:a7:db:7c:1e: 6c:13:c5:0c:87:c4:ea:eb:36:43:a9:33:2e:c7:f4: f5:1d:7d:a1:55:2a:fe:a1:ef:ae:ab:dd:ee:86:a7: 6c:ec:ed:c8:bc:2c:21:42:33:f6:e3:ee:11:7d:f5: 01:64:5d:5d:7e:68:8c:b3:9a:15:15:0c:c3:b3:12: 6f:fe:da:82:c1:19:e6:0d:05:fb:0b:d4:fc:9a:26: b7:18:3a:d7:36:c9:90:48:c7:f3:73:93:15:0e:65: bd:22:85:b6:e3:f7:04:7f:4e:9f:99:1a:0d:77:c5: b6:32:30:18:4f:2f:e5:20:40:b6:79:e5:df:6b:dd: 00:2d:be:a5:92:cd:44:19:ba:07:53:e4:fc:56:be: 86:09:ff:b2:b6:8c:05:00:05:37:ac:d0:c2:99:66: a0:18:db:c1:0a:af:b6:47:65:ef:8d:0e:14:9e:cc: 3f:d3:cc:72:1c:28:b3:5b:33:ed:34:b7:82:0a:3b: 26:0d:f9:9c:f6:0f:fd:fe:e2:c0:5d:e4:ad:d1:5f: 71:5a:fd:86:71:f5:c9:8a:c8:a7:2e:67:60:db:2a: 10:21:19:e9:d8:3b:b7:1a:81:cd:06:f3:8e:8c:c6: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E3:8B:95:73:65:9A:88:E7:40:12:1B:A6:F4:83:45:A3:26:A9:12 X509v3 Authority Key Identifier: keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e2:35:6b:d0:e4:72:2a:69:e6:98:8e:1c:5d:1f:20:e4:8e: 7c:c3:f7:87:5a:9b:03:af:93:8e:c9:eb:8b:42:8a:53:de:17: 72:88:4b:12:46:ed:b3:b9:fe:b9:ff:9f:68:95:3f:e4:76:16: 1c:dc:bd:92:a4:5c:cd:bc:05:0d:aa:31:2a:89:cf:4f:90:60: 15:08:df:fb:80:d2:b5:c2:38:98:6c:2e:f8:0a:3b:07:e9:5f: 68:8a:17:85:c2:41:2e:1f:c9:11:4f:8a:b8:9a:52:c2:af:48: 6f:10:45:f8:44:0b:c4:df:c2:9d:5e:dc:27:9f:03:48:53:c8: 7b:c3:5f:f6:20:60:c4:61:92:5a:d6:fc:cd:c3:d9:6e:10:3d: 18:7d:9c:0f:9e:20:d4:9a:ff:da:d2:c8:04:17:cf:5f:69:1c: a0:1a:6c:c0:59:d5:09:33:a4:b7:32:c5:a0:4f:41:de:57:ca: f4:85:d4:a5:60:aa:07:6c:1d:45:25:43:52:b2:57:15:aa:18: 23:f5:19:8f:8b:f3:c3:5d:9a:b7:ca:6d:cf:df:fc:77:5e:4f: 07:95:e5:53:6c:31:b5:3d:36:bf:f8:71:e7:29:b8:c6:30:42: 7b:30:16:70:f9:05:d1:85:ef:8e:6a:0c:33:bb:84:7a:03:37: a6:1c:aa:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxurhKVtxpRJ0Lj0opEOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh ZmMyNDYwHhcNMjYwMjA5MTkwMDM1WhcNMjYwMjEwMTkwMDM1WjAzMTEwLwYDVQQD EygyZmUzOGI5NTczNjU5YTg4ZTc0MDEyMWJhNmY0ODM0NWEzMjZhOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y2jWZrJryuUwmYPUGm+MOU5BqAY Utu8kqfbfB5sE8UMh8Tq6zZDqTMux/T1HX2hVSr+oe+uq93uhqds7O3IvCwhQjP2 4+4RffUBZF1dfmiMs5oVFQzDsxJv/tqCwRnmDQX7C9T8mia3GDrXNsmQSMfzc5MV DmW9IoW24/cEf06fmRoNd8W2MjAYTy/lIEC2eeXfa90ALb6lks1EGboHU+T8Vr6G Cf+ytowFAAU3rNDCmWagGNvBCq+2R2XvjQ4Unsw/08xyHCizWzPtNLeCCjsmDfmc 9g/9/uLAXeSt0V9xWv2GcfXJisinLmdg2yoQIRnp2Du3GoHNBvOOjMZWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/ji5VzZZqI50ASG6b0g0WjJqkSMB8GA1UdIwQY MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt NDdlMzA0OTgzMGIwLzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeI1a9Dk cipp5piOHF0fIOSOfMP3h1qbA6+Tjsnri0KKU94XcohLEkbts7n+uf+faJU/5HYW HNy9kqRczbwFDaoxKonPT5BgFQjf+4DStcI4mGwu+Ao7B+lfaIoXhcJBLh/JEU+K uJpSwq9IbxBF+EQLxN/CnV7cJ58DSFPIe8Nf9iBgxGGSWtb8zcPZbhA9GH2cD54g 1Jr/2tLIBBfPX2kcoBpswFnVCTOktzLFoE9B3lfK9IXUpWCqB2wdRSVDUrJXFaoY I/UZj4vzw12at8ptz9/8d15PB5XlU2wxtT02v/hx5ym4xjBCezAWcPkF0YXvjmoM M7uEegM3phyqSA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:39 2026 by rpki-client