This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json) Hash identifier: wQsEzQbIQggvI5LKClNwkB4lly2Ok3G68cPE+hCj/6A= Subject key identifier: 09:BD:28:10:94:62:F4:32:42:24:1F:42:F1:F2:D2:43:B2:BC:80:DE Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019C284FD220C4ECB7F2FF36392B9330F9A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft Manifest number: 1815 Signing time: Wed 04 Feb 2026 11:00:45 +0000 Manifest this update: Wed 04 Feb 2026 11:00:45 +0000 Manifest next update: Thu 05 Feb 2026 11:00:45 +0000 Files and hashes: 1: 1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa (hash: Ha8Q7daEnMbbFyY/dxOcBlU2bNw+1RH5tta+lgnhb9k=) 2: J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa (hash: rk9skdq4jJ58Yezr/EGSdkIl0oNJ4Rc1ouYxvWKZPx4=) 3: Snl5qCrO18GvoZkBCNag-_FCvXQ.roa (hash: boOmLIzLkXM0jR5/AjohjFmN5/TCVfh/j8d7LjiBERk=) 4: WInZSLnnGSQiu1WNXz8M2PoWvVY.roa (hash: fvhBez0/rVC+YOWpQ3YX0TtdpMREsi6UE/qQfQbepu0=) 5: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: J7up9PMGSoC417zYC+7422UZ7K6OolNb1O9b5I9/XHg=) 6: lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa (hash: lV4Xq524SycxtnX+ET+22iLBNWE46Mr/vlQVFjNh0m0=) 7: r8QQa0KeKI1GL64nr5wN_b7RP5c.roa (hash: VPjTppJbG0cInafRi0EuzWNFWUjNr+CGPb1+lvJ/FIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:4f:d2:20:c4:ec:b7:f2:ff:36:39:2b:93:30:f9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Feb 4 11:00:45 2026 GMT Not After : Feb 5 11:00:45 2026 GMT Subject: CN=09bd28109462f43242241f42f1f2d243b2bc80de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:e7:b4:28:95:a9:8b:70:aa:a6:d8:b4:48: 94:af:8a:86:0f:2a:d1:01:f8:da:83:fa:ea:dc:b8: e3:cf:fc:b8:a9:6e:f0:7a:4d:f8:a4:57:b4:29:ef: fe:36:c7:08:d8:20:36:6f:7d:b5:c1:47:a8:f5:ec: 17:cd:3e:eb:c0:c2:d0:f0:29:d9:12:28:01:ef:42: 38:18:ce:ac:1d:3b:51:86:c3:86:b3:b7:c8:e1:f9: 1c:8c:fd:db:40:d9:c6:11:02:8f:da:2e:2a:a9:64: f0:7c:3d:2c:31:e4:91:80:01:b7:b8:f9:f0:f0:ac: 36:71:13:ad:8d:14:d6:d8:35:27:d2:bb:14:61:a7: 2e:53:a9:dc:89:f1:79:28:15:fa:59:cd:21:8a:59: a9:e4:81:95:6f:14:96:4a:17:3a:08:05:f6:fb:a4: 54:3f:46:7f:d9:9e:bf:93:42:a5:78:ee:f1:db:c1: e8:fd:46:d4:d1:03:74:dd:8f:62:98:ce:82:5b:d3: cc:8e:aa:28:44:9b:8e:1f:c1:7a:b0:2c:1d:19:ef: 3c:aa:cd:71:11:37:72:81:4a:07:f1:29:b7:5e:72: eb:04:2b:a3:2c:af:f2:83:4f:11:2c:3e:04:58:66: c8:fb:d1:40:df:f7:e5:cd:44:39:bd:17:9c:20:10: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BD:28:10:94:62:F4:32:42:24:1F:42:F1:F2:D2:43:B2:BC:80:DE X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f1:3e:a1:43:12:97:0d:f2:66:43:74:c1:8d:a8:4b:43:8b: 24:67:03:10:e6:b3:99:05:da:2a:46:d1:12:b3:74:96:e7:82: 2e:77:67:dd:a7:f2:24:a4:38:8a:cf:c7:ad:07:fc:dd:c9:c8: f3:17:1f:34:42:6e:71:d0:dd:6d:7d:6e:16:f2:34:25:27:ac: 46:8d:d8:28:6b:c1:26:3c:c1:16:fb:2a:bb:a7:da:46:a3:48: c3:99:84:2c:fc:17:b0:d5:5b:4a:df:15:7b:ad:42:3d:57:03: 71:98:8e:ba:ff:0a:74:6a:b8:f4:91:77:97:11:4d:0a:bf:7f: 12:3f:45:44:cf:51:c8:61:b1:3a:7d:0b:7b:19:f1:43:c5:4b: 8a:63:ee:2e:06:54:dc:7b:7a:12:2b:ea:0a:9d:8a:ab:f3:c4: 6f:27:7d:0a:02:13:43:15:70:30:a5:c2:85:5f:6e:4a:4e:4a: f7:e4:d9:fe:7b:43:4e:ee:28:ac:c1:e9:3f:d9:99:3f:8c:8b: f3:79:a5:e9:ce:07:9f:73:31:54:96:6c:02:d1:55:fb:9e:b0: e5:e9:8e:12:b4:d9:db:9d:33:1b:e5:67:9f:e5:1d:29:2f:39: dc:10:64:c1:17:13:8e:84:01:c3:80:61:01:e8:99:24:1f:18: 3b:a7:84:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwoT9IgxOy38v82OSuTMPmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMjA0MTEwMDQ1WhcNMjYwMjA1MTEwMDQ1WjAzMTEwLwYDVQQD EygwOWJkMjgxMDk0NjJmNDMyNDIyNDFmNDJmMWYyZDI0M2IyYmM4MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfnntCiVqYtwqqbYtEiUr4qGDyrR Afjag/rq3Ljjz/y4qW7wek34pFe0Ke/+NscI2CA2b321wUeo9ewXzT7rwMLQ8CnZ EigB70I4GM6sHTtRhsOGs7fI4fkcjP3bQNnGEQKP2i4qqWTwfD0sMeSRgAG3uPnw 8Kw2cROtjRTW2DUn0rsUYacuU6ncifF5KBX6Wc0hilmp5IGVbxSWShc6CAX2+6RU P0Z/2Z6/k0KleO7x28Ho/UbU0QN03Y9imM6CW9PMjqooRJuOH8F6sCwdGe88qs1x ETdygUoH8Sm3XnLrBCujLK/yg08RLD4EWGbI+9FA3/flzUQ5vRecIBDAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm9KBCUYvQyQiQfQvHy0kOyvIDeMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvE+oUMS lw3yZkN0wY2oS0OLJGcDEOazmQXaKkbRErN0lueCLndn3afyJKQ4is/HrQf83cnI 8xcfNEJucdDdbX1uFvI0JSesRo3YKGvBJjzBFvsqu6faRqNIw5mELPwXsNVbSt8V e61CPVcDcZiOuv8KdGq49JF3lxFNCr9/Ej9FRM9RyGGxOn0LexnxQ8VLimPuLgZU 3Ht6EivqCp2Kq/PEbyd9CgITQxVwMKXChV9uSk5K9+TZ/ntDTu4orMHpP9mZP4yL 83ml6c4Hn3MxVJZsAtFV+56w5emOErTZ250zG+Vnn+UdKS853BBkwRcTjoQBw4Bh AeiZJB8YO6eEnw== -----END CERTIFICATE-----Generated at Wed Feb 4 15:40:31 2026 by rpki-client