This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json) Hash identifier: dAYP5c5a7LedS9JYvQbfOaF1CySICvk0pnxkhR52UfY= Subject key identifier: FE:40:A7:BD:41:46:3C:93:19:B5:A5:AD:E3:95:2F:8B:04:D1:3D:2F Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d Certificate serial: 019C427D776F6B8BFAC5D5E30FB1BC6F64EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft Manifest number: 10D4 Signing time: Mon 09 Feb 2026 13:00:44 +0000 Manifest this update: Mon 09 Feb 2026 13:00:44 +0000 Manifest next update: Tue 10 Feb 2026 13:00:44 +0000 Files and hashes: 1: Z-M8lVgS2gwgAHLuyet33qHzwgM.roa (hash: fWLoTiwsPxZRXJ5Vm/x03hJnQBlEMfiyIhGQEUF0Fxs=) 2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: yze+zbuMHZI5nQ94xiENmnimENF9LGGb5Y+GubXxF18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:77:6f:6b:8b:fa:c5:d5:e3:0f:b1:bc:6f:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d Validity Not Before: Feb 9 13:00:44 2026 GMT Not After : Feb 10 13:00:44 2026 GMT Subject: CN=fe40a7bd41463c9319b5a5ade3952f8b04d13d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:ef:aa:60:49:da:60:a1:93:19:ea:41:14: 5b:fe:ab:57:d0:5a:dd:f0:a0:37:f4:95:b1:10:a7: 11:5e:8a:cc:0c:17:46:36:4e:e0:fd:dd:4b:fa:33: 88:6d:f9:77:01:98:70:bc:84:dc:02:16:c6:1f:ff: 32:da:15:9c:9a:c4:a3:83:e3:96:46:be:4e:dc:f3: 74:5e:e6:11:34:b5:e7:61:1a:8c:12:55:82:db:ff: 20:f1:48:55:b2:34:74:a4:d2:df:57:b6:11:8f:18: ca:73:ed:62:6e:df:33:a2:8b:67:7a:4e:43:a4:30: 40:fd:31:7e:c8:c8:f9:08:43:d9:d8:a6:a2:ab:84: b3:84:24:9f:ff:10:4e:e6:5d:b6:1a:b5:bc:84:fc: 85:99:78:72:03:a7:0b:91:8b:66:71:2d:6e:cb:52: 67:3b:ed:b1:00:83:2c:82:6d:f4:38:c4:e8:9c:62: 93:47:cb:af:3d:58:52:30:c7:70:79:52:7e:0c:27: cc:bc:16:54:d5:2e:5c:82:a9:f2:2b:9f:5e:4f:32: 6f:10:8c:83:88:25:67:0a:4a:90:6a:9b:83:e0:85: cc:79:69:f0:17:07:34:a1:14:3c:cb:74:92:e0:9f: b9:56:55:42:1d:ce:0a:db:c9:3a:ee:e1:1a:a7:de: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:A7:BD:41:46:3C:93:19:B5:A5:AD:E3:95:2F:8B:04:D1:3D:2F X509v3 Authority Key Identifier: keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:13:18:5a:f4:e6:8f:e5:ad:81:7c:1d:21:8e:05:98:c1:e8: c8:72:b6:61:c3:08:85:79:20:09:25:db:31:2f:92:74:8f:87: a9:27:1d:44:15:a0:d4:0e:9b:2a:41:95:16:1a:34:b7:a7:71: 37:8e:78:29:04:e5:f0:59:33:c1:eb:66:e1:04:b4:45:d8:1f: 96:1e:e7:fb:66:48:98:35:3a:85:75:a6:47:f1:11:94:0d:08: da:44:0d:f9:72:c5:cf:6d:3c:c4:38:94:75:14:7e:bf:6f:ae: e5:7a:ff:d1:b4:17:dc:87:3b:23:c9:26:91:c8:96:d2:e8:d2: c9:06:97:47:d4:45:cd:b8:30:fd:00:a2:15:ae:74:d4:b4:6f: f9:14:26:da:69:7e:35:60:59:8e:8b:74:10:1a:68:d2:04:44: d8:a8:c1:d1:26:03:29:cd:3d:06:06:7c:c2:76:2e:50:94:ff: 36:9e:64:01:a4:5b:f9:06:af:78:47:5e:dd:c2:24:0e:e4:67: 2f:1e:40:9f:fa:d7:18:7d:69:14:3f:49:34:99:45:d2:75:b5: 4e:8e:f8:8d:6b:f0:6e:1a:bb:b9:9b:b1:4f:26:24:84:46:dc: 5e:81:18:92:3b:3e:ce:8e:00:06:8d:ab:e8:09:74:d0:b1:48: 59:e0:60:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXdva4v6xdXjD7G8b2TvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjY2ZhYjhiODkzMDEwYTFiNWUyNTA3MmUxZDQ1NjkwNDQ5 M2Y1MmQwHhcNMjYwMjA5MTMwMDQ0WhcNMjYwMjEwMTMwMDQ0WjAzMTEwLwYDVQQD EyhmZTQwYTdiZDQxNDYzYzkzMTliNWE1YWRlMzk1MmY4YjA0ZDEzZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LTvqmBJ2mChkxnqQRRb/qtX0Frd 8KA39JWxEKcRXorMDBdGNk7g/d1L+jOIbfl3AZhwvITcAhbGH/8y2hWcmsSjg+OW Rr5O3PN0XuYRNLXnYRqMElWC2/8g8UhVsjR0pNLfV7YRjxjKc+1ibt8zootnek5D pDBA/TF+yMj5CEPZ2Kaiq4SzhCSf/xBO5l22GrW8hPyFmXhyA6cLkYtmcS1uy1Jn O+2xAIMsgm30OMTonGKTR8uvPVhSMMdweVJ+DCfMvBZU1S5cgqnyK59eTzJvEIyD iCVnCkqQapuD4IXMeWnwFwc0oRQ8y3SS4J+5VlVCHc4K28k67uEap97gRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5Ap71BRjyTGbWlreOVL4sE0T0vMB8GA1UdIwQY MBaAFKzPq4uJMBChteJQcuHUVpBEk/UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYt NDg4MmU2YjU2OGIyLzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYtNDg4MmU2YjU2OGIy LzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBMYWvTm j+WtgXwdIY4FmMHoyHK2YcMIhXkgCSXbMS+SdI+HqScdRBWg1A6bKkGVFho0t6dx N454KQTl8Fkzwetm4QS0Rdgflh7n+2ZImDU6hXWmR/ERlA0I2kQN+XLFz208xDiU dRR+v2+u5Xr/0bQX3Ic7I8kmkciW0ujSyQaXR9RFzbgw/QCiFa501LRv+RQm2ml+ NWBZjot0EBpo0gRE2KjB0SYDKc09BgZ8wnYuUJT/Np5kAaRb+QaveEde3cIkDuRn Lx5An/rXGH1pFD9JNJlF0nW1To74jWvwbhq7uZuxTyYkhEbcXoEYkjs+zo4ABo2r 6Al00LFIWeBg0A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:36 2026 by rpki-client