This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json) Hash identifier: e/6h2GuadfR02UiUPO3U/74Tqp4GMV6GCrbSJs5QAw4= Subject key identifier: 93:25:CB:31:B3:49:61:15:B6:D1:3B:A4:69:D6:E3:07:E7:F6:25:EF Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863 Certificate serial: 019C4321DCB6C100950E838A79896060E16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft Manifest number: 0BD8 Signing time: Mon 09 Feb 2026 16:00:18 +0000 Manifest this update: Mon 09 Feb 2026 16:00:18 +0000 Manifest next update: Tue 10 Feb 2026 16:00:18 +0000 Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: X3AAweHgtIoFpOZT2FBKp7rHkLs1kbpV8uOS80/hDWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:dc:b6:c1:00:95:0e:83:8a:79:89:60:60:e1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983ea291971990dc486f93812783fadd87ade863 Validity Not Before: Feb 9 16:00:18 2026 GMT Not After : Feb 10 16:00:18 2026 GMT Subject: CN=9325cb31b3496115b6d13ba469d6e307e7f625ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:9d:45:7b:29:85:8c:92:68:96:c5:4c:a8: 31:08:a3:12:86:ab:22:73:23:ba:98:2f:5d:5b:1c: 5b:b7:69:57:aa:50:bb:a5:a8:89:44:5d:0a:89:55: 62:fe:8b:5e:6d:16:14:a7:0d:9b:58:e6:67:db:d0: 36:b3:d8:a8:b2:ab:76:95:d4:7d:cd:e2:74:96:c7: a1:e6:22:52:1a:74:cc:56:4e:ee:3c:5e:58:0b:04: fc:a1:fe:5e:f4:73:f4:8d:d0:5f:31:eb:92:a3:18: 30:55:75:de:22:1c:d9:e1:3e:99:a2:5c:59:55:32: 62:95:b2:69:ba:52:72:fe:bb:e8:ff:e2:09:0d:f3: 85:64:23:43:6e:2a:e8:70:c0:be:28:22:33:d7:e4: 4b:35:e1:c8:74:e6:7d:be:cc:fd:29:5f:54:0f:73: f9:ad:2c:96:81:ec:e5:f2:3d:ea:f1:cc:ab:32:ee: ad:ce:a8:c2:3c:ad:88:89:62:2d:5e:fa:ba:22:70: e3:da:fb:9a:6a:eb:ff:fb:75:c9:3b:88:b7:ae:df: 84:73:38:62:7f:5b:7f:ec:8d:85:da:0e:22:a5:6e: 4f:2e:e3:eb:64:7d:45:ec:92:74:38:32:e3:34:4c: 7a:5b:a3:a4:f2:4f:c8:d1:36:19:e7:71:a9:07:ec: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:25:CB:31:B3:49:61:15:B6:D1:3B:A4:69:D6:E3:07:E7:F6:25:EF X509v3 Authority Key Identifier: keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:b9:44:ee:0e:34:a4:7b:2a:43:9c:28:72:c7:3f:48:46: 4f:f1:77:51:b6:a0:7d:8e:88:b1:44:04:40:07:06:12:4c:4e: 4e:0d:9c:a0:94:18:d5:18:83:fb:e1:e9:30:04:c7:c7:be:54: 18:48:8c:86:da:ba:43:3b:a7:2f:60:61:b5:69:66:96:05:41: 09:9c:2a:4c:6a:41:aa:72:e5:85:50:70:bc:d2:d7:7d:33:42: b3:a0:ad:7f:27:ac:39:01:52:27:e0:4e:84:54:42:1d:88:d7: 78:4b:d0:13:0f:1d:2f:95:b3:1f:74:05:26:66:18:47:39:4a: c5:45:a4:33:03:fa:24:92:82:67:2c:0b:aa:69:4d:b1:a6:66: 6c:16:87:98:63:cf:39:93:b8:2d:b2:a4:4e:21:f3:cd:4a:e4: 14:4d:25:e5:06:96:be:14:d2:c0:a7:53:95:57:b6:95:56:43: 46:04:b9:68:c2:b7:2d:45:19:56:c8:8f:6a:61:2d:09:a3:4f: 84:f0:cc:46:00:c8:9f:a4:66:60:d2:60:1c:e6:d7:26:28:9b: 9b:66:96:00:08:da:86:fd:ba:79:4e:c6:79:0f:a1:2e:54:dd: c2:1e:b4:c5:de:6a:53:5c:42:5d:e5:2c:c8:0b:3d:51:e8:cb: 83:11:12:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdy2wQCVDoOKeYlgYOFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2VhMjkxOTcxOTkwZGM0ODZmOTM4MTI3ODNmYWRkODdh ZGU4NjMwHhcNMjYwMjA5MTYwMDE4WhcNMjYwMjEwMTYwMDE4WjAzMTEwLwYDVQQD Eyg5MzI1Y2IzMWIzNDk2MTE1YjZkMTNiYTQ2OWQ2ZTMwN2U3ZjYyNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOmdRXsphYySaJbFTKgxCKMShqsi cyO6mC9dWxxbt2lXqlC7paiJRF0KiVVi/otebRYUpw2bWOZn29A2s9iosqt2ldR9 zeJ0lseh5iJSGnTMVk7uPF5YCwT8of5e9HP0jdBfMeuSoxgwVXXeIhzZ4T6ZolxZ VTJilbJpulJy/rvo/+IJDfOFZCNDbirocMC+KCIz1+RLNeHIdOZ9vsz9KV9UD3P5 rSyWgezl8j3q8cyrMu6tzqjCPK2IiWItXvq6InDj2vuaauv/+3XJO4i3rt+Eczhi f1t/7I2F2g4ipW5PLuPrZH1F7JJ0ODLjNEx6W6Ok8k/I0TYZ53GpB+z+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMlyzGzSWEVttE7pGnW4wfn9iXvMB8GA1UdIwQY MBaAFJg+opGXGZDcSG+TgSeD+t2HrehjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQt YzZlOWUwZmQ3MDgwLzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQtYzZlOWUwZmQ3MDgw LzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb65RO4O NKR7KkOcKHLHP0hGT/F3UbagfY6IsUQEQAcGEkxOTg2coJQY1RiD++HpMATHx75U GEiMhtq6QzunL2BhtWlmlgVBCZwqTGpBqnLlhVBwvNLXfTNCs6CtfyesOQFSJ+BO hFRCHYjXeEvQEw8dL5WzH3QFJmYYRzlKxUWkMwP6JJKCZywLqmlNsaZmbBaHmGPP OZO4LbKkTiHzzUrkFE0l5QaWvhTSwKdTlVe2lVZDRgS5aMK3LUUZVsiPamEtCaNP hPDMRgDIn6RmYNJgHObXJiibm2aWAAjahv26eU7GeQ+hLlTdwh60xd5qU1xCXeUs yAs9UejLgxESnw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:24 2026 by rpki-client