This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json) Hash identifier: BRZgjYoc8QQBbyuoG1rFwxtLj2+XJTRDrQZ92yXW0uU= Subject key identifier: 50:43:EB:1D:01:8E:0D:9F:48:73:BB:53:26:AA:58:E5:F8:3F:94:39 Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Certificate serial: 019C43FDF85EEE69B365A80F947F3FF6BBE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:00:43 +0000 Manifest this update: Mon 09 Feb 2026 20:00:43 +0000 Manifest next update: Tue 10 Feb 2026 20:00:43 +0000 Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=) 2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: Z8ZY7EaPLAoP4p/aSPdAKMrxlhRkwAkqhlzoF9Lx3o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:f8:5e:ee:69:b3:65:a8:0f:94:7f:3f:f6:bb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Validity Not Before: Feb 9 20:00:43 2026 GMT Not After : Feb 10 20:00:43 2026 GMT Subject: CN=5043eb1d018e0d9f4873bb5326aa58e5f83f9439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:c0:f9:47:c2:9b:10:ad:bf:01:05:5b:f3: d8:96:ea:fc:44:ec:85:7d:a6:f4:f0:1e:56:70:74: 81:b8:1e:eb:45:ac:cc:e7:73:fc:b0:c5:87:a0:b6: b4:9a:92:1f:d6:c5:06:b3:74:c0:55:62:31:15:e6: c9:a5:64:84:43:34:66:57:f1:58:60:1e:28:7c:6a: 20:4d:d6:f5:5a:85:c9:9b:6e:04:04:a2:bd:1b:ba: a8:5e:1e:07:af:29:b8:32:d4:0c:0d:64:3d:2b:2b: 34:36:4a:0a:e7:f6:32:2a:e4:d5:84:65:8e:a3:bf: 8a:25:1b:b4:8e:07:f2:91:39:d5:07:5e:3d:df:f5: 84:0b:c9:73:0b:37:be:58:ca:ab:f4:29:04:7f:db: 15:4e:4d:a5:aa:4d:75:fc:6d:56:bf:26:06:58:b7: 1e:8d:36:fb:1d:0e:42:0a:d8:b9:76:2e:b2:67:83: de:02:67:3b:a6:15:c4:4c:47:d2:ef:e0:ed:a5:8d: 9f:b3:ef:9c:45:05:32:1d:81:67:dc:e5:02:0a:c1: 1c:36:2f:b0:5e:96:e3:ef:dc:17:fa:d3:ad:4c:06: 3d:21:6c:64:ed:ec:7c:98:7f:d7:bd:86:12:4b:ff: 43:80:88:7d:6b:d2:f2:e4:7c:f7:c3:75:11:ef:a3: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:43:EB:1D:01:8E:0D:9F:48:73:BB:53:26:AA:58:E5:F8:3F:94:39 X509v3 Authority Key Identifier: keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:59:11:02:4a:80:47:76:31:e0:b8:8e:c2:28:f2:5d:a3:01: 82:63:8b:82:8b:0a:18:cc:90:5c:66:4a:7b:46:ab:d6:fb:15: 81:0c:e7:f4:cf:36:df:8b:92:aa:77:72:a7:63:bf:83:87:19: 37:f5:5d:10:11:c1:ab:9d:52:91:a7:34:35:c1:b8:2f:8f:b8: 06:00:28:11:d4:06:7c:8c:35:84:e6:a8:65:10:c3:bd:f1:53: bd:c8:a8:51:3b:fc:fc:82:c4:2b:53:4c:19:41:e9:bf:a5:33: 4d:32:9f:b7:f5:11:c0:12:b3:9e:a6:4d:ec:28:a9:21:49:9b: 23:cf:05:6e:6d:cf:d9:05:ee:cd:66:2d:ea:56:ae:27:c7:95: a4:b6:10:55:32:1a:a1:e5:b0:f2:f5:a4:64:17:82:ce:50:bc: 20:9e:79:e2:dd:79:f6:82:ce:1c:ea:46:70:91:ad:21:db:e7: 01:21:04:ab:2e:64:4c:88:ee:de:ab:79:0c:fc:7a:63:48:cc: ca:b6:41:ef:b7:10:f5:70:b7:46:14:1b:c8:e2:52:15:1e:a6: 13:f0:96:d5:e3:ca:74:dd:10:25:a4:f4:1b:1e:2b:7b:53:6f: f4:7b:5f:99:b1:ac:37:72:f2:9a:30:06:c0:06:ff:a1:90:79: 06:01:12:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/fhe7mmzZagPlH8/9rvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj NWVmY2YwHhcNMjYwMjA5MjAwMDQzWhcNMjYwMjEwMjAwMDQzWjAzMTEwLwYDVQQD Eyg1MDQzZWIxZDAxOGUwZDlmNDg3M2JiNTMyNmFhNThlNWY4M2Y5NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN7A+UfCmxCtvwEFW/PYlur8ROyF fab08B5WcHSBuB7rRazM53P8sMWHoLa0mpIf1sUGs3TAVWIxFebJpWSEQzRmV/FY YB4ofGogTdb1WoXJm24EBKK9G7qoXh4Hrym4MtQMDWQ9Kys0NkoK5/YyKuTVhGWO o7+KJRu0jgfykTnVB1493/WEC8lzCze+WMqr9CkEf9sVTk2lqk11/G1WvyYGWLce jTb7HQ5CCti5di6yZ4PeAmc7phXETEfS7+DtpY2fs++cRQUyHYFn3OUCCsEcNi+w Xpbj79wX+tOtTAY9IWxk7ex8mH/XvYYSS/9DgIh9a9Ly5Hz3w3UR76OUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBD6x0Bjg2fSHO7UyaqWOX4P5Q5MB8GA1UdIwQY MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2 LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllkRAkqA R3Yx4LiOwijyXaMBgmOLgosKGMyQXGZKe0ar1vsVgQzn9M8234uSqndyp2O/g4cZ N/VdEBHBq51Skac0NcG4L4+4BgAoEdQGfIw1hOaoZRDDvfFTvcioUTv8/ILEK1NM GUHpv6UzTTKft/URwBKznqZN7CipIUmbI88Fbm3P2QXuzWYt6lauJ8eVpLYQVTIa oeWw8vWkZBeCzlC8IJ554t159oLOHOpGcJGtIdvnASEEqy5kTIju3qt5DPx6Y0jM yrZB77cQ9XC3RhQbyOJSFR6mE/CW1ePKdN0QJaT0Gx4re1Nv9HtfmbGsN3LymjAG wAb/oZB5BgESHA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:25 2026 by rpki-client