This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json) Hash identifier: Gh4Xonp4ecACJqn7+vuAz4myvq8+QLyGoptGWnYOVFE= Subject key identifier: 6E:F3:07:83:59:E7:ED:8E:91:26:F7:1C:E7:8F:31:C5:49:8E:7E:16 Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998 Certificate serial: 019C42B40C7F2D2CFF6D3A0F5589CC98D7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft Manifest number: 14C7 Signing time: Mon 09 Feb 2026 14:00:21 +0000 Manifest this update: Mon 09 Feb 2026 14:00:21 +0000 Manifest next update: Tue 10 Feb 2026 14:00:21 +0000 Files and hashes: 1: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (hash: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o=) 2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: ibRQ/j5FmGT69Tv3AtHtpn6pezorSit/GH7Uck8IGH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0c:7f:2d:2c:ff:6d:3a:0f:55:89:cc:98:d7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998 Validity Not Before: Feb 9 14:00:21 2026 GMT Not After : Feb 10 14:00:21 2026 GMT Subject: CN=6ef3078359e7ed8e9126f71ce78f31c5498e7e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:ef:e7:e4:38:9a:9b:8a:58:0b:7e:72:f0: 72:27:91:57:63:2b:a6:2b:77:d4:ec:11:af:44:38: 6c:8c:d7:e2:52:9e:9c:87:82:26:21:b6:9e:74:fc: 2a:53:0f:da:71:a0:02:c7:85:c9:88:5b:34:20:47: 07:de:8b:66:00:6d:97:5d:99:53:54:50:9e:61:a2: 24:61:77:65:b8:d5:ac:81:d8:24:a5:5c:f3:91:80: 29:c5:3f:de:65:cf:45:f7:46:92:76:ea:ab:b8:fe: e2:5a:fb:60:f2:d4:1b:bb:94:d3:50:69:7c:bd:c2: ab:8d:58:8f:e5:2c:f8:24:61:57:59:67:26:f4:76: c0:52:87:26:df:54:ae:7d:04:8e:67:06:33:63:4c: 0f:ad:54:4c:b7:af:fa:5b:a4:75:04:af:3b:47:41: da:95:42:e0:be:3f:90:c5:f1:e1:ba:e3:7f:b4:16: e8:85:6b:2e:d1:e2:c6:42:6d:23:76:cf:75:56:80: e3:1c:4a:27:e9:55:04:16:aa:fa:cd:0d:bc:ed:68: d1:3f:ac:30:44:b8:52:f7:5f:88:c4:a3:34:ba:fb: 86:9c:73:26:67:52:ef:bb:e1:1b:7e:28:a3:0d:b9: 50:00:7c:73:86:b1:76:f0:a7:10:6a:24:76:48:e8: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F3:07:83:59:E7:ED:8E:91:26:F7:1C:E7:8F:31:C5:49:8E:7E:16 X509v3 Authority Key Identifier: keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:06:43:d3:76:69:79:71:57:65:30:d0:da:8d:84:09:07:8d: e1:9a:07:c0:f5:e6:3d:95:68:db:4f:ca:ef:6b:13:62:27:b0: 7f:ab:6f:9d:7a:00:55:dc:83:4f:6d:3e:96:e2:4d:81:14:9e: d4:41:c4:55:d0:3f:da:12:d6:eb:98:71:09:62:22:64:80:82: 73:18:31:26:dd:93:17:1b:4e:ea:92:06:8e:9c:58:ab:dd:14: d2:c9:5f:1a:9f:e8:ae:07:5b:26:21:b4:8c:14:42:fd:48:f5: ef:9b:ef:9f:0c:75:2b:2e:65:37:e1:23:54:c4:06:7f:01:9f: a0:9b:6f:f1:74:01:89:36:6a:a2:a6:10:d3:a9:9f:05:04:2b: fb:29:3f:ef:89:21:64:2a:2c:41:f3:07:34:d5:7c:e9:63:24: 16:4e:21:27:21:2a:bb:6e:ae:84:4f:ae:cb:fd:1a:f5:0d:18: 85:51:b3:27:26:ff:9a:12:9e:8c:4d:4a:f6:dd:f0:dd:1d:21: f6:39:12:85:84:33:56:2f:44:82:4c:8b:08:03:50:42:cd:c0: 5a:df:7d:05:16:25:5a:d4:27:17:0e:3c:10:b6:8d:c9:3b:a1: 5e:b3:02:34:88:0a:d8:ee:3e:f5:e1:0c:bf:2d:7f:a3:c5:eb: ae:bc:ff:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAx/LSz/bToPVYnMmNffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3 NzU5OTgwHhcNMjYwMjA5MTQwMDIxWhcNMjYwMjEwMTQwMDIxWjAzMTEwLwYDVQQD Eyg2ZWYzMDc4MzU5ZTdlZDhlOTEyNmY3MWNlNzhmMzFjNTQ5OGU3ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkPv5+Q4mpuKWAt+cvByJ5FXYyum K3fU7BGvRDhsjNfiUp6ch4ImIbaedPwqUw/acaACx4XJiFs0IEcH3otmAG2XXZlT VFCeYaIkYXdluNWsgdgkpVzzkYApxT/eZc9F90aSduqruP7iWvtg8tQbu5TTUGl8 vcKrjViP5Sz4JGFXWWcm9HbAUocm31SufQSOZwYzY0wPrVRMt6/6W6R1BK87R0Ha lULgvj+QxfHhuuN/tBbohWsu0eLGQm0jds91VoDjHEon6VUEFqr6zQ287WjRP6ww RLhS91+IxKM0uvuGnHMmZ1Lvu+EbfiijDblQAHxzhrF28KcQaiR2SOiIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7zB4NZ5+2OkSb3HOePMcVJjn4WMB8GA1UdIwQY MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt MTcxZGM1YTk4NDc0LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0 LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwZD03Zp eXFXZTDQ2o2ECQeN4ZoHwPXmPZVo20/K72sTYiewf6tvnXoAVdyDT20+luJNgRSe 1EHEVdA/2hLW65hxCWIiZICCcxgxJt2TFxtO6pIGjpxYq90U0slfGp/orgdbJiG0 jBRC/Uj175vvnwx1Ky5lN+EjVMQGfwGfoJtv8XQBiTZqoqYQ06mfBQQr+yk/74kh ZCosQfMHNNV86WMkFk4hJyEqu26uhE+uy/0a9Q0YhVGzJyb/mhKejE1K9t3w3R0h 9jkShYQzVi9EgkyLCANQQs3AWt99BRYlWtQnFw48ELaNyTuhXrMCNIgK2O4+9eEM vy1/o8Xrrrz/aQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:24 2026 by rpki-client