This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json) Hash identifier: 5eTDPpepVqBDwzAqJ559Bj2sMIfmy+o7Ff+0LHicjOY= Subject key identifier: 42:78:8E:DC:CA:7B:41:F5:41:8C:75:6A:B9:16:8A:3A:F0:70:8C:FA Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Certificate serial: 019C4322EEC9B38352448B2D5402EBD561AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:01:28 +0000 Manifest this update: Mon 09 Feb 2026 16:01:28 +0000 Manifest next update: Tue 10 Feb 2026 16:01:28 +0000 Files and hashes: 1: ddjD16rm4JILTdAjj-sSBzq-X1k.roa (hash: L1W0Os3qTK0wbx8L6WCdIflXsRPDUvdKdtqZMMyv5RY=) 2: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: X6apeUVdVFdOtlQerr7cYTyJuAv60AM2H9lJeAmaUDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ee:c9:b3:83:52:44:8b:2d:54:02:eb:d5:61:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Validity Not Before: Feb 9 16:01:28 2026 GMT Not After : Feb 10 16:01:28 2026 GMT Subject: CN=42788edcca7b41f5418c756ab9168a3af0708cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:87:dd:26:ce:a7:91:8a:06:85:6c:2e:c3: 5e:35:8a:60:ab:62:69:e4:1e:fa:0f:93:f4:e2:29: 0b:a4:62:09:54:74:d2:95:40:e1:51:78:61:cf:51: 52:ea:36:53:7c:7b:47:d1:57:25:4e:d2:e4:b4:10: 0d:ab:be:f3:1d:3c:33:29:90:ca:f7:6e:36:21:5d: ec:8f:88:3c:1d:7e:a7:eb:67:5d:7f:3e:24:14:6d: 29:a5:4c:f5:98:ce:82:bf:92:19:cd:0d:7e:4e:8c: f4:d0:9c:72:19:36:d4:0e:5b:ec:0a:07:57:ee:17: e4:59:47:93:6a:1b:48:91:50:32:be:ee:f8:b7:91: 5d:b0:ac:9d:b7:25:44:1f:92:2f:2c:b0:0a:87:51: e4:9d:a0:e7:5c:d2:8b:f0:d6:48:e2:e9:f3:4b:95: dd:05:1d:76:31:c2:16:cc:b9:86:2c:68:ff:70:05: fc:ca:13:bf:5a:f9:38:5f:88:27:52:24:eb:73:8e: d2:8e:86:be:a9:34:d4:62:83:03:42:d0:3f:3b:27: b8:0c:fb:2a:7b:cb:4c:8d:2a:ae:ce:ed:3a:c7:6b: 07:6f:a9:24:cd:6d:77:2a:c7:3c:03:ec:a6:b3:18: 51:13:ce:68:1d:b5:76:90:38:9d:d6:dd:1c:b7:16: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:8E:DC:CA:7B:41:F5:41:8C:75:6A:B9:16:8A:3A:F0:70:8C:FA X509v3 Authority Key Identifier: keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d4:15:fb:d2:fe:03:3c:f2:72:95:ae:2a:8d:ff:4c:6c:7b: 00:28:bc:ee:9d:69:aa:30:59:f6:eb:5a:74:b0:3b:56:43:9d: 77:ea:f3:e0:16:9a:d8:65:e1:32:eb:38:50:60:39:c4:de:90: 9e:6a:26:5f:c0:81:ca:5b:a7:af:ee:ab:de:07:a6:6d:85:40: 14:ec:f8:c9:8f:4d:cc:33:53:af:3c:b1:2d:b2:83:b9:e7:28: f0:c5:00:ad:76:47:6b:55:3f:03:ed:2e:63:19:e0:81:e8:6b: 7d:0d:5d:29:b1:68:c5:b2:51:55:06:71:95:e2:66:e6:12:e1: dc:2d:24:0a:a2:38:05:bf:78:45:53:47:86:eb:63:f2:6f:3a: ec:3f:01:38:75:2e:0b:15:e7:df:f4:ce:6f:25:83:36:9c:d5: 51:54:19:18:59:69:ce:df:05:2d:ed:a7:cf:81:25:d6:85:b9: 65:15:7a:f5:d7:f9:29:df:96:14:92:71:6d:bf:6e:af:43:57: 05:ba:fd:db:0f:d3:e0:6c:cf:78:92:bc:b5:03:49:ff:76:9e: 03:e0:8a:74:92:48:a3:65:df:fc:7d:3a:8b:b4:d3:17:b5:32: e6:ec:ca:0a:58:1d:e8:12:b1:af:42:18:ed:80:15:5c:92:77: ce:56:97:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIu7Js4NSRIstVALr1WGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0 MTdhY2QwHhcNMjYwMjA5MTYwMTI4WhcNMjYwMjEwMTYwMTI4WjAzMTEwLwYDVQQD Eyg0Mjc4OGVkY2NhN2I0MWY1NDE4Yzc1NmFiOTE2OGEzYWYwNzA4Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmluH3SbOp5GKBoVsLsNeNYpgq2Jp 5B76D5P04ikLpGIJVHTSlUDhUXhhz1FS6jZTfHtH0VclTtLktBANq77zHTwzKZDK 9242IV3sj4g8HX6n62ddfz4kFG0ppUz1mM6Cv5IZzQ1+Toz00JxyGTbUDlvsCgdX 7hfkWUeTahtIkVAyvu74t5FdsKydtyVEH5IvLLAKh1HknaDnXNKL8NZI4unzS5Xd BR12McIWzLmGLGj/cAX8yhO/Wvk4X4gnUiTrc47Sjoa+qTTUYoMDQtA/Oye4DPsq e8tMjSquzu06x2sHb6kkzW13Ksc8A+ymsxhRE85oHbV2kDid1t0ctxa9EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ4jtzKe0H1QYx1arkWijrwcIz6MB8GA1UdIwQY MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt NDRlMjE5YTllOTZlLzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtQV+9L+ AzzycpWuKo3/TGx7ACi87p1pqjBZ9utadLA7VkOdd+rz4Baa2GXhMus4UGA5xN6Q nmomX8CBylunr+6r3gembYVAFOz4yY9NzDNTrzyxLbKDueco8MUArXZHa1U/A+0u YxnggehrfQ1dKbFoxbJRVQZxleJm5hLh3C0kCqI4Bb94RVNHhutj8m867D8BOHUu CxXn3/TObyWDNpzVUVQZGFlpzt8FLe2nz4El1oW5ZRV69df5Kd+WFJJxbb9ur0NX Bbr92w/T4GzPeJK8tQNJ/3aeA+CKdJJIo2Xf/H06i7TTF7Uy5uzKClgd6BKxr0IY 7YAVXJJ3zlaX7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:27 2026 by rpki-client