This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json) Hash identifier: soQdb9ab2rf1dq60MUqBy/R6u6D8LZgmhkrf+OFi4IE= Subject key identifier: 22:D2:F8:05:09:9E:9A:83:8A:83:17:9B:DE:F9:45:5B:06:28:2F:BA Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Certificate serial: 019C420FF5E9490AFDBF054A917E8B02A161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft Manifest number: 09AB Signing time: Mon 09 Feb 2026 11:01:08 +0000 Manifest this update: Mon 09 Feb 2026 11:01:08 +0000 Manifest next update: Tue 10 Feb 2026 11:01:08 +0000 Files and hashes: 1: Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa (hash: 1wPebkRNXxJb4zmu3Rzh3U8d+lR0H05oikgxI60SflE=) 2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: xE3MKC7EaxI2BsZHXSLXFDYQdjK3HTqSLUsahn3h1iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f5:e9:49:0a:fd:bf:05:4a:91:7e:8b:02:a1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Validity Not Before: Feb 9 11:01:08 2026 GMT Not After : Feb 10 11:01:08 2026 GMT Subject: CN=22d2f805099e9a838a83179bdef9455b06282fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:d9:eb:6a:4e:e7:bf:fd:ce:52:c9:36:8e: bd:5a:76:c0:b3:4e:00:f9:8f:45:e6:07:09:78:65: 45:a9:bd:8e:36:04:e7:08:bd:c1:63:30:92:20:be: 64:f1:73:d8:09:f6:00:9e:01:8e:a3:0d:20:8e:e4: c4:09:4b:8c:0c:3d:01:0e:90:77:b4:1f:d3:32:9b: 13:f4:a7:68:52:89:aa:d0:b2:91:ea:8c:e8:b3:b4: 6c:f5:9a:bd:9a:2f:9e:1c:8d:92:7a:d4:c9:b8:9c: 14:e4:5c:e3:b7:71:e4:76:c6:6d:e2:24:45:36:d4: 60:c5:79:91:4b:9b:85:18:b8:84:cf:fa:e3:58:44: 4f:36:66:5c:34:72:0d:ae:2d:d8:22:c1:55:15:bf: 45:a5:a1:19:22:e5:a4:74:ec:04:07:07:57:87:6e: c3:2f:db:97:44:31:d1:ec:c5:a0:20:90:8a:fa:e6: a5:09:e4:f9:72:a4:85:7b:f2:00:81:a9:a4:98:19: fc:fd:fb:69:c8:c3:15:fe:66:e0:40:0b:fc:87:a2: 87:ff:cf:2d:fc:fd:4c:db:60:b8:85:f8:06:7a:4e: 0c:db:40:4c:02:65:0b:70:3c:f4:31:71:37:49:4d: 9c:72:d8:4e:b6:e6:bd:cf:cb:d0:bc:4b:da:ac:5c: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:F8:05:09:9E:9A:83:8A:83:17:9B:DE:F9:45:5B:06:28:2F:BA X509v3 Authority Key Identifier: keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0e:69:c5:ac:9a:19:13:ba:e5:1a:33:58:fc:e3:a2:b7:f6: 0b:04:35:50:d7:ee:04:48:b2:b5:bf:7d:3d:d3:dd:db:8f:5d: d2:c4:25:85:03:db:36:0f:97:e8:32:1d:07:b2:98:5d:9e:ba: b7:8e:53:63:a7:10:f2:8c:b0:d8:7b:2b:67:ff:ce:3c:17:57: 3a:30:0a:58:77:b1:5f:bc:6e:09:ae:b3:24:86:fb:64:58:30: 44:75:eb:e0:dc:ff:b5:93:0b:7b:ed:f1:a1:27:43:9e:e2:ba: 43:91:2a:f5:97:72:12:0c:10:53:a0:e7:96:f3:13:73:10:49: b0:01:61:75:48:c8:ea:7a:02:96:2a:4b:95:61:de:39:16:8c: d7:20:af:03:f0:0e:9b:01:0e:c3:50:46:19:03:74:0b:60:e2: 26:b3:f6:0a:dd:d1:24:24:c8:39:17:25:01:8d:65:4a:80:88: d6:4c:b3:7b:b4:37:28:ce:49:9d:8a:38:a2:20:cc:da:24:84: aa:7d:a3:e6:26:e5:d4:70:e5:2e:ca:67:a9:86:96:9f:8d:5a: 7e:e7:c3:7a:6d:a0:72:a8:76:43:4b:d8:59:93:5b:52:0b:35: 4b:7c:13:98:48:fd:65:2e:eb:94:70:3e:f5:ed:3e:bf:d2:d4: 9d:84:28:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/XpSQr9vwVKkX6LAqFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NWYyNWFiM2M2NjAwM2IyZDVhZjgzZDJiMzY1MWY4OGQx NTFmMmEwHhcNMjYwMjA5MTEwMTA4WhcNMjYwMjEwMTEwMTA4WjAzMTEwLwYDVQQD EygyMmQyZjgwNTA5OWU5YTgzOGE4MzE3OWJkZWY5NDU1YjA2MjgyZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLZ62pO57/9zlLJNo69WnbAs04A +Y9F5gcJeGVFqb2ONgTnCL3BYzCSIL5k8XPYCfYAngGOow0gjuTECUuMDD0BDpB3 tB/TMpsT9KdoUomq0LKR6ozos7Rs9Zq9mi+eHI2SetTJuJwU5Fzjt3HkdsZt4iRF NtRgxXmRS5uFGLiEz/rjWERPNmZcNHINri3YIsFVFb9FpaEZIuWkdOwEBwdXh27D L9uXRDHR7MWgIJCK+ualCeT5cqSFe/IAgamkmBn8/ftpyMMV/mbgQAv8h6KH/88t /P1M22C4hfgGek4M20BMAmULcDz0MXE3SU2ccthOtua9z8vQvEvarFyXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLS+AUJnpqDioMXm975RVsGKC+6MB8GA1UdIwQY MBaAFKdfJas8ZgA7LVr4PSs2UfiNFR8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUt YjZmNGE0ZDYwNTNiLzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUtYjZmNGE0ZDYwNTNi LzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ5pxaya GRO65RozWPzjorf2CwQ1UNfuBEiytb99PdPd249d0sQlhQPbNg+X6DIdB7KYXZ66 t45TY6cQ8oyw2HsrZ//OPBdXOjAKWHexX7xuCa6zJIb7ZFgwRHXr4Nz/tZMLe+3x oSdDnuK6Q5Eq9ZdyEgwQU6DnlvMTcxBJsAFhdUjI6noClipLlWHeORaM1yCvA/AO mwEOw1BGGQN0C2DiJrP2Ct3RJCTIORclAY1lSoCI1kyze7Q3KM5JnYo4oiDM2iSE qn2j5ibl1HDlLspnqYaWn41afufDem2gcqh2Q0vYWZNbUgs1S3wTmEj9ZS7rlHA+ 9e0+v9LUnYQoLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:46 2026 by rpki-client