This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json) Hash identifier: 9JZSACrBMLuX1fjyfIyhoYETwrBT1TyLcucqihgd+To= Subject key identifier: E9:FD:31:51:EF:4E:A8:F8:CD:C8:08:C8:43:7F:A1:40:58:51:8B:74 Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Certificate serial: 019C41A214541B8708A64019F4A46E5F7C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft Manifest number: 1085 Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: _kecmz5wOrK7gIei5HshIFKgYnk.roa (hash: oq5fC/PMeXxhdzroEzJ+3bMsZ8OSQI5v+Sc2hvXm5Tc=) 2: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: v4Wbr2kcO1caKLqTYyrW/c4NuPumpZ/OOy33WR/hkTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:14:54:1b:87:08:a6:40:19:f4:a4:6e:5f:7c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=e9fd3151ef4ea8f8cdc808c8437fa14058518b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:b9:77:e8:74:08:a9:ca:c0:de:a4:09:1b: 07:2a:b2:30:7e:d6:84:92:a4:ed:50:75:9d:44:14: 09:d2:d1:25:9f:c9:93:05:74:78:01:dd:2b:35:f2: c2:32:90:fc:62:70:91:e5:ca:56:d8:76:da:cf:ea: 90:a4:17:84:74:60:bd:b9:4c:19:98:ac:f7:1c:25: 5c:bb:40:4c:6d:c8:dc:da:a7:76:64:5e:7d:ce:3c: 56:a0:09:5d:e1:7d:4e:16:08:17:cf:44:75:15:7c: 59:f3:dc:c6:2d:5f:d9:b0:6c:51:c6:d6:e7:f4:80: f7:4b:ca:12:46:66:91:59:50:ca:b6:57:65:cf:b1: 38:4b:7a:05:37:0d:37:58:c6:9a:ce:1d:18:53:0b: 5e:1b:71:ec:72:d7:e3:02:aa:72:dd:40:e2:2d:45: f3:40:a8:9e:83:ec:e6:92:ed:ea:e4:e6:3b:1a:92: aa:b2:e3:37:00:14:ed:a7:56:90:27:e3:f8:aa:9d: 9b:48:a6:b9:27:11:06:94:1b:ec:63:bf:35:c2:a2: 2b:08:7a:00:56:eb:30:09:ab:0c:48:28:6b:c8:25: f8:9b:21:f3:59:7d:98:17:ac:46:cc:d2:00:7e:99: e6:e3:36:e1:c6:61:45:49:76:3d:1e:97:14:28:af: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FD:31:51:EF:4E:A8:F8:CD:C8:08:C8:43:7F:A1:40:58:51:8B:74 X509v3 Authority Key Identifier: keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:04:c0:6a:85:5c:41:a2:f8:cb:fd:fa:ad:49:2c:cc:89:8b: c4:d4:7b:78:78:46:cf:19:02:19:46:09:68:f2:f3:06:30:63: d3:b5:07:ef:fa:5a:2a:01:d8:6e:ac:61:d3:af:ab:2a:f0:c1: a9:4c:eb:d6:d8:65:f7:ed:8e:7b:31:4f:2d:c7:c2:ce:4f:dd: cf:18:35:a9:7f:b0:3f:8b:3c:e6:bc:5f:aa:21:7c:17:0c:0e: d6:f3:27:2c:09:6a:06:85:35:b0:fc:88:16:98:b9:a1:73:e9: 77:e9:a3:c2:bf:e6:4a:97:47:e5:14:2b:3c:df:e0:24:40:be: 82:7e:ea:50:7a:23:f2:fd:5d:94:13:f7:ca:01:98:d1:80:89: 87:85:3c:69:16:44:eb:b4:18:87:37:93:e3:5e:f3:8d:c4:c0: 44:cc:cb:3d:3c:2b:a6:0e:52:84:e5:29:c3:f8:4f:ae:27:38: fe:ce:40:44:5b:ca:60:53:f8:91:cf:77:84:52:83:cb:50:e2: 58:b9:c8:ff:bc:b5:8a:a1:bf:69:af:45:84:f5:7a:c8:c3:1a: d4:0d:b1:f5:95:02:11:57:85:8a:98:6e:ff:c9:c2:c9:78:28: d9:a3:8f:3c:21:37:26:dd:ce:66:11:c1:d2:0b:f2:32:31:d7: f0:3a:b3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohRUG4cIpkAZ9KRuX3yEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTE1N2U0MTlmYjVhMThiYTJiZWFmMmRlNTQ1ZjJiYjNk ZWNmZDEwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD EyhlOWZkMzE1MWVmNGVhOGY4Y2RjODA4Yzg0MzdmYTE0MDU4NTE4Yjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0u5d+h0CKnKwN6kCRsHKrIwftaE kqTtUHWdRBQJ0tEln8mTBXR4Ad0rNfLCMpD8YnCR5cpW2Hbaz+qQpBeEdGC9uUwZ mKz3HCVcu0BMbcjc2qd2ZF59zjxWoAld4X1OFggXz0R1FXxZ89zGLV/ZsGxRxtbn 9ID3S8oSRmaRWVDKtldlz7E4S3oFNw03WMaazh0YUwteG3HsctfjAqpy3UDiLUXz QKieg+zmku3q5OY7GpKqsuM3ABTtp1aQJ+P4qp2bSKa5JxEGlBvsY781wqIrCHoA VuswCasMSChryCX4myHzWX2YF6xGzNIAfpnm4zbhxmFFSXY9HpcUKK8GeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn9MVHvTqj4zcgIyEN/oUBYUYt0MB8GA1UdIwQY MBaAFGtRV+QZ+1oYuivq8t5UXyuz3s/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEt MzI4OTFhNTgzMzdmLzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEtMzI4OTFhNTgzMzdm LzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQTAaoVc QaL4y/36rUkszImLxNR7eHhGzxkCGUYJaPLzBjBj07UH7/paKgHYbqxh06+rKvDB qUzr1thl9+2OezFPLcfCzk/dzxg1qX+wP4s85rxfqiF8FwwO1vMnLAlqBoU1sPyI Fpi5oXPpd+mjwr/mSpdH5RQrPN/gJEC+gn7qUHoj8v1dlBP3ygGY0YCJh4U8aRZE 67QYhzeT417zjcTARMzLPTwrpg5ShOUpw/hPric4/s5ARFvKYFP4kc93hFKDy1Di WLnI/7y1iqG/aa9FhPV6yMMa1A2x9ZUCEVeFiphu/8nCyXgo2aOPPCE3Jt3OZhHB 0gvyMjHX8DqzFw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:06 2026 by rpki-client