This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json) Hash identifier: i1EZ2oAimPS4NahYQ/TcovfHrmTX4em3Z7Jro8jw3ZI= Subject key identifier: AE:58:15:65:D3:DB:32:A5:7B:0C:C4:5B:05:F3:D2:7F:34:AF:EB:9B Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab Certificate serial: 019C1E034E7EC3093120BFBF98D7EBD2B40C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft Manifest number: 0A60 Signing time: Mon 02 Feb 2026 11:00:59 +0000 Manifest this update: Mon 02 Feb 2026 11:00:59 +0000 Manifest next update: Tue 03 Feb 2026 11:00:59 +0000 Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: p+bj5SGPRS/SohXQxTXIoBC4K2HvqRgmi+EPAwt1PNQ=) 2: bHXHREeiIlZobWnv85pxED889VM.roa (hash: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:4e:7e:c3:09:31:20:bf:bf:98:d7:eb:d2:b4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab Validity Not Before: Feb 2 11:00:59 2026 GMT Not After : Feb 3 11:00:59 2026 GMT Subject: CN=ae581565d3db32a57b0cc45b05f3d27f34afeb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:84:11:52:3c:da:26:aa:11:da:4a:f6:5d: 94:23:61:ad:8a:19:dc:20:0d:77:9b:51:8b:0e:60: b2:4d:12:53:46:ca:0a:af:1f:0c:60:aa:68:a7:c1: 53:4a:e5:7a:ec:17:2a:41:41:23:f5:0a:eb:92:06: c2:ae:18:7a:7f:d4:eb:53:1e:06:f1:7d:d9:b8:83: dc:61:b4:ff:f6:13:45:57:3c:ce:f0:c0:ea:22:88: f5:77:b4:88:4a:bc:db:15:43:16:8a:75:a1:30:c8: f9:b7:04:a2:36:e8:bc:04:ab:1f:e9:97:75:61:e1: 53:31:57:80:17:69:79:ba:5d:26:0c:e3:09:28:7b: e4:4b:c7:bc:cd:02:30:80:b1:d3:2c:8d:19:e5:41: 9a:9d:2d:50:37:97:6f:c6:9c:f9:b4:8b:93:94:d8: 49:d6:1c:82:13:58:22:14:da:0f:95:33:3a:a8:a1: f6:47:52:1c:a1:9e:5b:86:6c:54:47:6c:51:70:b1: 8e:36:f2:1c:77:60:83:d3:0f:dc:51:d9:4d:e7:ea: 27:b3:da:a7:72:94:3b:5c:2f:a0:85:d1:15:8a:6a: 35:f6:8c:94:80:41:86:49:73:32:29:56:6e:f2:b0: 05:a5:ca:2a:d0:c1:dc:f3:18:09:45:6e:25:cf:e0: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:15:65:D3:DB:32:A5:7B:0C:C4:5B:05:F3:D2:7F:34:AF:EB:9B X509v3 Authority Key Identifier: keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:70:d2:ba:48:ef:00:00:b0:c4:86:f7:7c:4e:73:59:72:0e: b8:a4:2a:a7:ba:2d:08:fd:9e:35:32:18:1c:26:6e:83:40:3f: 3e:5c:d5:cb:44:1f:40:41:6b:9d:9c:71:49:59:41:f4:15:5b: e6:31:bd:5c:9c:99:68:a8:45:8a:2d:f0:db:b4:58:da:f1:15: 7d:be:59:6b:24:34:4f:0b:36:bd:10:54:c8:1d:38:86:bf:6a: e8:74:d8:28:89:b9:96:ff:0c:60:56:1b:4a:e2:18:a0:65:58: 4e:44:12:a7:f8:b6:31:b2:0c:31:b4:d2:da:37:d7:01:a8:32: 97:4d:1a:99:8b:4a:8d:7b:10:63:2f:6f:51:eb:fa:c3:29:fa: 6d:6c:d8:89:bc:bd:1d:54:cb:ae:42:3f:df:6a:7b:f9:73:8e: 84:e7:1a:35:df:cf:72:0e:16:4f:ca:d9:3f:92:15:7f:a9:44: 62:d7:ed:b7:df:b3:0b:c9:45:f1:ad:92:b9:35:c4:7a:80:c3: 60:91:1f:11:d1:53:82:a8:cc:80:4f:f0:8d:01:f6:75:fc:09: 1a:69:09:ea:c1:6b:43:8b:5f:03:b4:c0:b4:36:ab:cd:62:45: cb:b4:58:14:0f:ae:1a:44:50:e2:7d:af:d7:a6:28:f5:06:96: 19:32:10:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA05+wwkxIL+/mNfr0rQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj ZTYzYWIwHhcNMjYwMjAyMTEwMDU5WhcNMjYwMjAzMTEwMDU5WjAzMTEwLwYDVQQD EyhhZTU4MTU2NWQzZGIzMmE1N2IwY2M0NWIwNWYzZDI3ZjM0YWZlYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoeEEVI82iaqEdpK9l2UI2Gtihnc IA13m1GLDmCyTRJTRsoKrx8MYKpop8FTSuV67BcqQUEj9QrrkgbCrhh6f9TrUx4G 8X3ZuIPcYbT/9hNFVzzO8MDqIoj1d7SISrzbFUMWinWhMMj5twSiNui8BKsf6Zd1 YeFTMVeAF2l5ul0mDOMJKHvkS8e8zQIwgLHTLI0Z5UGanS1QN5dvxpz5tIuTlNhJ 1hyCE1giFNoPlTM6qKH2R1IcoZ5bhmxUR2xRcLGONvIcd2CD0w/cUdlN5+ons9qn cpQ7XC+ghdEVimo19oyUgEGGSXMyKVZu8rAFpcoq0MHc8xgJRW4lz+AZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5YFWXT2zKlewzEWwXz0n80r+ubMB8GA1UdIwQY MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXDSukjv AACwxIb3fE5zWXIOuKQqp7otCP2eNTIYHCZug0A/PlzVy0QfQEFrnZxxSVlB9BVb 5jG9XJyZaKhFii3w27RY2vEVfb5ZayQ0Tws2vRBUyB04hr9q6HTYKIm5lv8MYFYb SuIYoGVYTkQSp/i2MbIMMbTS2jfXAagyl00amYtKjXsQYy9vUev6wyn6bWzYiby9 HVTLrkI/32p7+XOOhOcaNd/Pcg4WT8rZP5IVf6lEYtftt9+zC8lF8a2SuTXEeoDD YJEfEdFTgqjMgE/wjQH2dfwJGmkJ6sFrQ4tfA7TAtDarzWJFy7RYFA+uGkRQ4n2v 16Yo9QaWGTIQZg== -----END CERTIFICATE-----Generated at Mon Feb 2 20:55:01 2026 by rpki-client