This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json) Hash identifier: 7+6bTLbmRgUBg0mE9Y+KU9irBz1BtvWws8f038joyEA= Subject key identifier: 0E:0B:56:2E:A4:91:21:E0:80:A9:3D:40:B0:43:AC:C7:84:3D:23:34 Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04 Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604 Certificate serial: 019C43224B2B12DB525874C5094F7315E324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft Manifest number: 1415 Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: l35dSyA19UPWPHuAas7HUDewi4gr6XMVUE7mm39Z5qM=) 2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4b:2b:12:db:52:58:74:c5:09:4f:73:15:e3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0041ff7980379b798049256868dff39819c2604 Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=0e0b562ea49121e080a93d40b043acc7843d2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:1a:c8:72:e0:29:80:2a:be:aa:31:81:55: f1:06:de:18:a6:ac:71:96:6f:73:26:52:ac:c0:08: 29:b2:ae:12:89:aa:49:0e:e4:3a:4b:42:0e:66:f1: b1:15:32:47:f5:c1:99:aa:91:db:f4:e5:c6:1f:cb: 04:9e:4f:28:74:93:22:62:59:d3:69:1e:51:d2:7b: cf:e6:74:eb:80:4c:39:61:30:f0:b5:7b:f3:53:de: 86:ac:40:ac:2d:46:87:0f:e3:3a:91:ce:d4:a8:ea: 6d:ca:9a:79:0f:8a:5a:58:20:6a:42:a4:68:8f:bd: cc:7d:70:d1:12:71:0a:47:a8:db:69:a0:89:0c:1b: f8:f5:f6:3e:17:fc:d3:ba:da:9c:00:d9:ad:58:be: 66:8b:6e:59:39:15:4e:c6:3d:aa:85:75:54:1b:04: d9:f5:23:69:cf:7a:cc:b4:3a:fc:e7:34:c3:24:d9: 42:65:fc:92:96:26:85:b7:3a:a4:9e:a3:3a:20:08: 0f:fc:9e:92:47:a7:1d:f1:1a:e8:dd:e5:9f:cc:12: af:41:b1:e5:f5:a6:f9:11:50:aa:e6:75:f0:22:e7: 76:e8:43:80:9d:f9:cd:60:f7:ce:21:87:b4:37:c4: cb:04:ef:0b:0a:3d:1e:b7:af:bb:7f:f7:cd:29:7e: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:56:2E:A4:91:21:E0:80:A9:3D:40:B0:43:AC:C7:84:3D:23:34 X509v3 Authority Key Identifier: keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:73:36:92:ca:b4:25:c3:54:a0:a6:78:75:cd:f3:e4:40:74: 59:08:8c:3b:72:78:e7:55:d8:19:5e:48:e9:cc:34:db:d1:a8: 51:06:8b:09:8a:8b:eb:6d:17:c2:0d:d0:43:d2:49:19:6a:fd: cf:63:5a:76:cf:a0:a9:64:bf:1a:00:72:b4:48:4e:18:98:7d: 56:45:a6:49:42:03:2d:92:34:82:a2:3b:94:fa:52:2f:25:db: 6b:75:7f:21:de:40:ab:ea:63:72:0c:2d:98:2b:b0:cc:5d:6a: b8:01:e8:3f:e5:3c:46:68:59:7b:37:5e:70:f3:39:26:f9:92: 6c:3c:93:1a:63:09:30:45:f8:48:c5:25:2e:c8:8c:f4:bb:f3: 44:4c:5e:dd:05:8e:10:20:10:0d:1d:cd:0b:eb:e2:c5:32:cb: d6:04:11:c4:fd:00:94:4b:cc:d6:c2:ee:cb:01:4f:ea:4b:51: 37:28:4e:22:f1:8f:ed:05:b5:ab:8d:52:ef:73:30:29:70:37: bd:fd:3b:d5:7f:f4:be:bf:69:39:41:e5:95:01:94:d7:88:a9: c9:b5:50:03:96:a2:c2:b7:68:58:c2:b2:63:a9:8c:95:0f:ed: e6:80:50:67:25:8b:fd:68:49:13:a7:c8:a0:f7:ac:95:12:08: 0f:a0:a3:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIksrEttSWHTFCU9zFeMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQxZmY3OTgwMzc5Yjc5ODA0OTI1Njg2OGRmZjM5ODE5 YzI2MDQwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD EygwZTBiNTYyZWE0OTEyMWUwODBhOTNkNDBiMDQzYWNjNzg0M2QyMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGgayHLgKYAqvqoxgVXxBt4Ypqxx lm9zJlKswAgpsq4SiapJDuQ6S0IOZvGxFTJH9cGZqpHb9OXGH8sEnk8odJMiYlnT aR5R0nvP5nTrgEw5YTDwtXvzU96GrECsLUaHD+M6kc7UqOptypp5D4paWCBqQqRo j73MfXDREnEKR6jbaaCJDBv49fY+F/zTutqcANmtWL5mi25ZORVOxj2qhXVUGwTZ 9SNpz3rMtDr85zTDJNlCZfySliaFtzqknqM6IAgP/J6SR6cd8Rro3eWfzBKvQbHl 9ab5EVCq5nXwIud26EOAnfnNYPfOIYe0N8TLBO8LCj0et6+7f/fNKX7xPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4LVi6kkSHggKk9QLBDrMeEPSM0MB8GA1UdIwQY MBaAFNAEH/eYA3m3mASSVoaN/zmBnCYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAt ZTY4OWJmNTdkZDI3LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lOGY0NTItYmU3MC00MTc2LTlkYTAtZTY4OWJmNTdkZDI3 LzEvMEFRZjk1Z0RlYmVZQkpKV2hvM19PWUdjSmdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHM2ksq0 JcNUoKZ4dc3z5EB0WQiMO3J451XYGV5I6cw029GoUQaLCYqL620Xwg3QQ9JJGWr9 z2Nads+gqWS/GgBytEhOGJh9VkWmSUIDLZI0gqI7lPpSLyXba3V/Id5Aq+pjcgwt mCuwzF1quAHoP+U8RmhZezdecPM5JvmSbDyTGmMJMEX4SMUlLsiM9LvzRExe3QWO ECAQDR3NC+vixTLL1gQRxP0AlEvM1sLuywFP6ktRNyhOIvGP7QW1q41S73MwKXA3 vf071X/0vr9pOUHllQGU14ipybVQA5aiwrdoWMKyY6mMlQ/t5oBQZyWL/WhJE6fI oPeslRIID6Cj1A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:00 2026 by rpki-client