This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft File: 48uGjyIUmP6iUVXOAH_AGbc3_7A.mft (raw, json) Hash identifier: a7Ey0dER8k7KAhhIViJdcJ0XTHg9jf0Jgq/0Hjjo8Os= Subject key identifier: 9B:71:0C:FA:8A:EB:E2:39:92:DB:B5:FF:B5:2E:0B:6C:58:53:65:3A Authority key identifier: E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0 Certificate issuer: /CN=e3cb868f221498fea25155ce007fc019b737ffb0 Certificate serial: 019C41D85746C5C7C3F9EEA54AAFAA7E36BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft Manifest number: 42 Signing time: Mon 09 Feb 2026 10:00:22 +0000 Manifest this update: Mon 09 Feb 2026 10:00:22 +0000 Manifest next update: Tue 10 Feb 2026 10:00:22 +0000 Files and hashes: 1: 48uGjyIUmP6iUVXOAH_AGbc3_7A.crl (hash: O0Q3G55mWigZ87rEjfyPDodQ1UoaH7Smjm5ESN/vGbQ=) 2: LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa (hash: nut59sxjSaBAsjL5yczj9vKm25xZIG45untoxMX+iNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:57:46:c5:c7:c3:f9:ee:a5:4a:af:aa:7e:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cb868f221498fea25155ce007fc019b737ffb0 Validity Not Before: Feb 9 10:00:22 2026 GMT Not After : Feb 10 10:00:22 2026 GMT Subject: CN=9b710cfa8aebe23992dbb5ffb52e0b6c5853653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:b5:b9:76:62:a9:e9:89:8f:d5:18:4e:45: 81:c3:89:6b:b1:c4:fc:0f:e9:93:fb:a0:8b:54:e9: 5b:90:88:23:6b:2e:f6:26:c4:82:c8:95:0f:c5:fa: 79:17:6c:47:63:2f:29:a2:7c:ca:0f:3c:3a:ab:42: ae:b4:ae:f0:8c:cf:9a:57:99:8e:60:07:a2:62:4c: f7:5d:a3:bc:dc:bb:96:32:1d:ad:af:75:e8:d1:56: 71:75:18:da:01:4d:18:18:dc:fd:d5:63:fa:f7:6b: fb:0e:80:85:5b:c4:b2:66:1a:e7:2c:75:ba:a7:87: 4d:bf:c8:85:40:d5:1e:7d:e3:29:e2:05:09:c7:31: 1c:f8:4a:6c:ec:e1:53:48:44:e1:0f:90:9e:28:6f: 2a:ce:db:b5:4c:26:02:02:f3:6e:e2:0f:e4:f6:a6: 31:a9:8e:41:4d:0f:e2:2b:35:bc:7b:e6:98:a8:21: be:f6:0f:c8:d4:f5:14:56:61:f8:26:c3:96:71:c5: 4f:43:b6:f2:09:0b:a7:73:a3:5b:9b:45:1e:03:5a: 54:4e:89:79:8b:e5:dc:fc:89:96:e7:e9:3e:e0:79: bd:49:3c:5c:71:b8:1f:89:f5:a8:7f:0a:49:30:0f: 5d:7d:ff:7a:6b:b7:16:a8:cb:4a:29:54:5a:25:a8: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:71:0C:FA:8A:EB:E2:39:92:DB:B5:FF:B5:2E:0B:6C:58:53:65:3A X509v3 Authority Key Identifier: keyid:E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ed:3c:d1:bb:2a:41:8c:81:90:05:eb:ea:a1:3b:32:31:d9: 72:63:f9:f8:7b:32:63:8f:f9:d5:82:4e:a2:5e:07:2e:34:1c: 34:8f:31:c9:f3:7e:e5:fc:55:26:1e:cb:7f:b6:03:34:3a:6a: bf:f5:2f:86:e9:fc:f9:05:f3:cd:9c:63:3e:89:c7:ec:b7:f0: aa:b0:f7:1f:0a:ae:ab:a9:c9:a1:e5:6b:cc:4b:df:38:4c:46: 16:fb:b1:fe:06:ef:fd:74:ae:4a:7b:5f:c2:66:63:27:59:a6: 5e:50:1f:64:94:16:f0:2b:f9:b1:87:04:a4:df:c3:cc:1c:bc: d3:26:73:27:b0:bf:ad:5a:71:77:13:37:7f:85:da:41:31:bc: 68:75:cd:63:96:9c:30:79:8d:dd:65:90:34:f2:04:1e:ab:c3: 06:92:77:17:fb:e4:43:ec:d1:22:f7:8c:f3:ec:1f:ff:35:81: 5b:16:d6:17:b2:89:e8:74:db:12:e9:83:34:8a:e8:2d:28:82: 77:c1:02:dc:2b:4a:d0:ab:e3:01:df:36:d9:4e:f9:39:ed:1f: 26:d6:de:b9:a9:dd:e9:8d:4d:65:f8:85:e1:b1:42:f5:72:20: 85:ae:91:03:c1:c7:f7:82:68:ca:b9:3c:35:5f:03:12:5e:ae: 42:02:39:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FdGxcfD+e6lSq+qfja/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2I4NjhmMjIxNDk4ZmVhMjUxNTVjZTAwN2ZjMDE5Yjcz N2ZmYjAwHhcNMjYwMjA5MTAwMDIyWhcNMjYwMjEwMTAwMDIyWjAzMTEwLwYDVQQD Eyg5YjcxMGNmYThhZWJlMjM5OTJkYmI1ZmZiNTJlMGI2YzU4NTM2NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudm1uXZiqemJj9UYTkWBw4lrscT8 D+mT+6CLVOlbkIgjay72JsSCyJUPxfp5F2xHYy8ponzKDzw6q0KutK7wjM+aV5mO YAeiYkz3XaO83LuWMh2tr3Xo0VZxdRjaAU0YGNz91WP692v7DoCFW8SyZhrnLHW6 p4dNv8iFQNUefeMp4gUJxzEc+Eps7OFTSEThD5CeKG8qztu1TCYCAvNu4g/k9qYx qY5BTQ/iKzW8e+aYqCG+9g/I1PUUVmH4JsOWccVPQ7byCQunc6Nbm0UeA1pUTol5 i+Xc/ImW5+k+4Hm9STxccbgfifWofwpJMA9dff96a7cWqMtKKVRaJagKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtxDPqK6+I5ktu1/7UuC2xYU2U6MB8GA1UdIwQY MBaAFOPLho8iFJj+olFVzgB/wBm3N/+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMt YThmMzFjOGI5ZTAzLzEvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMtYThmMzFjOGI5ZTAz LzEvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe080bsq QYyBkAXr6qE7MjHZcmP5+HsyY4/51YJOol4HLjQcNI8xyfN+5fxVJh7Lf7YDNDpq v/Uvhun8+QXzzZxjPonH7LfwqrD3Hwquq6nJoeVrzEvfOExGFvux/gbv/XSuSntf wmZjJ1mmXlAfZJQW8Cv5sYcEpN/DzBy80yZzJ7C/rVpxdxM3f4XaQTG8aHXNY5ac MHmN3WWQNPIEHqvDBpJ3F/vkQ+zRIveM8+wf/zWBWxbWF7KJ6HTbEumDNIroLSiC d8EC3CtK0KvjAd822U75Oe0fJtbeuand6Y1NZfiF4bFC9XIgha6RA8HH94Joyrk8 NV8DEl6uQgI5vw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:16 2026 by rpki-client