This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json) Hash identifier: WMp6KK+ecHlNPAV85BVeS2rV3Vk9qiT+kesrHHaH2dI= Subject key identifier: 0C:0A:EB:5A:1F:EC:5B:AF:DB:34:27:A5:22:84:DA:08:65:5E:54:CC Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019C4246AB47205B2A4C6280772A560FD2CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft Manifest number: 0336 Signing time: Mon 09 Feb 2026 12:00:53 +0000 Manifest this update: Mon 09 Feb 2026 12:00:53 +0000 Manifest next update: Tue 10 Feb 2026 12:00:53 +0000 Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: ZhbAh/L+l+eq7n4kfiTZxsVo+Vta8eR93TZhtQ69IMw=) 2: iy1_X0xP3SRiEMK6QLdiKo6wonY.roa (hash: LJI0kIDEGIotcCj26me/ey1uUUCG+0yACL6vQDJHUvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ab:47:20:5b:2a:4c:62:80:77:2a:56:0f:d2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Feb 9 12:00:53 2026 GMT Not After : Feb 10 12:00:53 2026 GMT Subject: CN=0c0aeb5a1fec5bafdb3427a52284da08655e54cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:19:08:bb:94:13:d2:21:25:8f:a7:4c:f3: 22:71:a5:42:62:69:29:9c:e7:fe:cb:a8:25:93:fc: d5:78:b6:d0:e4:d7:9c:9e:b6:00:46:02:21:9f:dd: 37:e7:71:e6:45:4b:37:e7:ae:f4:82:9c:05:84:30: 69:c4:3e:ba:e3:85:95:7c:15:62:7b:02:c4:e4:b7: 02:2f:43:73:09:98:af:88:79:69:50:74:27:46:60: 7e:14:be:d8:95:d1:27:84:90:09:3f:7a:56:43:52: 02:4b:93:d3:e1:94:6d:36:c0:2d:91:28:8d:27:45: 84:87:07:32:67:84:15:0a:bf:0f:3b:93:50:ce:34: 9f:c6:b7:2c:a9:3c:26:6c:a1:93:64:bb:ef:8b:da: c6:21:f7:3e:35:85:d6:5f:3f:62:83:f1:8a:9b:18: 24:7f:c5:5d:91:9d:9c:d4:2d:09:bc:19:7e:6c:ae: f1:95:84:84:cf:b7:13:a0:6e:79:4f:25:00:96:3e: 57:fa:7c:6d:27:31:e2:8f:79:40:1a:b7:ff:c8:9b: e2:50:32:a5:a2:99:3c:fd:a4:87:f3:3e:4c:20:f9: 1d:e3:63:03:52:83:71:4f:4c:8e:04:0e:e4:16:59: b8:d3:25:45:82:65:9a:a1:d2:f0:58:7e:6f:05:1a: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0A:EB:5A:1F:EC:5B:AF:DB:34:27:A5:22:84:DA:08:65:5E:54:CC X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:07:4d:89:25:1c:76:55:fa:a2:7b:71:7d:be:88:9d:0b:56: 1b:af:a0:59:a0:5a:16:e3:30:85:6b:77:f9:a5:31:02:31:44: 03:9c:68:65:aa:c4:88:80:5c:0c:19:b1:cf:2c:e5:71:0e:ae: 19:54:bf:88:ff:67:3e:1b:6c:c2:fb:48:e5:55:4c:44:92:c9: 71:d7:c8:9e:7b:eb:ce:fe:79:74:21:7c:86:3a:c6:c3:e7:a8: 13:1f:b9:dc:16:32:56:8f:08:cc:c8:bb:25:22:bc:ef:21:20: 31:86:db:c9:aa:67:95:65:e7:19:69:da:4c:d7:6a:a0:e3:3b: 56:b6:26:e4:be:51:4b:72:b4:a3:b9:fd:e7:3a:b7:06:f7:3f: f9:70:45:eb:16:14:19:aa:88:49:bb:97:6c:1d:99:5c:92:d3: 23:42:a9:40:c6:11:e5:fa:53:85:86:5d:2e:f8:fa:cd:f9:09: 23:bb:01:f8:58:73:19:f9:30:b0:b5:b7:2f:07:96:91:dd:74: 47:95:db:11:4d:8b:47:c9:75:d4:81:da:75:0f:f3:ff:d0:db: cf:68:e6:ea:bc:5c:d0:94:92:d7:b8:8a:46:1c:b3:9e:fa:77: 6e:cc:65:91:2d:3f:15:75:6d:ad:ea:1d:30:df:b5:0d:e9:d0: 72:04:31:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqtHIFsqTGKAdypWD9LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjYwMjA5MTIwMDUzWhcNMjYwMjEwMTIwMDUzWjAzMTEwLwYDVQQD EygwYzBhZWI1YTFmZWM1YmFmZGIzNDI3YTUyMjg0ZGEwODY1NWU1NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/IZCLuUE9IhJY+nTPMicaVCYmkp nOf+y6glk/zVeLbQ5NecnrYARgIhn90353HmRUs35670gpwFhDBpxD6644WVfBVi ewLE5LcCL0NzCZiviHlpUHQnRmB+FL7YldEnhJAJP3pWQ1ICS5PT4ZRtNsAtkSiN J0WEhwcyZ4QVCr8PO5NQzjSfxrcsqTwmbKGTZLvvi9rGIfc+NYXWXz9ig/GKmxgk f8VdkZ2c1C0JvBl+bK7xlYSEz7cToG55TyUAlj5X+nxtJzHij3lAGrf/yJviUDKl opk8/aSH8z5MIPkd42MDUoNxT0yOBA7kFlm40yVFgmWaodLwWH5vBRptMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwK61of7Fuv2zQnpSKE2ghlXlTMMB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwdNiSUc dlX6ontxfb6InQtWG6+gWaBaFuMwhWt3+aUxAjFEA5xoZarEiIBcDBmxzyzlcQ6u GVS/iP9nPhtswvtI5VVMRJLJcdfInnvrzv55dCF8hjrGw+eoEx+53BYyVo8IzMi7 JSK87yEgMYbbyapnlWXnGWnaTNdqoOM7VrYm5L5RS3K0o7n95zq3Bvc/+XBF6xYU GaqISbuXbB2ZXJLTI0KpQMYR5fpThYZdLvj6zfkJI7sB+FhzGfkwsLW3LweWkd10 R5XbEU2LR8l11IHadQ/z/9Dbz2jm6rxc0JSS17iKRhyznvp3bsxlkS0/FXVtreod MN+1DenQcgQxyA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:02 2026 by rpki-client