This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json) Hash identifier: 014S6fw0eaNsx6CYUvXs3mI4H533OC0ij8Yudu+rYJ8= Subject key identifier: 22:18:5F:3B:94:FE:E8:61:34:C0:61:A7:0B:4D:93:2A:A0:43:E8:E4 Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Certificate serial: 019C427D30B35CBD2F794DC53CFF2F1129EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft Manifest number: 0B52 Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa (hash: UmPHiymGAj7+/eK4hBqQMAkOwYiEZ6uebNHLD6+HTOE=) 2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: BMlf2hb9Sjr0Pi61SPdbOqh/9Us9uFM+GCdrAHLXGgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:30:b3:5c:bd:2f:79:4d:c5:3c:ff:2f:11:29:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=22185f3b94fee86134c061a70b4d932aa043e8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:fa:4b:a0:cb:24:38:9e:35:f0:36:cb:b4: 6a:aa:bb:ff:62:a2:36:b4:29:3b:cc:78:1f:5e:32: 44:6c:67:9d:53:e7:61:cc:a5:61:52:47:18:69:b8: 49:33:2e:23:f7:83:17:f3:4c:1c:58:99:46:55:03: d3:b5:75:cd:5f:80:07:4f:6c:05:a0:13:7b:e2:10: f1:4b:12:32:1c:d9:23:f0:4c:70:aa:42:22:0d:44: 92:96:4c:82:05:97:cd:93:a6:9b:c7:34:92:b2:e4: ec:b3:bd:d1:f6:e1:0f:f3:6f:ce:f7:b1:fa:f7:03: 5b:45:14:c3:d2:1e:03:99:83:29:f8:2d:ca:6a:fa: 95:91:e2:14:a0:dc:7b:98:27:38:5d:b8:9d:c6:d8: 04:45:2b:14:93:df:1c:7d:2a:a3:5a:b5:5d:d6:f3: 46:41:63:db:b0:6e:ba:69:d2:ab:a2:a0:45:41:e0: 75:77:3a:b2:25:a5:d2:6f:df:bb:36:8b:27:a0:ee: 67:79:33:41:8e:b1:7f:a5:57:b4:e2:5e:14:24:4a: 77:c9:27:d5:98:82:30:5d:bc:97:a6:65:15:66:f1: f6:36:07:f7:1f:f0:c0:93:09:b5:6d:c5:8f:da:27: 9d:4b:6c:11:1f:47:23:d6:0a:74:02:ee:0f:9c:d2: 9c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:18:5F:3B:94:FE:E8:61:34:C0:61:A7:0B:4D:93:2A:A0:43:E8:E4 X509v3 Authority Key Identifier: keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5e:5a:cb:46:d1:25:16:59:f4:d8:3e:fd:a7:af:d0:6b:71: be:31:34:30:0f:0b:97:e1:ee:1d:e0:86:90:51:99:c1:7d:4a: d9:99:e8:3b:66:bb:b5:9e:00:d6:bf:9d:1c:19:4f:65:d3:e6: d3:17:8e:64:c1:78:fe:ea:84:68:28:d8:9c:f7:b3:c1:e6:f9: 18:5f:fc:d6:91:67:a4:cc:eb:aa:85:fc:3a:99:f3:bd:0d:41: ac:3a:43:a7:09:38:6c:95:5c:ba:6a:e3:37:be:66:38:de:5f: 64:55:70:18:8e:e9:47:84:9e:79:06:5d:3e:c4:14:5c:54:78: 88:3f:a9:35:d4:04:a4:49:96:04:1f:fb:74:0a:f5:cb:b5:82: 2a:0b:0c:f6:1b:50:4e:a3:1c:91:bb:55:c6:5e:6d:5d:fb:f8: 82:93:fd:54:13:4a:98:76:a2:52:e9:20:6b:35:d1:7d:f5:39: 0c:dd:3e:40:83:d0:f3:1d:a8:a7:ca:5e:6c:17:f3:8c:d8:80: 3a:7b:9e:12:ab:07:4a:cd:78:3a:e3:30:fe:7b:06:0e:61:6c: a9:d0:6a:89:3e:a7:83:fc:4e:8f:8d:b3:36:bc:5c:b2:29:a4: 9c:da:a2:e4:ec:bc:a7:d1:51:c8:b6:7a:4a:67:1b:f5:29:84: 01:9f:2d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTCzXL0veU3FPP8vESnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy NTU4MzgwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD EygyMjE4NWYzYjk0ZmVlODYxMzRjMDYxYTcwYjRkOTMyYWEwNDNlOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV36S6DLJDieNfA2y7Rqqrv/YqI2 tCk7zHgfXjJEbGedU+dhzKVhUkcYabhJMy4j94MX80wcWJlGVQPTtXXNX4AHT2wF oBN74hDxSxIyHNkj8ExwqkIiDUSSlkyCBZfNk6abxzSSsuTss73R9uEP82/O97H6 9wNbRRTD0h4DmYMp+C3KavqVkeIUoNx7mCc4XbidxtgERSsUk98cfSqjWrVd1vNG QWPbsG66adKroqBFQeB1dzqyJaXSb9+7NosnoO5neTNBjrF/pVe04l4UJEp3ySfV mIIwXbyXpmUVZvH2Ngf3H/DAkwm1bcWP2iedS2wRH0cj1gp0Au4PnNKcBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIYXzuU/uhhNMBhpwtNkyqgQ+jkMB8GA1UdIwQY MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt N2YzMzUyMjM0ZTIxLzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl5ay0bR JRZZ9Ng+/aev0GtxvjE0MA8Ll+HuHeCGkFGZwX1K2ZnoO2a7tZ4A1r+dHBlPZdPm 0xeOZMF4/uqEaCjYnPezweb5GF/81pFnpMzrqoX8OpnzvQ1BrDpDpwk4bJVcumrj N75mON5fZFVwGI7pR4SeeQZdPsQUXFR4iD+pNdQEpEmWBB/7dAr1y7WCKgsM9htQ TqMckbtVxl5tXfv4gpP9VBNKmHaiUukgazXRffU5DN0+QIPQ8x2op8pebBfzjNiA OnueEqsHSs14OuMw/nsGDmFsqdBqiT6ng/xOj42zNrxcsimknNqi5Oy8p9FRyLZ6 Smcb9SmEAZ8tOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:30 2026 by rpki-client