This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json) Hash identifier: SdcdvEZq5HMWBewEaApxVjH4TOMnJLb9p00usUigCzU= Subject key identifier: D3:2A:25:3A:5D:26:FA:B0:1B:BD:5C:BD:80:3D:B8:31:4C:F5:84:F8 Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155 Certificate serial: 019C41A22C7A7F50B395B5830FF32F51052A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft Manifest number: 0F06 Signing time: Mon 09 Feb 2026 09:01:13 +0000 Manifest this update: Mon 09 Feb 2026 09:01:13 +0000 Manifest next update: Tue 10 Feb 2026 09:01:13 +0000 Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: 4Fbs/ZtX3l8b2JVUrqoac2sfbxqxHky8f5LYIHapWPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:2c:7a:7f:50:b3:95:b5:83:0f:f3:2f:51:05:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155 Validity Not Before: Feb 9 09:01:13 2026 GMT Not After : Feb 10 09:01:13 2026 GMT Subject: CN=d32a253a5d26fab01bbd5cbd803db8314cf584f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:aa:93:24:5a:62:ab:0c:87:0d:d1:ba:81: aa:d6:96:03:a0:6c:d3:46:ba:7d:b9:65:98:f9:ff: c9:98:12:b3:4a:9c:06:53:88:b7:a6:fc:d2:86:3c: 2a:08:df:7d:e6:d8:b6:05:fb:e3:8a:2c:31:12:5d: 77:82:a2:1c:45:94:21:fc:97:b9:78:f8:ce:1a:d7: 25:2e:ab:5a:37:ee:5e:3e:f7:33:a0:4b:f7:e0:aa: e0:1b:57:67:14:69:95:3c:c1:8b:d1:35:1f:8c:02: 15:59:38:40:c9:73:5b:f9:29:3e:2d:6e:db:06:a6: f8:25:44:07:25:09:5a:a5:4c:67:de:fc:4d:c2:ed: 8c:5d:81:dd:e8:83:1a:5c:79:48:eb:f6:ee:48:a9: eb:43:ac:6e:70:c4:d7:2a:13:8f:34:9a:a5:39:a2: b7:40:bc:24:55:b2:3a:0e:cb:61:24:58:55:99:7d: 9f:fd:ee:12:55:a9:7c:67:cb:30:1f:77:e1:b9:4e: 1a:dd:2e:8c:9c:1c:1b:14:44:be:6f:cc:0f:27:e6: 48:31:f5:92:09:67:26:d7:13:2f:42:f9:e7:dd:72: 33:1b:19:c7:c1:ab:e1:3d:e4:61:3d:7c:83:f2:c9: 54:87:3b:8f:2b:aa:8e:45:bc:03:01:d0:f6:b4:9c: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:25:3A:5D:26:FA:B0:1B:BD:5C:BD:80:3D:B8:31:4C:F5:84:F8 X509v3 Authority Key Identifier: keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a9:38:b6:ff:fb:16:b9:35:7e:48:5a:f7:83:83:bc:5b:ac: 01:5d:d2:4c:89:79:6d:47:ae:ec:dd:24:5e:3e:bf:80:8b:6b: d4:c3:36:08:74:0e:01:a9:48:cf:34:b2:00:7f:25:f1:42:c4: 19:1d:02:c7:4d:09:61:77:96:9a:6b:9b:04:3e:98:92:cf:07: bf:f4:5a:86:e5:e1:2c:01:24:0f:12:96:58:0a:8e:d6:0f:6b: 85:16:78:55:a7:55:c6:ef:95:a7:71:3d:8d:f5:87:59:44:83: b8:cb:86:20:5e:78:69:d4:4a:10:17:b2:3d:0b:a6:e1:ed:29: 92:c4:bc:08:03:ac:ca:5d:fd:94:90:ff:f4:40:16:e4:89:80: 23:f9:7b:6e:8c:70:53:3b:ce:57:e0:7f:25:ee:ae:1d:8f:29: ff:fb:a8:ae:b8:26:6c:d6:ed:b5:e8:a3:d8:6b:ad:63:d2:d6: 7f:91:66:e8:f5:0e:ed:3a:29:80:ec:b6:18:dc:93:30:53:37: 51:b4:3e:e7:14:bb:c6:3b:aa:1f:40:ef:79:2c:80:ac:ff:02: fc:39:7f:54:5e:f6:06:04:ff:00:b4:fb:83:83:3d:30:fa:b9: e6:7f:ef:c9:62:5a:40:70:d2:f4:a2:2a:40:b7:f7:65:67:6e: e5:37:d1:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoix6f1CzlbWDD/MvUQUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj MzUxNTUwHhcNMjYwMjA5MDkwMTEzWhcNMjYwMjEwMDkwMTEzWjAzMTEwLwYDVQQD EyhkMzJhMjUzYTVkMjZmYWIwMWJiZDVjYmQ4MDNkYjgzMTRjZjU4NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqeqkyRaYqsMhw3RuoGq1pYDoGzT Rrp9uWWY+f/JmBKzSpwGU4i3pvzShjwqCN995ti2BfvjiiwxEl13gqIcRZQh/Je5 ePjOGtclLqtaN+5ePvczoEv34KrgG1dnFGmVPMGL0TUfjAIVWThAyXNb+Sk+LW7b Bqb4JUQHJQlapUxn3vxNwu2MXYHd6IMaXHlI6/buSKnrQ6xucMTXKhOPNJqlOaK3 QLwkVbI6DsthJFhVmX2f/e4SVal8Z8swH3fhuU4a3S6MnBwbFES+b8wPJ+ZIMfWS CWcm1xMvQvnn3XIzGxnHwavhPeRhPXyD8slUhzuPK6qORbwDAdD2tJzIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMqJTpdJvqwG71cvYA9uDFM9YT4MB8GA1UdIwQY MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0 LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjak4tv/7 Frk1fkha94ODvFusAV3STIl5bUeu7N0kXj6/gItr1MM2CHQOAalIzzSyAH8l8ULE GR0Cx00JYXeWmmubBD6Yks8Hv/RahuXhLAEkDxKWWAqO1g9rhRZ4VadVxu+Vp3E9 jfWHWUSDuMuGIF54adRKEBeyPQum4e0pksS8CAOsyl39lJD/9EAW5ImAI/l7boxw UzvOV+B/Je6uHY8p//uorrgmbNbtteij2GutY9LWf5Fm6PUO7TopgOy2GNyTMFM3 UbQ+5xS7xjuqH0DveSyArP8C/Dl/VF72BgT/ALT7g4M9MPq55n/vyWJaQHDS9KIq QLf3ZWdu5TfR+w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:19 2026 by rpki-client