This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json) Hash identifier: huemldNHAOTkOlPgjRw2ITd0L0PDxeIkUXuaVLeIvFU= Subject key identifier: 97:08:98:C1:77:1B:36:5E:6B:DD:04:4C:63:3C:4A:89:B8:97:0C:59 Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641 Certificate serial: 019C43C720320A4DAEA0963A429D892D0563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft Manifest number: 0970 Signing time: Mon 09 Feb 2026 19:00:49 +0000 Manifest this update: Mon 09 Feb 2026 19:00:49 +0000 Manifest next update: Tue 10 Feb 2026 19:00:49 +0000 Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=) 2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: J46zCCwZXkuvet79xJQODZQIu1PCStOnsyw/x8BaauY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:20:32:0a:4d:ae:a0:96:3a:42:9d:89:2d:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641 Validity Not Before: Feb 9 19:00:49 2026 GMT Not After : Feb 10 19:00:49 2026 GMT Subject: CN=970898c1771b365e6bdd044c633c4a89b8970c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:18:78:fb:a3:1b:fa:af:fa:45:a7:46:95: a2:c9:3c:48:1c:bc:b4:6d:1b:c6:0d:75:28:34:58: 58:12:6a:93:54:ba:84:ee:b3:63:83:01:7f:d3:f8: 30:dc:5f:6c:58:fd:1b:ac:9a:97:0e:c9:60:4c:39: 43:c7:52:0b:93:de:ab:12:c3:fb:69:71:b0:1a:7e: dc:74:a8:78:53:fd:d8:fc:c5:33:d7:a6:6e:73:eb: 03:13:bc:95:7b:a5:4c:8d:00:af:8d:58:33:6b:d2: ee:b4:81:9c:a1:f6:4e:26:6f:33:bc:7e:18:10:7a: 93:ae:68:f0:19:ca:fd:58:d1:3d:85:52:e1:2f:31: 41:23:e6:00:55:3d:7f:b3:1a:d8:98:65:22:88:50: ed:94:42:ba:67:75:01:5c:5e:c4:f8:22:0b:38:63: 99:76:90:7e:ec:5a:47:00:a3:bc:63:a4:9f:dd:cb: e3:a5:6d:e8:8b:3e:fc:6f:be:9d:41:9a:2a:55:41: dd:80:0c:aa:cd:f8:f8:f7:59:cf:84:4a:bb:24:c1: 75:4e:70:a9:55:46:6c:ee:82:8e:20:9e:c6:9b:31: 86:3f:a4:53:10:74:7f:39:40:d0:69:9c:b7:fe:3b: 86:f1:76:94:c5:a5:a4:60:15:e4:56:be:17:18:ec: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:98:C1:77:1B:36:5E:6B:DD:04:4C:63:3C:4A:89:B8:97:0C:59 X509v3 Authority Key Identifier: keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a3:14:f7:18:85:b3:40:c7:58:9d:06:92:59:bf:b0:4d:12: 3c:e4:fa:75:34:aa:fc:ea:54:95:68:57:10:a5:a9:db:2f:8b: 31:64:4a:03:9b:83:e5:45:f2:1e:c7:ed:b6:4a:24:d5:9c:a3: 98:21:9e:a3:61:9c:fb:51:80:a3:45:24:3b:6d:10:08:94:2e: 1f:06:53:ba:fb:ef:ee:8b:48:d9:d1:bb:69:c3:8b:39:ab:aa: 8f:d4:d0:bf:52:4c:fd:77:f5:0d:ca:3b:56:a0:dd:a0:83:95: b4:25:c2:00:b4:42:39:47:72:c4:f0:2c:3e:b7:50:06:69:f9: 8d:ae:70:4d:7a:19:99:74:8b:ab:0e:60:2c:14:a3:a6:d8:d2: e1:46:57:75:3e:50:f1:79:bc:47:a3:5d:be:44:8e:3f:f8:4b: 5a:e4:d0:57:d5:89:52:6e:8f:b4:5d:2d:c3:e9:78:33:f9:96: ce:51:ee:ba:da:50:fd:43:22:48:2f:75:37:1a:3c:4d:b7:97: 7f:47:0a:22:0b:08:3f:82:f7:88:85:eb:24:0b:86:29:6b:b3: 97:1f:22:91:6f:4b:62:16:a5:d7:a6:f3:e2:5b:69:48:a5:55: 4f:06:6c:0c:03:9c:d8:39:a8:fb:bd:6a:68:72:6c:30:5e:52: b9:bb:14:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyAyCk2uoJY6Qp2JLQVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGEyZDcyZTc5MDI2ZjUyYmY1NjU3ZTk3ZmZkMWIxMWJl ODg2NDEwHhcNMjYwMjA5MTkwMDQ5WhcNMjYwMjEwMTkwMDQ5WjAzMTEwLwYDVQQD Eyg5NzA4OThjMTc3MWIzNjVlNmJkZDA0NGM2MzNjNGE4OWI4OTcwYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA4YePujG/qv+kWnRpWiyTxIHLy0 bRvGDXUoNFhYEmqTVLqE7rNjgwF/0/gw3F9sWP0brJqXDslgTDlDx1ILk96rEsP7 aXGwGn7cdKh4U/3Y/MUz16Zuc+sDE7yVe6VMjQCvjVgza9LutIGcofZOJm8zvH4Y EHqTrmjwGcr9WNE9hVLhLzFBI+YAVT1/sxrYmGUiiFDtlEK6Z3UBXF7E+CILOGOZ dpB+7FpHAKO8Y6Sf3cvjpW3oiz78b76dQZoqVUHdgAyqzfj491nPhEq7JMF1TnCp VUZs7oKOIJ7GmzGGP6RTEHR/OUDQaZy3/juG8XaUxaWkYBXkVr4XGOzVwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcImMF3GzZea90ETGM8Som4lwxZMB8GA1UdIwQY MBaAFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAt YzM2OTc2MzYzOTY4LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAtYzM2OTc2MzYzOTY4 LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6MU9xiF s0DHWJ0Gklm/sE0SPOT6dTSq/OpUlWhXEKWp2y+LMWRKA5uD5UXyHsfttkok1Zyj mCGeo2Gc+1GAo0UkO20QCJQuHwZTuvvv7otI2dG7acOLOauqj9TQv1JM/Xf1Dco7 VqDdoIOVtCXCALRCOUdyxPAsPrdQBmn5ja5wTXoZmXSLqw5gLBSjptjS4UZXdT5Q 8Xm8R6NdvkSOP/hLWuTQV9WJUm6PtF0tw+l4M/mWzlHuutpQ/UMiSC91Nxo8TbeX f0cKIgsIP4L3iIXrJAuGKWuzlx8ikW9LYhal16bz4ltpSKVVTwZsDAOc2Dmo+71q aHJsMF5SubsUhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:18 2026 by rpki-client