This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json) Hash identifier: MO19uaV41HkMCnXkmrT3agR7MENjBSEIP1uAsJDeBlM= Subject key identifier: 70:F0:2A:F3:5B:E3:26:42:E6:A9:43:24:7E:8D:67:D6:5F:74:7E:E0 Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Certificate serial: 019C42B40EB9D8197D113790D27FBA43B0A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft Manifest number: 152A Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: FcG1bfi0xatZEN/gb5lsMTvlz/xl6MjR1ISSpEwOdrs=) 2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0e:b9:d8:19:7d:11:37:90:d2:7f:ba:43:b0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=70f02af35be32642e6a943247e8d67d65f747ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:7d:bf:97:c8:02:53:b5:27:d6:8a:46:c3: 36:4f:f8:65:a7:4c:3e:f2:35:7e:6d:28:14:12:40: b6:c5:4e:56:d3:77:81:bf:1b:20:ce:28:f9:a9:5e: d5:8a:15:53:f5:90:85:ae:32:0c:63:8d:d9:f2:12: 2b:79:99:0c:27:cb:37:9c:e2:38:c2:f2:31:a7:ad: 24:3d:47:c8:bd:da:31:3f:d0:a4:cb:68:ab:6a:77: 25:59:a9:c8:83:af:51:96:69:f4:1b:55:db:c3:9c: bd:7e:3e:d2:59:4f:79:57:46:74:14:5a:92:d1:42: 38:39:28:c2:db:19:55:da:c6:b6:1d:76:de:b3:65: cc:57:c8:8b:26:be:c1:71:92:f3:fb:08:0c:e4:ce: f3:95:e4:7f:a4:35:f1:ca:75:96:0e:01:eb:59:16: c8:d2:8b:b4:28:96:ab:09:07:61:67:b0:64:dc:b4: 7c:f1:e9:bd:ba:a7:a0:21:b0:45:92:7f:8d:6e:65: e1:db:6b:f4:87:e5:de:7b:60:14:16:ff:7d:c7:e8: 78:91:7e:55:0d:36:b9:5c:1d:fd:4e:6f:a5:54:6d: d8:53:bb:87:38:aa:dd:e3:ca:30:80:5c:78:66:66: 16:b6:e8:a8:74:7f:a7:db:8b:3b:6c:20:d9:1a:d0: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F0:2A:F3:5B:E3:26:42:E6:A9:43:24:7E:8D:67:D6:5F:74:7E:E0 X509v3 Authority Key Identifier: keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:d5:a8:b3:dd:bc:59:82:2a:18:4a:b3:d1:61:0e:7e:a4: a6:8b:e7:c7:e6:d0:78:66:46:b8:34:b3:3a:b8:60:b9:41:a3: 95:88:b3:5a:7c:91:64:f0:dc:1e:c2:8e:7a:d7:e7:0c:de:5a: ce:cf:4e:45:34:0d:8f:e7:5e:59:a2:99:fc:ed:87:ff:12:28: ae:62:1d:c7:91:4e:8a:14:82:70:66:d7:1b:26:5d:f0:95:fb: 12:f9:20:58:f5:eb:d3:62:95:04:12:ea:59:60:5b:08:19:ed: 07:9a:5e:c9:93:34:3e:4a:53:0f:ba:ec:3c:45:7d:3b:97:d9: 78:ab:cf:7b:5c:cc:a9:ae:e7:9e:55:8a:57:57:8f:bc:ed:36: 0e:df:78:f5:b6:82:fd:9d:1b:84:cb:ac:a3:77:70:1c:61:6b: af:4d:7b:5b:fc:d8:3a:f3:dc:12:81:61:ea:13:3f:63:58:d1: 25:44:29:b1:69:35:85:8c:8f:65:86:ff:5f:d3:ad:dd:08:c3: 8c:6c:4d:c3:17:7b:69:10:06:f8:cf:39:a3:96:2c:8e:54:e9: 7c:3c:d1:9c:d3:21:41:f0:73:67:8e:1f:91:3b:a6:d6:23:6e: 17:df:75:0c:3c:80:94:3e:fb:9d:39:e1:1f:eb:11:96:43:44: 7e:1b:b1:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtA652Bl9ETeQ0n+6Q7CjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0 MmY1ZGMwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD Eyg3MGYwMmFmMzViZTMyNjQyZTZhOTQzMjQ3ZThkNjdkNjVmNzQ3ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmh9v5fIAlO1J9aKRsM2T/hlp0w+ 8jV+bSgUEkC2xU5W03eBvxsgzij5qV7VihVT9ZCFrjIMY43Z8hIreZkMJ8s3nOI4 wvIxp60kPUfIvdoxP9Cky2iranclWanIg69Rlmn0G1Xbw5y9fj7SWU95V0Z0FFqS 0UI4OSjC2xlV2sa2HXbes2XMV8iLJr7BcZLz+wgM5M7zleR/pDXxynWWDgHrWRbI 0ou0KJarCQdhZ7Bk3LR88em9uqegIbBFkn+NbmXh22v0h+Xee2AUFv99x+h4kX5V DTa5XB39Tm+lVG3YU7uHOKrd48owgFx4ZmYWtuiodH+n24s7bCDZGtDSJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDwKvNb4yZC5qlDJH6NZ9ZfdH7gMB8GA1UdIwQY MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUTVqLPd vFmCKhhKs9FhDn6kpovnx+bQeGZGuDSzOrhguUGjlYizWnyRZPDcHsKOetfnDN5a zs9ORTQNj+deWaKZ/O2H/xIormIdx5FOihSCcGbXGyZd8JX7EvkgWPXr02KVBBLq WWBbCBntB5peyZM0PkpTD7rsPEV9O5fZeKvPe1zMqa7nnlWKV1ePvO02Dt949baC /Z0bhMuso3dwHGFrr017W/zYOvPcEoFh6hM/Y1jRJUQpsWk1hYyPZYb/X9Ot3QjD jGxNwxd7aRAG+M85o5YsjlTpfDzRnNMhQfBzZ44fkTum1iNuF991DDyAlD77nTnh H+sRlkNEfhuxMA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:21:56 2026 by rpki-client