This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json) Hash identifier: JPnbU2jcvoX11lNlVZVwZFa4pnE8dv3ZzBJfGcGHP6k= Subject key identifier: 7E:D1:0C:5B:8E:BD:C7:BF:4D:1F:F3:88:21:36:94:C7:C6:66:90:20 Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Certificate serial: 019C427DD9FAF2FE598760BE996220C83583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft Manifest number: 0F38 Signing time: Mon 09 Feb 2026 13:01:09 +0000 Manifest this update: Mon 09 Feb 2026 13:01:09 +0000 Manifest next update: Tue 10 Feb 2026 13:01:09 +0000 Files and hashes: 1: GbkvPI-kmfONtAuGoBOu2GW8-74.roa (hash: 2EzOh6hlkAJ6PDMBXoH3PL6bxWAgOzm9d8AoyksEql4=) 2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: ggDhcxp8GcVbsfTDhPKmJ4EWmg+KVJGxYPaT4nD/+6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d9:fa:f2:fe:59:87:60:be:99:62:20:c8:35:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Validity Not Before: Feb 9 13:01:09 2026 GMT Not After : Feb 10 13:01:09 2026 GMT Subject: CN=7ed10c5b8ebdc7bf4d1ff388213694c7c6669020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:1a:08:5b:3d:ce:6d:a3:96:63:0a:03:8b: ec:16:c7:bb:fb:ef:d0:e3:35:c4:30:ef:bd:bb:24: c2:3e:3a:42:1b:eb:00:8b:ec:aa:c7:57:62:0f:9f: af:1f:ec:35:97:d0:a0:63:2b:4f:1c:f8:01:cb:ee: 69:79:3c:99:0b:d2:c8:a8:d7:55:59:c4:dd:3f:b8: c1:a8:1d:2d:e7:c8:a7:44:69:fa:58:dc:d9:1e:3a: 5f:01:49:ee:d1:53:00:f0:f2:aa:e8:66:4e:ae:e2: 2f:ea:67:68:27:16:aa:9b:ec:cd:8a:77:81:d8:a8: 9b:cd:ca:39:84:af:9b:13:78:ca:b6:5f:5d:49:9c: fe:30:9a:03:73:d5:b3:0f:81:47:52:61:db:19:a0: 23:fe:98:18:ae:70:e9:ab:be:9e:82:70:68:57:b1: 39:79:88:8d:7a:65:fe:2c:e7:ce:12:ae:8c:06:77: 73:71:da:b9:d8:b7:2c:62:27:7a:8a:c6:6b:e2:23: 2a:ef:e7:03:58:52:64:d2:74:73:c0:ab:b7:6a:8f: d9:b1:aa:6e:f3:09:fb:61:e3:75:6d:fb:07:f6:1b: 7f:89:3a:3a:d5:6d:29:2a:ba:50:fd:27:bb:da:60: 98:3d:73:8a:82:54:b2:13:32:ac:c2:92:82:33:5d: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D1:0C:5B:8E:BD:C7:BF:4D:1F:F3:88:21:36:94:C7:C6:66:90:20 X509v3 Authority Key Identifier: keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fc:53:44:b8:0c:3b:6e:09:31:64:92:a8:10:27:54:7d:a5: e7:15:29:aa:bc:b9:79:11:4e:42:f3:3c:84:89:47:7f:f0:af: 80:7c:7b:08:98:68:89:50:b9:c6:9a:aa:19:69:0f:59:1b:30: f6:6c:a4:1a:1a:ab:ae:d4:b1:6e:7d:b7:4b:03:02:5d:ea:c7: 6a:d4:d3:3d:4d:6c:f5:1f:24:4d:d3:46:f4:98:ad:27:c4:37: 45:a8:2a:e4:3e:d6:e1:14:21:5f:cf:f3:c4:1a:54:02:b6:54: fc:4f:84:05:25:b0:0a:0c:ce:c4:52:94:c9:26:3b:ff:9d:3f: d7:58:f7:a5:c8:0d:9d:8d:98:58:07:22:3d:3d:3d:a0:c8:95: c3:45:fb:50:66:b2:e6:97:cf:38:6d:59:8c:03:9c:55:0e:d5: 5e:e6:db:18:2e:22:d8:73:03:67:a0:81:04:81:9b:78:d9:18: fb:bc:66:17:d7:87:81:ca:b7:ef:70:e8:a9:ac:cb:f2:bb:7a: 59:8c:28:f9:05:c6:e6:cd:e9:b0:d9:05:00:73:ca:55:a9:7d: c5:19:b6:c1:ec:21:4f:a5:29:bd:ce:46:f4:d4:c1:6e:46:7e: 3e:67:ef:7f:ce:d7:a0:14:7e:04:94:9b:d4:e6:0d:34:b9:12: 39:42:91:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdn68v5Zh2C+mWIgyDWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3 YzlhOGQwHhcNMjYwMjA5MTMwMTA5WhcNMjYwMjEwMTMwMTA5WjAzMTEwLwYDVQQD Eyg3ZWQxMGM1YjhlYmRjN2JmNGQxZmYzODgyMTM2OTRjN2M2NjY5MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVwaCFs9zm2jlmMKA4vsFse7++/Q 4zXEMO+9uyTCPjpCG+sAi+yqx1diD5+vH+w1l9CgYytPHPgBy+5peTyZC9LIqNdV WcTdP7jBqB0t58inRGn6WNzZHjpfAUnu0VMA8PKq6GZOruIv6mdoJxaqm+zNineB 2Kibzco5hK+bE3jKtl9dSZz+MJoDc9WzD4FHUmHbGaAj/pgYrnDpq76egnBoV7E5 eYiNemX+LOfOEq6MBndzcdq52LcsYid6isZr4iMq7+cDWFJk0nRzwKu3ao/Zsapu 8wn7YeN1bfsH9ht/iTo61W0pKrpQ/Se72mCYPXOKglSyEzKswpKCM102FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7RDFuOvce/TR/ziCE2lMfGZpAgMB8GA1UdIwQY MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPxTRLgM O24JMWSSqBAnVH2l5xUpqry5eRFOQvM8hIlHf/CvgHx7CJhoiVC5xpqqGWkPWRsw 9mykGhqrrtSxbn23SwMCXerHatTTPU1s9R8kTdNG9JitJ8Q3Ragq5D7W4RQhX8/z xBpUArZU/E+EBSWwCgzOxFKUySY7/50/11j3pcgNnY2YWAciPT09oMiVw0X7UGay 5pfPOG1ZjAOcVQ7VXubbGC4i2HMDZ6CBBIGbeNkY+7xmF9eHgcq373DoqazL8rt6 WYwo+QXG5s3psNkFAHPKVal9xRm2wewhT6Upvc5G9NTBbkZ+Pmfvf87XoBR+BJSb 1OYNNLkSOUKReA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:34 2026 by rpki-client