This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json) Hash identifier: 3uM/rOTPwb05EYyYHc19h0XBW1Gm+uPDAU3C373WOrs= Subject key identifier: 79:7E:B5:9D:14:13:CF:27:85:48:56:BE:A0:4A:48:7E:4D:66:D3:FC Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Certificate serial: 019C443480A167762200645D8CDD20E25636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft Manifest number: 082A Signing time: Mon 09 Feb 2026 21:00:17 +0000 Manifest this update: Mon 09 Feb 2026 21:00:17 +0000 Manifest next update: Tue 10 Feb 2026 21:00:17 +0000 Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: JSo5PU0zjHmYpYrSlev5ClHpBOr48ie1T9xGuStkqNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:80:a1:67:76:22:00:64:5d:8c:dd:20:e2:56:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3 Validity Not Before: Feb 9 21:00:17 2026 GMT Not After : Feb 10 21:00:17 2026 GMT Subject: CN=797eb59d1413cf27854856bea04a487e4d66d3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:ab:c6:18:64:8d:7f:7f:eb:aa:34:af:9e: 16:a3:65:74:39:51:df:a2:2b:2f:e0:d7:a5:d9:ff: 69:20:96:82:9a:67:4a:c3:84:94:08:87:a1:f3:b2: 81:89:1f:dd:71:09:0c:fd:50:64:6f:2b:65:ce:a6: a7:c0:01:9f:ac:f9:71:0e:57:49:08:77:9c:da:c0: 0a:00:d7:45:b3:bb:27:4c:0b:14:fc:fd:66:bc:ca: b4:4e:0d:5c:8d:42:96:51:1e:98:b1:f4:65:56:25: 83:ff:e3:75:08:fa:2b:f0:34:c1:2e:52:7c:f6:39: 91:b3:41:00:63:cb:2a:ae:e3:56:10:67:cb:6f:be: ee:e5:73:f4:5f:ca:e5:d8:24:66:02:22:2d:d5:b6: 37:9f:94:92:3c:1e:c9:d8:7a:96:fd:74:88:1f:ae: 69:d4:66:eb:6b:f3:f9:76:69:82:ec:92:92:2a:99: 27:87:c8:5f:30:5f:6f:34:d2:87:fb:fb:98:a4:d9: 74:af:e5:4a:37:cd:c6:d2:60:e5:ed:83:de:69:47: d2:5f:72:a2:ef:8a:9e:b1:db:d5:34:06:2c:fd:cf: 18:0c:12:cd:b7:24:3a:e2:00:ee:a9:52:48:f0:25: c8:1f:4c:27:a0:ec:07:7a:f2:43:ab:a0:34:b0:bb: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7E:B5:9D:14:13:CF:27:85:48:56:BE:A0:4A:48:7E:4D:66:D3:FC X509v3 Authority Key Identifier: keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b4:5c:c7:88:2c:55:26:38:45:2e:97:de:39:d3:82:b4:68: fc:0b:74:4d:6b:aa:72:58:61:10:7b:03:9a:c7:ea:4d:1e:9b: 5d:91:ca:f8:29:0b:b8:40:ab:39:6a:aa:53:32:10:b0:79:d1: 9e:64:e6:fc:4e:a1:2e:9d:a6:2b:38:fe:21:46:49:8a:88:9e: 2e:96:7d:f2:9a:88:ca:47:b3:9c:58:09:54:5d:54:33:64:04: c2:a0:db:ae:f7:32:2e:15:c9:0a:45:87:6a:af:57:d7:95:c3: a3:00:16:ea:df:b3:29:41:67:65:eb:fd:a4:81:39:a0:32:c0: d6:8e:fa:af:d5:16:e4:4f:7d:6d:4a:53:a8:1b:35:88:18:ba: 6a:13:1d:bd:46:a3:14:b2:ed:8c:96:02:5a:29:bd:0b:9d:c1: 79:b4:94:72:f3:7a:dc:d9:bd:5a:9d:0c:86:50:c0:8b:ee:b9: 96:a1:fa:e8:9f:96:07:ee:75:d3:63:73:da:8d:c7:fc:1a:d1: c3:87:3a:11:58:d1:49:d0:e1:e6:14:56:9d:dd:5c:ea:3c:85: e0:eb:3c:ea:8b:9d:d9:d0:b9:9c:07:d7:da:20:53:8f:35:3f: eb:02:82:d9:2f:5e:49:f6:5d:75:dd:69:aa:25:e1:78:67:c7: 4b:d1:15:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENIChZ3YiAGRdjN0g4lY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzhmOGM5YzcwNzJiNzMwNDg4ZjllMzIxMjhkZDg5NWJk ZTMyZDMwHhcNMjYwMjA5MjEwMDE3WhcNMjYwMjEwMjEwMDE3WjAzMTEwLwYDVQQD Eyg3OTdlYjU5ZDE0MTNjZjI3ODU0ODU2YmVhMDRhNDg3ZTRkNjZkM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk6rxhhkjX9/66o0r54Wo2V0OVHf oisv4Nel2f9pIJaCmmdKw4SUCIeh87KBiR/dcQkM/VBkbytlzqanwAGfrPlxDldJ CHec2sAKANdFs7snTAsU/P1mvMq0Tg1cjUKWUR6YsfRlViWD/+N1CPor8DTBLlJ8 9jmRs0EAY8sqruNWEGfLb77u5XP0X8rl2CRmAiIt1bY3n5SSPB7J2HqW/XSIH65p 1Gbra/P5dmmC7JKSKpknh8hfMF9vNNKH+/uYpNl0r+VKN83G0mDl7YPeaUfSX3Ki 74qesdvVNAYs/c8YDBLNtyQ64gDuqVJI8CXIH0wnoOwHevJDq6A0sLup+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl+tZ0UE88nhUhWvqBKSH5NZtP8MB8GA1UdIwQY MBaAFNd4+MnHBytzBIj54yEo3Ylb3jLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAt NThiZTkyN2Y0MmU5LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAtNThiZTkyN2Y0MmU5 LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbRcx4gs VSY4RS6X3jnTgrRo/At0TWuqclhhEHsDmsfqTR6bXZHK+CkLuECrOWqqUzIQsHnR nmTm/E6hLp2mKzj+IUZJioieLpZ98pqIykeznFgJVF1UM2QEwqDbrvcyLhXJCkWH aq9X15XDowAW6t+zKUFnZev9pIE5oDLA1o76r9UW5E99bUpTqBs1iBi6ahMdvUaj FLLtjJYCWim9C53BebSUcvN63Nm9Wp0MhlDAi+65lqH66J+WB+5102Nz2o3H/BrR w4c6EVjRSdDh5hRWnd1c6jyF4Os86oud2dC5nAfX2iBTjzU/6wKC2S9eSfZddd1p qiXheGfHS9EVfA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:20 2026 by rpki-client