This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json) Hash identifier: oZHg0aUEZyslfVN78ZG8xuJ1NI1UVdzbH548KXeeF54= Subject key identifier: EA:37:88:A5:33:04:28:7F:AF:E0:64:E9:A2:C0:31:AB:05:87:00:8D Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019C427D582403F63E23FDD29456A92F28ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft Manifest number: 091D Signing time: Mon 09 Feb 2026 13:00:36 +0000 Manifest this update: Mon 09 Feb 2026 13:00:36 +0000 Manifest next update: Tue 10 Feb 2026 13:00:36 +0000 Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: WpGYvNuzR8SLXxf2xMWID3LSmPlSKaMeJ20ZUkIAMfU=) 2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:58:24:03:f6:3e:23:fd:d2:94:56:a9:2f:28:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Feb 9 13:00:36 2026 GMT Not After : Feb 10 13:00:36 2026 GMT Subject: CN=ea3788a53304287fafe064e9a2c031ab0587008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:ec:ca:fe:1e:06:4e:2f:79:cb:d9:60:cd: 83:7d:c1:2f:86:9d:73:b3:88:df:30:ce:9c:b9:ba: 73:3f:40:6e:69:67:2f:0b:40:00:15:85:aa:64:42: 2a:8d:30:0a:e0:c1:dc:39:f0:69:6f:44:92:b3:b4: eb:d0:29:42:00:82:c0:bd:df:ef:e4:67:ba:af:93: b9:45:d5:79:d8:a1:20:b6:8c:c5:1c:ca:0c:d1:61: 0a:fb:f4:78:55:70:7b:24:e1:a3:54:da:76:61:27: 00:88:19:58:7c:00:cd:c2:26:9d:44:b3:ff:19:f0: 76:69:a9:c6:92:4d:e3:da:4b:26:73:2f:60:ef:e5: 80:28:2c:43:c3:97:f9:b2:a5:99:89:ad:58:c9:5f: ac:3a:5e:89:00:81:a0:10:da:0c:5a:4b:b6:27:c8: ae:e6:ae:64:82:05:43:72:0c:9e:a5:87:cc:3a:a1: db:79:05:26:c8:90:69:57:87:15:5f:76:12:f6:e1: 5f:be:8d:01:e1:2b:5c:d6:12:cf:cb:23:2c:6e:02: 41:0c:04:24:79:b9:93:98:33:76:3e:4d:ac:41:e4: 1e:c6:d4:82:19:64:6c:d2:6d:d2:58:ee:6a:9d:8a: b3:5c:83:43:5c:34:f0:1f:c9:19:1a:32:37:d5:6f: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:37:88:A5:33:04:28:7F:AF:E0:64:E9:A2:C0:31:AB:05:87:00:8D X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:dd:33:6b:c2:56:28:94:44:b2:b8:5c:d8:f2:b3:f0:85:69: 9e:f8:8b:9f:f6:1e:ef:c5:4b:9d:f8:69:57:b2:5a:63:b2:ed: 1c:62:e1:88:80:14:04:d1:49:cf:5c:23:7f:0b:85:65:6f:0f: a1:3f:52:84:5b:96:1d:e0:b8:48:46:61:7c:db:65:5c:13:eb: e9:06:5b:ef:b1:49:e7:8f:ff:34:f2:21:9e:77:f3:a7:a5:ec: 39:37:d1:54:99:0a:3c:a9:79:cf:fb:3d:f7:3d:57:be:72:28: 4e:83:f4:2d:1b:bd:3f:5b:6c:3a:dc:7e:b6:75:2a:e4:31:c5: 4d:34:90:62:e8:fa:93:0d:e3:8d:27:5f:4b:21:93:01:4d:93: 89:ce:49:93:26:d1:4d:51:a9:6b:80:26:1c:02:f1:a3:16:38: 1a:02:ac:bc:f7:02:44:fc:c2:3d:47:6a:ff:03:5a:54:4e:d8: 9d:10:45:63:e7:2d:f8:64:dd:b3:ae:dc:82:a6:91:9c:2a:a4: bd:07:fd:4a:78:16:b4:f0:83:dc:19:09:20:78:5b:ef:8f:ce: 66:81:b7:9a:2b:ab:eb:00:00:fe:ce:b9:bd:8a:68:90:5a:c5: 8b:44:56:c6:e5:18:e6:41:38:08:ed:19:1a:7d:c4:ba:07:7d: 24:63:4d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVgkA/Y+I/3SlFapLyjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjYwMjA5MTMwMDM2WhcNMjYwMjEwMTMwMDM2WjAzMTEwLwYDVQQD EyhlYTM3ODhhNTMzMDQyODdmYWZlMDY0ZTlhMmMwMzFhYjA1ODcwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo3syv4eBk4vecvZYM2DfcEvhp1z s4jfMM6cubpzP0BuaWcvC0AAFYWqZEIqjTAK4MHcOfBpb0SSs7Tr0ClCAILAvd/v 5Ge6r5O5RdV52KEgtozFHMoM0WEK+/R4VXB7JOGjVNp2YScAiBlYfADNwiadRLP/ GfB2aanGkk3j2ksmcy9g7+WAKCxDw5f5sqWZia1YyV+sOl6JAIGgENoMWku2J8iu 5q5kggVDcgyepYfMOqHbeQUmyJBpV4cVX3YS9uFfvo0B4Stc1hLPyyMsbgJBDAQk ebmTmDN2Pk2sQeQextSCGWRs0m3SWO5qnYqzXINDXDTwH8kZGjI31W/MHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo3iKUzBCh/r+Bk6aLAMasFhwCNMB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd0za8JW KJREsrhc2PKz8IVpnviLn/Ye78VLnfhpV7JaY7LtHGLhiIAUBNFJz1wjfwuFZW8P oT9ShFuWHeC4SEZhfNtlXBPr6QZb77FJ54//NPIhnnfzp6XsOTfRVJkKPKl5z/s9 9z1XvnIoToP0LRu9P1tsOtx+tnUq5DHFTTSQYuj6kw3jjSdfSyGTAU2Tic5JkybR TVGpa4AmHALxoxY4GgKsvPcCRPzCPUdq/wNaVE7YnRBFY+ct+GTds67cgqaRnCqk vQf9SngWtPCD3BkJIHhb74/OZoG3miur6wAA/s65vYpokFrFi0RWxuUY5kE4CO0Z Gn3Eugd9JGNN8w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:13 2026 by rpki-client