This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json) Hash identifier: iA04rL9pCTfT0UVtH6Ipmo4/BehozjF4ZgrsTnYB+TM= Subject key identifier: 4A:48:57:07:53:38:C6:4B:33:17:9A:F2:5D:E8:00:B6:04:22:9F:F3 Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Certificate serial: 019C427D7DA567D21933B8BA6620CFC150EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:00:46 +0000 Manifest this update: Mon 09 Feb 2026 13:00:46 +0000 Manifest next update: Tue 10 Feb 2026 13:00:46 +0000 Files and hashes: 1: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (hash: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8=) 2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: 8qJOT0oB2dgDOw3/3KHcqdkH/E523Ojy2tnSeypysBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7d:a5:67:d2:19:33:b8:ba:66:20:cf:c1:50:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Validity Not Before: Feb 9 13:00:46 2026 GMT Not After : Feb 10 13:00:46 2026 GMT Subject: CN=4a4857075338c64b33179af25de800b604229ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:27:96:81:3d:fa:fa:47:14:e4:e2:c9:02: 0a:52:fc:a8:b7:6c:e2:d8:92:e0:3b:32:36:f7:2a: 88:6f:97:a4:18:ee:5a:e0:e4:1e:3a:ad:90:b1:e4: 34:e7:0d:87:03:e0:a2:04:e4:47:85:07:58:4e:38: f8:ea:63:b3:f0:58:f7:8f:6a:37:a1:70:29:d9:f7: 26:0b:49:f8:37:43:5f:8a:d5:f1:1c:1e:ba:6e:aa: b6:5d:0c:59:d4:af:24:dc:e6:5b:65:99:6b:c7:4d: 6b:d5:21:c6:f0:21:c2:c3:19:a5:7d:01:68:ad:f6: 8d:62:fd:76:7c:24:19:e5:75:25:d8:e2:53:cb:d8: 14:e5:d3:0e:e4:7f:6c:f5:37:0a:95:fd:33:08:3c: d7:88:29:c0:95:b1:50:6c:70:1f:93:35:5f:01:58: 2c:41:4d:ce:4d:a7:0d:8c:5b:90:57:69:15:8b:28: 33:b4:59:ca:ff:f6:1d:f3:85:49:d0:3e:0f:29:51: 1f:10:20:a0:54:61:5f:c5:84:18:13:7a:a4:89:0b: d0:7d:c5:84:a9:3a:3f:17:c4:b0:80:ea:39:6c:58: ea:2e:a3:15:d5:3c:5c:88:c5:c1:a5:bc:53:a2:36: 76:e5:f2:24:82:70:8c:dd:66:26:2b:bf:03:08:1b: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:57:07:53:38:C6:4B:33:17:9A:F2:5D:E8:00:B6:04:22:9F:F3 X509v3 Authority Key Identifier: keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:33:d7:02:97:39:43:00:7f:76:f1:8a:db:1f:c5:8b:d1:bb: 6d:b2:db:c0:ba:6a:d2:2b:df:d5:67:bb:8a:34:66:d1:97:b7: fd:8f:32:c0:38:35:9e:db:6d:87:0c:96:93:f7:5a:c9:aa:f7: 10:e4:5a:01:32:0f:b9:be:da:eb:2b:33:f8:8f:d6:b9:1a:f0: c6:d3:51:bd:ee:88:c7:b8:ed:ab:ae:28:b1:f9:98:08:c7:15: c3:bf:21:08:8a:93:68:ed:c4:39:83:06:79:08:54:1d:ea:da: 85:c6:54:a3:59:99:fb:ee:2b:64:be:21:10:ca:e0:0e:c4:d5: e2:ef:d3:08:a6:57:ba:98:98:41:a5:b2:7a:6b:b8:56:63:59: 5b:56:7f:68:02:4b:f1:c2:84:0f:12:e8:53:19:56:df:57:09: 8b:75:08:b5:1e:70:32:a7:96:b3:7b:7d:bb:40:dc:3e:f8:d0: 14:ec:10:fa:55:4c:74:50:c6:55:30:dc:67:79:50:48:3e:f7: 89:20:1b:85:5d:1d:2f:8c:bc:e4:0c:2c:ba:46:6a:af:9b:12: 68:51:19:2b:57:5e:80:9a:d7:b0:66:07:68:89:62:3d:6e:e9: 72:e1:94:d5:0e:56:bb:36:60:e5:96:09:31:36:e0:88:8b:3a: e4:52:20:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfX2lZ9IZM7i6ZiDPwVDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm MTM5MDIwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD Eyg0YTQ4NTcwNzUzMzhjNjRiMzMxNzlhZjI1ZGU4MDBiNjA0MjI5ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL8nloE9+vpHFOTiyQIKUvyot2zi 2JLgOzI29yqIb5ekGO5a4OQeOq2QseQ05w2HA+CiBORHhQdYTjj46mOz8Fj3j2o3 oXAp2fcmC0n4N0NfitXxHB66bqq2XQxZ1K8k3OZbZZlrx01r1SHG8CHCwxmlfQFo rfaNYv12fCQZ5XUl2OJTy9gU5dMO5H9s9TcKlf0zCDzXiCnAlbFQbHAfkzVfAVgs QU3OTacNjFuQV2kViygztFnK//Yd84VJ0D4PKVEfECCgVGFfxYQYE3qkiQvQfcWE qTo/F8SwgOo5bFjqLqMV1TxciMXBpbxTojZ25fIkgnCM3WYmK78DCBtzoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpIVwdTOMZLMxea8l3oALYEIp/zMB8GA1UdIwQY MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTPXApc5 QwB/dvGK2x/Fi9G7bbLbwLpq0ivf1We7ijRm0Ze3/Y8ywDg1nttthwyWk/dayar3 EORaATIPub7a6ysz+I/WuRrwxtNRve6Ix7jtq64osfmYCMcVw78hCIqTaO3EOYMG eQhUHerahcZUo1mZ++4rZL4hEMrgDsTV4u/TCKZXupiYQaWyemu4VmNZW1Z/aAJL 8cKEDxLoUxlW31cJi3UItR5wMqeWs3t9u0DcPvjQFOwQ+lVMdFDGVTDcZ3lQSD73 iSAbhV0dL4y85AwsukZqr5sSaFEZK1degJrXsGYHaIliPW7pcuGU1Q5WuzZg5ZYJ MTbgiIs65FIgGA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:23 2026 by rpki-client