This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json) Hash identifier: 4nZ7JoiLUCxxJGct6QsZBKOL9urDsvvHA1M0lygjvFY= Subject key identifier: 47:21:09:AF:06:2C:9B:1B:34:58:13:54:44:F1:7A:29:BC:14:E9:11 Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Certificate serial: 019C42B3ED8331D308C7118BEBEE74E71935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft Manifest number: 11A9 Signing time: Mon 09 Feb 2026 14:00:13 +0000 Manifest this update: Mon 09 Feb 2026 14:00:13 +0000 Manifest next update: Tue 10 Feb 2026 14:00:13 +0000 Files and hashes: 1: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (hash: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo=) 2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: bOx0ul0dtX0e+41y3KFX2b0eJdaUNlTT9VCXT89zJE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:ed:83:31:d3:08:c7:11:8b:eb:ee:74:e7:19:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Validity Not Before: Feb 9 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2026 GMT Subject: CN=472109af062c9b1b3458135444f17a29bc14e911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:26:40:97:5e:68:45:da:cb:d1:3a:ff:34: df:8a:8d:3d:e6:d8:c7:87:91:ae:e6:c3:25:cf:e2: 39:23:4e:57:bf:6e:70:b9:7b:4e:c8:1c:1c:54:98: 9e:3e:1f:30:3a:3d:2b:ee:08:34:48:2f:8e:d2:3a: f0:10:a1:4e:55:4e:ba:0c:f7:07:8c:78:61:bd:82: 97:e0:ec:6b:8f:ff:1c:28:0d:8b:9f:b1:b8:0e:bc: 9a:cb:16:d8:46:43:0c:3a:67:0f:a6:99:86:a3:30: c7:35:e4:1c:c6:b2:90:ab:d0:a0:49:95:6c:28:83: 7c:ee:44:9a:29:40:cd:ff:ed:3c:93:7b:15:2c:9d: 2f:e9:7e:ce:f3:9f:0b:6a:25:95:a4:88:a2:64:00: 72:1c:6e:17:bd:24:f0:ba:f3:a9:28:f9:aa:4d:de: 65:b2:41:cd:3f:2c:7b:dc:c0:13:d8:99:23:5d:e9: 97:3a:eb:e1:81:75:1a:43:b9:22:ad:c5:04:06:36: 0b:07:fa:55:de:db:1c:ac:33:3f:a4:c7:3d:00:b6: 68:e1:ac:80:ea:df:f1:d0:cd:20:1b:88:19:0e:55: 8d:93:94:59:08:7a:91:6c:a2:6a:0e:07:62:63:98: 8c:65:09:bc:5a:49:d6:e6:0a:e8:22:fd:1c:cf:ab: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:21:09:AF:06:2C:9B:1B:34:58:13:54:44:F1:7A:29:BC:14:E9:11 X509v3 Authority Key Identifier: keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:46:20:47:46:0b:79:60:e2:e6:97:c7:90:8f:05:84:fb:f2: 40:c9:c0:d6:41:63:ea:9c:15:40:17:f0:26:c3:67:b7:1b:0a: 92:bc:27:99:64:57:d2:f6:6a:3e:04:d8:26:84:00:75:33:f3: 74:a1:bb:b0:6e:bd:d6:f5:1d:be:d6:3d:06:85:9e:eb:40:28: 0d:ee:ed:32:82:54:18:b3:4c:d9:e9:47:da:ad:da:d1:5f:1e: f0:5c:2e:53:7e:21:59:9e:26:7c:be:6b:40:c9:c7:3a:01:0c: f5:07:f6:1d:da:85:70:98:6d:e4:1a:e8:15:ab:e5:b3:94:03: c2:b8:92:7c:e7:9d:ed:5d:4a:78:24:50:9a:59:5a:32:69:fa: bd:09:fb:25:97:00:cd:f7:67:ad:40:e9:2e:ec:aa:3b:b4:0d: 39:bc:d3:d8:27:13:5a:15:5e:9b:79:3c:ea:75:83:39:3c:c2: c4:b0:d2:99:3c:e2:1f:55:f8:18:ee:0d:e7:28:77:fe:11:88: 6e:c4:19:28:e5:04:a5:ed:7d:0e:e7:d4:1d:86:7d:f3:7c:31: b0:63:16:c1:ac:1e:a4:fe:3e:74:20:ff:ed:50:6e:c6:92:93: c6:68:63:f4:c7:0d:f8:4d:19:b0:ae:a8:3e:98:eb:1f:ef:3a: 08:98:e5:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs+2DMdMIxxGL6+505xk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw YTYyNjcwHhcNMjYwMjA5MTQwMDEzWhcNMjYwMjEwMTQwMDEzWjAzMTEwLwYDVQQD Eyg0NzIxMDlhZjA2MmM5YjFiMzQ1ODEzNTQ0NGYxN2EyOWJjMTRlOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIQmQJdeaEXay9E6/zTfio095tjH h5Gu5sMlz+I5I05Xv25wuXtOyBwcVJiePh8wOj0r7gg0SC+O0jrwEKFOVU66DPcH jHhhvYKX4Oxrj/8cKA2Ln7G4DryayxbYRkMMOmcPppmGozDHNeQcxrKQq9CgSZVs KIN87kSaKUDN/+08k3sVLJ0v6X7O858LaiWVpIiiZAByHG4XvSTwuvOpKPmqTd5l skHNPyx73MAT2JkjXemXOuvhgXUaQ7kircUEBjYLB/pV3tscrDM/pMc9ALZo4ayA 6t/x0M0gG4gZDlWNk5RZCHqRbKJqDgdiY5iMZQm8WknW5groIv0cz6smPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEchCa8GLJsbNFgTVETxeim8FOkRMB8GA1UdIwQY MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt NjQ4YjkyMjc2MDE0LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0 LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0YgR0YL eWDi5pfHkI8FhPvyQMnA1kFj6pwVQBfwJsNntxsKkrwnmWRX0vZqPgTYJoQAdTPz dKG7sG691vUdvtY9BoWe60AoDe7tMoJUGLNM2elH2q3a0V8e8FwuU34hWZ4mfL5r QMnHOgEM9Qf2HdqFcJht5BroFavls5QDwriSfOed7V1KeCRQmllaMmn6vQn7JZcA zfdnrUDpLuyqO7QNObzT2CcTWhVem3k86nWDOTzCxLDSmTziH1X4GO4N5yh3/hGI bsQZKOUEpe19DufUHYZ983wxsGMWwawepP4+dCD/7VBuxpKTxmhj9McN+E0ZsK6o PpjrH+86CJjlyg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:54 2026 by rpki-client