This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json) Hash identifier: QZMWpfVUJE+K1OnCWUeaOg1l8PsXWdJxmbOlTmQ/Ih8= Subject key identifier: 99:46:08:9C:03:FB:B5:60:9B:89:1B:8A:2E:89:48:41:36:B5:A3:D6 Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871 Certificate serial: 019C43901A98EDEA13CD9EE18E9CD4D3524F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft Manifest number: 0F14 Signing time: Mon 09 Feb 2026 18:00:43 +0000 Manifest this update: Mon 09 Feb 2026 18:00:43 +0000 Manifest next update: Tue 10 Feb 2026 18:00:43 +0000 Files and hashes: 1: fd9396OwfyvmAzKyBx3VzGYGcUo.roa (hash: YCYApcDvzt3cYu0nRrcnf8eRckIYfSGxjh0WqkacoII=) 2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: sFYbca5nHujB+qSJ56s+1SDir63ocwNLlWfC7z0awW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:1a:98:ed:ea:13:cd:9e:e1:8e:9c:d4:d3:52:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871 Validity Not Before: Feb 9 18:00:43 2026 GMT Not After : Feb 10 18:00:43 2026 GMT Subject: CN=9946089c03fbb5609b891b8a2e89484136b5a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:05:b7:3b:13:02:a5:e1:1c:d6:7c:f6:f0: f2:3e:6e:09:65:24:ed:be:c9:33:d4:f9:1c:4f:88: 68:dc:4c:36:d9:04:25:b0:59:70:1a:99:16:2d:7c: 57:99:3e:41:a8:b3:ed:4d:20:b9:2e:63:f2:2c:16: 62:61:1e:7e:e5:de:be:9a:03:77:1a:10:a1:3c:65: 48:76:e1:3d:86:e7:b2:d9:be:8b:70:28:37:ef:28: ea:60:19:0d:28:ed:46:b8:b0:f7:18:bd:76:c9:94: 32:90:c6:2f:ef:06:ce:fe:a1:57:f8:3c:39:e0:3d: 61:f1:b4:7e:f0:b2:8c:72:44:86:7e:79:f5:c5:0d: 6d:24:13:50:c3:5d:85:b5:6a:49:c0:66:fe:f7:04: 18:14:81:6e:f7:8a:10:9e:8c:9e:e3:5a:3e:26:d9: 7d:b8:44:23:c8:bd:6d:b0:a7:90:1c:1f:9d:be:59: 71:33:e2:e0:86:ab:52:fd:07:93:4d:9d:1f:2d:65: 9d:fa:bb:54:8b:5d:30:54:d3:8b:4c:f2:4d:94:4a: fc:f8:9b:fe:81:96:9d:a7:6c:77:16:1b:cd:0f:ab: 17:68:5c:ce:9a:ef:4d:37:e2:7b:7f:85:3c:5c:62: 73:37:de:dc:89:87:9a:94:a7:1f:dd:e9:a2:02:5b: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:46:08:9C:03:FB:B5:60:9B:89:1B:8A:2E:89:48:41:36:B5:A3:D6 X509v3 Authority Key Identifier: keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:f9:5f:a3:b4:61:63:53:ff:cf:e6:07:79:69:79:1d:bf: 68:64:cc:af:9c:bd:e0:65:95:b3:94:9c:4c:9e:5b:a5:9a:d9: 5e:6a:f5:ea:30:ae:e8:e9:5f:d0:0a:4b:75:65:21:dd:c9:df: 84:eb:0c:be:6e:79:64:4d:52:cb:c9:56:c9:8f:37:d7:06:f0: 87:ab:06:87:99:e2:db:04:6e:64:78:28:4e:13:51:0f:58:61: ca:78:d8:7a:d7:6c:8a:60:fc:47:7f:fd:1e:33:77:48:0b:84: ff:6c:12:49:6b:28:87:48:0d:65:85:c1:51:a3:b7:55:08:6a: 0b:73:a9:9c:81:fc:4d:d4:ee:23:38:91:09:53:80:e9:c8:67: 3b:c2:df:6c:02:2a:a0:61:d0:45:45:80:04:fa:74:1f:86:ed: 8a:43:36:3f:c7:92:fd:f0:cd:ae:c8:cc:76:72:a6:00:2d:41: 23:91:b5:17:82:ed:ba:22:2f:e1:a6:60:bf:dd:d4:e9:a9:fa: d0:e5:83:75:75:b1:f7:26:13:3e:59:ec:a0:b6:aa:ae:b8:c3: 2d:e9:b8:b4:95:0e:24:03:12:de:69:e1:d1:39:85:9b:f5:48: 08:ae:3d:9e:3e:6a:fa:71:e0:5e:db:9b:51:a4:32:1c:12:81: 14:d0:e8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBqY7eoTzZ7hjpzU01JPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh ZWE4NzEwHhcNMjYwMjA5MTgwMDQzWhcNMjYwMjEwMTgwMDQzWjAzMTEwLwYDVQQD Eyg5OTQ2MDg5YzAzZmJiNTYwOWI4OTFiOGEyZTg5NDg0MTM2YjVhM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cAFtzsTAqXhHNZ89vDyPm4JZSTt vskz1PkcT4ho3Ew22QQlsFlwGpkWLXxXmT5BqLPtTSC5LmPyLBZiYR5+5d6+mgN3 GhChPGVIduE9huey2b6LcCg37yjqYBkNKO1GuLD3GL12yZQykMYv7wbO/qFX+Dw5 4D1h8bR+8LKMckSGfnn1xQ1tJBNQw12FtWpJwGb+9wQYFIFu94oQnoye41o+Jtl9 uEQjyL1tsKeQHB+dvllxM+LghqtS/QeTTZ0fLWWd+rtUi10wVNOLTPJNlEr8+Jv+ gZadp2x3FhvND6sXaFzOmu9NN+J7f4U8XGJzN97ciYealKcf3emiAlv5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlGCJwD+7Vgm4kbii6JSEE2taPWMB8GA1UdIwQY MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfj5X6O0 YWNT/8/mB3lpeR2/aGTMr5y94GWVs5ScTJ5bpZrZXmr16jCu6Olf0ApLdWUh3cnf hOsMvm55ZE1Sy8lWyY831wbwh6sGh5ni2wRuZHgoThNRD1hhynjYetdsimD8R3/9 HjN3SAuE/2wSSWsoh0gNZYXBUaO3VQhqC3OpnIH8TdTuIziRCVOA6chnO8LfbAIq oGHQRUWABPp0H4btikM2P8eS/fDNrsjMdnKmAC1BI5G1F4LtuiIv4aZgv93U6an6 0OWDdXWx9yYTPlnsoLaqrrjDLem4tJUOJAMS3mnh0TmFm/VICK49nj5q+nHgXtub UaQyHBKBFNDo3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:25 2026 by rpki-client