This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json) Hash identifier: yeOdIQ73uOezIugzs5BgJSMHEzMVPTK0cBjWVbrmycQ= Subject key identifier: 8E:90:61:12:85:BF:34:91:9C:4A:72:14:71:22:D5:DD:A4:1E:1B:A0 Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Certificate serial: 019C41A1CD1E74B5B9CB90902F4706E53BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft Manifest number: 1013 Signing time: Mon 09 Feb 2026 09:00:48 +0000 Manifest this update: Mon 09 Feb 2026 09:00:48 +0000 Manifest next update: Tue 10 Feb 2026 09:00:48 +0000 Files and hashes: 1: M58qgi6VUeCk-By8lfph0n_DDmE.roa (hash: EY44xP7Z9BkJPTOaksViRj5GMqLeOgcwu8qx3t9cuLg=) 2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: NdmZ09pW6K/ni4ECdLzwWg69AC8E2/kNNXhjSE4LXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:cd:1e:74:b5:b9:cb:90:90:2f:47:06:e5:3b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Validity Not Before: Feb 9 09:00:48 2026 GMT Not After : Feb 10 09:00:48 2026 GMT Subject: CN=8e90611285bf34919c4a72147122d5dda41e1ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:95:a9:a2:14:81:5d:e1:59:24:50:7c:8b: 2b:93:1b:23:37:ed:c3:ba:6e:3b:de:b0:f4:4a:dd: c9:1f:d7:21:f1:23:b3:27:14:4e:92:70:8a:3e:8c: 59:10:1a:ed:b3:62:1a:64:00:9b:b6:a5:86:5d:35: ef:26:23:9d:3e:33:b9:f4:91:7e:14:5a:3f:c6:66: 98:f2:80:bd:b2:f9:aa:80:f4:a3:fe:98:bb:89:d4: 7d:b4:04:27:85:b2:33:20:82:50:6e:12:53:48:d7: 1a:01:21:68:25:d9:db:b5:85:ce:54:35:ff:6d:09: 97:ad:2a:7b:9e:ea:9d:34:f9:cc:d7:32:1a:24:0f: a1:73:1b:ba:64:4b:36:31:d1:19:80:21:76:69:80: 6e:f3:c8:92:fb:04:21:22:87:8f:9e:dc:2e:97:d8: 7c:45:b2:1e:72:73:2d:f9:50:3b:ef:5c:4c:11:6c: a5:85:03:9c:5d:29:bf:d3:30:be:62:34:1c:3a:b6: b9:cb:e9:29:9d:cd:48:86:45:bb:df:2a:97:c2:ce: 80:c4:ef:b6:9f:eb:59:c2:b7:c0:3e:43:d8:9b:24: 08:d5:0e:c4:b9:9f:f0:bc:1e:63:15:e6:81:15:bc: c0:ab:2f:37:c5:fb:d7:43:78:92:40:2b:3d:3a:79: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:90:61:12:85:BF:34:91:9C:4A:72:14:71:22:D5:DD:A4:1E:1B:A0 X509v3 Authority Key Identifier: keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:45:ec:8b:f1:3b:32:b5:e7:eb:f0:5c:3f:b6:c2:00:87:f0: 99:e0:71:9e:6a:96:bb:07:90:66:5b:90:cc:0f:45:a5:b5:02: 6d:3b:7e:2e:95:62:82:a5:75:40:93:33:87:06:9d:44:a0:54: e4:2c:e5:96:17:5a:fe:43:77:45:c9:f8:b7:d7:aa:b7:c3:67: d6:52:b6:91:bd:ab:d4:bd:dd:08:42:98:84:4d:f5:51:50:5b: db:c2:db:57:c1:2a:5f:6f:9c:07:a7:84:84:f6:41:46:a4:36: ce:c0:93:3c:cf:a5:a7:03:da:60:1d:47:02:87:eb:bc:22:71: 6d:b1:ce:e6:c9:05:65:28:d9:f0:af:d9:a7:45:89:f3:fc:09: d9:5a:09:40:88:dc:c7:7d:f3:76:19:13:de:55:5e:d5:a8:58: 36:00:df:a5:8b:5d:26:ee:a6:1b:8d:69:ba:95:d2:45:10:03: 76:16:98:9d:33:2a:40:e2:24:a5:62:d5:8a:df:c0:63:b0:ac: 51:17:ce:59:67:bd:69:19:b6:b4:b9:4d:0a:95:b6:6f:91:97: a1:b0:13:10:aa:61:aa:7c:e1:df:bd:68:c8:9c:63:4b:e7:8d: 9f:9d:c7:3f:3a:87:44:3e:ff:72:61:2c:50:f1:79:ef:df:8c: 02:e5:04:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoc0edLW5y5CQL0cG5Tv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy ZTdiMTQwHhcNMjYwMjA5MDkwMDQ4WhcNMjYwMjEwMDkwMDQ4WjAzMTEwLwYDVQQD Eyg4ZTkwNjExMjg1YmYzNDkxOWM0YTcyMTQ3MTIyZDVkZGE0MWUxYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveWVqaIUgV3hWSRQfIsrkxsjN+3D um473rD0St3JH9ch8SOzJxROknCKPoxZEBrts2IaZACbtqWGXTXvJiOdPjO59JF+ FFo/xmaY8oC9svmqgPSj/pi7idR9tAQnhbIzIIJQbhJTSNcaASFoJdnbtYXOVDX/ bQmXrSp7nuqdNPnM1zIaJA+hcxu6ZEs2MdEZgCF2aYBu88iS+wQhIoePntwul9h8 RbIecnMt+VA771xMEWylhQOcXSm/0zC+YjQcOra5y+kpnc1IhkW73yqXws6AxO+2 n+tZwrfAPkPYmyQI1Q7EuZ/wvB5jFeaBFbzAqy83xfvXQ3iSQCs9OnkhJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6QYRKFvzSRnEpyFHEi1d2kHhugMB8GA1UdIwQY MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4 LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUXsi/E7 MrXn6/BcP7bCAIfwmeBxnmqWuweQZluQzA9FpbUCbTt+LpVigqV1QJMzhwadRKBU 5Czllhda/kN3Rcn4t9eqt8Nn1lK2kb2r1L3dCEKYhE31UVBb28LbV8EqX2+cB6eE hPZBRqQ2zsCTPM+lpwPaYB1HAofrvCJxbbHO5skFZSjZ8K/Zp0WJ8/wJ2VoJQIjc x33zdhkT3lVe1ahYNgDfpYtdJu6mG41pupXSRRADdhaYnTMqQOIkpWLVit/AY7Cs URfOWWe9aRm2tLlNCpW2b5GXobATEKphqnzh371oyJxjS+eNn53HPzqHRD7/cmEs UPF579+MAuUEfg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:35 2026 by rpki-client