This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json) Hash identifier: nySNktA2DAzZs4ISDEkxtKi7gYKO3Q1mH0Jb+AJU6eg= Subject key identifier: 40:66:93:6A:35:21:F2:7D:3C:5E:82:8E:1B:32:E9:19:30:6F:AA:7A Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Certificate serial: 019C42462BCF797C4D85026213E69FE468BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft Manifest number: 031B Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=) 2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: mftJRq/s9WtOFhnvk3jIzSn6pX9omqC3aLhsNPYrhPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2b:cf:79:7c:4d:85:02:62:13:e6:9f:e4:68:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=4066936a3521f27d3c5e828e1b32e919306faa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:18:e8:24:77:80:6f:56:20:72:f9:23:75: 04:55:eb:fd:58:a3:db:0a:f8:ca:98:f7:1f:53:f4: 60:8a:d1:67:05:e1:fc:cb:ad:e0:66:48:54:60:14: d0:de:ee:7f:5b:02:38:0a:e2:58:89:30:22:79:0d: 00:06:ea:18:f8:3b:a1:79:3a:29:c0:7e:b6:89:3e: 42:3e:bf:66:64:7b:10:27:36:d8:45:06:60:cf:d0: 5e:5d:2a:56:b0:63:43:e1:fb:9d:65:f6:a0:3d:f4: c4:78:2c:f1:e7:e3:cd:cc:2a:d4:08:0a:92:dc:5c: 02:3e:0a:5c:24:e8:34:80:04:7e:2d:ff:2c:a3:64: 3f:1a:5d:b4:13:ef:e1:81:70:12:8a:09:36:dd:9c: 8f:48:d1:91:04:55:31:7c:50:ad:ea:1b:e0:09:e0: 69:67:8d:a5:50:2f:19:d7:c9:d3:ef:09:3e:2e:68: e4:fa:3d:ae:e7:67:f8:ae:99:9d:44:69:60:14:ed: 3f:17:43:96:1c:4c:3d:ce:89:62:7b:c2:df:5e:92: 69:b1:e7:d4:7a:05:ee:2e:53:aa:c4:49:98:61:65: a4:87:29:5c:b5:a1:1a:37:5f:0b:1e:0e:e8:b8:82: 56:11:60:9b:f3:c4:a2:ee:b8:72:b6:4b:03:a9:b7: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:93:6A:35:21:F2:7D:3C:5E:82:8E:1B:32:E9:19:30:6F:AA:7A X509v3 Authority Key Identifier: keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c0:e4:09:9a:58:73:d7:74:b5:d9:13:5a:96:6e:ec:f0:d3: 3e:ee:58:d0:5d:5b:94:05:1b:90:96:0d:43:d3:34:e2:da:b3: 3a:51:f9:2d:b3:43:c6:67:75:ad:63:38:bb:f5:94:9a:0d:96: 3b:69:9e:a2:9d:4d:f4:fc:cf:7f:87:32:0d:68:5e:2f:5a:52: 9e:5e:a9:48:9a:d2:d5:19:4d:73:db:10:aa:2d:54:48:d0:2e: 74:79:08:a8:b2:3a:57:34:e3:f7:4c:2e:75:c2:cb:09:46:64: 48:54:bb:78:cf:ba:08:75:02:53:fd:e2:da:b4:83:d8:7d:75: 02:54:1f:cf:47:09:ed:57:d3:39:cc:f2:f0:48:9e:7f:b3:66: 00:32:e4:30:fe:7b:5d:ca:69:d4:d7:ab:9e:03:c8:dc:2a:a8: da:ef:4b:e9:32:dc:4d:31:00:ba:73:75:a7:c7:84:49:36:ef: 30:ee:9c:f2:09:11:69:3a:1e:2a:d5:e3:cd:90:aa:4c:a2:60: ca:1c:92:ed:76:28:0a:71:f6:2f:ff:8e:67:fb:87:af:30:be: a8:ad:ff:a4:d6:30:9f:9e:e0:36:c6:b9:97:ff:69:dd:c1:1b: a6:d3:97:42:23:7e:d0:f1:47:ae:43:6e:0d:83:ee:82:47:8b: 78:58:3f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRivPeXxNhQJiE+af5Gi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGZlZWI2YTkwYTg2YWNmMTE4NzFlNGU1NzhhMmVhN2Vj MjgxZDkwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD Eyg0MDY2OTM2YTM1MjFmMjdkM2M1ZTgyOGUxYjMyZTkxOTMwNmZhYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gwY6CR3gG9WIHL5I3UEVev9WKPb CvjKmPcfU/RgitFnBeH8y63gZkhUYBTQ3u5/WwI4CuJYiTAieQ0ABuoY+DuheTop wH62iT5CPr9mZHsQJzbYRQZgz9BeXSpWsGND4fudZfagPfTEeCzx5+PNzCrUCAqS 3FwCPgpcJOg0gAR+Lf8so2Q/Gl20E+/hgXASigk23ZyPSNGRBFUxfFCt6hvgCeBp Z42lUC8Z18nT7wk+Lmjk+j2u52f4rpmdRGlgFO0/F0OWHEw9zolie8LfXpJpsefU egXuLlOqxEmYYWWkhylctaEaN18LHg7ouIJWEWCb88Si7rhytksDqbdrfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBmk2o1IfJ9PF6Cjhsy6Rkwb6p6MB8GA1UdIwQY MBaAFHaP7rapCoas8Rhx5OV4oup+woHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMt MGMxZjRkMzM3ODNlLzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMtMGMxZjRkMzM3ODNl LzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8DkCZpY c9d0tdkTWpZu7PDTPu5Y0F1blAUbkJYNQ9M04tqzOlH5LbNDxmd1rWM4u/WUmg2W O2meop1N9PzPf4cyDWheL1pSnl6pSJrS1RlNc9sQqi1USNAudHkIqLI6VzTj90wu dcLLCUZkSFS7eM+6CHUCU/3i2rSD2H11AlQfz0cJ7VfTOczy8Eief7NmADLkMP57 Xcpp1NerngPI3Cqo2u9L6TLcTTEAunN1p8eESTbvMO6c8gkRaToeKtXjzZCqTKJg yhyS7XYoCnH2L/+OZ/uHrzC+qK3/pNYwn57gNsa5l/9p3cEbptOXQiN+0PFHrkNu DYPugkeLeFg/Kg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:18 2026 by rpki-client