This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json) Hash identifier: BTqJ4kli/2eG42Wg2dSdXN4vhi07u5PpnH+9ldOJCgU= Subject key identifier: 99:85:1C:CD:33:51:C8:B1:D9:B4:C8:1A:62:7D:9A:03:79:05:74:A5 Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5 Certificate serial: 019C438FCB32770579245AFA69FA14C48054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=) 2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: cIhzziNNh3MBLcT/nDao3u+x7y031PDdcNAr4O+5MLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:cb:32:77:05:79:24:5a:fa:69:fa:14:c4:80:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5 Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=99851ccd3351c8b1d9b4c81a627d9a03790574a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:e3:07:7f:ac:36:08:dc:70:ef:0d:ba:71: ec:9d:a8:bd:5a:30:2a:d7:b3:a5:15:b7:a7:34:a2: 3a:63:cf:63:b2:5c:c9:11:84:a3:7b:62:ef:e7:82: 16:46:6e:07:41:bf:9e:5a:0f:00:d6:b0:1f:3f:d7: 0e:c7:f5:fa:16:82:34:5e:51:81:be:1e:98:5c:c9: 88:71:36:12:cc:46:f3:a8:fa:8b:d3:f4:47:67:7f: 12:3d:5b:48:74:cb:ab:b8:84:28:bd:63:22:d6:2a: d4:ba:80:55:3c:d7:d2:66:fe:cc:2f:6c:75:b8:19: d2:1c:f5:5e:db:44:96:46:44:77:81:0a:b0:be:06: 42:33:db:21:2a:59:45:49:e4:81:99:ae:0b:fe:df: 17:ba:7b:13:ea:8f:d0:7d:f1:7d:f2:41:b1:17:b0: 15:6b:b1:91:ed:cd:46:be:6a:0e:88:54:6f:7d:da: 7f:a6:69:96:24:21:ce:9a:e1:80:15:01:52:6e:0d: 11:74:7e:d7:64:35:62:43:77:93:5c:1e:80:b4:4c: 1d:23:30:b1:23:7d:26:08:82:02:63:10:d1:f3:cc: ed:36:98:18:05:e3:8a:20:dc:d2:0f:3a:ad:55:88: b7:7c:3a:df:d8:2c:ae:4b:d8:55:56:b8:ae:e7:bc: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:1C:CD:33:51:C8:B1:D9:B4:C8:1A:62:7D:9A:03:79:05:74:A5 X509v3 Authority Key Identifier: keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5d:32:79:54:f1:d4:f3:4e:bb:87:8e:84:56:56:01:f0:09: 66:41:16:72:88:5a:80:d5:ba:b2:af:b3:ed:16:fd:53:07:b4: e8:b5:09:98:23:74:44:3e:9f:4f:88:0c:df:bd:52:dd:24:f1: f2:67:3d:13:8d:7b:d7:bf:a5:0c:fb:8d:dd:5e:f7:97:0d:b8: dd:fe:e5:b8:12:00:4d:d6:83:67:51:b9:6c:66:42:45:62:ee: 52:e7:d8:88:b4:17:f4:2a:54:8d:ee:9f:1e:d1:b9:0a:cf:fa: 18:9f:e0:52:e2:95:c7:bf:45:1f:a8:a0:ad:3c:6a:f0:92:31: 45:74:65:f7:28:6f:59:ed:31:90:47:0a:e0:ab:52:30:97:0f: 72:22:03:7d:92:68:8a:76:31:db:e6:68:40:6a:3c:95:a2:70: 3d:0d:3f:60:2b:07:e9:24:e2:89:1d:a8:7a:c2:32:07:e6:e2: 59:31:f9:3b:70:bd:80:2a:92:bf:d1:1d:47:54:b9:e1:83:1c: ef:27:2f:e6:bd:8a:2d:f9:19:bc:f7:37:43:55:81:3e:39:0c: e0:b4:9c:ad:9f:0a:96:1b:72:ff:8d:c3:dd:b9:f8:42:f8:f3: 67:25:25:0d:7b:33:73:0a:3c:83:38:0a:75:71:c4:e1:83:09: 92:11:b4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8sydwV5JFr6afoUxIBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2 NjBlZjUwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD Eyg5OTg1MWNjZDMzNTFjOGIxZDliNGM4MWE2MjdkOWEwMzc5MDU3NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3jB3+sNgjccO8NunHsnai9WjAq 17OlFbenNKI6Y89jslzJEYSje2Lv54IWRm4HQb+eWg8A1rAfP9cOx/X6FoI0XlGB vh6YXMmIcTYSzEbzqPqL0/RHZ38SPVtIdMuruIQovWMi1irUuoBVPNfSZv7ML2x1 uBnSHPVe20SWRkR3gQqwvgZCM9shKllFSeSBma4L/t8XunsT6o/QffF98kGxF7AV a7GR7c1GvmoOiFRvfdp/pmmWJCHOmuGAFQFSbg0RdH7XZDViQ3eTXB6AtEwdIzCx I30mCIICYxDR88ztNpgYBeOKINzSDzqtVYi3fDrf2CyuS9hVVriu57wBOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmFHM0zUcix2bTIGmJ9mgN5BXSlMB8GA1UdIwQY MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt OGU4MWQxMzUwNzM2LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2 LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF0yeVTx 1PNOu4eOhFZWAfAJZkEWcohagNW6sq+z7Rb9Uwe06LUJmCN0RD6fT4gM371S3STx 8mc9E41717+lDPuN3V73lw243f7luBIATdaDZ1G5bGZCRWLuUufYiLQX9CpUje6f HtG5Cs/6GJ/gUuKVx79FH6igrTxq8JIxRXRl9yhvWe0xkEcK4KtSMJcPciIDfZJo inYx2+ZoQGo8laJwPQ0/YCsH6STiiR2oesIyB+biWTH5O3C9gCqSv9EdR1S54YMc 7ycv5r2KLfkZvPc3Q1WBPjkM4LScrZ8Klhty/43D3bn4QvjzZyUlDXszcwo8gzgK dXHE4YMJkhG0Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:50 2026 by rpki-client