This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json) Hash identifier: 9oU1Cj9YKFBziROvY1o2rjKyEXKiTwv6cfJzrBVbAEw= Subject key identifier: 2E:10:22:CF:47:0B:87:41:54:A9:32:32:22:7A:30:B2:8C:6A:03:87 Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Certificate serial: 019C446C1254F9B28FC7BB89FC0137DFFC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 22:00:59 +0000 Manifest this update: Mon 09 Feb 2026 22:00:59 +0000 Manifest next update: Tue 10 Feb 2026 22:00:59 +0000 Files and hashes: 1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=) 2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: zmDcMHDD+FLBdEgh3EdGEepNvxmGRPS326pyDM8K8No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:12:54:f9:b2:8f:c7:bb:89:fc:01:37:df:fc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Validity Not Before: Feb 9 22:00:59 2026 GMT Not After : Feb 10 22:00:59 2026 GMT Subject: CN=2e1022cf470b874154a93232227a30b28c6a0387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:e4:4d:a1:b0:3b:37:b4:4c:9e:86:1e:b7: f7:b8:0c:11:9a:e8:bc:3c:1d:f7:1c:41:ea:c5:b2: cb:1e:a7:e6:6f:0e:fa:48:07:b2:75:3b:04:d1:21: 85:83:a2:c8:11:e7:45:59:61:0d:64:14:5c:3a:38: 6f:63:78:f0:51:2d:32:c5:7d:69:46:e6:f5:88:44: 24:18:cc:56:e0:d3:ab:4d:cd:64:bb:da:b3:8b:b7: ac:a1:50:dd:43:a1:98:de:98:35:61:b0:90:ae:e1: d7:3f:eb:19:ac:ba:3d:4a:b4:f9:c1:82:31:f7:b9: d7:2a:d9:c9:39:fd:dd:73:7b:87:b9:ae:5f:d6:ba: eb:11:25:35:74:41:7e:93:4e:53:24:d5:48:8e:d1: a6:ce:17:25:54:c9:06:a3:2c:d7:4f:34:d1:17:5f: 56:0a:8c:48:9a:55:2b:d4:54:a5:42:bc:35:fc:f6: b9:aa:3c:f5:d6:53:02:01:66:ae:76:fb:5a:f1:c6: 12:98:be:99:fd:de:49:02:45:94:e5:43:27:37:3f: 00:3e:71:41:65:52:63:c3:dd:59:11:4f:70:85:63: ff:c6:84:73:14:28:9f:14:2d:6e:93:fe:49:6f:80: 09:f9:61:6d:16:11:24:80:9d:8c:70:c2:43:dc:78: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:10:22:CF:47:0B:87:41:54:A9:32:32:22:7A:30:B2:8C:6A:03:87 X509v3 Authority Key Identifier: keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2e:fd:2e:56:0c:b2:4f:aa:19:b2:4f:6c:bb:91:b6:ff:45: b0:ca:31:2f:62:46:21:cd:a8:8c:65:77:04:ae:39:b7:bb:71: 21:69:17:94:89:00:bb:87:4b:8d:a8:56:94:ca:cb:d2:4f:ed: d5:b4:e2:3d:f3:41:b5:af:9a:9f:cb:bb:f2:61:dd:2f:65:b9: f3:39:6c:5e:91:bd:35:3f:72:ea:39:19:d8:6b:f8:d4:4a:57: f9:23:6e:b0:df:74:92:88:77:ee:35:5a:01:c1:35:63:da:f2: 91:f3:bc:14:d7:64:76:30:d8:bf:e9:09:b7:ea:9a:53:62:67: 72:23:2d:ca:fb:87:74:a8:22:14:23:c3:ba:be:a9:47:22:12: 57:e1:28:f4:47:1e:44:c7:e2:36:5f:8f:4d:b7:02:29:9f:f7: c4:54:38:c6:eb:87:32:b4:1a:6d:10:45:66:33:cc:f9:4c:02: 87:05:83:b8:2a:a9:20:33:9f:6a:e6:48:c4:b1:11:98:3d:1d: 1d:1f:d9:7e:d1:1b:22:a9:7a:3c:8f:6c:06:92:41:f7:37:67: a4:a2:f7:0e:ad:7a:6c:31:bd:a3:1f:d1:aa:a7:7f:71:13:82: 31:75:51:6a:b6:8a:8e:03:bd:85:2c:73:67:dc:0f:6c:ff:29: 52:28:1a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBJU+bKPx7uJ/AE33/xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx ZTJiNjAwHhcNMjYwMjA5MjIwMDU5WhcNMjYwMjEwMjIwMDU5WjAzMTEwLwYDVQQD EygyZTEwMjJjZjQ3MGI4NzQxNTRhOTMyMzIyMjdhMzBiMjhjNmEwMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCnkTaGwOze0TJ6GHrf3uAwRmui8 PB33HEHqxbLLHqfmbw76SAeydTsE0SGFg6LIEedFWWENZBRcOjhvY3jwUS0yxX1p Rub1iEQkGMxW4NOrTc1ku9qzi7esoVDdQ6GY3pg1YbCQruHXP+sZrLo9SrT5wYIx 97nXKtnJOf3dc3uHua5f1rrrESU1dEF+k05TJNVIjtGmzhclVMkGoyzXTzTRF19W CoxImlUr1FSlQrw1/Pa5qjz11lMCAWaudvta8cYSmL6Z/d5JAkWU5UMnNz8APnFB ZVJjw91ZEU9whWP/xoRzFCifFC1uk/5Jb4AJ+WFtFhEkgJ2McMJD3HgEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4QIs9HC4dBVKkyMiJ6MLKMagOHMB8GA1UdIwQY MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi79LlYM sk+qGbJPbLuRtv9FsMoxL2JGIc2ojGV3BK45t7txIWkXlIkAu4dLjahWlMrL0k/t 1bTiPfNBta+an8u78mHdL2W58zlsXpG9NT9y6jkZ2Gv41EpX+SNusN90koh37jVa AcE1Y9rykfO8FNdkdjDYv+kJt+qaU2JnciMtyvuHdKgiFCPDur6pRyISV+Eo9Ece RMfiNl+PTbcCKZ/3xFQ4xuuHMrQabRBFZjPM+UwChwWDuCqpIDOfauZIxLERmD0d HR/ZftEbIql6PI9sBpJB9zdnpKL3Dq16bDG9ox/Rqqd/cROCMXVRaraKjgO9hSxz Z9wPbP8pUigaWQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:36 2026 by rpki-client