This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json) Hash identifier: jWiiGwjui1jbaU8fRUkYM1b3U7TuIJOHfdEblh7KzQ0= Subject key identifier: 7D:5A:E1:87:94:78:6E:33:55:73:C9:42:A7:77:31:76:00:89:72:1D Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Certificate serial: 019C40FCE7AAB4ADC1A5967A9B1414FB43E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft Manifest number: 13A5 Signing time: Mon 09 Feb 2026 06:00:41 +0000 Manifest this update: Mon 09 Feb 2026 06:00:41 +0000 Manifest next update: Tue 10 Feb 2026 06:00:41 +0000 Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: 6+V5QyWVnuQZBybsG8DAjAsrqQMJUKKB+ypULi+CBOc=) 2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:e7:aa:b4:ad:c1:a5:96:7a:9b:14:14:fb:43:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Validity Not Before: Feb 9 06:00:41 2026 GMT Not After : Feb 10 06:00:41 2026 GMT Subject: CN=7d5ae18794786e335573c942a77731760089721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:00:d7:aa:4e:93:07:f5:60:04:05:07:f0: 7b:13:28:4a:83:ba:5a:ca:4f:4a:8a:33:59:9c:df: 17:a8:e4:f6:d6:e1:49:92:44:d3:70:05:d4:f9:be: 71:56:89:11:63:9b:47:34:ed:a7:ed:17:a8:b4:bc: 9d:7d:05:e0:d4:5d:36:64:49:b3:9b:7b:8e:84:b5: 9b:10:2d:77:ba:d3:64:6b:ac:90:bb:9e:72:06:32: ee:08:dd:d6:5b:7c:4a:d6:e8:cd:1f:f9:8c:5e:cd: 41:6c:93:a2:f3:f1:e6:76:e4:b7:60:db:73:e3:db: 2c:9c:9b:3a:e3:c3:56:28:9c:8b:a2:fb:e8:f8:0c: b2:fe:fe:9b:09:d8:7c:9f:72:6f:06:ce:30:eb:1d: 71:72:de:0c:43:e1:2a:3b:28:e0:fa:6c:2a:48:e0: cc:17:13:37:a1:0d:c2:48:b7:25:cd:d9:d3:25:5a: 29:5d:51:cc:9d:33:a8:bd:66:7d:f2:0b:01:9e:5b: b4:bf:dd:e0:e9:bf:82:ee:62:63:cb:de:d3:bc:f4: ca:30:bb:23:1e:d0:a3:28:7e:47:01:39:98:25:af: 01:30:58:32:02:b0:0b:81:f6:1f:af:5c:b3:8d:65: 9b:c0:10:8a:cc:56:8f:ff:08:67:c1:e5:61:7a:98: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5A:E1:87:94:78:6E:33:55:73:C9:42:A7:77:31:76:00:89:72:1D X509v3 Authority Key Identifier: keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a1:c9:b8:91:c1:ad:35:6b:e4:22:78:c9:53:7d:1f:d9:ac: 70:2e:21:35:43:78:8b:98:f1:10:ae:e3:b4:ca:65:2c:20:91: d6:f0:f8:03:85:02:d2:e5:01:7b:9c:b5:02:79:85:aa:11:3d: e5:29:bb:d5:2b:31:ca:df:5b:e7:e4:51:81:49:0a:9d:54:75: 5a:19:f4:27:5b:7d:61:61:74:52:8a:75:90:fc:d4:cb:f5:0b: 00:04:a0:52:e4:63:d6:b0:81:07:67:4e:b4:9b:5f:31:45:2b: e4:f4:9b:9c:82:26:7f:b0:fb:a6:33:72:1a:52:b5:20:35:bc: b1:02:8e:a5:01:09:6d:1b:4a:52:61:29:2d:b9:78:13:70:d3: 89:5d:25:d3:cb:12:89:34:fd:89:4b:59:79:1d:55:ed:e8:20: 6e:08:fe:1d:87:46:b8:e1:e6:a2:bb:7e:e7:c8:43:94:f8:71: fc:54:e3:75:93:0d:cf:2a:ab:e2:f8:d8:ac:c8:68:c5:fa:a9: 2f:81:ff:83:8d:16:11:36:73:1d:ce:94:c0:f8:4c:5c:34:10: 18:46:7f:94:b5:b5:2d:a0:c7:33:95:15:23:07:48:29:46:a7: 2a:2b:53:c3:19:29:a9:38:1a:49:cc:74:58:ba:f1:1c:49:c3: 14:33:4e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/OeqtK3BpZZ6mxQU+0PmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5 NWNjZmQwHhcNMjYwMjA5MDYwMDQxWhcNMjYwMjEwMDYwMDQxWjAzMTEwLwYDVQQD Eyg3ZDVhZTE4Nzk0Nzg2ZTMzNTU3M2M5NDJhNzc3MzE3NjAwODk3MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqsA16pOkwf1YAQFB/B7EyhKg7pa yk9KijNZnN8XqOT21uFJkkTTcAXU+b5xVokRY5tHNO2n7ReotLydfQXg1F02ZEmz m3uOhLWbEC13utNka6yQu55yBjLuCN3WW3xK1ujNH/mMXs1BbJOi8/HmduS3YNtz 49ssnJs648NWKJyLovvo+Ayy/v6bCdh8n3JvBs4w6x1xct4MQ+EqOyjg+mwqSODM FxM3oQ3CSLclzdnTJVopXVHMnTOovWZ98gsBnlu0v93g6b+C7mJjy97TvPTKMLsj HtCjKH5HATmYJa8BMFgyArALgfYfr1yzjWWbwBCKzFaP/whnweVhepiaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1a4YeUeG4zVXPJQqd3MXYAiXIdMB8GA1UdIwQY MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6HJuJHB rTVr5CJ4yVN9H9mscC4hNUN4i5jxEK7jtMplLCCR1vD4A4UC0uUBe5y1AnmFqhE9 5Sm71Ssxyt9b5+RRgUkKnVR1Whn0J1t9YWF0Uop1kPzUy/ULAASgUuRj1rCBB2dO tJtfMUUr5PSbnIImf7D7pjNyGlK1IDW8sQKOpQEJbRtKUmEpLbl4E3DTiV0l08sS iTT9iUtZeR1V7eggbgj+HYdGuOHmort+58hDlPhx/FTjdZMNzyqr4vjYrMhoxfqp L4H/g40WETZzHc6UwPhMXDQQGEZ/lLW1LaDHM5UVIwdIKUanKitTwxkpqTgaScx0 WLrxHEnDFDNOjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:59 2026 by rpki-client