This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json) Hash identifier: 8Ovl4SrdguFEo4Du/Fb+4ERijWKgiHPD3p18KaWZBX4= Subject key identifier: 53:89:E2:DF:DB:6D:C7:03:DD:E8:C1:11:30:58:53:F0:5E:17:2B:5C Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Certificate serial: 019C42EB8AC2FA3468A7D6F5BE5341840CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: B5/lj7v8ZnWdui1t18w9QnwWEXWwS+MqGmUuHq0VNNE=) 2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8a:c2:fa:34:68:a7:d6:f5:be:53:41:84:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=5389e2dfdb6dc703dde8c111305853f05e172b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:de:fb:e4:30:32:47:46:dc:df:47:bd:27: 79:25:0d:f6:ce:1d:61:a6:b9:58:37:77:07:02:79: 31:be:72:c7:87:19:cf:09:0a:9a:7a:94:52:9f:c6: af:16:fd:2b:a0:6b:04:b6:1c:15:1c:11:92:21:79: 2a:78:d3:eb:36:21:2f:31:ce:29:45:10:97:ad:c7: 26:0c:f9:e3:e2:af:97:05:20:fd:c5:16:53:52:f5: 4f:57:f4:a2:a4:1a:31:76:0d:84:4a:e8:65:a8:2d: e0:b1:b5:5c:6e:d2:b2:39:31:cc:16:91:6b:3c:a0: f5:c8:92:ff:d8:2e:22:9d:c5:53:bd:e3:cc:60:c8: 81:45:64:28:91:b8:d5:1a:f9:48:22:63:ec:0e:ea: e1:0c:a3:91:0c:8b:c0:07:cd:a6:91:ff:36:15:fa: 8f:83:77:b7:b0:f1:55:06:85:db:74:a0:1a:26:21: d5:36:9b:4c:8b:8d:c2:3b:7c:64:06:a3:d9:22:85: 0b:a1:b4:6d:13:26:b5:12:0d:8b:ba:2f:4d:12:27: eb:85:25:19:9b:84:7d:47:33:39:85:77:2e:6a:0c: 3f:b2:9e:3f:f7:19:4b:ff:73:7c:ad:53:67:09:08: d5:0a:c5:a1:d7:db:56:50:9f:da:69:b5:72:75:23: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:E2:DF:DB:6D:C7:03:DD:E8:C1:11:30:58:53:F0:5E:17:2B:5C X509v3 Authority Key Identifier: keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:95:e5:40:8d:0e:23:2d:6f:51:80:bb:a7:2d:c4:e1:a3:0f: e4:96:ee:b9:c8:60:8f:c2:ef:67:ca:42:fc:77:21:03:2b:c2: 5c:a3:80:b4:32:ce:32:1f:43:ae:11:3e:03:4c:44:15:ce:ee: c1:be:0d:8e:7f:a8:f8:7f:25:6c:ff:76:35:3a:d4:e5:35:8c: 61:9f:80:60:87:e4:fa:f3:b7:b4:96:2d:e6:68:4f:99:01:9e: 7e:68:79:f5:43:c1:bd:34:48:83:e7:da:73:c6:c0:d6:79:63: 3a:23:f3:4b:cd:d1:ca:21:bd:4b:92:bd:ba:64:32:ba:2d:07: b3:a4:10:99:ce:29:0c:33:3c:74:00:a4:dc:54:42:7a:56:73: 71:11:6f:13:26:20:44:4c:18:b3:71:83:dd:86:a4:56:62:df: 1a:07:8c:3d:b1:38:8b:40:90:20:04:8e:49:04:fc:f5:d4:df: 9b:b8:c6:39:c3:ca:f1:30:21:9c:31:22:d4:e6:a1:e0:d8:93: 64:96:37:b3:c9:16:60:af:a7:39:ff:f1:58:c1:82:20:b3:47: 5f:c6:1d:53:62:ab:ff:9f:9e:c3:df:58:55:6a:73:f8:0a:cd: cf:8c:45:b4:da:60:ad:dc:28:da:6f:43:fe:3e:97:ec:bb:65: 65:ff:3b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64rC+jRop9b1vlNBhAz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj ODM0YzYwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD Eyg1Mzg5ZTJkZmRiNmRjNzAzZGRlOGMxMTEzMDU4NTNmMDVlMTcyYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBje++QwMkdG3N9HvSd5JQ32zh1h prlYN3cHAnkxvnLHhxnPCQqaepRSn8avFv0roGsEthwVHBGSIXkqeNPrNiEvMc4p RRCXrccmDPnj4q+XBSD9xRZTUvVPV/SipBoxdg2ESuhlqC3gsbVcbtKyOTHMFpFr PKD1yJL/2C4incVTvePMYMiBRWQokbjVGvlIImPsDurhDKORDIvAB82mkf82FfqP g3e3sPFVBoXbdKAaJiHVNptMi43CO3xkBqPZIoULobRtEya1Eg2Lui9NEifrhSUZ m4R9RzM5hXcuagw/sp4/9xlL/3N8rVNnCQjVCsWh19tWUJ/aabVydSOclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOJ4t/bbccD3ejBETBYU/BeFytcMB8GA1UdIwQY MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5XlQI0O Iy1vUYC7py3E4aMP5Jbuuchgj8LvZ8pC/HchAyvCXKOAtDLOMh9DrhE+A0xEFc7u wb4Njn+o+H8lbP92NTrU5TWMYZ+AYIfk+vO3tJYt5mhPmQGefmh59UPBvTRIg+fa c8bA1nljOiPzS83RyiG9S5K9umQyui0Hs6QQmc4pDDM8dACk3FRCelZzcRFvEyYg REwYs3GD3YakVmLfGgeMPbE4i0CQIASOSQT89dTfm7jGOcPK8TAhnDEi1Oah4NiT ZJY3s8kWYK+nOf/xWMGCILNHX8YdU2Kr/5+ew99YVWpz+ArNz4xFtNpgrdwo2m9D /j6X7LtlZf87Hg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:18:03 2026 by rpki-client