This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json) Hash identifier: Mik2IltB1khAXQY67JPSV43vxU46CxcGolX8ouJfreE= Subject key identifier: 4B:E9:9C:8F:4A:07:ED:A9:04:E0:19:5D:78:60:54:86:15:C9:01:7A Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Certificate serial: 019C4358DD10013D13F8B47AB0864F07DF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft Manifest number: 0D39 Signing time: Mon 09 Feb 2026 17:00:23 +0000 Manifest this update: Mon 09 Feb 2026 17:00:23 +0000 Manifest next update: Tue 10 Feb 2026 17:00:23 +0000 Files and hashes: 1: Ndo0H8OG8vRSLoifFLdL4WBmDe0.roa (hash: 5hp1DShZ+J7PJA9pLGwqVerUNVFFVAfh1QBYpOplNiw=) 2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: e5Upbq4dRMs3caYafbtT8tYjviVCJqWZMbbCSku6LR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:dd:10:01:3d:13:f8:b4:7a:b0:86:4f:07:df:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Validity Not Before: Feb 9 17:00:23 2026 GMT Not After : Feb 10 17:00:23 2026 GMT Subject: CN=4be99c8f4a07eda904e0195d7860548615c9017a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:5c:ea:14:cd:c2:e2:91:d0:b0:50:bf:b3: b4:49:a9:d3:de:4a:49:55:9f:d7:5a:5f:f5:ba:32: bc:86:8b:0f:64:e9:68:5d:01:93:bc:e6:9b:59:24: fa:58:cc:5c:e9:72:40:87:00:1c:81:24:9d:02:a2: e8:c8:a7:10:94:61:5f:b5:62:68:f5:00:8c:89:2e: 5a:8a:3f:98:ee:43:68:ea:85:10:a0:bf:47:e3:13: 8b:47:9f:f2:2d:8a:27:e3:f2:11:dc:38:1e:2d:8b: 72:1f:c2:76:6e:1f:f9:d7:6f:15:e4:0c:ca:59:ae: a4:ff:6f:62:65:f6:50:84:dc:a5:cd:87:c3:dd:06: 3e:aa:6b:9d:b5:0b:11:0d:f3:06:81:1f:1c:70:bd: 4e:69:f1:8e:7a:f9:56:17:49:04:d7:bb:1a:37:b9: df:12:1c:d0:ec:bf:f2:fa:87:45:84:d9:d0:92:3b: 96:e1:55:e8:9b:3c:0e:26:0e:bd:61:d2:4e:26:8b: d3:14:91:e3:4c:9b:2b:8b:05:03:4b:46:ba:a1:94: af:51:7a:ca:1f:66:2e:b7:00:86:11:aa:02:15:3c: a1:27:0a:13:4e:16:20:c6:14:e5:45:42:98:2e:90: 2d:ce:4c:78:9e:6d:7b:63:cc:dc:05:89:a4:36:80: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E9:9C:8F:4A:07:ED:A9:04:E0:19:5D:78:60:54:86:15:C9:01:7A X509v3 Authority Key Identifier: keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5e:42:bc:74:1a:19:0a:60:66:74:cf:61:7a:a9:67:9e:72: 64:cb:4a:fe:68:55:ec:81:2e:a5:0c:38:d5:7d:c3:43:e7:e8: ba:23:94:3e:be:25:21:90:ca:aa:f0:9f:f8:5f:1e:be:52:91: 4a:d4:cf:0a:06:c2:c7:fc:78:c3:36:bd:85:68:09:1b:87:2a: c6:bc:75:ba:20:03:c8:67:70:69:80:10:03:96:12:fa:eb:8c: f6:2b:02:75:b4:2b:92:7e:e5:de:e3:20:5f:e9:ba:24:7d:64: c0:58:ef:bb:ae:ab:e7:42:69:6d:89:72:fe:e1:26:d6:cc:ef: bc:20:51:fe:40:92:cd:6a:b9:14:ec:a3:1c:60:95:96:e6:09: ec:38:5f:24:0b:52:f3:ed:91:44:74:9b:7a:1c:bf:cb:ea:6f: c8:8b:73:1f:07:90:27:57:4c:a3:5b:21:f4:f7:a2:b3:ad:6a: e3:5e:4d:8e:0c:b9:64:90:2a:41:06:1f:3b:b9:f0:a1:9a:e0: 7c:bf:a1:0f:dd:e4:58:8a:29:4b:9c:c6:7d:65:bb:7b:3b:18: 24:75:33:d2:66:99:69:3a:39:78:6e:d0:89:4e:a9:05:0d:e9: 84:e7:77:24:21:b9:61:95:10:f9:4f:44:69:fd:cc:0d:42:a8: 01:45:5d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWN0QAT0T+LR6sIZPB98PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0 ZDg0NDAwHhcNMjYwMjA5MTcwMDIzWhcNMjYwMjEwMTcwMDIzWjAzMTEwLwYDVQQD Eyg0YmU5OWM4ZjRhMDdlZGE5MDRlMDE5NWQ3ODYwNTQ4NjE1YzkwMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlc6hTNwuKR0LBQv7O0SanT3kpJ VZ/XWl/1ujK8hosPZOloXQGTvOabWST6WMxc6XJAhwAcgSSdAqLoyKcQlGFftWJo 9QCMiS5aij+Y7kNo6oUQoL9H4xOLR5/yLYon4/IR3DgeLYtyH8J2bh/5128V5AzK Wa6k/29iZfZQhNylzYfD3QY+qmudtQsRDfMGgR8ccL1OafGOevlWF0kE17saN7nf EhzQ7L/y+odFhNnQkjuW4VXomzwOJg69YdJOJovTFJHjTJsriwUDS0a6oZSvUXrK H2YutwCGEaoCFTyhJwoTThYgxhTlRUKYLpAtzkx4nm17Y8zcBYmkNoBRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvpnI9KB+2pBOAZXXhgVIYVyQF6MB8GA1UdIwQY MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG15CvHQa GQpgZnTPYXqpZ55yZMtK/mhV7IEupQw41X3DQ+fouiOUPr4lIZDKqvCf+F8evlKR StTPCgbCx/x4wza9hWgJG4cqxrx1uiADyGdwaYAQA5YS+uuM9isCdbQrkn7l3uMg X+m6JH1kwFjvu66r50JpbYly/uEm1szvvCBR/kCSzWq5FOyjHGCVluYJ7DhfJAtS 8+2RRHSbehy/y+pvyItzHweQJ1dMo1sh9Peis61q415Njgy5ZJAqQQYfO7nwoZrg fL+hD93kWIopS5zGfWW7ezsYJHUz0maZaTo5eG7QiU6pBQ3phOd3JCG5YZUQ+U9E af3MDUKoAUVdow== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:45 2026 by rpki-client