This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json) Hash identifier: KZYL+FcBr+zq1eNHT7iT1c35Epv4CmufqO4icXah3GI= Subject key identifier: 49:D2:FA:F1:F5:79:31:04:CC:57:F8:E1:78:B9:48:D1:BB:38:C3:E1 Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Certificate serial: 019C43900D11A61B6631E6B495AC2FB10142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft Manifest number: 17A5 Signing time: Mon 09 Feb 2026 18:00:39 +0000 Manifest this update: Mon 09 Feb 2026 18:00:39 +0000 Manifest next update: Tue 10 Feb 2026 18:00:39 +0000 Files and hashes: 1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=) 2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: vb68ximFc0ZwemhywaXXz4OSektlyMVod8XbBbIqVm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:0d:11:a6:1b:66:31:e6:b4:95:ac:2f:b1:01:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Validity Not Before: Feb 9 18:00:39 2026 GMT Not After : Feb 10 18:00:39 2026 GMT Subject: CN=49d2faf1f5793104cc57f8e178b948d1bb38c3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:49:f7:7f:65:6d:0e:a8:26:8c:8d:99:83: bd:b5:c5:f9:7e:2f:ec:b4:8d:9b:b4:81:44:14:61: 10:a3:3a:ed:e0:cf:0c:d1:48:0d:89:d8:04:60:8b: 3d:9a:1c:e5:78:86:1d:b1:7a:76:d8:a2:c9:c4:ad: 72:94:8f:ea:f3:2a:53:0d:84:b3:ff:2f:cc:db:f6: 8b:98:4c:57:36:22:01:0a:9e:16:8a:99:e0:6a:60: 1b:0e:0f:0c:a7:ba:d7:da:b9:35:da:dd:ca:00:1a: 7c:64:a8:36:af:6d:8a:7d:af:30:aa:45:15:e0:d9: 31:62:f5:32:0d:a7:1b:80:0b:5b:de:8a:26:61:57: 16:f1:bb:fd:c6:20:a3:11:ee:4e:ac:81:95:49:2f: dc:fa:53:68:bd:c8:53:80:3c:90:07:ff:36:bd:eb: 35:58:de:3c:02:1d:18:cf:e0:a1:4e:5f:4f:16:92: 74:97:2f:ad:e7:3f:f1:31:b3:33:4f:9f:e9:54:fb: 6b:d5:5e:0e:d8:2a:01:3a:6a:84:a9:99:c4:06:66: 4b:d6:84:51:2f:56:8f:cf:66:d7:33:85:17:33:6f: 9a:07:12:a1:7f:cd:96:ee:c7:08:7e:e0:71:a0:c3: 23:ec:8e:29:5f:95:99:86:78:35:bb:52:db:67:ff: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:FA:F1:F5:79:31:04:CC:57:F8:E1:78:B9:48:D1:BB:38:C3:E1 X509v3 Authority Key Identifier: keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9c:31:2e:c6:63:29:ec:5a:61:50:fc:2d:71:b8:11:ba:94: 17:54:e3:04:97:95:80:5f:c9:e0:6a:10:a1:c2:3e:2e:2e:b7: a7:4f:a2:97:ec:74:88:d8:b4:73:e5:ea:b2:3a:79:a2:f6:3b: 53:74:31:66:ff:de:65:d4:1d:f0:d4:93:af:03:40:d8:8e:0b: 54:56:7f:00:ed:c7:4d:77:46:4c:73:d0:2d:e4:6a:32:1e:f3: 7b:df:e5:7e:73:30:bf:26:6b:80:f5:ee:82:50:96:4d:77:be: 4f:76:26:9c:66:9f:8d:4a:13:e2:4c:53:86:f7:0a:1d:6a:13: cf:6f:a5:4d:fc:ef:06:3a:71:24:f2:63:82:38:11:39:0c:14: c4:49:3c:6f:00:2d:d9:3b:35:07:52:fe:2d:93:aa:bd:9f:97: 5a:e7:c7:13:02:51:13:d5:0c:c5:ed:8b:77:3f:18:16:b2:60: 78:09:4a:8d:c2:b6:be:96:af:16:9e:ea:20:48:34:9e:1f:f5: 95:6b:39:59:c5:a0:cf:c5:94:87:d4:a4:9c:83:49:0f:8e:13: 4b:48:4f:6b:31:80:83:aa:d9:22:79:63:62:97:73:55:c4:28: cc:a8:d3:14:65:7a:65:59:cc:47:e6:bd:ee:06:be:63:3e:10: 8a:a8:7c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkA0RphtmMea0lawvsQFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1 ZWI5YWYwHhcNMjYwMjA5MTgwMDM5WhcNMjYwMjEwMTgwMDM5WjAzMTEwLwYDVQQD Eyg0OWQyZmFmMWY1NzkzMTA0Y2M1N2Y4ZTE3OGI5NDhkMWJiMzhjM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzNJ939lbQ6oJoyNmYO9tcX5fi/s tI2btIFEFGEQozrt4M8M0UgNidgEYIs9mhzleIYdsXp22KLJxK1ylI/q8ypTDYSz /y/M2/aLmExXNiIBCp4WipngamAbDg8Mp7rX2rk12t3KABp8ZKg2r22Kfa8wqkUV 4NkxYvUyDacbgAtb3oomYVcW8bv9xiCjEe5OrIGVSS/c+lNovchTgDyQB/82ves1 WN48Ah0Yz+ChTl9PFpJ0ly+t5z/xMbMzT5/pVPtr1V4O2CoBOmqEqZnEBmZL1oRR L1aPz2bXM4UXM2+aBxKhf82W7scIfuBxoMMj7I4pX5WZhng1u1LbZ/8Q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnS+vH1eTEEzFf44Xi5SNG7OMPhMB8GA1UdIwQY MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapwxLsZj KexaYVD8LXG4EbqUF1TjBJeVgF/J4GoQocI+Li63p0+il+x0iNi0c+Xqsjp5ovY7 U3QxZv/eZdQd8NSTrwNA2I4LVFZ/AO3HTXdGTHPQLeRqMh7ze9/lfnMwvyZrgPXu glCWTXe+T3YmnGafjUoT4kxThvcKHWoTz2+lTfzvBjpxJPJjgjgROQwUxEk8bwAt 2Ts1B1L+LZOqvZ+XWufHEwJRE9UMxe2Ldz8YFrJgeAlKjcK2vpavFp7qIEg0nh/1 lWs5WcWgz8WUh9SknINJD44TS0hPazGAg6rZInljYpdzVcQozKjTFGV6ZVnMR+a9 7ga+Yz4Qiqh8jQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:01 2026 by rpki-client