This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json) Hash identifier: 8Vmwnn93FyZnC0JkagW3/aRAzfQP/jnwilG0yngftI4= Subject key identifier: 1A:88:D1:64:3A:EA:6A:58:5E:6D:53:56:D9:AE:21:B5:F4:1E:0B:98 Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Certificate serial: 019C416A7547F69B9BDE407D238399CD34F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft Manifest number: 030D Signing time: Mon 09 Feb 2026 08:00:21 +0000 Manifest this update: Mon 09 Feb 2026 08:00:21 +0000 Manifest next update: Tue 10 Feb 2026 08:00:21 +0000 Files and hashes: 1: CuyvQkWCH2jGy1znss4XJNZ4kZI.roa (hash: 7b/YHSGs2OfIQTdNVVxxsC+vk34rdN3J6zHQ/2L5Cjo=) 2: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: hbGiaN9EQUeHSCLGHSWRvJTtQG1AGZoCSD4UhnKrnwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:75:47:f6:9b:9b:de:40:7d:23:83:99:cd:34:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Validity Not Before: Feb 9 08:00:21 2026 GMT Not After : Feb 10 08:00:21 2026 GMT Subject: CN=1a88d1643aea6a585e6d5356d9ae21b5f41e0b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:2d:e1:cc:61:7c:38:a3:dc:c7:0e:8b:af: d3:12:e5:ec:7d:b2:b8:e7:4b:a7:55:e2:55:32:dd: 42:66:5c:9e:90:c1:16:9a:7f:b5:c8:aa:d3:a9:47: f4:bf:d9:ac:61:e6:fd:2c:31:16:24:c9:10:1a:a9: d5:87:8e:0c:35:4c:8d:3e:5a:47:e1:45:53:52:1b: 91:41:90:e6:8e:e1:0e:90:1b:d3:c6:5c:11:d8:8c: 1e:f0:05:cf:bc:1a:e8:eb:89:e5:3b:a7:12:75:fd: 0d:3d:7e:36:70:c2:46:7e:36:e7:96:e3:ff:2d:3d: b0:53:77:64:f4:ff:c2:bf:5d:9f:8a:49:8c:77:09: 01:c8:ea:c0:41:89:af:62:b8:72:1a:84:00:fd:1a: 5d:4a:2c:67:36:73:50:80:16:d8:15:3d:bd:ba:8f: ba:df:19:e1:e0:9b:07:da:be:4c:0e:2b:bb:fd:db: ed:19:0e:15:89:1e:d3:e3:cf:e3:99:78:37:56:53: 76:a1:3d:9e:2a:99:62:b8:7c:3c:49:b9:04:33:61: 98:2f:03:5f:54:8b:66:ef:dc:52:09:3f:43:59:65: bb:22:35:39:78:15:35:65:2a:f0:cb:8d:2b:a3:51: ab:3e:e0:1e:76:03:de:1a:48:99:0a:a5:b7:3f:47: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:88:D1:64:3A:EA:6A:58:5E:6D:53:56:D9:AE:21:B5:F4:1E:0B:98 X509v3 Authority Key Identifier: keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7e:15:65:58:d4:49:fc:da:a6:a9:3f:4b:e9:39:f8:91:61: 76:50:6b:e8:04:d6:df:1c:4c:7a:58:ba:05:5e:9c:8d:df:de: 46:91:47:ca:b6:89:47:d7:b0:52:f2:ed:cc:f7:70:f5:4d:9b: b7:e6:ae:1c:b1:ce:44:e3:c5:e7:ea:bd:19:18:fc:88:61:f8: b4:76:74:95:c7:1e:2d:63:06:16:a1:46:59:e1:3f:1b:81:99: 9a:f9:ae:13:55:5c:18:19:77:12:46:df:44:b9:46:ac:27:3d: 25:11:76:b1:b2:c7:e2:bf:0e:44:eb:4d:dc:aa:f4:c9:82:a3: 6a:35:17:ae:6d:87:e1:d9:1e:31:d1:f8:c7:04:59:ac:29:ec: 3e:5c:19:02:b4:62:80:30:f1:fd:78:f9:ba:a8:1d:6b:90:cf: 8d:8a:c6:41:80:92:9c:f2:f7:41:ed:0b:07:4c:5e:7f:0b:44: b8:1d:be:1b:38:03:3b:d2:d9:bf:b1:46:06:ca:32:0a:55:67: 31:16:b2:68:73:c2:39:57:e5:60:4a:62:df:e2:3b:fb:49:a5: de:d3:b8:46:e1:2f:93:6e:68:14:58:01:e5:c1:88:bb:5e:8c: 49:99:2b:53:74:79:67:d3:48:e0:6b:51:6d:c6:aa:e4:97:14: c7:77:81:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBanVH9pub3kB9I4OZzTT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODM3OGQ0NDQyZGY2OWY0N2RjMGVhNTgyYTEyYjJhYjUx NGJlMGYwHhcNMjYwMjA5MDgwMDIxWhcNMjYwMjEwMDgwMDIxWjAzMTEwLwYDVQQD EygxYTg4ZDE2NDNhZWE2YTU4NWU2ZDUzNTZkOWFlMjFiNWY0MWUwYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Mt4cxhfDij3McOi6/TEuXsfbK4 50unVeJVMt1CZlyekMEWmn+1yKrTqUf0v9msYeb9LDEWJMkQGqnVh44MNUyNPlpH 4UVTUhuRQZDmjuEOkBvTxlwR2Iwe8AXPvBro64nlO6cSdf0NPX42cMJGfjbnluP/ LT2wU3dk9P/Cv12fikmMdwkByOrAQYmvYrhyGoQA/RpdSixnNnNQgBbYFT29uo+6 3xnh4JsH2r5MDiu7/dvtGQ4ViR7T48/jmXg3VlN2oT2eKpliuHw8SbkEM2GYLwNf VItm79xSCT9DWWW7IjU5eBU1ZSrwy40ro1GrPuAedgPeGkiZCqW3P0dkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqI0WQ66mpYXm1TVtmuIbX0HguYMB8GA1UdIwQY MBaAFLuDeNRELfafR9wOpYKhKyq1FL4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODkt ZDhhNTU1YzY0MjE0LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODktZDhhNTU1YzY0MjE0 LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH4VZVjU Sfzapqk/S+k5+JFhdlBr6ATW3xxMeli6BV6cjd/eRpFHyraJR9ewUvLtzPdw9U2b t+auHLHOROPF5+q9GRj8iGH4tHZ0lcceLWMGFqFGWeE/G4GZmvmuE1VcGBl3Ekbf RLlGrCc9JRF2sbLH4r8OROtN3Kr0yYKjajUXrm2H4dkeMdH4xwRZrCnsPlwZArRi gDDx/Xj5uqgda5DPjYrGQYCSnPL3Qe0LB0xefwtEuB2+GzgDO9LZv7FGBsoyClVn MRayaHPCOVflYEpi3+I7+0ml3tO4RuEvk25oFFgB5cGIu16MSZkrU3R5Z9NI4GtR bcaq5JcUx3eB5w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:48 2026 by rpki-client