This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json) Hash identifier: uf+YDIVLWzP+ii7/IBI1KRRqbcdb36KBX5hTJwZgTPk= Subject key identifier: 81:EB:8B:A3:6A:20:67:F6:42:CA:6E:8C:BC:CA:5D:CC:01:59:9A:06 Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Certificate serial: 019C42EB018EF95203CED20112288FAE72BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft Manifest number: 1740 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: XVHqs/UvAVCBepa8fhCj/6OtIZvIfvKmWnIWMes6oDE=) 2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:01:8e:f9:52:03:ce:d2:01:12:28:8f:ae:72:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=81eb8ba36a2067f642ca6e8cbcca5dcc01599a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:14:95:bb:42:66:b3:80:f0:e5:58:64:6e: b7:80:f2:7a:83:89:8e:3b:0f:42:9f:04:bc:f2:22: 6b:9f:9f:bb:b7:79:1e:4a:48:6c:05:a7:cf:61:d4: 86:cd:e7:06:5a:0f:22:a3:a3:9c:f7:a3:da:19:61: 2e:a3:bf:65:cb:5f:3c:1b:1b:16:a1:9d:27:c7:c8: bc:a4:f1:33:aa:3e:4b:c5:55:fb:d9:f6:7d:93:43: a0:41:95:96:49:ef:e1:63:3d:1d:0d:85:7a:82:97: a5:6b:86:31:9d:0a:7c:28:3b:dc:0f:24:fc:d1:d1: c5:55:d4:f2:59:33:74:5e:89:a2:1d:8b:7e:6f:8a: a6:29:41:e7:23:8d:0a:21:d1:b4:7c:c9:d9:22:b1: 19:1a:bc:ff:52:a8:57:a3:39:c3:78:44:5f:9f:49: 16:06:9c:6d:91:02:01:e3:bc:fc:e8:0f:bb:db:b5: 5d:55:74:9b:f6:da:4a:fe:00:17:1c:cc:54:b5:45: ed:f4:2e:10:5f:e2:25:2d:d9:6a:07:28:58:f3:25: 2a:ee:7f:64:45:5b:c4:3f:0d:f8:e9:aa:e2:d4:87: 0f:03:3d:1f:3e:2c:1c:b4:73:9a:53:22:0b:33:42: 9d:f9:fa:9a:27:ac:1d:b2:04:a0:c4:35:f4:10:f0: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EB:8B:A3:6A:20:67:F6:42:CA:6E:8C:BC:CA:5D:CC:01:59:9A:06 X509v3 Authority Key Identifier: keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ab:20:1a:1d:b9:0d:b9:22:4b:db:21:c0:30:aa:cd:04:63: 1a:21:0f:88:a8:b1:0f:c1:fb:d3:94:77:92:e8:cd:05:6a:7d: 7d:c6:c2:34:3e:d2:62:cb:28:d7:5b:4f:66:89:08:42:80:58: 09:de:58:e1:35:1a:51:af:15:6c:2c:0f:ce:79:84:36:39:c8: 52:57:2a:27:0e:33:d5:0e:75:8d:4e:59:13:12:b4:c2:ba:02: 24:9a:79:89:3f:40:88:f0:99:76:18:f6:1a:76:05:54:a1:1c: 9f:c9:aa:c1:85:be:06:b1:c3:e9:67:4e:38:d7:f0:60:47:20: 7a:f7:72:57:c1:5b:a2:17:21:ba:4c:59:46:a2:3d:74:9c:42: e9:53:1d:bf:71:34:f7:fb:7e:09:6e:83:9e:90:7a:c6:1d:fd: 0e:6c:21:90:bd:be:e2:0e:ab:80:36:3e:14:55:3b:dc:24:c8: 86:ed:4a:3d:47:63:58:4c:5d:20:db:91:7f:87:cf:ab:2e:41: 0d:60:b5:ac:46:e7:c3:a0:ae:8f:fa:9c:b4:77:dd:25:59:d3: 80:65:6b:f4:5a:14:fe:d6:83:e8:1b:24:58:1b:d5:a3:49:fa: 96:92:d7:33:c1:bf:70:b6:82:e7:68:ea:f9:6a:ca:22:d4:af: 3e:46:f7:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wGO+VIDztIBEiiPrnK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4 N2Q0YjMwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD Eyg4MWViOGJhMzZhMjA2N2Y2NDJjYTZlOGNiY2NhNWRjYzAxNTk5YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vcUlbtCZrOA8OVYZG63gPJ6g4mO Ow9CnwS88iJrn5+7t3keSkhsBafPYdSGzecGWg8io6Oc96PaGWEuo79ly188GxsW oZ0nx8i8pPEzqj5LxVX72fZ9k0OgQZWWSe/hYz0dDYV6gpela4YxnQp8KDvcDyT8 0dHFVdTyWTN0XomiHYt+b4qmKUHnI40KIdG0fMnZIrEZGrz/UqhXoznDeERfn0kW BpxtkQIB47z86A+727VdVXSb9tpK/gAXHMxUtUXt9C4QX+IlLdlqByhY8yUq7n9k RVvEPw346ari1IcPAz0fPiwctHOaUyILM0Kd+fqaJ6wdsgSgxDX0EPBNTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHri6NqIGf2QspujLzKXcwBWZoGMB8GA1UdIwQY MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEasgGh25 DbkiS9shwDCqzQRjGiEPiKixD8H705R3kujNBWp9fcbCND7SYsso11tPZokIQoBY Cd5Y4TUaUa8VbCwPznmENjnIUlcqJw4z1Q51jU5ZExK0wroCJJp5iT9AiPCZdhj2 GnYFVKEcn8mqwYW+BrHD6WdOONfwYEcgevdyV8FbohchukxZRqI9dJxC6VMdv3E0 9/t+CW6DnpB6xh39DmwhkL2+4g6rgDY+FFU73CTIhu1KPUdjWExdINuRf4fPqy5B DWC1rEbnw6Cuj/qctHfdJVnTgGVr9FoU/taD6BskWBvVo0n6lpLXM8G/cLaC52jq +WrKItSvPkb3vg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:31 2026 by rpki-client