This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json) Hash identifier: /qGraEQlXSa6AnSpon4edNzlgZ8Y1dZP0ijmx2pIFqs= Subject key identifier: AF:25:2B:C4:0E:A1:ED:0F:62:62:59:4C:48:01:F5:6A:03:63:B8:ED Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10 Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010 Certificate serial: 019C42102358F7AEA46DD962EC202B75C173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft Manifest number: 01F5 Signing time: Mon 09 Feb 2026 11:01:19 +0000 Manifest this update: Mon 09 Feb 2026 11:01:19 +0000 Manifest next update: Tue 10 Feb 2026 11:01:19 +0000 Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: kAFOnFcUs/Igc4zQsLPjDyo2/a2GqEFq9FZgb/Q5vAQ=) 2: Zj34HNU6ikECXRJN4URIatUwvoo.roa (hash: lyjNKlqhYGZwJZeL+GJ/hhK1LHVsbOhkZp/xurQj4dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:23:58:f7:ae:a4:6d:d9:62:ec:20:2b:75:c1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010 Validity Not Before: Feb 9 11:01:19 2026 GMT Not After : Feb 10 11:01:19 2026 GMT Subject: CN=af252bc40ea1ed0f6262594c4801f56a0363b8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:a7:aa:b3:dc:86:7d:79:cc:5f:5e:bd:2e: 32:66:ac:68:81:42:71:9d:80:1d:c7:e9:65:f7:54: a1:b9:6a:6f:f2:60:cd:33:37:39:8c:ce:9f:04:bc: bf:50:aa:ca:db:e6:89:f8:13:40:fc:91:88:2f:46: d7:13:82:7e:ae:6f:f5:04:67:7e:97:8b:de:e4:15: ee:63:1a:c2:c8:b9:be:84:71:ba:a7:21:69:2c:01: d8:e4:b2:9e:a2:48:1b:38:f6:86:96:db:52:52:49: d9:77:78:6c:28:58:87:fc:2c:ee:bd:6e:a2:b2:1f: 40:87:8f:50:0b:8f:a0:57:84:d5:4d:59:f0:49:f3: 97:0b:af:a4:fa:b0:36:8f:2f:12:8a:fe:7b:4d:4a: 03:d2:39:24:c9:92:06:e7:3a:66:cf:71:b9:d1:38: 55:da:d8:7d:22:7b:59:ff:fd:ee:69:30:d4:43:a0: c8:5a:4c:cd:2d:b4:30:4e:62:4e:dc:6d:ee:56:ed: 67:b0:59:dc:65:b5:1a:44:82:c7:bc:83:77:38:48: 32:34:13:67:3e:d7:94:4a:6c:5b:d4:c0:59:f3:16: 07:48:20:00:c0:bb:ad:f6:88:a3:50:11:5d:b7:1b: 12:62:f7:7a:fb:86:98:43:fc:c5:9f:ca:f6:38:b8: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:25:2B:C4:0E:A1:ED:0F:62:62:59:4C:48:01:F5:6A:03:63:B8:ED X509v3 Authority Key Identifier: keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a9:76:65:b6:d5:ff:ea:25:66:05:2a:ce:a4:7d:ef:97:08: 49:df:8d:2d:ab:8d:e9:6e:1b:0a:bb:0a:26:7f:76:46:99:dc: 2c:a2:65:15:ad:5b:da:6d:b4:2c:ad:f0:de:66:25:cd:16:cf: 18:ae:ff:47:6a:bf:e7:0e:28:e0:ae:5a:d0:2d:92:79:5d:49: 48:a7:9c:94:70:b9:8a:37:01:9d:f7:7a:de:a7:75:95:c0:bc: 1b:7c:13:4f:95:f7:aa:d3:35:dd:36:34:b1:bb:43:cc:00:fb: 76:5e:15:ae:c0:99:f3:31:cd:a4:40:cd:19:89:21:d9:bc:07: 34:86:40:0b:c8:ac:b5:05:41:38:8c:5a:a3:05:86:2d:a1:e9: a0:06:00:80:62:b8:f4:b1:36:3a:50:80:31:07:24:ca:4b:f6: df:dc:b5:99:30:9e:87:9e:de:f2:bb:fc:5f:22:5f:b2:9a:58: 5b:04:76:5a:f0:11:7e:0e:8d:db:e0:2c:57:52:15:b6:a7:a7: fa:df:84:d5:29:ee:55:4e:4c:46:7c:ca:1d:4e:5f:ef:67:37: e1:76:2c:d4:bb:b5:eb:b0:82:8d:69:27:bb:20:c7:d0:51:07: 88:1e:77:3f:33:f6:79:9f:03:93:14:44:07:8f:ba:4f:b2:dd: 53:b1:f6:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECNY966kbdli7CArdcFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmVmYjRkOTQwNDM2ODcxYTI0YTg3MjJmM2M5ZDY0ZDZj ODQwMTAwHhcNMjYwMjA5MTEwMTE5WhcNMjYwMjEwMTEwMTE5WjAzMTEwLwYDVQQD EyhhZjI1MmJjNDBlYTFlZDBmNjI2MjU5NGM0ODAxZjU2YTAzNjNiOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsienqrPchn15zF9evS4yZqxogUJx nYAdx+ll91ShuWpv8mDNMzc5jM6fBLy/UKrK2+aJ+BNA/JGIL0bXE4J+rm/1BGd+ l4ve5BXuYxrCyLm+hHG6pyFpLAHY5LKeokgbOPaGlttSUknZd3hsKFiH/CzuvW6i sh9Ah49QC4+gV4TVTVnwSfOXC6+k+rA2jy8Siv57TUoD0jkkyZIG5zpmz3G50ThV 2th9IntZ//3uaTDUQ6DIWkzNLbQwTmJO3G3uVu1nsFncZbUaRILHvIN3OEgyNBNn PteUSmxb1MBZ8xYHSCAAwLut9oijUBFdtxsSYvd6+4aYQ/zFn8r2OLhbUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8lK8QOoe0PYmJZTEgB9WoDY7jtMB8GA1UdIwQY MBaAFNG++02UBDaHGiSoci88nWTWyEAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEt MGQ1ZDk1MTAxMmU3LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEtMGQ1ZDk1MTAxMmU3 LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6l2ZbbV /+olZgUqzqR975cISd+NLauN6W4bCrsKJn92RpncLKJlFa1b2m20LK3w3mYlzRbP GK7/R2q/5w4o4K5a0C2SeV1JSKeclHC5ijcBnfd63qd1lcC8G3wTT5X3qtM13TY0 sbtDzAD7dl4VrsCZ8zHNpEDNGYkh2bwHNIZAC8istQVBOIxaowWGLaHpoAYAgGK4 9LE2OlCAMQckykv239y1mTCeh57e8rv8XyJfsppYWwR2WvARfg6N2+AsV1IVtqen +t+E1SnuVU5MRnzKHU5f72c34XYs1Lu167CCjWknuyDH0FEHiB53PzP2eZ8DkxRE B4+6T7LdU7H2sQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:37 2026 by rpki-client