This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json) Hash identifier: RKjWJMsnRzpE7nEnTSe5rFijuEUz7ZramF4LsudwLb4= Subject key identifier: 03:83:FA:86:91:82:BC:36:4D:D3:85:BE:A3:C6:F4:49:F4:72:4E:02 Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Certificate serial: 019C43C6B7FBE7939A8FBE31F7E276DAC73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft Manifest number: 0F23 Signing time: Mon 09 Feb 2026 19:00:22 +0000 Manifest this update: Mon 09 Feb 2026 19:00:22 +0000 Manifest next update: Tue 10 Feb 2026 19:00:22 +0000 Files and hashes: 1: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: c4CN4KGaCHqXsMqB5/jPz252tdR1LcfzHQk/OEER5VE=) 2: VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa (hash: 3z55MUcCGHXgB/Y4YMi8pDAR10sJJt845t8wllcRG2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b7:fb:e7:93:9a:8f:be:31:f7:e2:76:da:c7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Validity Not Before: Feb 9 19:00:22 2026 GMT Not After : Feb 10 19:00:22 2026 GMT Subject: CN=0383fa869182bc364dd385bea3c6f449f4724e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:66:5d:d0:3d:b6:b6:b2:40:48:9c:97:d3: 9e:46:3c:c3:cc:3f:47:9b:1d:10:f4:83:16:c9:94: 27:cc:b1:c3:09:0e:d2:47:a0:a5:15:41:51:a1:a9: 3e:ab:f8:d0:03:63:bd:06:96:a6:f5:31:8b:b1:6d: cc:e4:bc:c6:88:ef:ee:ec:92:10:67:3d:88:a1:c4: 24:43:e2:dc:77:7f:12:49:aa:68:df:4b:f0:2a:ab: 3b:3b:8f:e4:64:3b:4b:7f:96:57:54:da:66:a4:d2: 47:cb:89:4b:da:6d:aa:11:79:bf:8b:f8:66:f8:94: a1:16:fa:5c:90:bb:9c:b7:87:20:02:4c:aa:67:18: 4c:dd:30:5b:51:b0:a0:84:9b:48:08:05:1c:fd:34: 28:39:e0:11:f7:b2:74:1d:a0:c5:20:03:14:0e:f2: 35:3c:b7:ea:64:d3:de:27:97:93:1c:16:0a:45:0f: 4d:4a:96:ae:6d:b3:14:1f:c3:7a:2f:aa:25:59:65: 24:2d:13:78:6e:ab:cb:c4:de:d2:2c:50:09:ef:7e: 10:5b:9b:b3:9d:50:b3:3c:8e:1b:a3:ca:51:c9:99: 07:53:2e:ca:5e:5a:76:ba:87:dd:00:08:11:6c:39: 97:69:6e:f0:e2:01:a8:b1:75:4e:e9:da:ad:c7:a4: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:FA:86:91:82:BC:36:4D:D3:85:BE:A3:C6:F4:49:F4:72:4E:02 X509v3 Authority Key Identifier: keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:87:1c:43:b7:07:91:16:6f:de:70:81:97:a0:17:46:7a:f7: bb:3f:2c:30:43:e3:44:18:ed:5b:f0:49:9e:cc:fa:d3:b1:28: d9:5c:2a:04:ef:15:66:05:da:b1:ff:eb:c4:bc:f5:d6:b8:db: b1:e9:6a:33:86:7e:c5:af:e2:e3:05:39:7f:88:2d:a0:bc:42: 17:b3:cb:8a:c3:7c:b0:67:7c:5a:95:38:ee:b5:06:9e:86:83: 79:ec:df:d6:e7:e0:3a:5e:7d:38:81:bc:c7:de:d1:58:f5:74: 85:d3:34:83:de:d4:13:ca:b2:5b:a4:41:16:e1:cc:7a:aa:46: 15:f7:e2:a8:5e:8f:a4:0f:b5:75:22:62:a9:30:35:e5:9d:2e: 10:04:27:67:84:f2:bd:f5:f9:05:4c:69:fd:7f:a6:a7:5a:89: 3b:35:9e:01:9e:81:97:c1:15:a2:76:0f:24:d5:00:7b:d5:23: f7:88:6f:0c:b3:2f:7e:6b:1d:59:bd:bd:36:f0:08:a9:11:4e: 00:cf:d7:55:7f:02:ce:46:6e:10:2a:97:a9:d3:b8:85:c5:79: a1:82:a7:11:5a:f1:49:84:06:ae:9a:e1:d6:f2:1f:b1:4e:45: ff:54:e7:bd:07:2f:fe:e1:ce:9d:d7:af:05:e7:f9:80:2f:6b: 68:7d:c5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrf755Oaj74x9+J22sc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh MzM0OGIwHhcNMjYwMjA5MTkwMDIyWhcNMjYwMjEwMTkwMDIyWjAzMTEwLwYDVQQD EygwMzgzZmE4NjkxODJiYzM2NGRkMzg1YmVhM2M2ZjQ0OWY0NzI0ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhxmXdA9trayQEicl9OeRjzDzD9H mx0Q9IMWyZQnzLHDCQ7SR6ClFUFRoak+q/jQA2O9Bpam9TGLsW3M5LzGiO/u7JIQ Zz2IocQkQ+Lcd38SSapo30vwKqs7O4/kZDtLf5ZXVNpmpNJHy4lL2m2qEXm/i/hm +JShFvpckLuct4cgAkyqZxhM3TBbUbCghJtICAUc/TQoOeAR97J0HaDFIAMUDvI1 PLfqZNPeJ5eTHBYKRQ9NSpaubbMUH8N6L6olWWUkLRN4bqvLxN7SLFAJ734QW5uz nVCzPI4bo8pRyZkHUy7KXlp2uofdAAgRbDmXaW7w4gGosXVO6dqtx6TORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOD+oaRgrw2TdOFvqPG9En0ck4CMB8GA1UdIwQY MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt NWQ0MDEwOTAwZTg2LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2 LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4ccQ7cH kRZv3nCBl6AXRnr3uz8sMEPjRBjtW/BJnsz607Eo2VwqBO8VZgXasf/rxLz11rjb selqM4Z+xa/i4wU5f4gtoLxCF7PLisN8sGd8WpU47rUGnoaDeezf1ufgOl59OIG8 x97RWPV0hdM0g97UE8qyW6RBFuHMeqpGFffiqF6PpA+1dSJiqTA15Z0uEAQnZ4Ty vfX5BUxp/X+mp1qJOzWeAZ6Bl8EVonYPJNUAe9Uj94hvDLMvfmsdWb29NvAIqRFO AM/XVX8CzkZuECqXqdO4hcV5oYKnEVrxSYQGrprh1vIfsU5F/1TnvQcv/uHOndev Bef5gC9raH3Fbg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:02 2026 by rpki-client