This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json) Hash identifier: rAeIqLOKEGN/XJL6w5IrG/zNa1olHXazVYzZ5RWcFR8= Subject key identifier: C6:53:E8:50:82:37:AA:D9:2D:23:B7:31:27:65:DC:08:9F:13:5C:9C Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Certificate serial: 019C4358C2821014D98AE8E1A9CC90E30860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft Manifest number: 0494 Signing time: Mon 09 Feb 2026 17:00:16 +0000 Manifest this update: Mon 09 Feb 2026 17:00:16 +0000 Manifest next update: Tue 10 Feb 2026 17:00:16 +0000 Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: UjNgwllw8Tw+G30uviwzQoJaxKP8qP6MKsjX3pC1nmE=) 2: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c2:82:10:14:d9:8a:e8:e1:a9:cc:90:e3:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Validity Not Before: Feb 9 17:00:16 2026 GMT Not After : Feb 10 17:00:16 2026 GMT Subject: CN=c653e8508237aad92d23b7312765dc089f135c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:b4:b9:7e:98:19:98:7d:f8:18:c4:8c:4d: 12:cd:b1:9f:eb:bb:79:f1:35:fd:ac:5c:3d:b8:a1: 2a:bb:f1:67:60:6c:40:35:92:8e:54:13:cd:98:d6: 79:7f:6f:e6:8b:40:4b:58:c1:c0:c4:f2:d6:c4:64: 30:b1:26:ed:a6:86:6e:5f:08:c0:32:22:fa:64:ff: cd:57:ac:e5:e8:a2:93:9d:70:f9:fe:ff:7b:d3:a3: c7:19:31:e0:89:94:b0:81:b9:c8:d7:9e:a5:f4:e5: 59:9d:8d:ac:dd:a1:b7:f4:8d:11:81:ef:77:3b:77: 3e:9a:d8:52:46:1d:12:25:84:c4:b3:f2:4d:54:14: 92:7c:1a:ff:60:22:35:a7:b6:90:53:fb:b2:b3:68: 00:dd:80:74:f5:01:3b:22:e9:a0:c1:d8:8b:3e:b4: 5e:3d:52:a3:00:8e:2b:b1:bd:dd:f0:81:f2:90:dc: 3d:51:c3:45:8b:12:1c:fa:2e:79:52:a7:d7:fe:4b: 15:12:c8:96:4e:ca:20:e0:d7:ed:71:82:63:0e:9c: 28:05:7f:71:e5:e1:4b:63:3e:5b:4f:e1:47:6f:bd: e1:32:8d:0b:83:2b:c5:6e:d9:06:77:7e:77:0c:fe: 62:47:92:7c:ef:76:40:71:2b:10:41:8b:19:7e:94: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:E8:50:82:37:AA:D9:2D:23:B7:31:27:65:DC:08:9F:13:5C:9C X509v3 Authority Key Identifier: keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2b:f8:67:7d:04:ae:2e:1a:de:41:2b:27:9d:32:6d:e4:4b: 9b:63:3a:0a:8d:12:57:25:63:a4:e6:30:04:e6:13:8c:e0:d7: e6:5f:0c:0a:d8:cf:21:8f:a1:83:11:69:92:bf:1b:d3:ee:6d: c5:ec:bc:35:38:e1:99:16:31:25:a8:78:c4:1b:7c:7f:22:2f: cb:ae:04:67:9b:b8:35:47:68:5d:a0:6f:7a:54:11:6a:07:6a: c9:80:d4:b7:eb:73:b8:8a:90:ab:df:b4:67:ee:4c:2b:22:25: 84:f8:64:bf:3b:23:6a:26:20:be:79:2f:80:66:2f:25:5a:ae: e0:f2:97:31:8e:d9:79:1f:ff:44:12:41:42:67:74:70:4d:fe: 1a:14:88:cb:fd:df:27:8f:5b:31:0c:d7:2f:09:52:60:3e:22: 77:ba:a6:47:33:6a:34:10:94:f5:f5:b5:70:a7:27:bd:91:6a: 06:1a:34:b3:1f:08:2f:42:c6:a6:be:f5:c1:03:a6:e1:ac:46: 8d:65:e9:e7:42:c7:9b:be:23:6b:7d:19:ae:ec:bf:23:9c:d0: e4:14:2d:e3:fa:26:90:44:3d:93:55:6c:a0:74:ce:fc:95:49: 9d:29:29:85:9b:84:5b:8e:03:86:fb:90:e7:0d:9e:53:49:cb: da:69:02:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMKCEBTZiujhqcyQ4whgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx MzcyZTYwHhcNMjYwMjA5MTcwMDE2WhcNMjYwMjEwMTcwMDE2WjAzMTEwLwYDVQQD EyhjNjUzZTg1MDgyMzdhYWQ5MmQyM2I3MzEyNzY1ZGMwODlmMTM1YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu+0uX6YGZh9+BjEjE0SzbGf67t5 8TX9rFw9uKEqu/FnYGxANZKOVBPNmNZ5f2/mi0BLWMHAxPLWxGQwsSbtpoZuXwjA MiL6ZP/NV6zl6KKTnXD5/v9706PHGTHgiZSwgbnI156l9OVZnY2s3aG39I0Rge93 O3c+mthSRh0SJYTEs/JNVBSSfBr/YCI1p7aQU/uys2gA3YB09QE7IumgwdiLPrRe PVKjAI4rsb3d8IHykNw9UcNFixIc+i55UqfX/ksVEsiWTsog4NftcYJjDpwoBX9x 5eFLYz5bT+FHb73hMo0LgyvFbtkGd353DP5iR5J873ZAcSsQQYsZfpQrHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZT6FCCN6rZLSO3MSdl3AifE1ycMB8GA1UdIwQY MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5 LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSv4Z30E ri4a3kErJ50ybeRLm2M6Co0SVyVjpOYwBOYTjODX5l8MCtjPIY+hgxFpkr8b0+5t xey8NTjhmRYxJah4xBt8fyIvy64EZ5u4NUdoXaBvelQRagdqyYDUt+tzuIqQq9+0 Z+5MKyIlhPhkvzsjaiYgvnkvgGYvJVqu4PKXMY7ZeR//RBJBQmd0cE3+GhSIy/3f J49bMQzXLwlSYD4id7qmRzNqNBCU9fW1cKcnvZFqBho0sx8IL0LGpr71wQOm4axG jWXp50LHm74ja30Zruy/I5zQ5BQt4/omkEQ9k1VsoHTO/JVJnSkphZuEW44DhvuQ 5w2eU0nL2mkCPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:43 2026 by rpki-client