This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: GCkGiwrx6AyrMsjIHoGdWoaFV6eET+tgA3q1QjFffCY= Subject key identifier: 98:95:49:B4:35:7A:6E:FD:36:6B:B7:BB:A0:41:0A:41:5B:7E:C0:9E Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019C43FE443F28CF26746EFE8BDC0668BE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 20:01:02 +0000 Manifest this update: Mon 09 Feb 2026 20:01:02 +0000 Manifest next update: Tue 10 Feb 2026 20:01:02 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 3jEepw070lyBXrgu2JifHFk+cUnmkQm7xvB85mxqyGg=) 2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:44:3f:28:cf:26:74:6e:fe:8b:dc:06:68:be:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Feb 9 20:01:02 2026 GMT Not After : Feb 10 20:01:02 2026 GMT Subject: CN=989549b4357a6efd366bb7bba0410a415b7ec09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:a4:5d:e0:e8:ab:cf:bb:22:d3:2a:b3:6f: df:ff:d8:95:b6:2e:91:ac:33:55:e2:cd:37:06:c4: 4e:ac:51:1c:05:b6:59:c4:87:73:60:cd:e7:92:0b: dd:9c:a9:28:16:08:a1:5a:0f:68:fc:3d:20:b2:06: 20:6c:84:9a:cd:93:e6:e3:5c:69:d1:f6:09:b4:0e: 66:cf:9d:38:40:c3:be:92:4e:10:a0:51:5e:fd:f8: aa:08:4f:7b:9d:cd:28:29:af:41:58:0b:23:e4:e6: 5d:f7:d5:a0:2d:3f:89:ee:67:d0:7c:17:b8:16:84: 86:2c:b8:1d:c8:3c:59:3a:47:b8:62:db:a5:62:04: 27:6f:2e:ab:c5:de:54:bc:6d:98:c2:f8:79:b4:9c: 13:00:02:bc:90:2e:89:34:0e:43:2c:7c:4b:a5:1f: b6:45:bc:55:e6:c1:da:fb:9a:85:a5:43:b0:f6:75: 7c:b7:14:9e:39:9d:43:ea:dd:57:dc:bc:48:d9:b6: cf:f8:c7:31:64:6e:83:88:0b:4c:31:7d:a7:ae:f2: a5:03:cb:5b:3f:6a:22:b6:ee:db:cb:34:74:b1:01: a7:48:d3:56:5c:9a:2a:54:78:d5:0b:58:4a:48:00: ff:b9:b8:a2:04:e6:1f:cf:c9:fd:54:a2:22:6a:78: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:95:49:B4:35:7A:6E:FD:36:6B:B7:BB:A0:41:0A:41:5B:7E:C0:9E X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:64:f3:05:ee:1d:51:cc:44:d3:c2:42:66:52:2e:69:6d:a3: 24:8a:db:97:21:41:09:d9:aa:0d:e9:11:3c:9f:c4:e7:ac:c6: d5:1a:1a:fd:f3:32:61:f0:86:21:41:ac:a3:c3:4a:7d:a1:ac: 05:c0:ef:8f:e8:2b:06:c3:c8:e2:68:7c:a1:20:bb:6c:e8:a2: 2a:ae:52:94:61:83:94:d3:9d:2e:1d:34:41:ca:bf:83:c1:4a: cb:95:83:91:c5:f7:61:66:f2:6f:cf:ea:7d:18:0e:83:38:c5: de:0e:67:c9:5e:5b:67:b7:d6:df:40:16:fc:66:85:5c:9d:bf: b1:a3:29:5f:5c:06:17:32:4d:22:75:ab:ab:6b:fa:bd:65:28: 9e:cc:76:1f:9b:69:c3:1c:67:60:e0:79:95:18:36:cb:cb:5d: 61:29:8a:16:55:c0:7f:8c:e5:28:d7:ca:17:ea:df:cf:cd:6b: 7b:a6:12:8c:23:d1:d4:ec:6c:d3:8b:80:e1:71:fa:e4:29:40: 14:2b:3c:8b:2c:ea:78:df:d7:76:62:a0:26:f5:08:4b:36:60: ee:fe:b6:bb:3b:9d:31:b9:5e:19:64:fb:84:33:b9:95:98:9d: f0:45:6a:5a:b5:2e:3b:1f:85:4e:be:34:1a:3c:2b:b0:52:d1: b2:1f:49:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/kQ/KM8mdG7+i9wGaL6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjYwMjA5MjAwMTAyWhcNMjYwMjEwMjAwMTAyWjAzMTEwLwYDVQQD Eyg5ODk1NDliNDM1N2E2ZWZkMzY2YmI3YmJhMDQxMGE0MTViN2VjMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1WkXeDoq8+7ItMqs2/f/9iVti6R rDNV4s03BsROrFEcBbZZxIdzYM3nkgvdnKkoFgihWg9o/D0gsgYgbISazZPm41xp 0fYJtA5mz504QMO+kk4QoFFe/fiqCE97nc0oKa9BWAsj5OZd99WgLT+J7mfQfBe4 FoSGLLgdyDxZOke4YtulYgQnby6rxd5UvG2Ywvh5tJwTAAK8kC6JNA5DLHxLpR+2 RbxV5sHa+5qFpUOw9nV8txSeOZ1D6t1X3LxI2bbP+McxZG6DiAtMMX2nrvKlA8tb P2oitu7byzR0sQGnSNNWXJoqVHjVC1hKSAD/ubiiBOYfz8n9VKIianhzBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiVSbQ1em79Nmu3u6BBCkFbfsCeMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2TzBe4d UcxE08JCZlIuaW2jJIrblyFBCdmqDekRPJ/E56zG1Roa/fMyYfCGIUGso8NKfaGs BcDvj+grBsPI4mh8oSC7bOiiKq5SlGGDlNOdLh00Qcq/g8FKy5WDkcX3YWbyb8/q fRgOgzjF3g5nyV5bZ7fW30AW/GaFXJ2/saMpX1wGFzJNInWrq2v6vWUonsx2H5tp wxxnYOB5lRg2y8tdYSmKFlXAf4zlKNfKF+rfz81re6YSjCPR1Oxs04uA4XH65ClA FCs8iyzqeN/XdmKgJvUISzZg7v62uzudMbleGWT7hDO5lZid8EVqWrUuOx+FTr40 GjwrsFLRsh9Jcw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:38 2026 by rpki-client