This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json) Hash identifier: TLSRfQ7KNDY9F8yg14uxADbDmFa1nSSPyldkGOFNkUc= Subject key identifier: 7E:D5:A7:28:A6:2A:4E:F9:8F:E2:DE:2C:83:56:9E:82:72:D2:0C:78 Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Certificate serial: 019C4322542E0D9018F53F57EC35FFA2C9C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft Manifest number: 0940 Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa (hash: UMdzymruvfotkFYiGIjdIXyvlwL7DTcm4OFrb3LPVB0=) 2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: vx9V2vu0kODJ9bU6cucjNf5FYvXXKxhWCdiUYFcs6Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:54:2e:0d:90:18:f5:3f:57:ec:35:ff:a2:c9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=7ed5a728a62a4ef98fe2de2c83569e8272d20c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:7b:8f:fa:1b:82:3e:20:49:ce:4e:97:32: dc:5a:b3:b8:7c:a3:69:17:fe:91:0b:39:19:79:2b: eb:5e:fa:f4:d6:d1:67:25:6e:92:ed:96:a9:d3:b6: 4b:7e:2d:3e:4e:30:f2:2a:98:20:f2:0a:e3:48:00: 90:ba:5a:e6:01:49:5c:c2:e6:ae:43:81:cc:ad:72: 52:ca:54:b7:11:90:b0:98:17:bd:f1:dd:f1:c0:fc: 55:a1:81:bd:aa:10:30:e0:fb:b9:07:5f:67:f7:50: d6:34:d5:95:61:44:8d:ad:18:61:a8:ee:9a:cd:70: 1d:1f:b2:b9:2b:ff:78:14:3a:3d:9b:e7:90:f2:bf: 2b:da:5c:e0:25:eb:1d:57:ca:be:7d:fb:6c:cb:eb: f2:4c:b0:64:c1:08:8c:9c:6c:5d:ac:c7:bd:20:a1: 65:b7:a4:eb:2b:e8:bd:26:1d:69:7f:51:5d:46:23: 08:6b:1f:77:f9:d4:64:0a:0e:38:ed:6b:e4:d5:01: 26:22:4c:1f:11:a4:8e:aa:2c:71:58:78:b1:05:ef: 0d:dc:61:4f:1b:ee:ac:9c:f1:b7:8d:f7:bd:1d:6f: 29:9a:37:c1:bd:1c:3c:04:64:c4:a3:a8:c9:d8:e1: 2b:5b:24:17:a6:57:b7:cc:2d:79:13:f3:e9:8e:bf: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:A7:28:A6:2A:4E:F9:8F:E2:DE:2C:83:56:9E:82:72:D2:0C:78 X509v3 Authority Key Identifier: keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:54:05:2f:74:a5:96:4e:cf:47:b5:de:64:0b:d0:51:31: aa:33:56:11:af:f9:c9:6a:3a:52:52:58:5f:52:03:fa:d9:46: 2e:b3:97:dc:97:15:6c:6e:b2:f9:85:82:2e:b9:08:70:3b:c8: d7:8a:42:16:48:33:d0:17:86:ca:25:3b:1a:4e:e4:bc:89:ad: 13:47:fd:a4:c8:c4:8f:19:b4:c4:db:41:58:dc:2b:0f:d4:ce: 1e:41:33:fd:71:55:2e:78:86:c0:0f:db:bf:f3:ed:b4:53:fa: 74:50:65:6b:7e:94:cf:32:ae:67:ab:d5:04:b6:58:f0:3c:58: 8a:13:b4:f1:20:b1:3c:2e:c3:db:b2:2a:92:be:0c:2e:37:44: 85:31:41:4c:fb:0b:76:dc:10:51:96:7f:cb:d1:e9:6f:64:db: 91:ae:0a:c9:8a:c7:49:05:56:1a:22:39:26:7a:75:8a:93:20: 74:d8:b0:b9:15:fa:77:0c:ec:03:09:6b:c9:05:bc:7f:0e:04: fb:c3:4d:e9:67:83:76:a6:3e:aa:99:35:eb:7d:01:11:6e:47: 6c:65:a7:70:d4:b0:0f:3c:f8:95:3d:c3:fa:14:5d:6e:26:38: 1f:42:5e:3b:a8:77:a9:14:d9:b8:b5:04:75:d4:0c:c4:01:78: 29:c7:52:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlQuDZAY9T9X7DX/osnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy ZTRiMDQwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD Eyg3ZWQ1YTcyOGE2MmE0ZWY5OGZlMmRlMmM4MzU2OWU4MjcyZDIwYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yt7j/obgj4gSc5OlzLcWrO4fKNp F/6RCzkZeSvrXvr01tFnJW6S7Zap07ZLfi0+TjDyKpgg8grjSACQulrmAUlcwuau Q4HMrXJSylS3EZCwmBe98d3xwPxVoYG9qhAw4Pu5B19n91DWNNWVYUSNrRhhqO6a zXAdH7K5K/94FDo9m+eQ8r8r2lzgJesdV8q+fftsy+vyTLBkwQiMnGxdrMe9IKFl t6TrK+i9Jh1pf1FdRiMIax93+dRkCg447Wvk1QEmIkwfEaSOqixxWHixBe8N3GFP G+6snPG3jfe9HW8pmjfBvRw8BGTEo6jJ2OErWyQXple3zC15E/Ppjr9T2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7VpyimKk75j+LeLINWnoJy0gx4MB8GA1UdIwQY MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq1UBS90 pZZOz0e13mQL0FExqjNWEa/5yWo6UlJYX1ID+tlGLrOX3JcVbG6y+YWCLrkIcDvI 14pCFkgz0BeGyiU7Gk7kvImtE0f9pMjEjxm0xNtBWNwrD9TOHkEz/XFVLniGwA/b v/PttFP6dFBla36UzzKuZ6vVBLZY8DxYihO08SCxPC7D27Iqkr4MLjdEhTFBTPsL dtwQUZZ/y9Hpb2Tbka4KyYrHSQVWGiI5Jnp1ipMgdNiwuRX6dwzsAwlryQW8fw4E +8NN6WeDdqY+qpk1630BEW5HbGWncNSwDzz4lT3D+hRdbiY4H0JeO6h3qRTZuLUE ddQMxAF4KcdSEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:31 2026 by rpki-client