This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json) Hash identifier: 8q1r8oqqKXa6ltQjXX5LCZ+TGa6rW9iM1GbJGCbYqOA= Subject key identifier: F9:CF:42:C7:FD:81:68:E3:3C:81:94:DB:52:2B:F0:35:83:91:82:9A Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8 Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8 Certificate serial: 019C43FDB2D1DDED58C2B1A6BD0F77D98A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft Manifest number: 10E9 Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: fjfyYiWPw+CfwjJlmTExf7KQrL2AmuWhlOrjxXhxWNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b2:d1:dd:ed:58:c2:b1:a6:bd:0f:77:d9:8a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8 Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=f9cf42c7fd8168e33c8194db522bf0358391829a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:30:5a:3b:39:cc:32:c9:44:d4:2c:c4:7b: bb:b2:e8:16:d0:90:88:e8:27:5c:35:59:10:23:90: a5:a9:dd:1f:2c:71:53:5a:9a:77:dd:80:84:9e:f3: 80:c8:3f:35:97:6d:e0:26:33:87:68:74:6a:b7:2b: 9c:53:40:48:a0:33:41:92:e7:6d:f9:0c:5a:32:5e: d6:ec:f2:0d:ea:e2:60:6c:4d:34:4d:fa:a7:75:2b: 17:ff:36:d5:15:09:f0:fa:25:1e:5d:c3:1e:fc:bc: 2c:3e:6d:74:9e:23:57:07:4d:67:e3:9f:f5:55:bf: 94:7d:23:d1:3d:84:3f:75:93:dc:58:b3:e4:16:e4: 2b:03:2a:bb:52:92:ca:0b:73:6c:30:88:ce:19:8a: 51:46:df:5b:2d:dc:3d:72:e4:bf:95:2c:a6:03:74: ee:3e:ec:25:85:09:7f:6b:c9:92:b3:77:81:06:10: 14:a3:37:e9:61:53:12:a4:f9:12:5a:63:15:fa:a5: 21:0d:6f:88:b0:05:69:ad:dd:e9:7d:a2:31:56:74: b6:1a:29:6f:67:bb:a6:d7:37:53:18:e4:3a:a8:65: 1d:67:58:7e:42:23:a7:8c:4f:61:f9:88:5f:83:49: b7:ac:cc:19:09:61:58:1f:d3:8f:cb:71:be:51:e6: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:42:C7:FD:81:68:E3:3C:81:94:DB:52:2B:F0:35:83:91:82:9A X509v3 Authority Key Identifier: keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:2e:f5:0e:90:87:b6:0e:38:6b:68:42:e4:c3:37:b7:01: ec:e7:aa:74:38:15:3d:7b:9d:50:5f:7d:70:e8:85:11:2e:f0: 8c:28:39:e0:3b:8d:4c:5e:04:f2:5e:16:76:e9:38:b5:26:0b: d8:a6:af:e0:14:4c:79:3a:f7:d6:2a:ee:de:1c:b7:39:10:79: 3c:64:ca:22:0a:0d:b1:8e:ad:4c:14:87:a7:fa:bd:b1:d3:e0: 18:c8:e2:e8:c0:c4:e1:fb:19:8b:0d:e0:f1:dc:b3:ce:ab:d6: 59:e8:47:e0:b3:ef:f2:e7:c8:bc:ca:de:59:5d:0b:53:cc:8b: d1:92:0f:70:b7:4c:f8:fd:81:0e:e8:d2:ed:4e:70:db:6d:51: 9b:66:04:ab:de:76:6c:70:c6:8c:29:83:6a:30:fa:15:06:4a: 83:ed:c1:e4:1a:ea:02:a6:58:dc:30:d6:86:c6:e3:d3:6c:77: c2:4a:d0:6f:ee:1c:8b:d5:6f:c4:84:19:1f:c0:17:04:b0:4e: d1:56:aa:c6:e7:f3:fc:f9:0e:05:a2:47:d2:01:cc:9a:65:a2: 80:2d:40:8a:44:2c:15:ee:76:32:7b:67:34:bd:78:e0:31:f2: 8b:2a:7d:70:18:c3:7d:76:bf:e8:e2:0d:f8:4e:98:69:ef:0b: 37:44:a7:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bLR3e1YwrGmvQ932YpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYmE5ZGIyNjc0ZjczNDU2NWYwOTUzMzkzZjBhNTY5NjFj YTU3YzgwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD EyhmOWNmNDJjN2ZkODE2OGUzM2M4MTk0ZGI1MjJiZjAzNTgzOTE4MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJIwWjs5zDLJRNQsxHu7sugW0JCI 6CdcNVkQI5Clqd0fLHFTWpp33YCEnvOAyD81l23gJjOHaHRqtyucU0BIoDNBkudt +QxaMl7W7PIN6uJgbE00TfqndSsX/zbVFQnw+iUeXcMe/LwsPm10niNXB01n45/1 Vb+UfSPRPYQ/dZPcWLPkFuQrAyq7UpLKC3NsMIjOGYpRRt9bLdw9cuS/lSymA3Tu PuwlhQl/a8mSs3eBBhAUozfpYVMSpPkSWmMV+qUhDW+IsAVprd3pfaIxVnS2Gilv Z7um1zdTGOQ6qGUdZ1h+QiOnjE9h+Yhfg0m3rMwZCWFYH9OPy3G+UeZ3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnPQsf9gWjjPIGU21Ir8DWDkYKaMB8GA1UdIwQY MBaAFAK6nbJnT3NFZfCVM5PwpWlhylfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgt ZmY4NjE0NmY4Y2M4LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgtZmY4NjE0NmY4Y2M4 LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbUu9Q6Q h7YOOGtoQuTDN7cB7OeqdDgVPXudUF99cOiFES7wjCg54DuNTF4E8l4Wduk4tSYL 2Kav4BRMeTr31iru3hy3ORB5PGTKIgoNsY6tTBSHp/q9sdPgGMji6MDE4fsZiw3g 8dyzzqvWWehH4LPv8ufIvMreWV0LU8yL0ZIPcLdM+P2BDujS7U5w221Rm2YEq952 bHDGjCmDajD6FQZKg+3B5BrqAqZY3DDWhsbj02x3wkrQb+4ci9VvxIQZH8AXBLBO 0Vaqxufz/PkOBaJH0gHMmmWigC1AikQsFe52MntnNL144DHyiyp9cBjDfXa/6OIN +E6Yae8LN0Snig== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:59 2026 by rpki-client