This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft File: a49xoY3OxDR8x7TQK8h4TorCewA.mft (raw, json) Hash identifier: 5wbLyiRGM97KOIcvokFDRCkPV/EO14XT79wn7Oc8geY= Subject key identifier: 09:B0:C9:87:E7:94:75:ED:3B:53:6E:25:29:9E:13:28:5B:95:E8:2F Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Certificate serial: 019C43593B77C290AA2739D181A4D895419B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft Manifest number: 0116 Signing time: Mon 09 Feb 2026 17:00:47 +0000 Manifest this update: Mon 09 Feb 2026 17:00:47 +0000 Manifest next update: Tue 10 Feb 2026 17:00:47 +0000 Files and hashes: 1: LpNRmtsCoRjao-6dvwj2HPVgG4s.roa (hash: kvWzFrGBwO1uv+vNoO53LU8Aj/p6EPQlI2j6iM0S5QI=) 2: a49xoY3OxDR8x7TQK8h4TorCewA.crl (hash: J6Yv5m6tAqcb/J31nNFYEIhZxwt0306CNU64atATsOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3b:77:c2:90:aa:27:39:d1:81:a4:d8:95:41:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Validity Not Before: Feb 9 17:00:47 2026 GMT Not After : Feb 10 17:00:47 2026 GMT Subject: CN=09b0c987e79475ed3b536e25299e13285b95e82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:aa:a0:64:7d:2f:2b:87:de:a7:4f:bd:72: 49:a9:b2:ba:fa:fb:54:56:01:3d:d9:57:e3:ed:cc: 43:ff:5a:4d:92:cb:8b:25:bf:5c:c3:d3:cf:a4:a1: 8f:bd:c4:1a:2a:31:57:17:8b:ca:4c:3e:27:26:34: 90:97:82:b0:79:fd:68:5a:c9:49:ee:5c:c4:f0:b3: c1:44:f1:d1:e4:23:99:fb:40:43:11:99:2a:6c:49: 13:26:ef:ec:52:1e:3b:31:36:f0:1c:c3:25:12:53: 1f:a7:54:df:e0:46:db:18:e2:32:57:4b:08:2a:1b: 10:b4:08:f0:4f:72:61:c8:5e:cb:76:da:17:a0:20: d1:3a:4c:32:dd:9e:38:6d:53:b3:7c:9d:6f:5b:f3: 3c:63:1e:1a:b6:75:a1:00:7f:3c:46:e2:8a:c2:90: 18:77:98:34:4e:d4:47:c1:4f:92:5d:1b:ab:9e:6c: e1:32:94:a7:3d:53:3d:c2:53:4b:b4:10:12:5a:5d: a6:96:51:8e:3d:49:38:f5:92:3b:75:d5:c2:57:7d: 41:46:6d:e0:fc:aa:7a:79:e5:1a:91:68:cf:0a:9a: d5:3d:f7:9d:1a:50:b9:00:a7:c7:34:0c:bc:7a:05: 72:42:be:52:40:7b:89:5f:93:4a:cc:a0:63:70:e3: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:C9:87:E7:94:75:ED:3B:53:6E:25:29:9E:13:28:5B:95:E8:2F X509v3 Authority Key Identifier: keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:87:04:ef:dd:b7:16:eb:a2:1c:71:96:30:53:43:79:dc:a4: 1e:3e:32:61:12:1c:73:e4:dc:da:16:bb:3c:e3:a5:50:71:86: c8:3d:83:20:8e:ab:59:9f:2c:22:e5:9e:f0:dd:6e:39:9f:48: 26:0f:d8:7f:47:e4:19:b2:4b:fc:45:85:12:83:d9:a2:67:80: ef:66:ba:ac:c8:ee:35:f2:78:a7:7b:75:f9:16:d4:a6:e5:5b: 96:d4:c5:3e:0d:dc:ae:af:63:d7:a2:09:96:dd:77:07:00:bc: 2e:8b:eb:a2:33:9a:36:f9:9c:c6:56:3d:6d:7b:23:7e:df:87: 86:f8:d9:bf:ee:91:18:2d:25:32:72:6f:50:b0:79:d9:c3:cf: c3:9d:70:b4:f5:ff:5a:56:12:7a:93:72:16:92:39:08:ea:ef: c0:3e:da:e5:87:38:4a:f4:4d:5a:84:85:26:d1:55:01:ec:ed: 7f:db:d8:3d:87:98:5d:28:ca:fa:31:bd:c8:0a:23:44:74:a2: aa:01:65:d5:84:0a:b4:2e:a2:d8:94:95:49:f5:fc:27:61:d7: e8:ed:95:5f:d5:06:19:b9:37:34:90:82:3c:72:93:a6:97:8b: e5:08:21:8d:d0:0a:1f:71:d3:92:9d:a1:30:99:c4:ad:fb:07: d3:8a:8b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTt3wpCqJznRgaTYlUGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGY3MWExOGRjZWM0MzQ3Y2M3YjRkMDJiYzg3ODRlOGFj MjdiMDAwHhcNMjYwMjA5MTcwMDQ3WhcNMjYwMjEwMTcwMDQ3WjAzMTEwLwYDVQQD EygwOWIwYzk4N2U3OTQ3NWVkM2I1MzZlMjUyOTllMTMyODViOTVlODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+qoGR9LyuH3qdPvXJJqbK6+vtU VgE92Vfj7cxD/1pNksuLJb9cw9PPpKGPvcQaKjFXF4vKTD4nJjSQl4Kwef1oWslJ 7lzE8LPBRPHR5COZ+0BDEZkqbEkTJu/sUh47MTbwHMMlElMfp1Tf4EbbGOIyV0sI KhsQtAjwT3JhyF7LdtoXoCDROkwy3Z44bVOzfJ1vW/M8Yx4atnWhAH88RuKKwpAY d5g0TtRHwU+SXRurnmzhMpSnPVM9wlNLtBASWl2mllGOPUk49ZI7ddXCV31BRm3g /Kp6eeUakWjPCprVPfedGlC5AKfHNAy8egVyQr5SQHuJX5NKzKBjcOMi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmwyYfnlHXtO1NuJSmeEyhblegvMB8GA1UdIwQY MBaAFGuPcaGNzsQ0fMe00CvIeE6KwnsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTIt ZDk3Y2U1ZDQxYmIzLzEvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTItZDk3Y2U1ZDQxYmIz LzEvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUocE7923 FuuiHHGWMFNDedykHj4yYRIcc+Tc2ha7POOlUHGGyD2DII6rWZ8sIuWe8N1uOZ9I Jg/Yf0fkGbJL/EWFEoPZomeA72a6rMjuNfJ4p3t1+RbUpuVbltTFPg3crq9j16IJ lt13BwC8LovrojOaNvmcxlY9bXsjft+HhvjZv+6RGC0lMnJvULB52cPPw51wtPX/ WlYSepNyFpI5COrvwD7a5Yc4SvRNWoSFJtFVAeztf9vYPYeYXSjK+jG9yAojRHSi qgFl1YQKtC6i2JSVSfX8J2HX6O2VX9UGGbk3NJCCPHKTppeL5QghjdAKH3HTkp2h MJnErfsH04qLvg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:47 2026 by rpki-client