This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json) Hash identifier: dqlNB3WiZOWTTFHQKXl8U3VGzNvOOfBG3TeBlmPENKo= Subject key identifier: 66:1C:E3:C7:11:81:4A:7C:04:14:DC:FB:9B:27:8E:C5:68:06:7D:2B Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019C446C34B365F62D7BD386E28B4558B5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft Manifest number: 0286 Signing time: Mon 09 Feb 2026 22:01:07 +0000 Manifest this update: Mon 09 Feb 2026 22:01:07 +0000 Manifest next update: Tue 10 Feb 2026 22:01:07 +0000 Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=) 2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: MHLH+hBBcdU5U47pjlzSHskw4uvsG8Mi/TsB6qFjozk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:34:b3:65:f6:2d:7b:d3:86:e2:8b:45:58:b5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Feb 9 22:01:07 2026 GMT Not After : Feb 10 22:01:07 2026 GMT Subject: CN=661ce3c711814a7c0414dcfb9b278ec568067d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:48:20:33:81:62:11:7c:fe:3b:27:3c:b6: 0a:42:99:f0:b1:c0:63:55:52:25:7c:36:cd:13:4e: 8f:f4:5d:ed:c7:71:54:42:86:12:24:4c:ab:04:74: a4:02:48:26:d4:8f:0c:6c:31:5e:30:9b:3e:94:3b: d7:58:a5:fc:4e:8f:ba:e1:70:20:5a:9c:58:6d:d6: 4b:85:b5:44:23:19:af:3d:cb:a3:75:aa:6d:8e:c9: 4e:a9:b6:1a:88:7d:b8:94:8b:41:e7:a3:72:0c:53: 8c:3f:04:c9:ae:f6:08:0e:1e:9b:e2:a0:e8:16:19: 31:1b:a1:2d:9c:90:d4:b2:db:14:d9:f8:09:b8:f3: a2:d3:34:56:35:ad:66:4a:10:07:f9:fe:49:3c:ff: af:97:3f:c7:39:44:c2:a4:a9:6e:41:5e:ed:6f:55: 8c:a3:df:b9:a9:86:86:56:d4:5c:51:17:b1:c2:d0: b6:dc:21:f5:36:b9:78:38:4e:22:52:d1:8d:22:65: 9d:9f:f0:9a:d9:16:89:f3:74:f8:7a:d3:20:54:58: bb:77:18:90:3f:40:75:b5:5d:60:31:e1:a4:ab:5a: 20:33:39:a0:11:c7:19:3b:71:2f:34:2a:87:d1:11: 55:34:36:12:76:82:d7:ab:9c:97:28:9a:ad:41:fb: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:E3:C7:11:81:4A:7C:04:14:DC:FB:9B:27:8E:C5:68:06:7D:2B X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:44:91:a4:68:8e:17:56:67:96:bb:06:ac:9a:a3:13:9f:d8: 63:f0:b1:08:42:c1:44:dc:58:47:fe:95:68:52:99:f0:1b:74: 8e:4c:21:e3:a7:9c:a9:e5:5f:e1:d4:87:b8:77:c3:b4:3d:f1: ce:56:c6:4a:f5:40:01:68:4e:25:f9:3e:1c:bf:4a:48:e4:dd: fe:7d:eb:17:55:6b:bf:0d:bf:57:db:04:22:d3:9f:a8:24:02: 34:4e:a8:fe:ad:2a:9f:02:bb:ac:5f:8a:15:e0:ef:d8:93:af: 95:0e:d6:e2:58:f5:66:2d:00:0a:17:fb:34:5e:18:49:7a:ca: 2a:dd:4d:d6:5e:45:61:24:7d:98:37:68:2d:e4:bb:ef:5b:40: 19:54:f8:a5:38:99:81:74:32:79:f6:89:fc:9c:00:7d:8e:2d: dd:ba:0a:b2:7c:0f:7e:c4:9f:3b:29:38:8f:8c:4d:d3:5c:7a: 7a:7e:71:b2:8a:6c:38:e3:02:6d:66:da:0f:51:07:16:04:60: 11:91:fd:c9:a3:8c:b0:48:e9:62:fe:1c:fc:12:c9:d4:90:a3: 29:fb:c5:59:30:ca:37:c7:37:25:0f:67:02:10:19:21:6a:41: 86:a6:d0:88:20:70:c8:fd:f7:fe:06:8b:34:f0:df:6f:de:92: 63:10:0a:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbDSzZfYte9OG4otFWLXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjYwMjA5MjIwMTA3WhcNMjYwMjEwMjIwMTA3WjAzMTEwLwYDVQQD Eyg2NjFjZTNjNzExODE0YTdjMDQxNGRjZmI5YjI3OGVjNTY4MDY3ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxIIDOBYhF8/jsnPLYKQpnwscBj VVIlfDbNE06P9F3tx3FUQoYSJEyrBHSkAkgm1I8MbDFeMJs+lDvXWKX8To+64XAg WpxYbdZLhbVEIxmvPcujdaptjslOqbYaiH24lItB56NyDFOMPwTJrvYIDh6b4qDo FhkxG6EtnJDUstsU2fgJuPOi0zRWNa1mShAH+f5JPP+vlz/HOUTCpKluQV7tb1WM o9+5qYaGVtRcURexwtC23CH1Nrl4OE4iUtGNImWdn/Ca2RaJ83T4etMgVFi7dxiQ P0B1tV1gMeGkq1ogMzmgEccZO3EvNCqH0RFVNDYSdoLXq5yXKJqtQftknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYc48cRgUp8BBTc+5snjsVoBn0rMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkSRpGiO F1ZnlrsGrJqjE5/YY/CxCELBRNxYR/6VaFKZ8Bt0jkwh46ecqeVf4dSHuHfDtD3x zlbGSvVAAWhOJfk+HL9KSOTd/n3rF1Vrvw2/V9sEItOfqCQCNE6o/q0qnwK7rF+K FeDv2JOvlQ7W4lj1Zi0AChf7NF4YSXrKKt1N1l5FYSR9mDdoLeS771tAGVT4pTiZ gXQyefaJ/JwAfY4t3boKsnwPfsSfOyk4j4xN01x6en5xsopsOOMCbWbaD1EHFgRg EZH9yaOMsEjpYv4c/BLJ1JCjKfvFWTDKN8c3JQ9nAhAZIWpBhqbQiCBwyP33/gaL NPDfb96SYxAKug== -----END CERTIFICATE-----Generated at Tue Feb 10 05:51:28 2026 by rpki-client