This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json) Hash identifier: aNQP3Fb7VN2rncLquqVNf1R/fTi4oK6DFfndhUUCEwQ= Subject key identifier: 50:B3:48:2E:49:03:2F:5A:E3:A6:04:B5:07:D1:03:EF:9C:1C:C0:08 Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d Certificate serial: 019C427D0FB13F388FABE8F657BAB6C767AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft Manifest number: 030E Signing time: Mon 09 Feb 2026 13:00:18 +0000 Manifest this update: Mon 09 Feb 2026 13:00:18 +0000 Manifest next update: Tue 10 Feb 2026 13:00:18 +0000 Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: eGpN+X7c+hpICAPFV1mo8W5RadGMfjCw0bnG3PLxjvY=) 2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0f:b1:3f:38:8f:ab:e8:f6:57:ba:b6:c7:67:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d276c41a2176254f236d23d391fd56090619670d Validity Not Before: Feb 9 13:00:18 2026 GMT Not After : Feb 10 13:00:18 2026 GMT Subject: CN=50b3482e49032f5ae3a604b507d103ef9c1cc008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:51:ed:d8:c8:e8:f8:72:dd:44:8d:40:53: 16:a6:ba:4f:a9:2d:57:ea:79:ef:c6:ca:ec:93:7c: c4:ed:14:7f:f0:47:2a:57:64:80:e8:39:e2:60:2f: 6c:5d:bf:aa:d6:24:e9:71:3a:75:24:02:3d:22:15: bc:03:dc:b5:4c:0d:72:c5:38:78:3a:2b:e0:5d:cd: be:d6:58:5f:b9:ab:99:45:e5:a6:f8:62:1b:9b:01: ab:68:fd:8b:43:29:09:e7:d7:66:dc:e9:e4:8d:1e: 8b:c5:00:18:e4:72:7a:14:e5:cb:b5:5f:a3:5f:3e: 99:46:77:0a:22:fd:ab:34:a4:0b:75:f5:15:86:33: e6:69:78:94:58:51:bc:f8:de:53:52:11:e2:b2:57: e4:3f:19:ff:23:2b:45:03:06:32:ef:98:3f:dc:64: aa:3e:68:ff:f6:0f:78:41:d1:16:73:54:ea:21:6a: eb:e0:dc:32:2d:d1:cd:5a:c1:25:10:61:7e:63:81: 4f:b9:0e:24:6a:1d:19:69:5e:82:96:f5:cd:4d:8a: 8a:85:a6:69:ae:b1:3f:bc:e4:88:9c:a7:04:48:2f: df:f8:60:d5:a4:ad:f5:d1:fe:28:45:4e:46:9b:74: e2:27:fd:89:da:cb:67:7a:78:c9:44:57:f8:1a:2c: 7b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:48:2E:49:03:2F:5A:E3:A6:04:B5:07:D1:03:EF:9C:1C:C0:08 X509v3 Authority Key Identifier: keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:62:9f:3b:71:44:1a:4b:16:b9:a0:8e:9a:8c:5d:83:a5:d0: 64:b7:35:b0:7f:5a:7b:22:85:ba:19:a5:17:59:3e:a0:c7:4d: fc:6b:59:57:b1:a6:50:b2:c9:a2:4c:d4:b6:0e:e0:b5:3c:27: 7f:83:48:3f:0a:9e:58:f0:31:35:24:7a:4d:09:20:37:95:7f: e2:e3:78:a4:8d:fe:83:77:8a:47:4f:1e:1a:5f:f2:c5:d5:57: ad:0d:0e:ff:0a:ae:94:75:1e:36:2c:20:8b:7d:75:38:14:90: 7d:50:2d:59:60:fa:58:b4:08:c2:81:83:57:8a:f7:7f:b2:23: 91:41:89:f9:98:55:94:b6:29:54:bc:e1:74:e3:c0:df:22:3b: 4c:3a:27:4f:f6:68:9b:79:c9:dc:56:71:75:14:1e:5a:bd:44: 20:ac:4f:35:ac:e1:7e:6c:b1:81:e1:95:23:63:91:1c:c5:95: a8:37:fc:b4:5c:84:2c:ac:f0:12:17:84:fc:f5:e7:39:3b:54: de:e1:4d:b3:06:aa:e8:2b:cb:49:91:b9:af:5f:83:cb:77:0e: 0b:84:ed:3d:0a:08:02:12:93:76:93:a8:1d:16:2b:2e:b7:11: dd:63:75:ff:c8:78:cd:63:cc:98:ea:d6:04:dc:f6:8e:dc:da: de:f1:26:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQ+xPziPq+j2V7q2x2evMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx OTY3MGQwHhcNMjYwMjA5MTMwMDE4WhcNMjYwMjEwMTMwMDE4WjAzMTEwLwYDVQQD Eyg1MGIzNDgyZTQ5MDMyZjVhZTNhNjA0YjUwN2QxMDNlZjljMWNjMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/BR7djI6Phy3USNQFMWprpPqS1X 6nnvxsrsk3zE7RR/8EcqV2SA6DniYC9sXb+q1iTpcTp1JAI9IhW8A9y1TA1yxTh4 OivgXc2+1lhfuauZReWm+GIbmwGraP2LQykJ59dm3OnkjR6LxQAY5HJ6FOXLtV+j Xz6ZRncKIv2rNKQLdfUVhjPmaXiUWFG8+N5TUhHislfkPxn/IytFAwYy75g/3GSq Pmj/9g94QdEWc1TqIWrr4NwyLdHNWsElEGF+Y4FPuQ4kah0ZaV6ClvXNTYqKhaZp rrE/vOSInKcESC/f+GDVpK310f4oRU5Gm3TiJ/2J2stnenjJRFf4Gix7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCzSC5JAy9a46YEtQfRA++cHMAIMB8GA1UdIwQY MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmKfO3FE GksWuaCOmoxdg6XQZLc1sH9aeyKFuhmlF1k+oMdN/GtZV7GmULLJokzUtg7gtTwn f4NIPwqeWPAxNSR6TQkgN5V/4uN4pI3+g3eKR08eGl/yxdVXrQ0O/wqulHUeNiwg i311OBSQfVAtWWD6WLQIwoGDV4r3f7IjkUGJ+ZhVlLYpVLzhdOPA3yI7TDonT/Zo m3nJ3FZxdRQeWr1EIKxPNazhfmyxgeGVI2ORHMWVqDf8tFyELKzwEheE/PXnOTtU 3uFNswaq6CvLSZG5r1+Dy3cOC4TtPQoIAhKTdpOoHRYrLrcR3WN1/8h4zWPMmOrW BNz2jtza3vEmVA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:17 2026 by rpki-client