This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft File: 42THc_ePWKQYAxOiJl7eYmpO3o8.mft (raw, json) Hash identifier: 42Ss5dmpeFUS6eXt5t/PDGwtPtez/swZhq434vR/oRo= Subject key identifier: EF:95:85:2B:4A:66:A5:8F:36:73:9A:A2:D8:51:F9:FD:DA:08:CA:51 Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F Certificate issuer: /CN=e364c773f78f58a4180313a2265ede626a4ede8f Certificate serial: 019C4322FB6528275A45972AC4990C431859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft Manifest number: 60 Signing time: Mon 09 Feb 2026 16:01:31 +0000 Manifest this update: Mon 09 Feb 2026 16:01:31 +0000 Manifest next update: Tue 10 Feb 2026 16:01:31 +0000 Files and hashes: 1: 42THc_ePWKQYAxOiJl7eYmpO3o8.crl (hash: 2ivho8G/BlD6qLZMq3EV2ZqRB5hPaMXYxYr+XjY1quw=) 2: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (hash: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:fb:65:28:27:5a:45:97:2a:c4:99:0c:43:18:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f Validity Not Before: Feb 9 16:01:31 2026 GMT Not After : Feb 10 16:01:31 2026 GMT Subject: CN=ef95852b4a66a58f36739aa2d851f9fdda08ca51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:9d:5a:d6:03:34:c7:84:fd:aa:2a:ed:48: ce:5f:c0:ff:eb:11:6b:4a:10:c6:6c:64:58:ec:f9: a2:d6:b7:a5:92:1f:0b:c6:fa:56:86:c9:56:3f:2b: 41:31:08:33:e5:7b:0c:86:f6:c0:0d:44:f3:e9:08: e9:30:f7:12:8f:3a:a5:73:8e:a8:ac:8a:6b:cf:ca: 6c:b2:3b:25:12:26:7d:2f:64:9d:96:ea:31:0d:6b: b8:4b:03:85:56:5d:c0:5b:8d:56:08:d0:18:8f:de: 2e:47:51:9c:d1:a7:44:5d:a1:9b:a6:f3:69:a3:da: ef:6c:96:c6:34:cc:85:c7:ce:a0:40:c8:5b:00:52: e0:dc:18:80:ea:f1:b1:e0:4b:d8:34:dd:08:82:b2: f9:04:1c:a4:f1:39:30:0f:f8:d6:b5:1e:20:2a:f0: 26:d5:05:e8:46:01:06:d5:7b:8a:7f:1e:38:e9:06: 44:0e:6e:1f:d1:e3:0b:20:a8:9a:db:e7:b2:32:16: dc:6c:f0:f9:9e:6d:34:84:1d:bb:2b:72:66:ca:59: 2f:99:c1:82:24:8f:ba:15:c8:72:b1:a6:cb:55:1c: eb:5d:be:62:34:5f:6b:d3:a3:c0:da:61:45:bd:e7: 6a:e6:41:9c:6a:3e:f7:72:8d:c9:dd:93:63:40:87: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:85:2B:4A:66:A5:8F:36:73:9A:A2:D8:51:F9:FD:DA:08:CA:51 X509v3 Authority Key Identifier: keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:cf:5f:70:de:4f:ce:a3:40:eb:8c:9a:08:c3:af:53:f7: 09:bc:ab:c5:8a:d4:c1:d5:af:31:5b:64:61:25:bf:80:3b:8a: 3b:da:1c:59:c5:06:6d:50:59:5a:ab:42:11:83:cf:0d:af:2d: 4d:e6:fb:61:44:11:b5:82:6f:91:21:78:34:38:7f:78:8e:23: a4:5b:57:93:2e:35:19:61:b9:1b:d3:e3:a4:cd:bb:59:8b:34: 5f:db:63:04:08:1e:56:e5:3a:4a:e2:a5:73:0a:20:e0:d8:3a: 37:a1:35:67:74:e9:a6:c0:fc:7d:c1:a4:b7:a3:d8:52:ae:b6: 24:c5:88:57:64:19:de:b6:3f:0a:d5:15:41:c7:24:a0:aa:db: 2e:70:e2:71:b3:2e:7f:f4:0f:6d:89:e6:15:ec:54:10:e8:72: 81:df:b7:f4:8a:38:90:28:5c:59:11:fc:57:a5:e8:6e:9e:4b: 52:7f:d2:79:33:73:5b:a9:97:b5:2b:7a:93:ba:8a:ac:5d:5f: 5a:05:18:3b:23:99:eb:6c:c3:b3:d9:62:fa:35:06:19:ae:03: 3c:d7:58:b8:1d:c7:97:24:fe:bd:9e:25:ba:ec:d1:40:3e:ed: 20:34:f0:df:d8:71:ca:f3:6a:66:03:5a:94:7e:18:de:52:84: 92:37:de:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvtlKCdaRZcqxJkMQxhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjRjNzczZjc4ZjU4YTQxODAzMTNhMjI2NWVkZTYyNmE0 ZWRlOGYwHhcNMjYwMjA5MTYwMTMxWhcNMjYwMjEwMTYwMTMxWjAzMTEwLwYDVQQD EyhlZjk1ODUyYjRhNjZhNThmMzY3MzlhYTJkODUxZjlmZGRhMDhjYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHSdWtYDNMeE/aoq7UjOX8D/6xFr ShDGbGRY7Pmi1relkh8LxvpWhslWPytBMQgz5XsMhvbADUTz6QjpMPcSjzqlc46o rIprz8pssjslEiZ9L2SdluoxDWu4SwOFVl3AW41WCNAYj94uR1Gc0adEXaGbpvNp o9rvbJbGNMyFx86gQMhbAFLg3BiA6vGx4EvYNN0IgrL5BByk8TkwD/jWtR4gKvAm 1QXoRgEG1XuKfx446QZEDm4f0eMLIKia2+eyMhbcbPD5nm00hB27K3JmylkvmcGC JI+6FchysabLVRzrXb5iNF9r06PA2mFFvedq5kGcaj73co3J3ZNjQIeP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+VhStKZqWPNnOaothR+f3aCMpRMB8GA1UdIwQY MBaAFONkx3P3j1ikGAMToiZe3mJqTt6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJUSGNfZVBXS1FZQXhPaUpsN2VZbXBPM284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xMjY0ZGEtMDRkNy00MGVhLThhZTEt ZTk2YzY0ZDI0NTFmLzEvNDJUSGNfZVBXS1FZQXhPaUpsN2VZbXBPM284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8xMjY0ZGEtMDRkNy00MGVhLThhZTEtZTk2YzY0ZDI0NTFm LzEvNDJUSGNfZVBXS1FZQXhPaUpsN2VZbXBPM284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTLPX3De T86jQOuMmgjDr1P3CbyrxYrUwdWvMVtkYSW/gDuKO9ocWcUGbVBZWqtCEYPPDa8t Teb7YUQRtYJvkSF4NDh/eI4jpFtXky41GWG5G9PjpM27WYs0X9tjBAgeVuU6SuKl cwog4Ng6N6E1Z3TppsD8fcGkt6PYUq62JMWIV2QZ3rY/CtUVQcckoKrbLnDicbMu f/QPbYnmFexUEOhygd+39Io4kChcWRH8V6Xobp5LUn/SeTNzW6mXtSt6k7qKrF1f WgUYOyOZ62zDs9li+jUGGa4DPNdYuB3HlyT+vZ4luuzRQD7tIDTw39hxyvNqZgNa lH4Y3lKEkjfePA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:46 2026 by rpki-client