This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json) Hash identifier: fAhaUlsGubvd3IIrODFptDIVC0vakjvTJGDiSfYroo4= Subject key identifier: 41:A2:B5:02:50:20:B8:1C:B2:E6:0F:D8:66:63:0B:8F:75:BA:A5:6F Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00 Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00 Certificate serial: 019C424689695305C58BFF434C7E490FDDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: tnVBCBoSp6FIwC11kwvl5tGJ+2okivn/NIT37qKjiT0=) 2: qZQDb_OLECs9_cvzC4NvW-jUYJY.roa (hash: Xte6c3KnBqX3Xm7/vG9ebJ4eg8ffxrvgU6w78IU7x5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:89:69:53:05:c5:8b:ff:43:4c:7e:49:0f:dd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00 Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=41a2b5025020b81cb2e60fd866630b8f75baa56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:20:fb:f5:9e:b9:93:a4:ce:62:15:47:1f: 64:dd:96:d9:1d:50:77:ac:d6:44:79:b6:3b:7d:a7: ff:2e:00:f0:a3:24:c7:37:72:e9:9c:27:33:e5:10: 18:49:89:9f:18:6a:df:a1:11:13:b2:a9:b7:d4:42: 9b:38:32:71:7a:be:11:0b:df:c6:83:d8:d0:ac:54: 9b:53:c3:dc:ce:10:c2:f8:21:2f:b4:a2:c5:aa:4e: 4f:09:99:26:b5:30:79:0e:54:28:f1:b0:fd:71:5a: f8:3b:fc:64:fe:3f:92:74:90:e0:05:3b:09:7d:d7: ab:2e:b0:05:34:00:03:00:43:8e:4a:53:72:44:f4: 28:eb:33:04:5b:bf:d7:54:e7:12:9a:9e:0a:b7:af: 41:bf:1c:33:87:27:6d:a6:00:f9:eb:4d:8f:c4:98: bb:27:dc:cd:58:bf:7c:7b:ef:de:34:1f:30:0e:70: 6d:5d:05:9d:fb:9a:8e:38:d8:20:e9:47:db:ff:c3: 4b:92:23:7c:36:79:6d:bd:6b:41:67:7e:01:4e:74: ff:5d:54:10:09:ee:0b:be:91:c6:8c:bd:51:38:26: a4:16:b5:7c:b3:90:f2:2a:6d:08:43:f9:9f:b0:e5: 2e:19:76:03:01:74:31:90:6f:54:63:1c:ad:50:ca: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:B5:02:50:20:B8:1C:B2:E6:0F:D8:66:63:0B:8F:75:BA:A5:6F X509v3 Authority Key Identifier: keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:33:81:1c:ef:fb:0f:e4:76:0a:1c:e5:3e:6d:a3:9a:39:84: a9:84:2c:f3:93:05:f4:6b:f8:27:98:03:6a:3c:12:cc:1c:65: 7f:e3:63:b8:81:c1:21:87:2f:1f:b5:fa:fa:68:ae:b0:b8:ea: 6e:91:44:4a:20:bd:74:97:5a:47:a1:ac:0f:ec:07:98:7a:16: 2c:0f:f8:54:ad:3c:71:b9:47:2c:61:d0:3a:f0:be:fe:4a:00: c4:e1:29:13:fc:f7:2a:24:86:be:23:fa:c7:d5:c0:9f:66:2c: 75:9b:7f:bd:e5:2f:ba:a2:35:ef:7d:ae:46:b1:cc:6d:2f:e7: f8:6a:6c:36:59:ed:33:d0:4b:03:5d:c5:c1:69:93:90:ae:92: e4:f3:20:e0:8a:a2:f8:8e:ac:34:e8:39:b8:cb:e1:11:65:7a: 59:ab:64:d4:df:d4:8e:1f:83:e0:da:8b:c3:5b:9d:7c:2f:f3: 5e:b4:6c:ee:b9:fe:82:75:8e:b8:ae:f9:f6:30:f9:97:03:f8: 43:ed:7a:e6:34:f0:f7:1b:65:c6:c0:13:33:14:e5:56:a2:ad: 4d:08:fb:15:1e:71:21:04:98:ab:a4:98:6b:36:2c:fd:10:f7: 95:ad:21:8b:f9:5e:5e:81:c0:bb:11:72:65:b3:30:ee:50:f0: 72:f9:98:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRolpUwXFi/9DTH5JD93eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3 ZmFjMDAwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD Eyg0MWEyYjUwMjUwMjBiODFjYjJlNjBmZDg2NjYzMGI4Zjc1YmFhNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIsg+/WeuZOkzmIVRx9k3ZbZHVB3 rNZEebY7faf/LgDwoyTHN3LpnCcz5RAYSYmfGGrfoRETsqm31EKbODJxer4RC9/G g9jQrFSbU8PczhDC+CEvtKLFqk5PCZkmtTB5DlQo8bD9cVr4O/xk/j+SdJDgBTsJ fderLrAFNAADAEOOSlNyRPQo6zMEW7/XVOcSmp4Kt69BvxwzhydtpgD5602PxJi7 J9zNWL98e+/eNB8wDnBtXQWd+5qOONgg6Ufb/8NLkiN8NnltvWtBZ34BTnT/XVQQ Ce4LvpHGjL1ROCakFrV8s5DyKm0IQ/mfsOUuGXYDAXQxkG9UYxytUMqY1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGitQJQILgcsuYP2GZjC491uqVvMB8GA1UdIwQY MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt YzVhYjk3ZGJhODk4LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4 LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDOBHO/7 D+R2ChzlPm2jmjmEqYQs85MF9Gv4J5gDajwSzBxlf+NjuIHBIYcvH7X6+miusLjq bpFESiC9dJdaR6GsD+wHmHoWLA/4VK08cblHLGHQOvC+/koAxOEpE/z3KiSGviP6 x9XAn2YsdZt/veUvuqI1732uRrHMbS/n+GpsNlntM9BLA13FwWmTkK6S5PMg4Iqi +I6sNOg5uMvhEWV6Watk1N/Ujh+D4NqLw1udfC/zXrRs7rn+gnWOuK759jD5lwP4 Q+165jTw9xtlxsATMxTlVqKtTQj7FR5xIQSYq6SYazYs/RD3la0hi/leXoHAuxFy ZbMw7lDwcvmYcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:54 2026 by rpki-client