This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json) Hash identifier: qHji3NmPStuDgbIWDIy8gIKNCAbGSubVkKIAYboJ/ZA= Subject key identifier: B4:3F:A5:7F:2B:A8:77:41:06:8F:71:8A:66:94:CF:61:D5:F1:BC:79 Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Certificate serial: 019C41A1AF70F18D3D6F79B2FAA9915D15F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:00:40 +0000 Manifest this update: Mon 09 Feb 2026 09:00:40 +0000 Manifest next update: Tue 10 Feb 2026 09:00:40 +0000 Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=) 2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: 5It2E1ZX6xQtY5iaudmqbPDuCxkSh53FPlXzRXQjjOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:af:70:f1:8d:3d:6f:79:b2:fa:a9:91:5d:15:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Validity Not Before: Feb 9 09:00:40 2026 GMT Not After : Feb 10 09:00:40 2026 GMT Subject: CN=b43fa57f2ba87741068f718a6694cf61d5f1bc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:6f:e0:b4:dc:9c:16:63:99:5b:6c:7b:94: 2b:a6:5a:72:e5:ef:f6:d1:3e:c0:d0:7a:3f:d0:84: 84:a1:e5:e3:95:05:b9:e4:5b:29:e7:e1:f7:ff:31: 52:43:ce:e9:41:b6:e0:8e:7a:6f:b9:9f:a6:46:dd: 4b:db:d2:4c:c9:78:ab:c9:9a:95:08:3b:59:18:4a: 6c:ae:69:36:da:9f:2e:6a:9e:02:3c:98:1e:e6:57: 2c:16:3d:5c:7f:d0:26:96:d9:41:c7:23:13:e9:66: e0:95:e4:0e:15:52:e9:a5:4f:53:4a:b8:6e:ce:c3: d1:61:f2:17:e0:81:2d:93:2b:45:1a:a9:5b:22:f5: 36:42:42:a0:f7:fd:b9:9e:55:eb:79:f6:8d:71:48: 7b:e7:12:89:e4:b4:fb:68:59:6b:89:f1:f0:a8:88: cb:41:64:ff:f6:02:85:55:46:af:23:bd:ea:aa:ce: e3:ca:b8:d6:0f:13:f8:63:f5:6d:e0:7a:02:48:35: 1d:ec:49:e3:77:dc:c6:9b:9e:b2:91:d4:84:8c:32: 3b:9e:fe:cf:0b:8d:72:fb:a7:8f:cc:f7:88:e8:85: 91:0b:98:62:fc:7c:15:d5:5e:b6:29:e3:ac:1f:37: 62:ed:e9:5f:59:a9:04:0a:40:61:6d:9d:8d:97:87: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3F:A5:7F:2B:A8:77:41:06:8F:71:8A:66:94:CF:61:D5:F1:BC:79 X509v3 Authority Key Identifier: keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:3f:48:18:e0:8f:b8:12:3d:d4:16:49:0f:3b:8e:b5:b7: 76:77:45:0d:e4:59:e4:0f:ec:97:18:8e:df:e5:0a:c7:8d:ae: 36:d9:4b:aa:4b:20:92:04:22:ca:a9:56:95:59:50:cc:ef:fd: 4a:62:b4:69:c0:86:92:6e:b7:8a:b1:b5:18:9b:3c:74:a6:9c: fb:27:e7:60:01:1b:ca:b1:a8:e1:32:49:70:d8:1d:89:f7:a9: 59:a0:d5:3b:c2:fb:32:70:82:11:95:de:83:95:df:88:9a:2c: fe:12:eb:20:a6:83:d5:b6:54:31:21:18:2a:c0:91:9f:7a:8d: ac:69:fe:81:64:e1:d5:64:af:85:87:fa:65:80:0c:40:3f:50: 28:6e:73:d6:53:91:b9:b0:94:4a:bd:7f:dd:3e:08:fe:91:98: 40:a1:26:f1:10:5c:01:a9:ec:37:b8:c1:a9:1b:73:11:7a:ee: 7d:88:0e:cf:81:5d:52:d5:ad:3c:65:8f:ca:23:d3:27:5b:da: 0b:0f:b7:fb:7a:f1:93:7e:fe:12:02:f9:e6:6c:bf:0e:39:bb: 2a:8a:82:6e:1a:1b:d0:68:e1:bf:f4:b1:8e:5b:1e:4a:66:0b: a5:65:29:9f:86:40:3c:c1:8a:5a:d1:86:dc:26:69:35:ad:a8: ed:b2:81:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoa9w8Y09b3my+qmRXRX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj NzYxOGEwHhcNMjYwMjA5MDkwMDQwWhcNMjYwMjEwMDkwMDQwWjAzMTEwLwYDVQQD EyhiNDNmYTU3ZjJiYTg3NzQxMDY4ZjcxOGE2Njk0Y2Y2MWQ1ZjFiYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCtv4LTcnBZjmVtse5Qrplpy5e/2 0T7A0Ho/0ISEoeXjlQW55Fsp5+H3/zFSQ87pQbbgjnpvuZ+mRt1L29JMyXiryZqV CDtZGEpsrmk22p8uap4CPJge5lcsFj1cf9AmltlBxyMT6WbgleQOFVLppU9TSrhu zsPRYfIX4IEtkytFGqlbIvU2QkKg9/25nlXrefaNcUh75xKJ5LT7aFlrifHwqIjL QWT/9gKFVUavI73qqs7jyrjWDxP4Y/Vt4HoCSDUd7Enjd9zGm56ykdSEjDI7nv7P C41y+6ePzPeI6IWRC5hi/HwV1V62KeOsHzdi7elfWakECkBhbZ2Nl4dPHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ/pX8rqHdBBo9ximaUz2HV8bx5MB8GA1UdIwQY MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt NzI4ZTBkZmI4NDBkLzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0g/SBjg j7gSPdQWSQ87jrW3dndFDeRZ5A/slxiO3+UKx42uNtlLqksgkgQiyqlWlVlQzO/9 SmK0acCGkm63irG1GJs8dKac+yfnYAEbyrGo4TJJcNgdifepWaDVO8L7MnCCEZXe g5XfiJos/hLrIKaD1bZUMSEYKsCRn3qNrGn+gWTh1WSvhYf6ZYAMQD9QKG5z1lOR ubCUSr1/3T4I/pGYQKEm8RBcAansN7jBqRtzEXrufYgOz4FdUtWtPGWPyiPTJ1va Cw+3+3rxk37+EgL55my/Djm7KoqCbhob0Gjhv/SxjlseSmYLpWUpn4ZAPMGKWtGG 3CZpNa2o7bKBoA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client