This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json) Hash identifier: THmBsbt8jiTDc5gCmfY7fw2diS0uPXTRrD4LMPJ04Os= Subject key identifier: 1B:13:F1:1C:09:BE:1E:76:87:1F:0C:0B:51:90:32:4D:8C:C8:54:5A Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def Certificate serial: 019C435921663DE0FDB6799AA0B3F654E23F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:40 +0000 Manifest this update: Mon 09 Feb 2026 17:00:40 +0000 Manifest next update: Tue 10 Feb 2026 17:00:40 +0000 Files and hashes: 1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=) 2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: QKf6xxTumu29aIzC7rZi+wDaFA+hYSfjgTRLR1U7L28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:21:66:3d:e0:fd:b6:79:9a:a0:b3:f6:54:e2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def Validity Not Before: Feb 9 17:00:40 2026 GMT Not After : Feb 10 17:00:40 2026 GMT Subject: CN=1b13f11c09be1e76871f0c0b5190324d8cc8545a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:2b:0f:69:46:38:98:8e:b7:bc:52:fd:ed: 60:29:59:3a:34:5b:5a:d5:60:9a:c7:bd:52:b6:2a: be:ca:ba:c8:82:66:63:46:6f:e7:52:7c:4b:d3:9c: 90:01:31:9e:c2:d9:6c:75:af:47:83:88:24:21:6f: 20:12:4c:5d:58:85:b6:73:43:e6:f7:8b:ad:ff:5d: 4e:53:64:48:fe:60:79:85:f7:45:04:7e:ae:b1:a9: f8:f7:16:cf:36:24:4f:1b:78:0f:17:9f:6b:66:51: 0d:5d:57:f1:ce:0c:3c:2f:33:0b:f6:bc:ba:1c:37: 29:ea:d7:51:e3:eb:f5:03:8a:c4:70:31:ad:2f:23: b0:38:1a:a7:b7:74:ea:28:5b:43:5d:a7:21:89:68: ef:33:26:48:47:be:e4:1d:23:9a:b8:96:2a:98:09: bf:34:bf:fd:4d:e5:80:7b:08:98:1d:a6:2b:98:cc: 12:39:b4:02:a1:13:73:a0:56:0f:f6:c6:d3:10:bd: 9f:a1:36:d9:d3:fe:a3:c2:a5:79:c3:4c:8f:24:e7: d0:e7:c9:69:93:06:b6:34:a9:74:df:b5:14:3c:56: 0e:d5:61:cc:9b:53:2c:2d:8e:90:61:c8:85:41:32: ff:2e:c1:d5:1e:b6:b4:e8:7d:7a:87:3a:ac:24:ec: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:F1:1C:09:BE:1E:76:87:1F:0C:0B:51:90:32:4D:8C:C8:54:5A X509v3 Authority Key Identifier: keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:29:3e:5d:ee:2d:6a:ea:32:99:de:6e:51:e9:26:27:32:60: 6b:a4:c0:b6:0b:b4:ff:67:eb:af:64:6b:0c:73:97:3b:92:2d: 28:a2:0e:b5:76:22:66:da:dc:dc:d5:cd:17:f7:55:cb:ff:0b: c0:42:ee:ff:f4:d9:58:b8:bd:88:ee:c8:d9:49:31:a8:f9:f6: 4c:15:24:70:1c:da:50:f1:c3:e2:84:26:6e:0c:78:f9:45:e9: 1c:ab:09:52:21:cb:d1:33:11:d0:c1:07:8f:17:53:43:ee:eb: 87:34:9a:00:3f:72:1f:21:57:44:ab:9f:18:2b:ce:7f:97:e5: 18:97:f5:3b:55:cf:34:4e:ea:7a:eb:92:90:ef:12:d9:3c:38: b4:68:99:8c:0c:ca:80:3d:de:1b:ee:eb:13:e7:a9:54:69:45: f7:b7:09:62:10:7b:e5:cb:a2:93:ff:0d:31:3f:7d:2f:5f:3d: 99:60:18:87:0e:f0:bf:ed:e9:10:69:f6:44:53:1e:f7:bb:48: 28:0a:42:1b:41:8c:99:63:61:83:05:96:92:c8:0f:66:95:6c: 82:dc:e9:f8:28:27:0d:b7:52:4d:f2:b7:d7:d9:8c:18:56:b9: e9:43:12:b2:55:d9:e8:04:a6:d4:5e:50:3e:8a:49:24:1f:ce: 0b:e7:3e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSFmPeD9tnmaoLP2VOI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi YjFkZWYwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD EygxYjEzZjExYzA5YmUxZTc2ODcxZjBjMGI1MTkwMzI0ZDhjYzg1NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JwrD2lGOJiOt7xS/e1gKVk6NFta 1WCax71Stiq+yrrIgmZjRm/nUnxL05yQATGewtlsda9Hg4gkIW8gEkxdWIW2c0Pm 94ut/11OU2RI/mB5hfdFBH6usan49xbPNiRPG3gPF59rZlENXVfxzgw8LzML9ry6 HDcp6tdR4+v1A4rEcDGtLyOwOBqnt3TqKFtDXachiWjvMyZIR77kHSOauJYqmAm/ NL/9TeWAewiYHaYrmMwSObQCoRNzoFYP9sbTEL2foTbZ0/6jwqV5w0yPJOfQ58lp kwa2NKl037UUPFYO1WHMm1MsLY6QYciFQTL/LsHVHra06H16hzqsJOx9cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsT8RwJvh52hx8MC1GQMk2MyFRaMB8GA1UdIwQY MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATik+Xe4t auoymd5uUekmJzJga6TAtgu0/2frr2RrDHOXO5ItKKIOtXYiZtrc3NXNF/dVy/8L wELu//TZWLi9iO7I2UkxqPn2TBUkcBzaUPHD4oQmbgx4+UXpHKsJUiHL0TMR0MEH jxdTQ+7rhzSaAD9yHyFXRKufGCvOf5flGJf1O1XPNE7qeuuSkO8S2Tw4tGiZjAzK gD3eG+7rE+epVGlF97cJYhB75cuik/8NMT99L189mWAYhw7wv+3pEGn2RFMe97tI KApCG0GMmWNhgwWWksgPZpVsgtzp+CgnDbdSTfK319mMGFa56UMSslXZ6ASm1F5Q PopJJB/OC+c+nQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:34 2026 by rpki-client