This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json) Hash identifier: 5OoahT1XnBb7uGmEvpv7yr9G9TLO55w1qlWp1IFzEgk= Subject key identifier: CF:BA:26:C5:19:0A:7E:F1:87:82:7A:3D:D2:1C:00:C5:1E:02:DF:71 Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Certificate serial: 019C41D85B9B47F16D3BEFDECA66E55FBB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft Manifest number: 029F Signing time: Mon 09 Feb 2026 10:00:23 +0000 Manifest this update: Mon 09 Feb 2026 10:00:23 +0000 Manifest next update: Tue 10 Feb 2026 10:00:23 +0000 Files and hashes: 1: DJqntjgYkfPW1Br18ErHhvNgn_M.roa (hash: B5GRLWvmtpau9qTab26EepTDGZK6+L4FVVyJPZXWVFg=) 2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: FnSXgLHzGF4w9x2cN+5GJ+oOQ+F8X3MJzM198tUklZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5b:9b:47:f1:6d:3b:ef:de:ca:66:e5:5f:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Validity Not Before: Feb 9 10:00:23 2026 GMT Not After : Feb 10 10:00:23 2026 GMT Subject: CN=cfba26c5190a7ef187827a3dd21c00c51e02df71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:e6:ce:72:0a:6d:0f:30:95:f3:65:4d:f9: e9:fb:4f:58:55:59:d0:ba:32:3a:5c:5d:ec:e3:aa: cc:45:9a:55:22:13:ec:c9:c5:12:94:58:a8:18:ce: 55:d8:ce:d9:8f:56:ce:44:7c:de:20:3a:fb:68:fa: 8e:dd:33:a3:02:6d:56:b1:98:e7:db:b0:e6:bb:34: 0c:df:de:09:27:91:01:0e:b3:3f:67:54:34:5b:78: 8b:29:9b:f8:04:49:16:da:a0:53:42:26:eb:4c:a0: d5:28:5e:49:f6:cd:29:ef:66:8b:a2:bd:7b:0d:58: ff:2c:d3:81:4d:8f:43:ab:77:af:61:5f:67:55:90: 56:0d:08:08:7a:01:74:0c:82:fb:f9:dc:74:56:2e: 3e:5d:a1:d4:61:81:7f:d3:3d:99:54:2e:6b:e9:fa: 35:37:ee:6b:86:31:af:fb:a2:92:d9:41:79:99:9c: 85:4c:1d:60:be:5f:26:07:75:7f:c8:70:15:c1:57: 99:14:33:14:08:fb:90:e6:f9:42:9b:d3:cc:d7:58: f4:30:42:15:07:b1:b0:c4:6b:a8:c2:e3:85:f0:1e: bd:ac:db:10:e8:4f:33:eb:a3:8e:79:b2:9e:0a:cc: 5e:39:cb:fe:c5:ab:9d:cd:d3:f0:79:9c:5e:56:29: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:26:C5:19:0A:7E:F1:87:82:7A:3D:D2:1C:00:C5:1E:02:DF:71 X509v3 Authority Key Identifier: keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1c:3e:4e:14:01:c0:5e:13:92:c4:f4:e1:ba:e5:26:df:dd: c2:8b:44:c1:8b:87:4a:73:9d:f2:b4:93:59:2f:ea:87:13:e9: 6f:04:86:f6:58:bc:23:92:70:6c:b3:1d:33:c6:77:57:b3:87: b4:69:4c:c1:c7:72:b7:ad:37:51:ac:d3:88:c5:28:d1:c5:a6: ea:a0:6a:2f:65:44:21:82:b5:69:4c:c9:84:5d:42:aa:af:19: d2:5d:70:f5:24:47:fa:69:bf:00:49:46:77:50:51:81:38:1a: a8:a9:0e:e7:f2:66:37:c1:64:49:8d:63:34:45:84:4d:04:ae: b1:24:92:a9:ce:99:57:17:6d:2a:b8:b1:44:d1:3d:62:13:d2: 49:d2:e6:9b:96:70:c4:e4:f3:01:ea:86:b9:8e:89:de:4d:79: 0d:5e:5d:b0:2d:74:77:66:8f:9b:a7:b5:3d:0a:21:43:7e:b5: e1:2c:72:a5:9c:e2:88:58:c1:9d:bb:9d:e6:59:32:c6:4d:02: 7e:ee:d3:2c:04:fc:cd:41:01:1f:ae:a9:81:01:1b:d2:c4:5c: 8e:98:3b:66:3e:29:09:4c:8e:97:c0:56:98:f9:66:0d:a3:47: ec:ae:75:88:a5:d0:38:b0:b3:6d:de:57:25:1f:e0:f7:f3:75: 57:1e:61:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FubR/FtO+/eymblX7uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk ODMzNjkwHhcNMjYwMjA5MTAwMDIzWhcNMjYwMjEwMTAwMDIzWjAzMTEwLwYDVQQD EyhjZmJhMjZjNTE5MGE3ZWYxODc4MjdhM2RkMjFjMDBjNTFlMDJkZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTHmznIKbQ8wlfNlTfnp+09YVVnQ ujI6XF3s46rMRZpVIhPsycUSlFioGM5V2M7Zj1bORHzeIDr7aPqO3TOjAm1WsZjn 27DmuzQM394JJ5EBDrM/Z1Q0W3iLKZv4BEkW2qBTQibrTKDVKF5J9s0p72aLor17 DVj/LNOBTY9Dq3evYV9nVZBWDQgIegF0DIL7+dx0Vi4+XaHUYYF/0z2ZVC5r6fo1 N+5rhjGv+6KS2UF5mZyFTB1gvl8mB3V/yHAVwVeZFDMUCPuQ5vlCm9PM11j0MEIV B7GwxGuowuOF8B69rNsQ6E8z66OOebKeCsxeOcv+xaudzdPweZxeVimGjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+6JsUZCn7xh4J6PdIcAMUeAt9xMB8GA1UdIwQY MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt NWZhOWRhMDNmNTcwLzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRw+ThQB wF4TksT04brlJt/dwotEwYuHSnOd8rSTWS/qhxPpbwSG9li8I5JwbLMdM8Z3V7OH tGlMwcdyt603UazTiMUo0cWm6qBqL2VEIYK1aUzJhF1Cqq8Z0l1w9SRH+mm/AElG d1BRgTgaqKkO5/JmN8FkSY1jNEWETQSusSSSqc6ZVxdtKrixRNE9YhPSSdLmm5Zw xOTzAeqGuY6J3k15DV5dsC10d2aPm6e1PQohQ3614SxypZziiFjBnbud5lkyxk0C fu7TLAT8zUEBH66pgQEb0sRcjpg7Zj4pCUyOl8BWmPlmDaNH7K51iKXQOLCzbd5X JR/g9/N1Vx5hAw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:26 2026 by rpki-client