This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json) Hash identifier: DwkK9DtOiFs8OX45PE7sL2yY7g1fZ+NkJCdBVRbHo5E= Subject key identifier: A4:2C:DD:8D:04:0F:A4:13:69:0A:3E:7D:44:B0:F6:85:75:67:39:40 Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab Certificate serial: 019C43FDC20FBC50EEE71C4B2E611637C340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft Manifest number: 11B1 Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: Ua0FvX2Mxp7XblXDKae0F_P3DVA.roa (hash: Gd0TE+m9XBYfCgcDLlJ0ZvcbYTgV+bDawl8hdljezh4=) 2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: QFSZqp4hqP0vQnjEj49mE6i1WZ+CzbFrN2QPI9DpVYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c2:0f:bc:50:ee:e7:1c:4b:2e:61:16:37:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=a42cdd8d040fa413690a3e7d44b0f68575673940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:53:93:8a:e5:03:da:9a:0c:c7:13:08:2b:36: f4:1f:32:d5:2e:04:06:ac:58:ed:d7:2b:4c:f9:f0: 9b:0e:4a:b9:36:e1:a3:d0:68:33:e3:5d:a6:7f:50: 3c:7b:50:92:1c:ec:cd:5c:83:0b:b7:7b:0c:04:f1: 0a:03:4f:a9:91:e0:05:67:d8:ac:8b:7b:a3:39:4e: 7d:7d:4f:35:11:5e:66:03:1a:43:30:93:77:77:b7: 0d:8e:81:05:ed:f6:c1:30:65:73:57:86:e7:41:87: d7:99:9e:8c:b1:75:d8:a2:a3:00:ca:76:ca:b8:9f: a4:99:9d:23:19:f3:ec:26:07:fd:60:ee:99:61:d4: 2b:96:03:6e:88:5d:ca:f4:12:17:d1:19:ca:d3:e8: b0:5b:53:1e:80:09:61:32:53:48:85:fa:3d:cc:24: da:35:a5:80:15:82:8e:1b:5d:e0:3e:83:ac:43:73: f0:35:df:7c:18:31:1a:83:cc:63:a2:a5:4e:9a:94: a8:b1:ca:96:18:23:98:15:8f:fc:82:8e:9b:7b:68: 30:28:e0:f2:97:5b:2d:6f:00:b4:c6:b6:03:2d:69: 68:05:7f:ee:da:9b:73:4a:e8:64:6c:18:4b:1c:94: a1:0c:88:dc:02:bc:a6:88:47:d8:95:db:ca:1f:9a: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:DD:8D:04:0F:A4:13:69:0A:3E:7D:44:B0:F6:85:75:67:39:40 X509v3 Authority Key Identifier: keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:73:23:bc:b8:1f:1e:70:c1:61:b5:9f:e3:b2:62:5d:47:ac: 2d:7b:2f:47:47:32:d1:1e:8d:55:82:fd:11:ba:d5:17:7b:94: 6c:80:d7:b0:a9:52:54:e8:0c:f9:42:5b:61:e8:11:32:e3:52: 59:f5:93:88:92:17:6f:63:b8:f0:05:95:ca:3b:b6:15:06:8d: c6:37:8b:12:ee:9c:a2:5e:9c:6b:f4:e9:96:38:bd:ad:a6:bd: e5:97:50:cb:7b:86:09:95:67:46:5a:d1:08:ba:f8:f6:3c:a9: 71:c6:10:4a:70:62:27:57:f4:0f:4d:b4:39:4d:89:03:fc:b9: 56:6b:c8:77:29:d1:89:61:1f:c9:ce:66:d6:ae:7b:9a:36:09: bd:ae:64:bd:e8:a1:6b:85:d4:e6:3e:51:1f:8a:5a:df:57:7a: 93:be:72:c4:03:d0:31:c6:e2:e2:5b:8e:c4:b4:34:57:7f:14: 49:9c:ae:bb:1d:1b:1a:f2:dd:4c:04:9f:41:27:b6:19:35:45: 04:ec:7f:97:ea:71:c0:1f:8f:c9:5e:87:dd:55:eb:8f:a5:ca: 5f:66:a5:a2:cd:cb:03:cb:95:04:f6:6b:1b:a5:27:d4:3e:07: 61:24:df:de:7b:a3:fe:9c:f7:3f:e0:3c:81:b8:1d:56:26:75: 8e:38:4f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cIPvFDu5xxLLmEWN8NAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWZhYzY4NTVmMjI5NmJhZDE1OTg3MGY5Y2JlZDIyMzU2 NjEzYWIwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD EyhhNDJjZGQ4ZDA0MGZhNDEzNjkwYTNlN2Q0NGIwZjY4NTc1NjczOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FOTiuUD2poMxxMIKzb0HzLVLgQG rFjt1ytM+fCbDkq5NuGj0Ggz412mf1A8e1CSHOzNXIMLt3sMBPEKA0+pkeAFZ9is i3ujOU59fU81EV5mAxpDMJN3d7cNjoEF7fbBMGVzV4bnQYfXmZ6MsXXYoqMAynbK uJ+kmZ0jGfPsJgf9YO6ZYdQrlgNuiF3K9BIX0RnK0+iwW1MegAlhMlNIhfo9zCTa NaWAFYKOG13gPoOsQ3PwNd98GDEag8xjoqVOmpSoscqWGCOYFY/8go6be2gwKODy l1stbwC0xrYDLWloBX/u2ptzSuhkbBhLHJShDIjcArymiEfYldvKH5qxwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQs3Y0ED6QTaQo+fUSw9oV1ZzlAMB8GA1UdIwQY MBaAFJkfrGhV8ilrrRWYcPnL7SI1ZhOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUt NDk0ZDkxYWViNjU1LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUtNDk0ZDkxYWViNjU1 LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3MjvLgf HnDBYbWf47JiXUesLXsvR0cy0R6NVYL9EbrVF3uUbIDXsKlSVOgM+UJbYegRMuNS WfWTiJIXb2O48AWVyju2FQaNxjeLEu6col6ca/Tplji9raa95ZdQy3uGCZVnRlrR CLr49jypccYQSnBiJ1f0D020OU2JA/y5VmvIdynRiWEfyc5m1q57mjYJva5kveih a4XU5j5RH4pa31d6k75yxAPQMcbi4luOxLQ0V38USZyuux0bGvLdTASfQSe2GTVF BOx/l+pxwB+PyV6H3VXrj6XKX2alos3LA8uVBPZrG6Un1D4HYSTf3nuj/pz3P+A8 gbgdViZ1jjhPkw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:45 2026 by rpki-client