This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json) Hash identifier: iSwm9G2AMQyCHitY7sLO+fESy8qDoSzhnxJ6j3eb5os= Subject key identifier: E5:14:9B:F1:41:7D:59:F1:03:45:4D:8F:D5:21:88:15:53:5E:BC:D4 Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Certificate serial: 019C438FBFAFCA8D3C15B89B7C94250EB4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:20 +0000 Manifest this update: Mon 09 Feb 2026 18:00:20 +0000 Manifest next update: Tue 10 Feb 2026 18:00:20 +0000 Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=) 2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: ZGgiJZoN6K0COaHI1DGNV9evDXa/1VEa8kEAZQGeY9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:bf:af:ca:8d:3c:15:b8:9b:7c:94:25:0e:b4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Validity Not Before: Feb 9 18:00:20 2026 GMT Not After : Feb 10 18:00:20 2026 GMT Subject: CN=e5149bf1417d59f103454d8fd5218815535ebcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:d1:c4:b2:26:14:27:d2:f0:48:ef:6c:da: c7:27:3a:02:8f:ff:d4:6d:23:9f:15:a1:e7:f2:2f: c9:1e:b8:f4:1d:da:09:7c:79:33:ff:13:ad:75:cd: c5:99:21:0d:bd:82:cc:e2:bd:33:1a:2b:43:7e:64: 26:9e:93:9a:32:ec:a5:77:d5:8f:91:7a:48:57:09: 0e:ab:e1:90:de:dd:90:50:1e:22:06:fa:26:71:ab: 3e:8e:0a:35:c1:fe:67:90:33:1b:10:00:ed:ab:4b: 1a:97:83:d5:d5:a3:04:14:b3:96:05:ff:18:10:9d: 89:92:b9:e8:aa:69:4a:c9:36:6f:ea:e3:1f:01:7a: db:85:0a:3c:a6:1d:8a:49:ca:6b:4c:3c:09:85:b2: f1:bb:ed:fd:f9:cd:f9:59:38:56:82:0d:c4:5a:00: 00:87:1b:b9:3f:a7:40:87:ce:e0:65:7a:0f:a3:13: 31:5d:4c:71:50:5d:38:25:94:6b:6d:2d:c3:83:f1: 1e:18:55:d4:51:41:21:02:2d:7a:72:93:73:9b:88: 47:6d:7c:b1:7c:e2:13:95:b0:db:71:73:71:6b:ac: 2d:d2:4a:4c:3a:ab:f0:6a:31:11:9c:74:b2:75:79: 2a:0d:a2:d8:3b:21:93:5a:7a:25:2e:b6:10:a6:95: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:14:9B:F1:41:7D:59:F1:03:45:4D:8F:D5:21:88:15:53:5E:BC:D4 X509v3 Authority Key Identifier: keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ea:3c:2a:af:20:ae:7a:1e:af:58:8d:a2:3c:aa:51:eb:ac: 40:02:ee:18:3a:01:1c:ae:f1:c6:58:0a:74:eb:69:f7:db:b6: 49:63:4f:86:13:0e:b3:85:0d:21:ca:88:ce:ee:e3:42:a6:37: df:0f:27:27:23:63:9e:98:6f:c8:1e:36:aa:9d:41:c3:90:50: 55:ce:b5:ae:5d:cf:03:d1:ca:3e:a1:f4:41:35:dc:72:ac:38: 24:19:0a:b5:b8:61:c8:ea:bd:f7:13:ce:05:26:8d:e1:79:a5: 1d:dc:7a:9a:e8:0e:00:f6:b9:ba:3d:1c:b5:45:0f:eb:d7:43: 3e:d2:0e:c6:fd:bc:c7:7c:9f:13:62:71:bd:3e:9d:6f:12:16: f3:98:b7:3c:5a:9f:34:12:21:37:ee:06:8f:af:43:38:15:7b: 98:00:77:b1:4a:ec:6d:98:f7:76:6f:fd:c7:c2:90:8b:6d:50: 0a:1b:48:38:ca:0a:af:8a:43:38:4d:4c:20:38:68:24:59:65: 54:e4:72:91:fa:5b:14:7c:e8:a6:0c:71:a0:f5:88:dc:3e:19: 40:17:ca:ef:10:ad:4d:e9:5e:f7:34:c0:1c:6a:1d:ec:5b:c4: 54:84:ed:86:59:5d:34:b5:ae:6f:ad:ec:4f:46:40:8c:b0:8b: b5:62:cc:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7+vyo08FbibfJQlDrSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk YWI0MGIwHhcNMjYwMjA5MTgwMDIwWhcNMjYwMjEwMTgwMDIwWjAzMTEwLwYDVQQD EyhlNTE0OWJmMTQxN2Q1OWYxMDM0NTRkOGZkNTIxODgxNTUzNWViY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ3RxLImFCfS8EjvbNrHJzoCj//U bSOfFaHn8i/JHrj0HdoJfHkz/xOtdc3FmSENvYLM4r0zGitDfmQmnpOaMuyld9WP kXpIVwkOq+GQ3t2QUB4iBvomcas+jgo1wf5nkDMbEADtq0sal4PV1aMEFLOWBf8Y EJ2JkrnoqmlKyTZv6uMfAXrbhQo8ph2KScprTDwJhbLxu+39+c35WThWgg3EWgAA hxu5P6dAh87gZXoPoxMxXUxxUF04JZRrbS3Dg/EeGFXUUUEhAi16cpNzm4hHbXyx fOITlbDbcXNxa6wt0kpMOqvwajERnHSydXkqDaLYOyGTWnolLrYQppWYfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUUm/FBfVnxA0VNj9UhiBVTXrzUMB8GA1UdIwQY MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt MzY0ODMxMzlkYzVlLzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+o8Kq8g rnoer1iNojyqUeusQALuGDoBHK7xxlgKdOtp99u2SWNPhhMOs4UNIcqIzu7jQqY3 3w8nJyNjnphvyB42qp1Bw5BQVc61rl3PA9HKPqH0QTXccqw4JBkKtbhhyOq99xPO BSaN4XmlHdx6mugOAPa5uj0ctUUP69dDPtIOxv28x3yfE2JxvT6dbxIW85i3PFqf NBIhN+4Gj69DOBV7mAB3sUrsbZj3dm/9x8KQi21QChtIOMoKr4pDOE1MIDhoJFll VORykfpbFHzopgxxoPWI3D4ZQBfK7xCtTele9zTAHGod7FvEVITthlldNLWub63s T0ZAjLCLtWLMsw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:11 2026 by rpki-client