This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json) Hash identifier: AbxWm1wmFTVQSoncLozlDoTvSbSQk0ByQnNLqJ74+Bc= Subject key identifier: A0:4F:00:DC:4D:4B:55:16:FD:E3:92:FC:26:AD:EC:CE:D5:1A:D1:77 Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Certificate serial: 019C41A1497C311E185BC47FA71867B97B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft Manifest number: 1634 Signing time: Mon 09 Feb 2026 09:00:14 +0000 Manifest this update: Mon 09 Feb 2026 09:00:14 +0000 Manifest next update: Tue 10 Feb 2026 09:00:14 +0000 Files and hashes: 1: KNGzhIaCKCO7BqVAGRH0hS28bSE.roa (hash: p/4zAAWK0QGA2GZKTcppMHA4sXwzCSeZJaQW4PAVpBk=) 2: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: 9P1WEQlmeX+Dh400FcSdLs5/ua2Mv18VMhTq+3i6Uq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:49:7c:31:1e:18:5b:c4:7f:a7:18:67:b9:7b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Validity Not Before: Feb 9 09:00:14 2026 GMT Not After : Feb 10 09:00:14 2026 GMT Subject: CN=a04f00dc4d4b5516fde392fc26adecced51ad177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:38:9b:af:93:38:10:29:9f:d4:96:60:fa: 10:58:c5:5e:66:3d:68:ed:fe:e9:cc:b9:b5:b5:da: f7:95:7f:ab:96:d2:66:d1:a3:37:3b:ab:f5:be:b9: 23:f2:a2:3b:0e:6e:7e:69:f0:74:57:1f:94:c4:68: 60:1e:97:2a:bc:b3:2e:2d:73:e8:2f:3e:78:6f:70: a8:e0:41:b2:89:66:b6:6c:ad:9f:f7:f7:cd:c6:72: 02:16:3a:fd:37:db:32:d7:76:fe:b4:84:9e:8e:78: 81:03:74:6e:e7:88:48:c0:c5:50:07:18:35:e8:dd: d5:38:31:e4:88:79:98:0f:51:2e:b3:95:13:8f:da: 42:f5:aa:8f:88:d8:d2:00:e3:e9:ad:e7:d6:6f:2f: 52:31:4a:fe:df:7e:25:4d:ab:9d:a1:ee:9c:4a:49: 9d:1b:7b:31:5e:4b:f6:86:74:9d:16:32:9e:4a:d3: 43:9c:d7:91:c8:5b:62:17:f4:01:12:7c:61:8d:5a: 7b:34:93:c0:92:ec:fd:65:78:b2:6a:53:ac:48:c2: b0:12:3e:09:e6:0f:7c:e5:ce:b8:89:91:07:0d:b4: 03:4a:66:ad:48:51:cb:62:c5:cc:a5:eb:c2:46:db: 30:92:b4:dc:5c:4d:af:f3:b7:87:f9:ee:46:79:60: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:00:DC:4D:4B:55:16:FD:E3:92:FC:26:AD:EC:CE:D5:1A:D1:77 X509v3 Authority Key Identifier: keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:db:c9:fb:33:08:e1:21:f6:f7:72:f7:4e:3e:0a:23:1f:a0: dd:75:0d:60:66:30:1f:94:fb:c8:27:79:c4:3d:d7:eb:77:7e: e5:4a:c4:c1:67:c2:d6:c5:9a:d4:0b:ca:89:b4:bf:92:f2:1f: 99:5b:7f:6b:50:b1:f6:10:1d:ee:a3:a9:f1:91:6d:62:2e:22: 7f:29:68:f0:2d:7e:98:4c:0e:ca:ed:08:39:e8:0f:fd:eb:96: 0a:fb:01:d3:7f:1a:e0:71:78:f0:4f:bc:5a:1c:1f:c2:af:dc: 5e:48:ca:c3:6a:01:aa:d5:60:7e:38:1e:fa:d9:32:a4:f8:f1: 42:1f:0c:0f:42:0e:a1:bc:8e:89:82:1d:81:57:fc:58:46:3d: a5:02:ff:97:d5:d9:6a:3c:28:2e:9c:81:8e:05:be:7d:8c:85: 3e:4a:d3:34:9d:4a:c2:9e:29:49:b1:18:c2:7a:a4:ec:c3:5c: 5b:de:99:d9:de:c0:d3:18:a9:af:1c:17:0e:3d:1c:f7:db:0c: b4:53:cc:66:10:f0:f0:24:d4:56:5f:b9:da:34:dc:7e:a7:48: 38:1b:81:20:e6:9e:b4:ae:fb:f5:a2:68:53:76:79:b7:ba:87: 8c:ac:78:5d:21:98:5d:c9:4b:15:62:f6:45:96:01:a1:a0:af: 02:1a:2f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUl8MR4YW8R/pxhnuXsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez MTc0ZTgwHhcNMjYwMjA5MDkwMDE0WhcNMjYwMjEwMDkwMDE0WjAzMTEwLwYDVQQD EyhhMDRmMDBkYzRkNGI1NTE2ZmRlMzkyZmMyNmFkZWNjZWQ1MWFkMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss44m6+TOBApn9SWYPoQWMVeZj1o 7f7pzLm1tdr3lX+rltJm0aM3O6v1vrkj8qI7Dm5+afB0Vx+UxGhgHpcqvLMuLXPo Lz54b3Co4EGyiWa2bK2f9/fNxnICFjr9N9sy13b+tISejniBA3Ru54hIwMVQBxg1 6N3VODHkiHmYD1Eus5UTj9pC9aqPiNjSAOPprefWby9SMUr+334lTaudoe6cSkmd G3sxXkv2hnSdFjKeStNDnNeRyFtiF/QBEnxhjVp7NJPAkuz9ZXiyalOsSMKwEj4J 5g985c64iZEHDbQDSmatSFHLYsXMpevCRtswkrTcXE2v87eH+e5GeWDalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBPANxNS1UW/eOS/Cat7M7VGtF3MB8GA1UdIwQY MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtvJ+zMI 4SH293L3Tj4KIx+g3XUNYGYwH5T7yCd5xD3X63d+5UrEwWfC1sWa1AvKibS/kvIf mVt/a1Cx9hAd7qOp8ZFtYi4ifylo8C1+mEwOyu0IOegP/euWCvsB038a4HF48E+8 Whwfwq/cXkjKw2oBqtVgfjge+tkypPjxQh8MD0IOobyOiYIdgVf8WEY9pQL/l9XZ ajwoLpyBjgW+fYyFPkrTNJ1Kwp4pSbEYwnqk7MNcW96Z2d7A0xiprxwXDj0c99sM tFPMZhDw8CTUVl+52jTcfqdIOBuBIOaetK779aJoU3Z5t7qHjKx4XSGYXclLFWL2 RZYBoaCvAhovEw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:32 2026 by rpki-client