This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json) Hash identifier: 6BmdBpuoKJw5nmGWwKRl+S/wwBUlCGyU52WAqHQVjMA= Subject key identifier: 65:2E:5A:11:91:FD:8C:C8:94:7E:6B:19:09:04:32:D4:E9:51:BE:77 Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Certificate serial: 019C41346729E3CFAC1886B1DA1730327118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft Manifest number: 1535 Signing time: Mon 09 Feb 2026 07:01:19 +0000 Manifest this update: Mon 09 Feb 2026 07:01:19 +0000 Manifest next update: Tue 10 Feb 2026 07:01:19 +0000 Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: eT+BdIJDMgEHaeB3JDVhepGiTo6tSiuGY4vvHwQB/Ts=) 2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:67:29:e3:cf:ac:18:86:b1:da:17:30:32:71:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Validity Not Before: Feb 9 07:01:19 2026 GMT Not After : Feb 10 07:01:19 2026 GMT Subject: CN=652e5a1191fd8cc8947e6b19090432d4e951be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:ae:28:c7:6c:74:d2:bd:df:d9:6e:48:3b: c4:44:60:5d:de:5b:15:f8:bc:18:8f:cf:11:c5:1b: 75:04:72:af:fd:57:e8:f1:90:e6:02:46:55:1d:13: 56:28:72:19:83:ac:fc:19:93:db:bb:22:06:15:be: 2f:c2:7d:65:02:42:a9:6c:88:d9:47:bc:5b:60:6e: 5e:87:9b:06:a2:b5:2b:e7:65:98:ed:49:99:9d:34: 67:b0:e8:df:e4:11:74:d2:82:ee:ad:b4:d1:96:e3: 62:13:54:b0:6e:da:08:92:b3:91:e2:7f:5d:95:e7: 81:bb:48:d0:a1:36:6c:78:46:10:af:40:b8:10:55: 72:43:95:78:47:f4:d2:a6:de:99:9d:45:c2:ac:45: 65:c0:6c:fa:46:63:22:0f:11:7e:c6:c4:d9:7b:da: c9:d8:16:72:06:60:a8:6e:27:de:cf:31:29:1e:2b: 38:e1:07:da:98:d9:81:5c:c6:2d:bd:72:e7:75:20: 68:88:71:16:1e:3b:66:ec:23:96:90:5f:94:1d:87: 4c:51:1b:98:72:c7:9a:84:9d:46:d1:8d:42:08:30: df:2d:2f:aa:35:1a:b0:07:2e:08:a9:70:20:8b:55: 77:84:ae:03:78:9b:1e:64:a0:54:dd:8e:bf:10:30: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2E:5A:11:91:FD:8C:C8:94:7E:6B:19:09:04:32:D4:E9:51:BE:77 X509v3 Authority Key Identifier: keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:06:0b:4d:f5:01:24:d2:ee:b3:a6:a1:30:f0:3c:b1:09:ef: 68:5d:4d:0b:39:17:25:c4:13:96:9d:1c:d8:cc:2e:3e:ad:a5: 27:5e:09:fc:cc:d5:26:79:c8:1b:07:75:9d:df:65:4b:1f:bf: 65:52:56:68:17:71:b8:01:49:36:d7:3b:91:2f:b2:a2:11:f7: 8f:08:f3:f4:28:48:4a:d6:da:3c:5d:2b:af:bf:6f:68:ac:b5: bb:be:b8:3c:50:d4:1b:54:91:46:40:85:39:0a:d3:5f:6e:1f: 50:0a:1e:21:c6:5b:59:83:1d:57:77:06:c1:4f:8f:2b:ef:78: fe:30:66:07:ea:df:ee:93:3d:a1:1c:80:8a:bf:76:d1:50:d8: 6e:00:5b:ab:45:6c:99:67:81:02:12:84:1e:57:cd:44:4a:a7: 75:4d:b9:ca:c6:d6:25:32:97:33:56:df:bb:7d:0e:7b:f7:bb: b6:53:8d:31:1b:6f:dd:24:15:e4:da:e1:3f:10:0c:54:b5:de: d2:6b:9a:2d:43:21:60:f9:b2:cd:c9:46:a5:76:83:26:37:ad: 28:e1:c5:3c:d9:08:0a:7a:48:44:c6:5a:b4:ee:e3:6c:45:19: 9c:c9:a5:6c:dc:45:ea:d1:5a:b2:43:7d:2f:a8:0f:f8:38:a1: 2e:c5:f4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNGcp48+sGIax2hcwMnEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh NTI3ZDEwHhcNMjYwMjA5MDcwMTE5WhcNMjYwMjEwMDcwMTE5WjAzMTEwLwYDVQQD Eyg2NTJlNWExMTkxZmQ4Y2M4OTQ3ZTZiMTkwOTA0MzJkNGU5NTFiZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPiuKMdsdNK939luSDvERGBd3lsV +LwYj88RxRt1BHKv/Vfo8ZDmAkZVHRNWKHIZg6z8GZPbuyIGFb4vwn1lAkKpbIjZ R7xbYG5eh5sGorUr52WY7UmZnTRnsOjf5BF00oLurbTRluNiE1SwbtoIkrOR4n9d leeBu0jQoTZseEYQr0C4EFVyQ5V4R/TSpt6ZnUXCrEVlwGz6RmMiDxF+xsTZe9rJ 2BZyBmCobifezzEpHis44QfamNmBXMYtvXLndSBoiHEWHjtm7COWkF+UHYdMURuY cseahJ1G0Y1CCDDfLS+qNRqwBy4IqXAgi1V3hK4DeJseZKBU3Y6/EDBm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUuWhGR/YzIlH5rGQkEMtTpUb53MB8GA1UdIwQY MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQYLTfUB JNLus6ahMPA8sQnvaF1NCzkXJcQTlp0c2MwuPq2lJ14J/MzVJnnIGwd1nd9lSx+/ ZVJWaBdxuAFJNtc7kS+yohH3jwjz9ChIStbaPF0rr79vaKy1u764PFDUG1SRRkCF OQrTX24fUAoeIcZbWYMdV3cGwU+PK+94/jBmB+rf7pM9oRyAir920VDYbgBbq0Vs mWeBAhKEHlfNREqndU25ysbWJTKXM1bfu30Oe/e7tlONMRtv3SQV5NrhPxAMVLXe 0muaLUMhYPmyzclGpXaDJjetKOHFPNkICnpIRMZatO7jbEUZnMmlbNxF6tFaskN9 L6gP+DihLsX04Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:23 2026 by rpki-client