This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: NedPc11/QK+D9pofFg4UCgtJjMdT471qBssxFXRVsUU= Subject key identifier: BD:01:1B:B5:D8:33:ED:96:1C:68:FD:69:78:5D:32:82:A9:91:76:BB Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019C42EAE17FB8BA597FF0C635FF3B88ED57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 109B Signing time: Mon 09 Feb 2026 15:00:15 +0000 Manifest this update: Mon 09 Feb 2026 15:00:15 +0000 Manifest next update: Tue 10 Feb 2026 15:00:15 +0000 Files and hashes: 1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: qkiD5pLRTy7YK5uKOalEhzZP6wnSDAkMmIeFZyD2w2s=) 2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e1:7f:b8:ba:59:7f:f0:c6:35:ff:3b:88:ed:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Feb 9 15:00:15 2026 GMT Not After : Feb 10 15:00:15 2026 GMT Subject: CN=bd011bb5d833ed961c68fd69785d3282a99176bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:29:d9:b1:c2:e6:96:b2:fe:9c:14:5f:7a: b4:08:18:b4:e6:ac:aa:e9:89:36:c6:e1:19:d0:eb: fd:da:32:d9:c1:74:1d:a9:ea:23:05:8d:61:9e:c2: 00:83:f7:4f:ff:41:54:08:4a:48:b9:70:55:c5:bd: b5:b5:7e:f1:be:bc:25:d5:65:4f:d6:27:5a:74:cb: 43:8d:9d:ea:26:83:a2:28:8c:a5:63:54:09:16:77: cc:3f:18:d7:28:ec:6c:11:4a:88:f5:cc:8e:df:f9: f9:de:ef:96:16:f0:d3:51:c1:94:37:e0:0e:c2:5f: d1:7a:ef:94:4f:68:3f:21:5b:27:63:17:bb:83:17: 17:07:3b:d0:aa:13:bf:b9:66:21:f2:2d:d7:07:17: f7:eb:67:fb:42:e9:e9:6f:4f:b2:01:c3:fc:1c:79: 16:e8:9d:02:85:c3:03:5d:da:7d:ef:f9:57:1d:fa: f5:13:b5:7e:14:16:1d:6b:cc:d9:6b:fc:a8:50:95: 6d:f5:95:ff:49:97:fc:2b:54:1b:d5:65:19:eb:f1: 46:07:07:92:b2:fa:50:18:0b:a3:95:1f:8b:1a:14: 60:7c:16:4f:15:83:e8:d4:0a:0d:d7:eb:f2:a9:1a: b1:65:98:8d:e6:d8:5a:e8:c1:85:3b:9f:1e:82:9a: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:1B:B5:D8:33:ED:96:1C:68:FD:69:78:5D:32:82:A9:91:76:BB X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:57:32:6c:6c:43:f8:59:77:c7:e1:41:86:0e:a4:f6:ce:48: af:8e:c8:0d:a2:bc:7e:b1:c3:5a:80:58:65:b4:2c:3d:20:20: 0d:87:ba:2c:2a:9e:e7:02:c2:67:cf:1f:83:20:93:5a:ca:5a: 96:95:1a:98:5d:7d:da:cc:d6:3b:19:ca:65:bc:5f:79:48:cb: 84:e3:b9:ca:51:3b:90:fe:3a:9d:98:49:fc:df:2d:b6:42:3e: 7b:2a:0f:51:66:b6:d0:20:c4:99:77:e8:05:ab:75:75:5f:98: e8:03:b4:bf:06:6c:76:10:90:3f:f5:b9:80:82:42:5d:24:e0: ff:5f:9b:7a:d9:49:54:d4:4f:71:c6:3b:38:99:15:17:cf:e1: 2a:34:ee:a0:b0:70:a0:ea:e4:f3:97:e4:cd:96:bd:8d:ff:43: 99:e7:6c:38:8b:bd:21:4b:8f:2f:02:b2:18:79:25:56:70:52: 24:42:aa:f7:05:d4:05:d5:01:00:3e:a5:06:f4:1b:a4:50:4a: 79:9a:5f:d1:e1:93:e5:24:a6:2c:9c:1d:65:cb:8d:7c:33:2c: 89:8d:4a:ec:86:68:4e:79:11:3e:6f:1e:39:b6:f5:4e:e4:e7: 01:93:a7:85:32:bd:1a:9b:b3:0d:f7:8f:81:d5:c6:7c:59:8a: 4f:b7:39:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uF/uLpZf/DGNf87iO1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjYwMjA5MTUwMDE1WhcNMjYwMjEwMTUwMDE1WjAzMTEwLwYDVQQD EyhiZDAxMWJiNWQ4MzNlZDk2MWM2OGZkNjk3ODVkMzI4MmE5OTE3NmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BMp2bHC5pay/pwUX3q0CBi05qyq 6Yk2xuEZ0Ov92jLZwXQdqeojBY1hnsIAg/dP/0FUCEpIuXBVxb21tX7xvrwl1WVP 1idadMtDjZ3qJoOiKIylY1QJFnfMPxjXKOxsEUqI9cyO3/n53u+WFvDTUcGUN+AO wl/Reu+UT2g/IVsnYxe7gxcXBzvQqhO/uWYh8i3XBxf362f7Qunpb0+yAcP8HHkW 6J0ChcMDXdp97/lXHfr1E7V+FBYda8zZa/yoUJVt9ZX/SZf8K1Qb1WUZ6/FGBweS svpQGAujlR+LGhRgfBZPFYPo1AoN1+vyqRqxZZiN5tha6MGFO58egppmWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0BG7XYM+2WHGj9aXhdMoKpkXa7MB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1cybGxD +Fl3x+FBhg6k9s5Ir47IDaK8frHDWoBYZbQsPSAgDYe6LCqe5wLCZ88fgyCTWspa lpUamF192szWOxnKZbxfeUjLhOO5ylE7kP46nZhJ/N8ttkI+eyoPUWa20CDEmXfo Bat1dV+Y6AO0vwZsdhCQP/W5gIJCXSTg/1+betlJVNRPccY7OJkVF8/hKjTuoLBw oOrk85fkzZa9jf9DmedsOIu9IUuPLwKyGHklVnBSJEKq9wXUBdUBAD6lBvQbpFBK eZpf0eGT5SSmLJwdZcuNfDMsiY1K7IZoTnkRPm8eObb1TuTnAZOnhTK9GpuzDfeP gdXGfFmKT7c5Jg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:12 2026 by rpki-client