This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json) Hash identifier: 948uAMJw+gRNEyowT7fP+JTZ9lASjMdwAJFnvrjN+Oo= Subject key identifier: 43:47:69:44:C0:5D:C6:02:91:08:12:D9:58:D3:A8:A1:DE:E2:9E:79 Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Certificate serial: 019C446B9ACC08A311FC3CB703E30B8C0D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft Manifest number: 03E9 Signing time: Mon 09 Feb 2026 22:00:28 +0000 Manifest this update: Mon 09 Feb 2026 22:00:28 +0000 Manifest next update: Tue 10 Feb 2026 22:00:28 +0000 Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: d2O3fo5Bd3kYn8EWjkLU34ckBkx1LftnBUBg5+MHgLs=) 2: DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa (hash: X7w8hr+E7n1YVto9nQ09eEPyzlLrAcr5q43Gop780I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:9a:cc:08:a3:11:fc:3c:b7:03:e3:0b:8c:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Validity Not Before: Feb 9 22:00:28 2026 GMT Not After : Feb 10 22:00:28 2026 GMT Subject: CN=43476944c05dc602910812d958d3a8a1dee29e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:3b:ff:2a:bf:99:89:f7:38:f1:2e:38:9a: 05:74:cc:f8:aa:a1:2a:24:42:89:e5:e2:b5:6e:9e: 81:eb:16:70:84:b8:2f:79:5e:39:e2:2e:59:e8:52: 8e:e0:f9:36:a5:da:b0:37:b4:ae:e7:b5:a1:67:0d: 87:6a:31:45:e0:d6:28:da:8b:12:b9:b9:db:26:cf: 21:e3:75:69:fa:6a:2b:79:b3:9e:1d:72:60:42:d1: 92:df:7d:2e:53:af:e5:28:1e:3f:74:e5:16:9f:19: 70:d0:88:63:53:1e:c2:38:21:70:69:10:0b:0b:80: 8d:14:47:a0:9f:45:fe:e7:51:ed:e3:e3:19:42:5c: b0:7c:11:f5:b2:a6:04:12:8e:d9:e3:80:a6:12:28: 9f:6d:d1:b2:c4:5b:3b:cc:77:a0:5e:77:f9:e2:ed: 7d:d8:89:42:f6:d2:25:bc:e0:15:c3:df:0d:ab:08: 60:c9:0e:8d:8b:e0:19:9e:5b:6f:d7:2e:a7:65:18: 96:02:38:a1:20:f1:d9:5c:34:f3:58:75:52:d6:73: 9a:dd:9e:ad:73:16:ab:9e:10:99:57:af:d9:54:bc: c0:a0:79:30:4b:a8:26:58:cb:e3:5d:08:58:52:9d: 0e:c8:2f:5a:43:30:37:b4:75:58:f3:3e:04:40:a7: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:69:44:C0:5D:C6:02:91:08:12:D9:58:D3:A8:A1:DE:E2:9E:79 X509v3 Authority Key Identifier: keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:75:76:6b:9b:8d:8b:76:5e:0e:db:0c:fe:08:96:b2:69:61: a3:5c:ae:3b:53:ec:dd:5d:d6:38:45:7c:f4:5e:b0:7f:e6:d6: 83:16:b7:32:15:87:81:2e:58:b4:5e:59:9a:30:4d:17:d4:5f: cf:b9:f4:41:af:73:a8:42:d3:6a:6e:d0:e8:bb:1e:7d:a6:3d: d0:48:3f:01:c9:c7:61:3e:7a:bd:81:02:76:72:da:53:95:9a: db:70:f4:06:f0:f3:dd:2c:ce:87:53:f6:8c:6b:9a:ff:50:a7: d1:55:bb:62:32:97:d9:ed:fb:de:cb:c2:02:6a:c5:52:ac:b2: 8c:ae:b5:d0:fe:28:42:ed:44:b7:34:26:a9:91:e8:c0:4e:c3: 9e:71:8c:43:3e:22:42:89:e1:1c:5b:cd:77:6e:bc:92:63:83: 8f:8a:de:7a:09:ff:f3:09:4b:4d:29:2e:77:15:5c:44:29:cc: 12:27:11:75:e6:2f:af:41:66:37:15:b4:33:7f:8a:cf:e7:ae: c2:6e:6f:16:ef:da:e6:92:76:c9:df:70:35:9e:34:c4:85:40: 59:f0:70:04:0f:1f:82:05:d5:44:68:7f:eb:6b:30:60:8b:e1: 4f:e4:5a:21:70:07:82:c8:1c:bb:2e:55:f2:36:85:f4:61:4e: 37:33:e0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5rMCKMR/Dy3A+MLjA0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw YmZjOTEwHhcNMjYwMjA5MjIwMDI4WhcNMjYwMjEwMjIwMDI4WjAzMTEwLwYDVQQD Eyg0MzQ3Njk0NGMwNWRjNjAyOTEwODEyZDk1OGQzYThhMWRlZTI5ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsw7/yq/mYn3OPEuOJoFdMz4qqEq JEKJ5eK1bp6B6xZwhLgveV454i5Z6FKO4Pk2pdqwN7Su57WhZw2HajFF4NYo2osS ubnbJs8h43Vp+morebOeHXJgQtGS330uU6/lKB4/dOUWnxlw0IhjUx7COCFwaRAL C4CNFEegn0X+51Ht4+MZQlywfBH1sqYEEo7Z44CmEiifbdGyxFs7zHegXnf54u19 2IlC9tIlvOAVw98NqwhgyQ6Ni+AZnltv1y6nZRiWAjihIPHZXDTzWHVS1nOa3Z6t cxarnhCZV6/ZVLzAoHkwS6gmWMvjXQhYUp0OyC9aQzA3tHVY8z4EQKelewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENHaUTAXcYCkQgS2VjTqKHe4p55MB8GA1UdIwQY MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnV2a5uN i3ZeDtsM/giWsmlho1yuO1Ps3V3WOEV89F6wf+bWgxa3MhWHgS5YtF5ZmjBNF9Rf z7n0Qa9zqELTam7Q6LsefaY90Eg/AcnHYT56vYECdnLaU5Wa23D0BvDz3SzOh1P2 jGua/1Cn0VW7YjKX2e373svCAmrFUqyyjK610P4oQu1EtzQmqZHowE7DnnGMQz4i QonhHFvNd268kmODj4reegn/8wlLTSkudxVcRCnMEicRdeYvr0FmNxW0M3+Kz+eu wm5vFu/a5pJ2yd9wNZ40xIVAWfBwBA8fggXVRGh/62swYIvhT+RaIXAHgsgcuy5V 8jaF9GFONzPgCA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:19 2026 by rpki-client