This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json) Hash identifier: CJx6EeUv6XeXw/Puz2adzgLMigDGTwq+RSSVLxmJ5qk= Subject key identifier: 89:FF:61:00:5C:66:E4:89:6F:FF:71:BA:87:79:66:F1:E3:28:C0:5F Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f Certificate serial: 019C427DB5FE524130DFA439E8AA7180471A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft Manifest number: 02A4 Signing time: Mon 09 Feb 2026 13:01:00 +0000 Manifest this update: Mon 09 Feb 2026 13:01:00 +0000 Manifest next update: Tue 10 Feb 2026 13:01:00 +0000 Files and hashes: 1: aZInJVVj-s0Wg32prdB7tBivvYA.roa (hash: PJXuAgUz8U1MrkWq0hGkH/inn8z2Szk0o8qw96eYX7Q=) 2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: +k8NU+jxnwtu9XTB5qIcz+nd/Qw2GLyL11KUgNjn7fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b5:fe:52:41:30:df:a4:39:e8:aa:71:80:47:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f Validity Not Before: Feb 9 13:01:00 2026 GMT Not After : Feb 10 13:01:00 2026 GMT Subject: CN=89ff61005c66e4896fff71ba877966f1e328c05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:5e:53:05:81:74:8a:23:45:cb:47:dc:2b: 2b:63:31:fc:c6:6a:61:22:73:e2:48:77:df:f1:67: 3f:2a:30:c4:6b:31:df:6d:8d:af:8c:99:d1:a1:71: dc:0e:93:ae:c8:60:0b:d6:3c:e3:ed:69:54:dc:6d: 79:c7:cd:9a:e4:cd:23:16:37:c6:fa:5a:b5:41:01: 68:a3:4c:4d:1d:c5:33:1d:62:cf:c6:f3:ed:8a:60: 8a:87:c6:cb:0c:90:f3:95:69:c9:ce:14:8e:5f:7e: e9:19:4a:ac:e5:9a:df:de:c8:d8:93:67:41:9b:40: d1:e3:68:36:c8:9f:8b:7c:75:9c:4e:98:27:2b:0f: 58:a3:59:eb:b9:4d:b1:e3:cb:48:46:85:35:cd:ca: 34:8f:86:4c:32:75:74:25:ac:88:bf:63:c5:ac:de: fd:c1:dc:3f:3f:6d:ea:db:39:2a:f2:fc:99:74:1e: dd:ce:70:38:16:e3:83:2f:4e:63:66:f5:0a:ef:c5: 05:40:be:e8:2f:f5:c0:12:1e:e1:17:62:c4:45:0a: ee:86:8e:d3:62:9d:ad:87:1c:ff:04:9a:de:fa:bb: 7b:d0:ce:10:56:1b:b9:f4:c2:29:da:c2:0d:2f:eb: 14:27:99:d0:d0:d5:4b:5d:58:f5:9b:d6:00:bc:5d: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:61:00:5C:66:E4:89:6F:FF:71:BA:87:79:66:F1:E3:28:C0:5F X509v3 Authority Key Identifier: keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:19:0b:a9:7f:9b:01:27:fb:0e:19:1f:db:f2:ea:a3:10:f7: 64:ec:07:9a:53:ec:9a:c2:58:6f:74:78:29:d2:b6:da:d0:d9: 47:39:8f:9f:b6:6e:06:50:bd:13:4e:ef:3d:de:35:02:75:3b: 13:f0:ca:69:5b:a2:48:4e:72:d0:c7:3f:b8:a2:e9:50:d4:48: 0b:dc:e2:32:07:98:73:23:fd:5b:f4:7b:a0:ad:95:14:c8:a7: ef:a9:e2:e4:51:ba:da:da:90:a4:6a:b7:43:ea:66:57:00:8a: 1e:1d:28:2b:e5:69:db:da:e8:9e:67:9c:ff:9e:d2:63:79:91: 29:66:42:c4:4a:97:d8:3c:9f:4e:34:29:5a:60:53:f6:10:ea: b4:54:96:ee:fd:07:21:e5:c9:25:3c:6d:ea:d3:29:97:1d:6d: c1:14:8e:16:f8:be:95:5b:5d:4f:f1:ba:51:1b:30:a9:06:03: e7:48:e6:45:54:50:72:2f:19:4a:45:6c:8f:0d:db:a6:63:99: 2c:d8:88:cd:eb:29:62:56:8e:cd:1c:6a:4f:4f:e4:98:a6:30: 03:67:31:c4:86:4c:41:18:ee:e5:33:46:ba:b4:98:32:25:3a: f7:75:4a:6c:ea:e0:2f:3d:30:7d:bf:df:1f:4b:83:43:c3:fc: 09:03:5b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbX+UkEw36Q56KpxgEcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTQ2NTJhOWU5ODkxNDVhMDU5Zjc4ODgzZDUzNmU5MmM0 M2I1M2YwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD Eyg4OWZmNjEwMDVjNjZlNDg5NmZmZjcxYmE4Nzc5NjZmMWUzMjhjMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/9eUwWBdIojRctH3CsrYzH8xmph InPiSHff8Wc/KjDEazHfbY2vjJnRoXHcDpOuyGAL1jzj7WlU3G15x82a5M0jFjfG +lq1QQFoo0xNHcUzHWLPxvPtimCKh8bLDJDzlWnJzhSOX37pGUqs5Zrf3sjYk2dB m0DR42g2yJ+LfHWcTpgnKw9Yo1nruU2x48tIRoU1zco0j4ZMMnV0JayIv2PFrN79 wdw/P23q2zkq8vyZdB7dznA4FuODL05jZvUK78UFQL7oL/XAEh7hF2LERQruho7T Yp2thxz/BJre+rt70M4QVhu59MIp2sINL+sUJ5nQ0NVLXVj1m9YAvF0OGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn/YQBcZuSJb/9xuod5ZvHjKMBfMB8GA1UdIwQY MBaAFLdUZSqemJFFoFn3iIPVNuksQ7U/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYt YjRkYTIwYTc1N2NmLzEvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYtYjRkYTIwYTc1N2Nm LzEvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahkLqX+b ASf7Dhkf2/LqoxD3ZOwHmlPsmsJYb3R4KdK22tDZRzmPn7ZuBlC9E07vPd41AnU7 E/DKaVuiSE5y0Mc/uKLpUNRIC9ziMgeYcyP9W/R7oK2VFMin76ni5FG62tqQpGq3 Q+pmVwCKHh0oK+Vp29ronmec/57SY3mRKWZCxEqX2DyfTjQpWmBT9hDqtFSW7v0H IeXJJTxt6tMplx1twRSOFvi+lVtdT/G6URswqQYD50jmRVRQci8ZSkVsjw3bpmOZ LNiIzespYlaOzRxqT0/kmKYwA2cxxIZMQRju5TNGurSYMiU693VKbOrgLz0wfb/f H0uDQ8P8CQNbZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:22 2026 by rpki-client