This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json) Hash identifier: tmAMXp3ZTlWeD4mLC74mHqDj7HNk+F1OZprF4IjyCrc= Subject key identifier: E3:F0:97:5D:6A:47:A1:95:B7:C7:1D:D1:07:20:9B:FF:CF:88:9A:37 Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019C43221D4C3ABAB00E6340E991263AB7BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:00:34 +0000 Manifest this update: Mon 09 Feb 2026 16:00:34 +0000 Manifest next update: Tue 10 Feb 2026 16:00:34 +0000 Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: 29V82k0yhPY+0mmz9hg0n7RJnJ4GmTAGdfHCA3JgjSw=) 2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1d:4c:3a:ba:b0:0e:63:40:e9:91:26:3a:b7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Feb 9 16:00:34 2026 GMT Not After : Feb 10 16:00:34 2026 GMT Subject: CN=e3f0975d6a47a195b7c71dd107209bffcf889a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:23:d0:9c:9d:ff:bd:d6:3b:cf:bd:7a:3b: 51:6b:39:9e:5c:b7:27:36:ce:1c:5c:95:bd:c0:96: d6:99:58:b5:3a:1b:d6:5e:c8:7a:c5:e3:73:9c:70: 52:58:5e:df:71:96:c1:5e:75:e3:aa:07:1b:68:a3: b5:57:b4:0b:ff:cc:5a:6f:8c:3d:a1:d9:f6:a9:0a: ab:fb:cc:af:4c:4d:52:a9:f0:db:f6:01:fc:91:1d: c3:0f:b3:55:cf:68:7a:28:33:52:fd:68:b3:d6:5b: 67:68:af:4a:79:67:a0:89:3f:33:23:99:e1:9a:29: 50:26:71:3c:68:22:3d:85:6e:b7:7d:da:65:af:ce: 00:c9:9f:c5:8f:90:b4:65:05:cf:28:14:68:b3:20: 23:43:03:4b:ea:27:d8:a5:13:1d:3b:69:e4:94:f6: bf:4f:db:b8:d6:94:61:07:e4:10:9b:c8:ea:be:c6: 2a:e8:35:7d:c8:c0:3a:b2:ae:e4:49:8d:a7:23:71: be:a9:4e:91:0f:c0:49:a9:29:ab:ce:cd:d7:ac:7c: 33:50:fb:31:7a:e4:db:0e:0c:30:49:3d:33:b3:bd: 4a:39:8c:d3:7d:6b:0c:18:53:28:71:fc:03:40:44: 8e:91:a0:f7:c0:f1:9c:5c:9d:0f:20:a1:87:41:40: 0f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:97:5D:6A:47:A1:95:B7:C7:1D:D1:07:20:9B:FF:CF:88:9A:37 X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a2:ad:d9:e8:c9:5f:b3:9f:b9:63:07:55:77:d8:87:9b:63: 30:51:3b:96:05:a1:d3:f8:27:8d:78:79:da:42:91:d8:83:be: ba:b7:ae:5e:b5:a4:33:29:3c:0e:07:cc:77:0d:fc:84:a3:54: 1d:24:8a:54:7b:74:e0:ff:03:f7:9b:75:68:6b:80:d6:dd:9a: 7e:cb:e7:72:7c:e4:6f:63:cc:4e:03:a3:ad:3d:f9:1f:0c:ca: 86:f8:be:63:6d:c4:57:a2:0e:73:9e:72:1a:84:63:6e:da:19: b4:ce:b3:46:1e:12:ea:93:af:5f:95:e8:8f:fd:34:b1:3e:b9: 2f:70:56:67:6f:f6:ab:34:1d:a8:c8:fc:1b:3d:d8:ee:f1:9a: 1b:61:73:87:11:df:67:1a:ef:0a:f8:01:41:a0:0f:6b:50:af: 86:bd:46:87:fb:02:1c:6b:f7:4c:35:d0:e5:74:2e:61:5f:3f: 1f:59:8e:22:20:d4:c9:ca:c4:31:e0:e8:c1:12:01:0c:08:be: c0:0e:52:b0:c3:03:00:38:36:e3:fb:ca:e4:08:e6:26:1b:0f: aa:40:91:10:77:8e:17:ec:73:b6:d0:7b:71:15:46:00:85:81: 16:04:f3:f6:3e:d1:dc:17:bf:5f:89:f9:56:b0:71:58:77:bc: 64:ee:b3:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIh1MOrqwDmNA6ZEmOre6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjYwMjA5MTYwMDM0WhcNMjYwMjEwMTYwMDM0WjAzMTEwLwYDVQQD EyhlM2YwOTc1ZDZhNDdhMTk1YjdjNzFkZDEwNzIwOWJmZmNmODg5YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN8j0Jyd/73WO8+9ejtRazmeXLcn Ns4cXJW9wJbWmVi1OhvWXsh6xeNznHBSWF7fcZbBXnXjqgcbaKO1V7QL/8xab4w9 odn2qQqr+8yvTE1SqfDb9gH8kR3DD7NVz2h6KDNS/Wiz1ltnaK9KeWegiT8zI5nh milQJnE8aCI9hW63fdplr84AyZ/Fj5C0ZQXPKBRosyAjQwNL6ifYpRMdO2nklPa/ T9u41pRhB+QQm8jqvsYq6DV9yMA6sq7kSY2nI3G+qU6RD8BJqSmrzs3XrHwzUPsx euTbDgwwST0zs71KOYzTfWsMGFMocfwDQESOkaD3wPGcXJ0PIKGHQUAPbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPwl11qR6GVt8cd0Qcgm//PiJo3MB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6Kt2ejJ X7OfuWMHVXfYh5tjMFE7lgWh0/gnjXh52kKR2IO+ureuXrWkMyk8DgfMdw38hKNU HSSKVHt04P8D95t1aGuA1t2afsvncnzkb2PMTgOjrT35HwzKhvi+Y23EV6IOc55y GoRjbtoZtM6zRh4S6pOvX5Xoj/00sT65L3BWZ2/2qzQdqMj8Gz3Y7vGaG2FzhxHf ZxrvCvgBQaAPa1Cvhr1Gh/sCHGv3TDXQ5XQuYV8/H1mOIiDUycrEMeDowRIBDAi+ wA5SsMMDADg24/vK5AjmJhsPqkCREHeOF+xzttB7cRVGAIWBFgTz9j7R3Be/X4n5 VrBxWHe8ZO6z7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:14 2026 by rpki-client