This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json) Hash identifier: 7gqJk6+0Xn4B7h4wJK2pAv5p4LKGeVrOV5761nv07xc= Subject key identifier: 12:B6:2F:67:C9:14:A6:7E:B5:D8:46:9F:14:12:16:0E:2F:67:A8:05 Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd Certificate serial: 019C41339E0FE0FA492F73D28CFCBBCD0C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft Manifest number: 0C4B Signing time: Mon 09 Feb 2026 07:00:27 +0000 Manifest this update: Mon 09 Feb 2026 07:00:27 +0000 Manifest next update: Tue 10 Feb 2026 07:00:27 +0000 Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: +BF/+rrxyhKWLe3CzCsSIzntVRlV+zOWMVOi1kWeyB8=) 2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:9e:0f:e0:fa:49:2f:73:d2:8c:fc:bb:cd:0c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd Validity Not Before: Feb 9 07:00:27 2026 GMT Not After : Feb 10 07:00:27 2026 GMT Subject: CN=12b62f67c914a67eb5d8469f1412160e2f67a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:61:a1:e0:dd:7b:9b:48:64:e1:a2:95:c3: 49:f3:ea:5c:35:bf:83:08:65:60:98:a9:b5:34:cd: c6:86:dd:28:e4:40:e1:4b:4a:33:54:2c:5b:d1:44: 35:92:5a:0a:4a:44:1a:9d:16:e2:8d:a3:de:3e:b9: 8a:99:ec:a2:5a:6b:f5:0d:c8:c9:46:8f:eb:4c:6a: 2e:d3:73:38:b2:f3:78:fd:a8:85:57:27:9b:77:a2: 94:d2:eb:ca:47:26:e0:06:4e:4b:20:9e:13:7b:13: 56:49:93:30:b3:27:27:cb:26:72:1a:28:d5:9a:6e: 1a:bf:a3:e7:b9:f0:5c:5b:85:26:22:00:0b:ee:98: 03:7d:6d:76:57:01:b2:2e:d6:96:61:c1:98:db:60: 40:12:22:c4:7b:86:8f:20:43:1a:e3:29:6a:04:0e: 02:1a:0b:02:ca:85:9c:34:b9:38:ba:22:08:09:83: 49:9b:e8:4f:bd:b4:d4:76:cc:34:46:02:77:b1:3c: 56:4b:7e:92:e2:6a:1d:a1:33:76:c8:c8:d7:29:71: 10:99:12:84:99:dd:eb:06:2e:91:77:20:c3:3b:ab: 25:6d:bb:bf:e6:6e:e5:4f:cf:b8:83:dc:43:d2:b6: 5b:39:c5:20:cb:04:98:fc:32:b9:76:f7:0a:aa:d1: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B6:2F:67:C9:14:A6:7E:B5:D8:46:9F:14:12:16:0E:2F:67:A8:05 X509v3 Authority Key Identifier: keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e1:2d:26:ed:d1:50:7c:7b:14:8f:80:97:1b:79:b5:2b:e5: 4d:7d:96:b4:5e:55:ec:08:cf:21:44:7d:96:b5:f4:11:17:90: 38:ec:a0:62:8f:fc:30:a5:3d:b3:1a:09:4e:eb:61:a1:d4:2e: 72:ec:de:44:12:92:8c:72:c5:80:5b:1e:f0:7b:2d:76:9e:6a: 49:f1:e1:6a:b1:af:51:ed:e4:2d:81:ec:40:77:8a:a6:ca:fc: 6b:7e:9d:bd:1f:60:e7:fb:52:b8:96:f0:a2:9f:cd:e0:18:76: f6:02:93:88:ed:ec:cb:0f:df:2a:f1:4d:7d:50:10:29:c1:6e: 11:41:a0:f1:e9:ad:fe:0e:58:23:5a:a1:42:62:3b:93:82:e6: 71:ce:1e:7b:81:58:2f:d4:c2:19:ea:2d:8a:80:1f:f1:04:78: d4:d4:95:14:fb:25:a5:7d:2e:63:7c:b2:62:48:d0:ef:4a:c5: 56:32:9e:d6:a7:7e:81:13:11:ee:6c:29:ea:47:0e:fd:98:0a: 8a:d9:a6:60:bd:9b:34:74:dd:41:6e:08:12:d5:c7:1d:df:2d: 8e:d4:ea:9a:82:0d:b5:9a:ad:81:5c:04:a1:5f:47:be:22:01: 8b:33:64:3b:e4:e4:ae:99:cc:28:95:cd:d5:30:4c:2c:3d:21: 3e:9d:4f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM54P4PpJL3PSjPy7zQwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjI0ZTkwOGM3NDk4ZmRiNjEzNTQyNzUzZWY1NmM3NWNk NzA0YmQwHhcNMjYwMjA5MDcwMDI3WhcNMjYwMjEwMDcwMDI3WjAzMTEwLwYDVQQD EygxMmI2MmY2N2M5MTRhNjdlYjVkODQ2OWYxNDEyMTYwZTJmNjdhODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoglhoeDde5tIZOGilcNJ8+pcNb+D CGVgmKm1NM3Ght0o5EDhS0ozVCxb0UQ1kloKSkQanRbijaPePrmKmeyiWmv1DcjJ Ro/rTGou03M4svN4/aiFVyebd6KU0uvKRybgBk5LIJ4TexNWSZMwsycnyyZyGijV mm4av6PnufBcW4UmIgAL7pgDfW12VwGyLtaWYcGY22BAEiLEe4aPIEMa4ylqBA4C GgsCyoWcNLk4uiIICYNJm+hPvbTUdsw0RgJ3sTxWS36S4modoTN2yMjXKXEQmRKE md3rBi6RdyDDO6slbbu/5m7lT8+4g9xD0rZbOcUgywSY/DK5dvcKqtFUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK2L2fJFKZ+tdhGnxQSFg4vZ6gFMB8GA1UdIwQY MBaAFNNiTpCMdJj9thNUJ1PvVsdc1wS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMt NjQ1MGYxODQxMTIyLzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMtNjQ1MGYxODQxMTIy LzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuEtJu3R UHx7FI+Alxt5tSvlTX2WtF5V7AjPIUR9lrX0EReQOOygYo/8MKU9sxoJTuthodQu cuzeRBKSjHLFgFse8Hstdp5qSfHharGvUe3kLYHsQHeKpsr8a36dvR9g5/tSuJbw op/N4Bh29gKTiO3syw/fKvFNfVAQKcFuEUGg8emt/g5YI1qhQmI7k4Lmcc4ee4FY L9TCGeotioAf8QR41NSVFPslpX0uY3yyYkjQ70rFVjKe1qd+gRMR7mwp6kcO/ZgK itmmYL2bNHTdQW4IEtXHHd8tjtTqmoINtZqtgVwEoV9HviIBizNkO+TkrpnMKJXN 1TBMLD0hPp1PcA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:55 2026 by rpki-client