This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json) Hash identifier: rOKxyIYsOR0elSXXmsLz9nRTCDK7mLz8jZudPFcAZcc= Subject key identifier: 40:B5:69:53:48:07:C6:76:8A:AC:C1:E6:25:89:29:6F:F0:EB:D0:E5 Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Certificate serial: 019C43FDFC402DD0C8B8315A3C73A94C9DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft Manifest number: 133A Signing time: Mon 09 Feb 2026 20:00:44 +0000 Manifest this update: Mon 09 Feb 2026 20:00:44 +0000 Manifest next update: Tue 10 Feb 2026 20:00:44 +0000 Files and hashes: 1: ojC0sB05EcDCgctQ9dDCJxZPOP0.roa (hash: 1kAvCSrjpKtG/wqX4+TjXTfOsHQ+c83C0DRspLJabKQ=) 2: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: BNCWv3WwSH+4cJBkD8B1BAIIAeWyX0eDwzQtbODFMRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:fc:40:2d:d0:c8:b8:31:5a:3c:73:a9:4c:9d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Validity Not Before: Feb 9 20:00:44 2026 GMT Not After : Feb 10 20:00:44 2026 GMT Subject: CN=40b569534807c6768aacc1e62589296ff0ebd0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:ee:18:ef:50:cf:e5:2c:9d:11:2f:db:d3: 75:19:2d:a7:29:40:7a:ac:0c:6c:e2:cd:2c:72:de: 84:b5:25:c4:40:3c:f6:82:0a:81:40:52:4a:0a:a0: 76:07:a8:66:e6:45:9c:67:92:2a:6a:90:c2:e5:0e: d4:64:29:d1:c8:3d:74:8c:04:c8:e7:ab:76:3b:9e: ff:79:9f:74:70:7b:08:96:bb:47:d0:d6:98:4b:c7: 50:eb:37:77:91:fc:f5:88:36:5d:48:86:62:dd:d8: c9:e8:70:75:47:2f:85:62:8d:ea:96:40:77:73:58: ab:f2:1c:1c:c2:98:64:47:bc:12:56:42:ba:ff:17: 8b:cd:22:13:4e:f5:1c:4b:ad:63:21:cd:31:74:f8: ec:c1:52:a0:cd:b5:76:5b:0c:f1:0d:6b:73:93:e2: 0a:8e:3f:e8:d7:15:ac:a8:a7:5a:04:bd:86:82:51: dd:6d:69:d8:60:f8:de:6d:09:a4:63:f9:a2:bd:40: 29:46:66:5b:61:bf:50:77:ac:bc:c6:fc:ea:3c:85: f7:dc:17:a1:52:04:62:fc:b3:3a:03:fb:c6:10:2a: 03:3b:5c:5e:ed:b6:25:85:52:18:d3:af:bb:67:e3: cf:f0:a7:19:af:cc:68:9e:db:b9:df:0e:44:33:ad: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:69:53:48:07:C6:76:8A:AC:C1:E6:25:89:29:6F:F0:EB:D0:E5 X509v3 Authority Key Identifier: keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:45:b6:81:ea:be:26:57:71:e6:a5:1a:01:98:70:65:8e:f9: 53:12:21:d4:29:fe:02:ab:25:00:d6:d6:8d:b6:d2:c6:a8:68: 47:6d:3f:f9:38:b3:1d:ee:13:af:e9:4c:e8:83:ef:97:51:50: da:c1:11:61:84:bf:c9:81:5a:d8:7e:d3:25:2f:58:37:99:d4: 4a:14:18:21:98:7d:20:da:68:ee:ac:51:8f:26:e4:73:eb:b0: 6d:2d:40:f6:58:fc:e5:6f:77:93:ff:12:10:b1:25:3b:0b:6e: 98:f1:a8:74:a3:84:25:76:d6:5a:05:a0:f1:e4:74:b0:79:8e: c3:fa:bb:2f:c0:bf:84:fb:07:5f:a1:f7:7a:14:aa:50:c6:ec: cc:88:05:49:1b:2a:97:f5:c2:68:e2:f6:59:a7:6d:df:5c:2b: c3:d0:f4:76:a8:45:d9:37:f0:ca:a8:06:69:ea:dd:0b:d8:88: 87:be:8c:64:b6:4a:10:0e:18:46:36:09:3b:98:b5:37:87:77: a3:70:8b:30:a4:41:42:cf:55:47:d3:d7:e4:41:5a:fb:b6:87: 5b:ea:8a:18:aa:32:ed:10:4d:77:b1:86:66:55:9c:fc:e0:88: bc:8c:74:52:f6:50:54:4d:2f:04:e9:ab:be:39:25:f7:ef:3a: 1f:3f:bc:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/fxALdDIuDFaPHOpTJ2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3 MTQ0NTkwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD Eyg0MGI1Njk1MzQ4MDdjNjc2OGFhY2MxZTYyNTg5Mjk2ZmYwZWJkMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOjuGO9Qz+UsnREv29N1GS2nKUB6 rAxs4s0sct6EtSXEQDz2ggqBQFJKCqB2B6hm5kWcZ5IqapDC5Q7UZCnRyD10jATI 56t2O57/eZ90cHsIlrtH0NaYS8dQ6zd3kfz1iDZdSIZi3djJ6HB1Ry+FYo3qlkB3 c1ir8hwcwphkR7wSVkK6/xeLzSITTvUcS61jIc0xdPjswVKgzbV2WwzxDWtzk+IK jj/o1xWsqKdaBL2GglHdbWnYYPjebQmkY/mivUApRmZbYb9Qd6y8xvzqPIX33Beh UgRi/LM6A/vGECoDO1xe7bYlhVIY06+7Z+PP8KcZr8xontu53w5EM61IFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC1aVNIB8Z2iqzB5iWJKW/w69DlMB8GA1UdIwQY MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0 LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUW2geq+ Jldx5qUaAZhwZY75UxIh1Cn+AqslANbWjbbSxqhoR20/+TizHe4Tr+lM6IPvl1FQ 2sERYYS/yYFa2H7TJS9YN5nUShQYIZh9INpo7qxRjybkc+uwbS1A9lj85W93k/8S ELElOwtumPGodKOEJXbWWgWg8eR0sHmOw/q7L8C/hPsHX6H3ehSqUMbszIgFSRsq l/XCaOL2Wadt31wrw9D0dqhF2TfwyqgGaerdC9iIh76MZLZKEA4YRjYJO5i1N4d3 o3CLMKRBQs9VR9PX5EFa+7aHW+qKGKoy7RBNd7GGZlWc/OCIvIx0UvZQVE0vBOmr vjkl9+86Hz+8Fg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:52 2026 by rpki-client