This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json) Hash identifier: zxdXUn31U27Tx4ss9hHi8Y+8jbjKjn9qcKeK5HPS3rQ= Subject key identifier: 25:4B:B5:DA:E8:C4:4F:F1:F2:A2:83:38:90:38:A2:32:39:E4:56:62 Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Certificate serial: 019C42EAE975A60FC9B12FD5050298D8045C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 15:00:17 +0000 Manifest this update: Mon 09 Feb 2026 15:00:17 +0000 Manifest next update: Tue 10 Feb 2026 15:00:17 +0000 Files and hashes: 1: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: HgEiIW/a7FIG7nKZtztuOVDb9bJSwTbQvVEuoi5doIU=) 2: wkMmp6s5tIiVOMhQ-G1Z3odbkBA.roa (hash: E+8cABzHZlQUHHuKZ16h6fJZng3ckrzig4shYxP7eeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e9:75:a6:0f:c9:b1:2f:d5:05:02:98:d8:04:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Validity Not Before: Feb 9 15:00:17 2026 GMT Not After : Feb 10 15:00:17 2026 GMT Subject: CN=254bb5dae8c44ff1f2a283389038a23239e45662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:20:5f:58:b4:4c:f2:19:75:19:fe:d9:0f: 26:c3:a9:8a:fc:d2:bf:8f:02:cf:ee:ae:d4:45:b2: 2f:4b:99:34:ec:a7:36:9f:c1:df:64:50:b6:0e:28: 0f:fd:3e:1d:ef:2b:bc:44:6b:04:d9:15:97:e4:8a: dc:af:f7:8a:95:9b:11:da:e2:30:65:73:98:a1:4a: 7d:c0:25:49:17:a8:0b:88:ad:6c:33:7e:e5:b5:55: 65:8d:15:86:23:50:3f:b4:4a:f4:83:41:8c:b3:3c: 33:55:ea:35:60:0f:d4:6c:b1:e5:58:5e:91:f6:4a: 8f:f6:e9:74:9c:c0:91:e4:cd:14:39:33:60:99:d8: 2c:1f:8d:85:66:c8:e5:bb:1e:be:27:fb:c1:3c:a7: 7c:1a:83:6a:f8:af:3c:db:ad:61:77:10:dc:c9:70: 4d:c5:7e:e5:53:0b:57:1f:45:db:ad:5f:ec:7d:79: 0b:03:99:43:8d:33:5a:d9:96:55:68:9c:4f:94:2a: 85:9a:6f:40:20:60:a9:23:74:b7:30:39:61:f0:30: a8:e1:79:f7:c9:5d:64:bb:4b:05:dc:8d:fa:fc:ed: e9:64:7c:a5:db:c8:6d:28:3b:66:82:a5:eb:4c:45: b8:ce:c4:8b:16:46:7c:6f:7b:83:4c:bc:e2:de:db: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4B:B5:DA:E8:C4:4F:F1:F2:A2:83:38:90:38:A2:32:39:E4:56:62 X509v3 Authority Key Identifier: keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:10:ad:d7:e4:a7:4f:3f:d7:f4:a6:ca:11:e9:ce:3f:dc:67: 31:cc:15:72:84:5f:69:22:ab:fe:60:b9:19:aa:97:ad:bf:e1: 89:10:88:81:4b:35:b4:cd:41:74:74:f2:41:e9:bd:a2:b1:1d: 33:5d:87:eb:1a:e4:4b:ce:48:5a:11:13:2d:38:15:f6:4c:38: b1:dd:da:7f:a7:2e:24:37:61:74:c7:d5:53:6c:f0:c5:91:29: f4:8a:67:ab:93:88:e5:57:14:45:4d:8a:18:8d:86:73:4d:b3: 88:00:28:2d:12:f3:06:8d:b5:dd:22:1a:79:cc:93:7e:e9:4e: ea:a4:38:86:2b:7f:bd:98:4c:34:8e:fd:da:b6:4b:7d:12:83: d7:3b:6f:1b:95:f4:69:70:42:ce:de:79:7e:0b:2f:2d:34:67: 36:ef:8f:8d:2f:47:0d:83:c6:f6:05:03:77:b8:e8:8c:2e:00: d3:8a:8e:4b:dc:a2:c5:64:ff:c9:12:3e:70:6a:64:e7:91:a6: 66:da:e1:e1:4e:bd:29:8f:33:a7:0b:3c:b5:36:e9:b2:6a:06: 38:16:47:db:35:fd:d1:fe:23:ed:2d:8e:a4:6c:d8:5c:80:95: 85:07:77:99:52:7a:b3:4b:c7:ce:0f:36:0c:b4:5e:a0:9d:c6: 01:66:86:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6ul1pg/JsS/VBQKY2ARcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGQyNDg5OGQxY2Y1MmQyM2Y5NTYxZGM2YWMwZjEzNjNl NmM3NjAwHhcNMjYwMjA5MTUwMDE3WhcNMjYwMjEwMTUwMDE3WjAzMTEwLwYDVQQD EygyNTRiYjVkYWU4YzQ0ZmYxZjJhMjgzMzg5MDM4YTIzMjM5ZTQ1NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhIgX1i0TPIZdRn+2Q8mw6mK/NK/ jwLP7q7URbIvS5k07Kc2n8HfZFC2DigP/T4d7yu8RGsE2RWX5Ircr/eKlZsR2uIw ZXOYoUp9wCVJF6gLiK1sM37ltVVljRWGI1A/tEr0g0GMszwzVeo1YA/UbLHlWF6R 9kqP9ul0nMCR5M0UOTNgmdgsH42FZsjlux6+J/vBPKd8GoNq+K88261hdxDcyXBN xX7lUwtXH0XbrV/sfXkLA5lDjTNa2ZZVaJxPlCqFmm9AIGCpI3S3MDlh8DCo4Xn3 yV1ku0sF3I36/O3pZHyl28htKDtmgqXrTEW4zsSLFkZ8b3uDTLzi3tuBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVLtdroxE/x8qKDOJA4ojI55FZiMB8GA1UdIwQY MBaAFEeNJImNHPUtI/lWHcasDxNj5sdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTkt OTNlYWQzNWExMmNhLzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTktOTNlYWQzNWExMmNh LzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRCt1+Sn Tz/X9KbKEenOP9xnMcwVcoRfaSKr/mC5GaqXrb/hiRCIgUs1tM1BdHTyQem9orEd M12H6xrkS85IWhETLTgV9kw4sd3af6cuJDdhdMfVU2zwxZEp9Ipnq5OI5VcURU2K GI2Gc02ziAAoLRLzBo213SIaecyTfulO6qQ4hit/vZhMNI792rZLfRKD1ztvG5X0 aXBCzt55fgsvLTRnNu+PjS9HDYPG9gUDd7jojC4A04qOS9yixWT/yRI+cGpk55Gm Ztrh4U69KY8zpws8tTbpsmoGOBZH2zX90f4j7S2OpGzYXICVhQd3mVJ6s0vHzg82 DLReoJ3GAWaGQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:30 2026 by rpki-client