This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json) Hash identifier: 46/eDBd5eumKGIhv8pz4vwr0F7njKfbQe/WNLQFXkys= Subject key identifier: E0:5C:97:3B:98:DA:68:6A:55:59:34:0A:D9:64:19:82:D1:2C:08:A4 Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Certificate serial: 019C446C48B1833A75D42CC22E6FFF8F3BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft Manifest number: 03D8 Signing time: Mon 09 Feb 2026 22:01:13 +0000 Manifest this update: Mon 09 Feb 2026 22:01:13 +0000 Manifest next update: Tue 10 Feb 2026 22:01:13 +0000 Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: EUorfCDB9i4e2NzvebF8NKkIXZLvwYHFrw6PXyaIBpI=) 2: nqmWzH-tzCnzE93LuhfxRjm9wHw.roa (hash: L9/RTfwJkK0P4xFaKDfFjPQ7yNTzuYqZSZ9Mz6ikrfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:48:b1:83:3a:75:d4:2c:c2:2e:6f:ff:8f:3b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Validity Not Before: Feb 9 22:01:13 2026 GMT Not After : Feb 10 22:01:13 2026 GMT Subject: CN=e05c973b98da686a5559340ad9641982d12c08a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:54:4c:5a:97:1a:4c:4b:48:20:55:17:18: a8:6e:4e:39:df:2d:d3:be:1b:d3:65:c0:fb:20:d4: be:d9:07:f2:cf:77:23:21:7f:98:75:0a:bd:3b:7a: bc:06:74:e1:36:c3:ff:c3:42:e7:45:5c:6c:21:2a: 43:99:b3:0a:c9:0f:83:ab:23:eb:21:1c:82:5b:76: e1:73:23:c0:7f:cb:d5:b7:be:3f:57:a1:2f:53:10: 96:a4:34:1d:8e:13:ab:56:d4:c8:f8:9e:1e:75:24: 93:7e:9c:68:24:55:61:35:fb:79:87:76:05:71:e7: cf:e0:8b:ff:ec:3a:81:4a:ea:44:d1:e8:c9:4f:bb: 5f:6d:1d:58:3a:27:98:6d:e3:b9:a0:30:81:bf:2b: 1a:c0:74:22:9d:03:b5:b8:ba:a6:fe:52:81:04:1c: 42:20:22:2c:08:12:f5:83:9c:51:00:c8:40:43:e2: 5e:cf:cb:60:41:a8:6b:69:45:f5:2c:c3:26:86:d8: 4c:55:8a:cb:1e:e9:13:08:96:f3:99:92:7b:f7:93: 53:47:3c:5c:cd:d6:f7:e0:6d:9a:2b:f7:50:74:38: 5e:30:6a:28:8d:58:6a:09:75:e8:50:80:05:87:56: 82:58:20:bb:d3:cb:93:ee:9e:43:29:2c:bc:59:4e: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5C:97:3B:98:DA:68:6A:55:59:34:0A:D9:64:19:82:D1:2C:08:A4 X509v3 Authority Key Identifier: keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d0:32:81:52:b5:e4:eb:a3:53:0a:14:f7:f5:cf:c1:b5:8b: 93:aa:a9:d2:fd:39:89:81:2f:aa:d7:c0:3c:af:33:40:64:d8: d2:e2:5f:43:be:30:10:cc:5a:ba:e8:a1:bf:e5:9a:c8:87:3a: 00:59:e1:b8:eb:e2:9b:96:52:ab:5a:80:b1:8d:d6:8f:90:1e: 3d:04:8b:bb:4c:ae:45:ac:a1:33:56:78:fa:33:00:8b:c4:73: 11:c1:24:fe:48:c6:88:a7:15:0d:a0:88:9e:cd:ad:0b:03:b4: 5d:be:50:dc:e8:15:0b:d0:9d:eb:ad:64:c7:af:72:4e:98:45: 16:50:8d:3e:3e:b6:8d:ce:a5:1d:05:97:4e:5d:c9:34:e7:6c: c1:53:95:1f:df:47:04:2d:e1:5e:62:d7:43:32:f7:3b:a4:6d: 41:f2:18:ec:4c:b6:1c:59:a9:6a:fd:dd:c8:89:89:c4:d3:fc: b7:cf:91:95:72:49:ca:03:0c:be:51:5b:c6:d4:26:09:2d:26: 8e:c9:1b:8e:fd:29:b3:81:17:90:ec:02:09:bc:bd:10:4f:ea: 8b:68:66:d6:d1:eb:29:60:da:bc:32:b0:82:da:e4:86:46:0a: 37:5a:4c:77:d6:2a:30:fb:1f:b8:9f:e5:06:23:34:05:e3:dd: 47:e0:af:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEixgzp11CzCLm//jzuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz ZTZhOTgwHhcNMjYwMjA5MjIwMTEzWhcNMjYwMjEwMjIwMTEzWjAzMTEwLwYDVQQD EyhlMDVjOTczYjk4ZGE2ODZhNTU1OTM0MGFkOTY0MTk4MmQxMmMwOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4JUTFqXGkxLSCBVFxiobk453y3T vhvTZcD7INS+2Qfyz3cjIX+YdQq9O3q8BnThNsP/w0LnRVxsISpDmbMKyQ+DqyPr IRyCW3bhcyPAf8vVt74/V6EvUxCWpDQdjhOrVtTI+J4edSSTfpxoJFVhNft5h3YF cefP4Iv/7DqBSupE0ejJT7tfbR1YOieYbeO5oDCBvysawHQinQO1uLqm/lKBBBxC ICIsCBL1g5xRAMhAQ+Jez8tgQahraUX1LMMmhthMVYrLHukTCJbzmZJ795NTRzxc zdb34G2aK/dQdDheMGoojVhqCXXoUIAFh1aCWCC708uT7p5DKSy8WU75WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBclzuY2mhqVVk0CtlkGYLRLAikMB8GA1UdIwQY MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2 LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNAygVK1 5OujUwoU9/XPwbWLk6qp0v05iYEvqtfAPK8zQGTY0uJfQ74wEMxauuihv+WayIc6 AFnhuOvim5ZSq1qAsY3Wj5AePQSLu0yuRayhM1Z4+jMAi8RzEcEk/kjGiKcVDaCI ns2tCwO0Xb5Q3OgVC9Cd661kx69yTphFFlCNPj62jc6lHQWXTl3JNOdswVOVH99H BC3hXmLXQzL3O6RtQfIY7Ey2HFmpav3dyImJxNP8t8+RlXJJygMMvlFbxtQmCS0m jskbjv0ps4EXkOwCCby9EE/qi2hm1tHrKWDavDKwgtrkhkYKN1pMd9YqMPsfuJ/l BiM0BePdR+CvBg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:07 2026 by rpki-client