This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json) Hash identifier: HKPJh6/JrY4KikhDemGegx+pOmBh+kJA6AnO9lyQn8U= Subject key identifier: AB:E3:43:82:48:87:1E:2E:6E:A7:D9:D1:00:00:A2:B9:10:8D:44:0F Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Certificate serial: 019C4322E6EF5FFB1082946C0C5E7DF95E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft Manifest number: 02DB Signing time: Mon 09 Feb 2026 16:01:26 +0000 Manifest this update: Mon 09 Feb 2026 16:01:26 +0000 Manifest next update: Tue 10 Feb 2026 16:01:26 +0000 Files and hashes: 1: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: vAJBPgH+z+9n0shCJwev5HTMTs7jCOE6j8gKBv012sE=) 2: mLc4nrUmR72L5a_hibMuCOUOjes.roa (hash: Oiq1+1if7qn5D54vTTs160dOXJEuE6xP7iBsVrbNwmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e6:ef:5f:fb:10:82:94:6c:0c:5e:7d:f9:5e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Validity Not Before: Feb 9 16:01:26 2026 GMT Not After : Feb 10 16:01:26 2026 GMT Subject: CN=abe3438248871e2e6ea7d9d10000a2b9108d440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:ed:96:39:41:87:70:40:c2:9b:13:fc:b3: 9a:47:30:77:5c:2c:70:65:0f:3a:e5:4b:9c:f4:ec: f5:92:9a:fd:5f:ca:2b:62:6a:13:f2:01:a8:54:6a: 7c:82:28:bf:c7:0d:17:52:2e:2e:23:c9:bf:22:63: a4:62:06:64:92:ac:a8:4e:af:ef:05:86:fd:d3:51: dc:7c:e7:f7:1e:19:87:93:98:97:7b:b6:14:af:7e: 5d:1b:c4:bb:b6:ee:1f:35:0b:78:c9:e2:d8:75:6e: 5c:93:f6:7d:cb:a8:fd:69:2e:dd:a2:77:bb:8f:c2: d4:d2:e5:dc:61:9b:d9:fe:e2:b4:bd:58:07:19:80: ec:55:b8:77:44:3e:11:27:a9:a0:b8:ed:ba:49:02: 91:e6:fe:b9:19:eb:1a:35:70:3e:97:6d:b5:1a:69: 19:92:df:ef:43:65:45:37:b8:01:60:4a:21:fc:fa: ba:15:fe:20:0d:65:b0:7c:e8:37:47:35:1b:32:2b: 81:94:04:66:6f:b2:f8:6d:a9:79:a7:c6:d4:fe:56: e6:7c:e0:0b:d3:2e:81:b2:ab:a9:bb:2a:16:72:06: 96:2b:f4:a3:7e:a1:b7:06:32:cf:cb:54:7f:45:8a: 19:3c:7b:e4:b2:89:89:cc:a2:e0:b1:48:4e:72:97: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:43:82:48:87:1E:2E:6E:A7:D9:D1:00:00:A2:B9:10:8D:44:0F X509v3 Authority Key Identifier: keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:60:a3:08:00:c7:89:16:8b:af:08:30:36:04:18:25:ea:3b: 39:07:25:f2:c7:8a:1a:1f:b8:c0:9e:58:3d:41:85:66:be:8f: a9:bf:39:16:7f:d5:00:9f:60:03:4e:d7:6f:12:35:c8:ed:47: cc:9a:42:e4:67:ce:57:67:6d:3e:5b:8d:ca:33:0c:1a:9d:4a: 5a:51:a6:ef:1a:45:c0:70:19:2c:ff:15:4b:71:42:2a:b7:0f: 80:28:07:59:02:3c:f9:8d:59:6f:31:1d:2e:06:56:c2:ef:16: 69:1c:5c:e9:1e:1f:ed:38:67:e9:ba:0b:dc:e0:7e:64:fd:23: 0a:25:58:ef:07:a4:9f:6c:e4:05:42:b3:5d:bf:5b:d9:2c:2a: cb:f4:25:82:c2:23:b7:21:d4:c5:8f:09:7e:5e:1c:66:f7:ff: b8:a1:ab:68:91:d7:64:d7:e8:30:b1:bf:ff:67:37:45:55:72: 28:da:9d:e6:62:7e:78:32:a6:71:0d:d8:f2:26:cb:fb:bf:04: b6:0a:6c:2f:92:4a:79:f7:03:29:13:54:21:b0:a0:6a:48:f1: 16:db:72:1a:89:d3:6c:58:bc:30:a8:7b:65:56:fe:07:ea:4d: 23:4c:31:49:a6:8b:c7:c9:69:cf:d0:81:f9:58:92:3e:5b:5d: 96:5b:2c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIubvX/sQgpRsDF59+V4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTkxMDFhMjljOTM4Zjg0Zjg2MDQ1ZDZiZTVkZjRiM2Y1 MTdiZDEwHhcNMjYwMjA5MTYwMTI2WhcNMjYwMjEwMTYwMTI2WjAzMTEwLwYDVQQD EyhhYmUzNDM4MjQ4ODcxZTJlNmVhN2Q5ZDEwMDAwYTJiOTEwOGQ0NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7XtljlBh3BAwpsT/LOaRzB3XCxw ZQ865Uuc9Oz1kpr9X8orYmoT8gGoVGp8gii/xw0XUi4uI8m/ImOkYgZkkqyoTq/v BYb901HcfOf3HhmHk5iXe7YUr35dG8S7tu4fNQt4yeLYdW5ck/Z9y6j9aS7done7 j8LU0uXcYZvZ/uK0vVgHGYDsVbh3RD4RJ6mguO26SQKR5v65GesaNXA+l221GmkZ kt/vQ2VFN7gBYEoh/Pq6Ff4gDWWwfOg3RzUbMiuBlARmb7L4bal5p8bU/lbmfOAL 0y6BsqupuyoWcgaWK/SjfqG3BjLPy1R/RYoZPHvksomJzKLgsUhOcpesTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvjQ4JIhx4ubqfZ0QAAorkQjUQPMB8GA1UdIwQY MBaAFETpEBopyTj4T4YEXWvl30s/UXvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgt ZGYwMWI0ZWIyNWU5LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgtZGYwMWI0ZWIyNWU5 LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWCjCADH iRaLrwgwNgQYJeo7OQcl8seKGh+4wJ5YPUGFZr6Pqb85Fn/VAJ9gA07XbxI1yO1H zJpC5GfOV2dtPluNyjMMGp1KWlGm7xpFwHAZLP8VS3FCKrcPgCgHWQI8+Y1ZbzEd LgZWwu8WaRxc6R4f7Thn6boL3OB+ZP0jCiVY7wekn2zkBUKzXb9b2Swqy/QlgsIj tyHUxY8Jfl4cZvf/uKGraJHXZNfoMLG//2c3RVVyKNqd5mJ+eDKmcQ3Y8ibL+78E tgpsL5JKefcDKRNUIbCgakjxFttyGonTbFi8MKh7ZVb+B+pNI0wxSaaLx8lpz9CB +ViSPltdllss8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:14 2026 by rpki-client