This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json) Hash identifier: vht40j0xE4gls2MVMbf4mKn2e8bZ75PQU3Q+dImVvBM= Subject key identifier: 2A:34:86:36:AC:1D:0A:E3:E5:73:37:17:8E:D1:19:10:1B:17:3A:11 Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1 Certificate serial: 019C446BA84E86BD61296F321C204EA2EE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 22:00:31 +0000 Manifest this update: Mon 09 Feb 2026 22:00:31 +0000 Manifest next update: Tue 10 Feb 2026 22:00:31 +0000 Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: kvQ8OBlrz+tWyIiYnFk6dDRl1sqaSk3ODIIk1vGWgmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:a8:4e:86:bd:61:29:6f:32:1c:20:4e:a2:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1 Validity Not Before: Feb 9 22:00:31 2026 GMT Not After : Feb 10 22:00:31 2026 GMT Subject: CN=2a348636ac1d0ae3e57337178ed119101b173a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:5a:59:83:19:f9:a5:ab:79:ea:ea:c4:d3: 1b:f3:51:92:12:1f:c2:ff:67:20:7b:a9:9f:fe:02: d7:26:2d:ab:7f:04:57:0f:77:28:09:78:1a:f3:59: b2:f8:b2:b9:85:d1:d4:4d:04:c1:ca:23:10:c5:b5: 77:11:44:88:6a:d2:28:2f:63:d6:8a:70:7d:77:9b: 04:4d:b2:24:18:c6:20:cb:b7:49:2d:3e:b7:dc:03: 9e:e7:0d:10:53:02:07:ba:de:74:5e:88:b4:d2:ea: 76:b3:1f:9c:49:66:7b:1b:f2:9d:3c:36:cd:1d:69: b5:c2:aa:68:5c:0f:6d:81:75:18:41:a0:24:b1:e8: 1a:63:c2:7f:65:c5:24:81:5d:3d:81:4c:e5:eb:c1: e0:e2:59:40:75:af:cd:84:e4:b0:c6:82:be:a5:7f: 91:ac:29:e1:58:d0:eb:44:e6:96:50:2a:c0:bd:ca: ab:d1:76:7f:ec:a8:a8:41:4c:37:4e:a3:35:71:e5: d2:66:2b:09:9d:3d:69:7f:84:22:db:ae:04:8f:c1: 0d:b9:06:4c:87:72:c9:de:91:5f:36:d0:26:cc:f4: 41:4c:06:e0:95:1e:4c:d6:f0:97:b4:a0:bd:3b:3a: e1:8a:8d:57:73:bb:75:2f:8c:10:53:b3:2e:66:fb: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:34:86:36:AC:1D:0A:E3:E5:73:37:17:8E:D1:19:10:1B:17:3A:11 X509v3 Authority Key Identifier: keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:50:07:2f:24:36:6a:2d:76:c7:c7:88:28:89:80:b1:7d: f5:36:56:f8:cb:cb:45:a7:12:a9:72:b1:8a:ad:87:35:42:e8: 75:13:38:5e:d3:1a:78:85:d3:63:97:32:c8:d4:af:af:de:3d: 61:c3:18:2f:59:b8:8f:7e:4e:cd:e7:6b:90:7a:c3:fc:1b:40: cd:ec:17:a6:e3:4f:06:37:86:a5:14:a4:f6:a6:d4:a0:24:4e: 01:68:f4:a2:97:90:8d:73:a9:0f:46:e1:1a:c3:12:24:38:c6: 7e:30:44:e7:e4:e8:e6:0f:b3:aa:d6:f4:15:41:2d:e4:4f:37: d3:37:10:21:c2:7b:65:2f:89:c3:66:bd:b1:77:6b:86:82:6d: 5f:8c:3f:d6:33:63:41:df:79:ba:70:4a:14:61:16:53:a6:3b: d3:40:51:2b:47:7e:c1:e2:e3:a7:e5:0e:d6:e6:5e:1a:e5:e3: 1a:af:e9:29:f3:35:49:2f:e1:b5:65:8d:e8:42:15:b7:c1:d9: 07:4b:4f:e7:1b:f8:f6:1f:d6:db:58:2d:22:42:60:da:39:22: 1e:df:0e:05:71:75:ad:e0:98:2f:ed:0a:8d:d3:b3:14:a6:49: 8c:0f:f8:4a:ad:c0:bd:c7:ed:fa:39:e3:1f:12:0c:b2:54:0d: 04:f6:5d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa6hOhr1hKW8yHCBOou5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky MjE4YzEwHhcNMjYwMjA5MjIwMDMxWhcNMjYwMjEwMjIwMDMxWjAzMTEwLwYDVQQD EygyYTM0ODYzNmFjMWQwYWUzZTU3MzM3MTc4ZWQxMTkxMDFiMTczYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgRaWYMZ+aWreerqxNMb81GSEh/C /2cge6mf/gLXJi2rfwRXD3coCXga81my+LK5hdHUTQTByiMQxbV3EUSIatIoL2PW inB9d5sETbIkGMYgy7dJLT633AOe5w0QUwIHut50Xoi00up2sx+cSWZ7G/KdPDbN HWm1wqpoXA9tgXUYQaAksegaY8J/ZcUkgV09gUzl68Hg4llAda/NhOSwxoK+pX+R rCnhWNDrROaWUCrAvcqr0XZ/7KioQUw3TqM1ceXSZisJnT1pf4Qi264Ej8ENuQZM h3LJ3pFfNtAmzPRBTAbglR5M1vCXtKC9Ozrhio1Xc7t1L4wQU7MuZvuYEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo0hjasHQrj5XM3F47RGRAbFzoRMB8GA1UdIwQY MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy5QBy8k NmotdsfHiCiJgLF99TZW+MvLRacSqXKxiq2HNULodRM4XtMaeIXTY5cyyNSvr949 YcMYL1m4j35OzedrkHrD/BtAzewXpuNPBjeGpRSk9qbUoCROAWj0opeQjXOpD0bh GsMSJDjGfjBE5+To5g+zqtb0FUEt5E830zcQIcJ7ZS+Jw2a9sXdrhoJtX4w/1jNj Qd95unBKFGEWU6Y700BRK0d+weLjp+UO1uZeGuXjGq/pKfM1SS/htWWN6EIVt8HZ B0tP5xv49h/W21gtIkJg2jkiHt8OBXF1reCYL+0KjdOzFKZJjA/4Sq3Avcft+jnj HxIMslQNBPZdAw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:53 2026 by rpki-client