This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json) Hash identifier: TDGuAgumFRM8vTHxCZf40EN4/Vd5mpbqcrMcSokh3CY= Subject key identifier: 3A:9D:0D:1B:A1:ED:33:89:F8:85:E9:E9:34:FA:65:66:F2:D6:E2:0D Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde Certificate serial: 019C43C69F98BB33F6C76896535F10A4AD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 19:00:16 +0000 Manifest this update: Mon 09 Feb 2026 19:00:16 +0000 Manifest next update: Tue 10 Feb 2026 19:00:16 +0000 Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: B9MHMFCRKjkUKSCiZdNsjVLtYnVgejoVKyWM5OmYHt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:9f:98:bb:33:f6:c7:68:96:53:5f:10:a4:ad:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde Validity Not Before: Feb 9 19:00:16 2026 GMT Not After : Feb 10 19:00:16 2026 GMT Subject: CN=3a9d0d1ba1ed3389f885e9e934fa6566f2d6e20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:f1:71:38:e8:dd:29:f1:57:8f:d1:da:1d: 72:35:01:a4:02:5b:0b:98:d6:61:b3:de:3d:12:02: 83:24:52:79:c1:13:c6:cc:88:51:2e:92:9a:1a:d3: b7:2b:b7:ed:90:4c:e1:e7:68:4b:bb:14:fe:3c:56: 9b:01:ae:d8:d3:4d:e0:ce:92:d4:ee:d0:24:8a:f1: 54:0b:b6:84:2f:fd:e5:3b:f1:ba:15:2a:c0:a7:b4: e3:47:57:ac:b3:bf:7b:6c:74:6f:4e:9f:a7:5d:70: d1:44:d1:c0:ad:24:50:2a:5e:53:33:dd:f6:c1:ee: fc:6c:91:db:0f:6f:6a:b3:01:9e:e9:e0:3a:78:2f: 3b:d7:dd:71:93:46:02:86:48:3b:21:16:da:85:08: 78:25:ec:07:63:a1:91:a9:5b:28:06:f3:55:fb:10: 35:56:e2:6e:93:c2:a7:fd:4c:ec:5f:ad:50:6d:33: eb:e4:b9:84:49:36:c2:e1:67:00:8f:39:ff:85:2a: 76:fa:aa:75:82:5b:5c:62:26:72:71:69:9b:f3:07: 28:2a:cc:09:61:ac:16:94:9c:d9:09:db:69:32:36: 80:05:e2:30:81:ff:66:53:bb:15:61:72:f2:7b:d7: f9:4e:78:99:14:5c:76:5a:4c:07:6e:2f:51:01:5e: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:0D:1B:A1:ED:33:89:F8:85:E9:E9:34:FA:65:66:F2:D6:E2:0D X509v3 Authority Key Identifier: keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4c:b8:d1:f4:59:e6:2f:69:19:b2:96:72:06:ba:ae:25:87: 2b:6e:c7:0b:f1:5f:df:77:0a:98:9c:8f:e1:3a:49:11:c8:90: a0:8b:59:5f:da:41:40:2f:e9:f0:cc:12:e0:f4:b9:56:79:d0: be:28:2c:68:35:cb:9f:88:69:4b:da:8b:b7:9f:ac:6d:25:af: d6:16:b2:1f:7d:6e:fd:38:7d:31:24:23:37:eb:26:48:17:3b: 32:a0:56:60:76:36:2e:f0:2b:7c:88:98:10:32:d2:c4:5c:2c: 19:d5:34:29:99:7d:0f:c2:85:b7:b6:12:28:c2:30:ed:3e:fb: bf:29:dd:03:04:08:73:99:06:8a:23:bb:b5:15:c4:76:c7:4b: 97:f7:ed:50:b2:cc:a5:3d:bc:bb:48:8f:66:59:bd:5a:23:50: 68:23:6f:18:08:b3:25:92:95:d8:78:c4:44:23:b1:48:9a:6b: bd:60:87:b8:cb:3f:cc:0c:a3:70:96:70:d2:9c:ea:16:3e:32: fa:8c:c1:5a:1f:3b:f1:3e:ad:82:a6:c2:a8:a9:36:e0:8f:f5: 5b:4a:28:2e:3e:21:64:6c:ce:11:74:8e:7b:d0:95:bb:38:ba: 40:51:df:d5:2e:23:0e:63:59:0c:a8:46:6b:71:96:1b:e6:19: d4:5a:a7:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxp+YuzP2x2iWU18QpK1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3 MTZjZGUwHhcNMjYwMjA5MTkwMDE2WhcNMjYwMjEwMTkwMDE2WjAzMTEwLwYDVQQD EygzYTlkMGQxYmExZWQzMzg5Zjg4NWU5ZTkzNGZhNjU2NmYyZDZlMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwHxcTjo3SnxV4/R2h1yNQGkAlsL mNZhs949EgKDJFJ5wRPGzIhRLpKaGtO3K7ftkEzh52hLuxT+PFabAa7Y003gzpLU 7tAkivFUC7aEL/3lO/G6FSrAp7TjR1ess797bHRvTp+nXXDRRNHArSRQKl5TM932 we78bJHbD29qswGe6eA6eC87191xk0YChkg7IRbahQh4JewHY6GRqVsoBvNV+xA1 VuJuk8Kn/UzsX61QbTPr5LmESTbC4WcAjzn/hSp2+qp1gltcYiZycWmb8wcoKswJ YawWlJzZCdtpMjaABeIwgf9mU7sVYXLye9f5TniZFFx2WkwHbi9RAV5vxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqdDRuh7TOJ+IXp6TT6ZWby1uINMB8GA1UdIwQY MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0y40fRZ 5i9pGbKWcga6riWHK27HC/Ff33cKmJyP4TpJEciQoItZX9pBQC/p8MwS4PS5VnnQ vigsaDXLn4hpS9qLt5+sbSWv1hayH31u/Th9MSQjN+smSBc7MqBWYHY2LvArfIiY EDLSxFwsGdU0KZl9D8KFt7YSKMIw7T77vyndAwQIc5kGiiO7tRXEdsdLl/ftULLM pT28u0iPZlm9WiNQaCNvGAizJZKV2HjERCOxSJprvWCHuMs/zAyjcJZw0pzqFj4y +ozBWh878T6tgqbCqKk24I/1W0ooLj4hZGzOEXSOe9CVuzi6QFHf1S4jDmNZDKhG a3GWG+YZ1FqnyQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:14 2026 by rpki-client