This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json) Hash identifier: pbzfeXpSrTGs7ECIkg9uSXPc3x+uQUxEZz2B1PHgijo= Subject key identifier: 6D:B3:46:09:01:17:FA:67:77:27:41:11:AD:D8:39:39:1E:95:9C:E4 Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5 Certificate serial: 019C43220D8BBE090819D2DBF08AF63B9036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: pqSnw8IxpBNaxZn1/Lf7lz82Np3QU+RdYnNaMV5XHvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0d:8b:be:09:08:19:d2:db:f0:8a:f6:3b:90:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=6db346090117fa6777274111add839391e959ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:78:95:9c:ee:2a:c0:43:d6:da:8b:49:87: 9f:ce:2a:cf:ac:dc:47:37:69:c5:38:87:b2:dd:b3: b1:04:06:81:19:b8:a6:25:7b:b0:19:68:e6:2a:9c: 65:32:ed:27:46:32:7f:ea:ef:63:07:84:e1:4f:0b: 7a:25:83:9c:99:8b:00:cb:94:1e:f1:3c:73:7b:04: 16:70:7a:6d:bb:05:db:93:09:28:28:45:6d:c3:58: 9a:a4:74:6d:2e:84:9f:3a:c7:15:3f:00:ab:37:5a: a4:82:4d:ed:c2:cc:73:6a:4e:1c:6b:07:33:a0:fb: 9b:ee:65:ff:81:4b:6b:b3:98:37:9a:64:50:64:de: 62:18:1e:47:f4:df:1b:1a:c2:46:ce:e7:28:ed:32: e9:52:35:ae:c5:fe:b1:84:d3:58:8a:ad:d6:87:3c: 80:40:09:a8:7d:90:d4:17:80:24:20:76:cf:02:94: b8:e6:55:1e:8c:fd:20:5c:65:ac:9f:9c:ee:12:02: 53:53:4a:0b:1b:d9:86:98:6a:74:d5:1b:6d:86:f0: fd:5a:43:5d:ff:76:a1:eb:05:05:77:ac:88:71:ee: bd:f8:f8:71:ae:60:dd:62:68:1e:aa:7c:d6:bb:f1: 58:b8:3d:76:5d:ed:a5:b4:c7:08:71:d7:03:e1:21: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B3:46:09:01:17:FA:67:77:27:41:11:AD:D8:39:39:1E:95:9C:E4 X509v3 Authority Key Identifier: keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:81:d7:46:92:9f:c3:07:90:fc:c7:6c:c4:58:8c:46:c4:fc: 80:0b:22:95:81:a4:97:54:7e:c9:40:7b:51:89:ed:c3:6c:b1: 38:8a:66:0c:04:d3:e1:0e:c7:d2:2c:80:61:fa:e2:92:ca:19: 3b:d2:dd:6b:2a:5a:0c:40:99:27:a9:90:63:60:a6:c6:98:74: 82:c9:60:49:a4:a5:d5:35:c6:49:35:2d:2e:03:26:fd:fd:44: 0c:58:fa:7a:92:67:35:cc:ab:c0:61:b8:f2:71:18:e5:8c:a4: d2:89:cc:fb:18:c4:e8:ca:c8:15:ec:a2:bf:88:e5:ba:1d:50: 75:9e:a0:09:1b:94:b1:82:d9:82:eb:a7:7c:98:44:7f:08:7a: c1:05:3e:fc:18:2e:29:dd:0b:41:a3:e5:cd:2f:a7:29:8a:af: 55:aa:b8:ba:89:ef:15:2e:2f:3e:23:aa:ba:17:35:ae:1d:c6: 7a:34:7c:f2:fb:8f:97:8c:9a:8b:a1:b0:61:da:f8:d8:f0:37: ec:72:49:95:76:13:59:7f:13:c6:24:45:8c:ae:a3:a6:26:fd: 87:2c:d5:02:2e:b2:e9:59:90:21:05:fc:ec:cb:71:56:6c:9b: 90:eb:6f:03:bb:d9:71:33:25:0e:9f:ac:e9:d5:1e:d7:2a:37: db:6b:e5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIg2LvgkIGdLb8Ir2O5A2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm Y2ExYTUwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD Eyg2ZGIzNDYwOTAxMTdmYTY3NzcyNzQxMTFhZGQ4MzkzOTFlOTU5Y2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOB4lZzuKsBD1tqLSYefzirPrNxH N2nFOIey3bOxBAaBGbimJXuwGWjmKpxlMu0nRjJ/6u9jB4ThTwt6JYOcmYsAy5Qe 8TxzewQWcHptuwXbkwkoKEVtw1iapHRtLoSfOscVPwCrN1qkgk3twsxzak4cawcz oPub7mX/gUtrs5g3mmRQZN5iGB5H9N8bGsJGzuco7TLpUjWuxf6xhNNYiq3WhzyA QAmofZDUF4AkIHbPApS45lUejP0gXGWsn5zuEgJTU0oLG9mGmGp01RtthvD9WkNd /3ah6wUFd6yIce69+PhxrmDdYmgeqnzWu/FYuD12Xe2ltMcIcdcD4SFcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2zRgkBF/pndydBEa3YOTkelZzkMB8GA1UdIwQY MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5 LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIHXRpKf wweQ/MdsxFiMRsT8gAsilYGkl1R+yUB7UYntw2yxOIpmDATT4Q7H0iyAYfriksoZ O9LdaypaDECZJ6mQY2Cmxph0gslgSaSl1TXGSTUtLgMm/f1EDFj6epJnNcyrwGG4 8nEY5Yyk0onM+xjE6MrIFeyiv4jluh1QdZ6gCRuUsYLZguunfJhEfwh6wQU+/Bgu Kd0LQaPlzS+nKYqvVaq4uonvFS4vPiOquhc1rh3GejR88vuPl4yai6GwYdr42PA3 7HJJlXYTWX8TxiRFjK6jpib9hyzVAi6y6VmQIQX87MtxVmybkOtvA7vZcTMlDp+s 6dUe1yo322vlZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:44 2026 by rpki-client