This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json) Hash identifier: gMYIYUnLxo5f1sWuDD41kMXwNHsWVvRQdyR5WeVUGWo= Subject key identifier: B1:4D:D6:F7:0D:FB:B3:FC:FD:4E:FB:95:80:CA:8F:6C:6E:66:08:DE Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Certificate serial: 019C43226C145C3D18FF82972541DE8BDEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft Manifest number: 0B6C Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: dnPz90HhhTbb7UbGDfqrd04GM6/aSsxhEv5VKQmLg0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6c:14:5c:3d:18:ff:82:97:25:41:de:8b:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=b14dd6f70dfbb3fcfd4efb9580ca8f6c6e6608de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:61:32:57:22:d7:13:d1:8b:c9:3a:72:a2: d0:74:92:d5:1a:97:7e:12:95:3b:0b:9d:26:bf:04: bd:88:b2:f8:0b:48:7c:8b:3b:c8:29:cf:ed:d9:16: 4a:f9:04:2d:5f:cb:bd:d2:57:f1:4d:46:aa:9f:66: 45:f0:bb:84:31:77:6c:f9:f3:a9:5e:dd:c0:0f:35: 9c:08:a1:de:dc:4c:c8:76:26:53:63:06:bd:6b:34: c6:08:60:c6:63:75:d8:88:da:60:07:76:c1:37:10: 25:82:85:1e:12:c1:59:85:7a:9e:3f:d2:93:c7:97: 1b:08:e8:61:c5:b2:2b:0c:01:37:ef:64:cd:ed:b8: 65:c6:f6:a8:2b:df:ab:16:e6:39:6f:6e:e4:29:04: 19:10:9a:01:e2:8d:3c:a6:9c:5b:61:dc:0b:0c:49: 5b:a5:fd:1c:10:69:b2:09:45:33:9d:0f:1f:7d:77: 94:a8:a7:17:c1:b3:51:0d:f2:9c:2f:14:72:c0:6a: 10:cb:33:c9:e4:0f:87:77:8c:da:ff:e4:e4:10:ac: 2d:17:02:59:2f:79:d4:c1:55:5c:ed:59:a4:41:4b: 75:9b:63:49:9a:cc:29:19:26:e6:36:b8:d1:4a:af: 1c:5c:2d:98:c2:6a:36:4f:fd:e6:44:df:e7:78:db: d0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:D6:F7:0D:FB:B3:FC:FD:4E:FB:95:80:CA:8F:6C:6E:66:08:DE X509v3 Authority Key Identifier: keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:e2:c0:cc:66:8a:6e:a5:a7:58:c1:97:a1:6c:5f:28:40: a4:a0:43:c3:7c:e1:83:f6:ac:80:a2:5f:91:9e:a3:38:8d:bd: da:75:fa:9c:20:07:80:eb:a2:85:26:d4:77:fd:46:9b:0b:af: 9a:1d:2b:de:93:e5:81:e9:30:31:86:7c:44:21:a6:ea:1e:8d: 42:a8:cb:6d:6c:af:81:24:59:e4:c6:23:35:ea:91:a5:3e:23: 82:29:b9:d8:b9:99:a0:0f:e1:0e:2a:43:cf:bb:50:8f:05:60: 2d:3f:98:39:44:bd:c2:f2:5c:d7:cb:91:06:74:3c:ac:16:b0: b0:58:a8:9b:af:b5:9e:9b:7a:11:83:1f:22:f2:a1:84:4e:fc: 4b:c8:89:11:f6:65:e6:a3:0a:4d:c6:b7:7a:d5:2a:3a:33:84: c2:58:dc:29:9a:75:5f:28:a7:2d:c0:e4:eb:cc:dc:aa:94:ce: 73:c9:31:01:0a:6e:1d:ab:bc:04:0a:f4:e4:ac:e2:04:ac:a9: 85:91:34:c7:1d:14:6b:e2:4b:bb:6e:cb:4a:aa:03:d8:c5:1e: 66:62:0d:2f:9a:72:75:56:01:3d:0e:6a:e9:ed:0e:66:e0:c7: 8b:54:c8:32:05:8e:a4:c9:d8:20:c3:04:bd:be:cb:00:2b:f8: e2:3c:dd:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImwUXD0Y/4KXJUHei97gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx NGJiMDcwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD EyhiMTRkZDZmNzBkZmJiM2ZjZmQ0ZWZiOTU4MGNhOGY2YzZlNjYwOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgdhMlci1xPRi8k6cqLQdJLVGpd+ EpU7C50mvwS9iLL4C0h8izvIKc/t2RZK+QQtX8u90lfxTUaqn2ZF8LuEMXds+fOp Xt3ADzWcCKHe3EzIdiZTYwa9azTGCGDGY3XYiNpgB3bBNxAlgoUeEsFZhXqeP9KT x5cbCOhhxbIrDAE372TN7bhlxvaoK9+rFuY5b27kKQQZEJoB4o08ppxbYdwLDElb pf0cEGmyCUUznQ8ffXeUqKcXwbNRDfKcLxRywGoQyzPJ5A+Hd4za/+TkEKwtFwJZ L3nUwVVc7VmkQUt1m2NJmswpGSbmNrjRSq8cXC2Ywmo2T/3mRN/neNvQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFN1vcN+7P8/U77lYDKj2xuZgjeMB8GA1UdIwQY MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1 LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbDiwMxm im6lp1jBl6FsXyhApKBDw3zhg/asgKJfkZ6jOI292nX6nCAHgOuihSbUd/1Gmwuv mh0r3pPlgekwMYZ8RCGm6h6NQqjLbWyvgSRZ5MYjNeqRpT4jgim52LmZoA/hDipD z7tQjwVgLT+YOUS9wvJc18uRBnQ8rBawsFiom6+1npt6EYMfIvKhhE78S8iJEfZl 5qMKTca3etUqOjOEwljcKZp1XyinLcDk68zcqpTOc8kxAQpuHau8BAr05KziBKyp hZE0xx0Ua+JLu27LSqoD2MUeZmINL5pydVYBPQ5q6e0OZuDHi1TIMgWOpMnYIMME vb7LACv44jzdHw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:02 2026 by rpki-client