This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json) Hash identifier: yxJADxd00esX6kqwRZk2KyUW2JX7LOdZ7XSqxAcCOtE= Subject key identifier: D9:FC:25:C1:4D:84:FA:7A:6A:AE:46:6A:1F:8C:12:B6:3F:09:50:A0 Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Certificate serial: 019C4390156B1E9CD9814CD870F4BFC90701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: i+wGQ1XLODdXOcpzgzo5q/AmGAkvXFeWA87dwO3ZmTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:15:6b:1e:9c:d9:81:4c:d8:70:f4:bf:c9:07:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=d9fc25c14d84fa7a6aae466a1f8c12b63f0950a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:98:96:15:2f:7a:a0:4d:7d:24:1d:b8:73: e6:0c:f6:d8:a1:5a:ed:a1:c4:b5:52:8e:02:a5:69: ab:ba:d3:6d:14:cf:4e:df:50:d1:9f:62:1f:da:1a: 15:b2:6b:e0:55:4a:f9:3b:71:aa:04:0c:b2:17:ff: 5a:db:e2:af:c1:a4:bf:e1:e3:f4:59:66:30:19:90: 6f:89:67:89:e2:25:c1:9d:f4:24:b2:75:99:0d:90: 6e:95:6b:c5:cb:31:43:f9:83:43:34:ea:ec:b6:e7: 76:74:9f:77:a2:6a:0d:a6:f6:e3:5d:35:81:c1:0b: 9d:85:9c:c8:b9:e5:77:94:37:58:31:a3:5e:c3:34: 7e:8f:50:7d:b2:3e:ae:bf:1d:b8:2e:13:0c:d0:bf: 32:dc:00:54:56:83:25:2c:b8:02:d0:6b:02:24:eb: 1e:39:04:09:4a:94:f0:89:3d:4b:b5:c4:56:9b:3b: 1a:88:5e:85:bf:4a:99:45:d7:83:df:99:94:0b:8b: 15:93:8c:3f:d4:fa:69:67:61:5f:c3:b9:a8:83:cf: 59:6e:e7:80:a5:3c:9b:ac:24:b1:b5:28:8e:92:14: 6f:0d:de:18:69:cf:7d:5b:98:d8:1e:08:4e:90:1f: 09:43:28:0a:ac:31:37:ef:36:28:54:5a:22:2f:fd: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:25:C1:4D:84:FA:7A:6A:AE:46:6A:1F:8C:12:B6:3F:09:50:A0 X509v3 Authority Key Identifier: keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8a:bd:97:d3:d9:66:ec:c2:80:f4:00:63:de:94:a1:75:67: 86:99:9c:06:15:39:02:ef:17:b9:bd:e3:71:77:cc:56:f7:2d: bf:0b:62:59:f7:c2:03:bc:6d:63:09:03:ea:08:e4:c0:b4:29: cb:c0:36:75:ec:e9:d7:33:bd:a6:6e:ed:16:48:ab:b2:29:a8: 75:72:12:3d:d6:79:86:b8:30:32:77:07:c0:bf:e7:d0:82:9f: d1:b2:70:1a:53:da:f2:bc:80:be:d3:ba:1b:a5:9d:4c:23:99: 38:e1:cd:ea:6e:96:ed:d5:1a:62:91:19:a6:16:f8:ec:cb:39: e4:54:02:cf:b2:0d:47:93:c6:f8:c4:d9:a2:07:ee:5e:c8:0c: b0:85:73:25:2d:20:2a:c8:51:e6:26:04:e0:2e:7f:0b:da:a7: 28:ba:69:68:56:a7:19:cd:8c:87:56:d8:4b:28:51:cc:df:b7: a4:00:e8:e3:4a:d0:01:ab:69:40:6f:a4:bf:6b:1e:7f:f8:15: 4c:71:4d:83:01:7e:4e:be:b1:af:c5:d0:f4:cb:1d:3d:d1:12: 38:0b:3f:8d:d4:e9:a1:97:dc:93:3a:7a:8e:3a:50:15:83:16: 4e:be:b7:5d:a2:7f:b6:47:d5:97:56:e1:9b:f5:8a:61:65:61: 2d:b9:28:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBVrHpzZgUzYcPS/yQcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh YzkxMDMwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD EyhkOWZjMjVjMTRkODRmYTdhNmFhZTQ2NmExZjhjMTJiNjNmMDk1MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOYlhUveqBNfSQduHPmDPbYoVrt ocS1Uo4CpWmrutNtFM9O31DRn2If2hoVsmvgVUr5O3GqBAyyF/9a2+KvwaS/4eP0 WWYwGZBviWeJ4iXBnfQksnWZDZBulWvFyzFD+YNDNOrstud2dJ93omoNpvbjXTWB wQudhZzIueV3lDdYMaNewzR+j1B9sj6uvx24LhMM0L8y3ABUVoMlLLgC0GsCJOse OQQJSpTwiT1LtcRWmzsaiF6Fv0qZRdeD35mUC4sVk4w/1PppZ2Ffw7mog89ZbueA pTybrCSxtSiOkhRvDd4Yac99W5jYHghOkB8JQygKrDE37zYoVFoiL/2gDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn8JcFNhPp6aq5Gah+MErY/CVCgMB8GA1UdIwQY MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4q9l9PZ ZuzCgPQAY96UoXVnhpmcBhU5Au8Xub3jcXfMVvctvwtiWffCA7xtYwkD6gjkwLQp y8A2dezp1zO9pm7tFkirsimodXISPdZ5hrgwMncHwL/n0IKf0bJwGlPa8ryAvtO6 G6WdTCOZOOHN6m6W7dUaYpEZphb47Ms55FQCz7INR5PG+MTZogfuXsgMsIVzJS0g KshR5iYE4C5/C9qnKLppaFanGc2Mh1bYSyhRzN+3pADo40rQAatpQG+kv2sef/gV THFNgwF+Tr6xr8XQ9MsdPdESOAs/jdTpoZfckzp6jjpQFYMWTr63XaJ/tkfVl1bh m/WKYWVhLbkowA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:16 2026 by rpki-client