This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json) Hash identifier: w+DSNEUXN/m2+Mz4lU1nSNXTNpCDYrcybUjQVn34oKA= Subject key identifier: 3D:E3:33:67:B8:E4:A1:FF:0B:2A:3E:BD:56:40:38:8C:FE:2B:89:81 Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181 Certificate serial: 019C438FAE57ED29764CD27BE73D0A0DB32E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 18:00:15 +0000 Manifest this update: Mon 09 Feb 2026 18:00:15 +0000 Manifest next update: Tue 10 Feb 2026 18:00:15 +0000 Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: 2iM4U09h5gIB+/oPH+QJm9hYEbAr1qPCXp2Y7melqxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ae:57:ed:29:76:4c:d2:7b:e7:3d:0a:0d:b3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181 Validity Not Before: Feb 9 18:00:15 2026 GMT Not After : Feb 10 18:00:15 2026 GMT Subject: CN=3de33367b8e4a1ff0b2a3ebd5640388cfe2b8981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:ed:89:ba:4f:84:3f:c6:0f:93:b0:b4:1e: 5d:d2:6f:a0:21:24:d5:a1:24:e3:ab:82:6f:e2:01: 53:57:82:5c:70:fb:a8:fb:1e:55:0f:18:de:9a:df: ce:cf:d7:9c:af:68:eb:2d:03:f7:51:36:7b:55:ff: 7d:88:6f:0e:36:27:5a:33:09:4d:f8:72:3d:88:26: bd:43:36:5d:d4:41:fd:91:b7:3a:67:6a:e3:4f:9d: 85:20:e7:2d:7e:47:e6:ae:1a:0d:ba:1f:9b:c5:bd: fa:a5:fd:24:80:53:53:0b:b0:4d:eb:6c:95:26:be: cb:d5:b7:f5:ac:69:4c:85:d2:b4:48:92:48:e3:f8: 9c:6a:ca:b8:4e:19:bc:d6:98:ee:e8:81:32:a5:51: 98:b0:0a:a4:42:d5:f1:89:1f:ae:c8:26:84:83:cb: a4:a5:d5:05:01:dd:ab:77:39:81:cd:a7:81:73:51: 5b:12:97:32:78:25:f8:d6:96:96:8a:a2:6c:ab:4a: 73:2f:99:a9:69:5d:0f:0d:71:97:d1:c0:5d:3b:ba: d1:7a:bf:a8:e0:99:a0:20:66:11:c3:8b:8b:42:16: 20:90:d0:86:84:a4:3d:d2:e9:e5:7f:fc:0d:ac:97: aa:e4:ba:68:6b:1b:80:12:d3:ff:ff:4a:3e:e8:e0: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E3:33:67:B8:E4:A1:FF:0B:2A:3E:BD:56:40:38:8C:FE:2B:89:81 X509v3 Authority Key Identifier: keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ea:51:06:bb:96:a2:82:f3:3c:fd:43:12:08:82:96:d9:c0: d4:bf:6d:c4:96:d7:0e:2b:87:9d:bc:cd:11:0d:f7:d4:13:25: 02:92:80:59:04:eb:25:f2:fa:7e:3b:96:a9:60:c7:7a:32:78: 73:95:b7:b9:f1:f8:3d:cc:61:ae:c9:48:c3:74:72:30:e5:02: ce:48:de:fb:8d:f7:e9:ff:09:bd:9d:56:77:7c:63:21:a3:39: 89:ae:a2:21:6d:fd:07:e0:97:86:87:df:65:f4:40:b4:09:15: 1b:4b:9d:4b:25:c5:82:00:f4:30:de:42:f1:6e:7a:b2:7c:20: 6d:ee:7d:dc:d3:06:93:94:ba:e8:6a:be:33:d0:f4:ba:53:16: 34:50:ca:c5:f0:45:11:8b:6d:2c:f9:59:88:43:61:28:9c:d8: bb:f1:77:c5:09:66:e1:fe:0c:6a:45:d1:16:1a:8d:f5:1c:14: db:f9:c8:c5:43:54:90:e4:4f:50:a2:d1:ed:84:e1:f6:12:27: bc:88:ac:29:32:26:ff:31:13:ab:3c:bd:f4:e0:3e:bf:b2:cc: ed:1e:ce:81:fb:75:77:98:0d:ab:2b:b9:e6:a3:76:fb:07:50: ac:33:da:8b:dd:c6:29:57:90:3e:c6:eb:55:e4:8a:42:5a:ab: 2c:2d:c2:94 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDj65X7Sl2TNJ75z0KDbMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTc2YzY5MmUyZjM2MTlkZTc5ODIwNTQ4ZWNiNWZhN2Mz MGExODEwHhcNMjYwMjA5MTgwMDE1WhcNMjYwMjEwMTgwMDE1WjAzMTEwLwYDVQQD EygzZGUzMzM2N2I4ZTRhMWZmMGIyYTNlYmQ1NjQwMzg4Y2ZlMmI4OTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DtibpPhD/GD5OwtB5d0m+gISTV oSTjq4Jv4gFTV4JccPuo+x5VDxjemt/Oz9ecr2jrLQP3UTZ7Vf99iG8ONidaMwlN +HI9iCa9QzZd1EH9kbc6Z2rjT52FIOctfkfmrhoNuh+bxb36pf0kgFNTC7BN62yV Jr7L1bf1rGlMhdK0SJJI4/icasq4Thm81pju6IEypVGYsAqkQtXxiR+uyCaEg8uk pdUFAd2rdzmBzaeBc1FbEpcyeCX41paWiqJsq0pzL5mpaV0PDXGX0cBdO7rRer+o 4JmgIGYRw4uLQhYgkNCGhKQ90unlf/wNrJeq5LpoaxuAEtP//0o+6OC4NwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD3jM2e45KH/Cyo+vVZAOIz+K4mBMB8GA1UdIwQY MBaAFPinbGkuLzYZ3nmCBUjstfp8MKGBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LZHNhUzR2TmhuZWVZSUZTT3kxLW53d29ZRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2YwZWQ2LTVkOGQtNDdmZi1iZDg2 LWE1ZGU4NmVkZjgzZS8xLzEtS2RzYVM0dk5obmVlWUlGU095MS1ud3dvWUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzExL2NmMGVkNi01ZDhkLTQ3ZmYtYmQ4Ni1hNWRlODZlZGY4 M2UvMS8xLUtkc2FTNHZOaG5lZVlJRlNPeTEtbnd3b1lFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+pR BruWooLzPP1DEgiCltnA1L9txJbXDiuHnbzNEQ331BMlApKAWQTrJfL6fjuWqWDH ejJ4c5W3ufH4PcxhrslIw3RyMOUCzkje+4336f8JvZ1Wd3xjIaM5ia6iIW39B+CX hoffZfRAtAkVG0udSyXFggD0MN5C8W56snwgbe593NMGk5S66Gq+M9D0ulMWNFDK xfBFEYttLPlZiENhKJzYu/F3xQlm4f4MakXRFhqN9RwU2/nIxUNUkORPUKLR7YTh 9hInvIisKTIm/zETqzy99OA+v7LM7R7Ogft1d5gNqyu55qN2+wdQrDPai93GKVeQ PsbrVeSKQlqrLC3ClA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:38 2026 by rpki-client