This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft File: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft (raw, json) Hash identifier: Mtifmel2ourG9UXxY/I4eY/1cRD3cqzRlhYyedcO5LE= Subject key identifier: 15:8C:44:D6:B7:B1:26:EB:79:75:D5:F2:86:62:83:91:EB:33:62:9B Authority key identifier: D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8 Certificate issuer: /CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8 Certificate serial: 019C43FE55A4BF0EB138D5D2C36E5E857A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft Manifest number: 01BC Signing time: Mon 09 Feb 2026 20:01:07 +0000 Manifest this update: Mon 09 Feb 2026 20:01:07 +0000 Manifest next update: Tue 10 Feb 2026 20:01:07 +0000 Files and hashes: 1: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl (hash: ei9A/3ClJGhJ9GHmwxMdHpxd5TDva2QAyMA/ZrQ+Z5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:55:a4:bf:0e:b1:38:d5:d2:c3:6e:5e:85:7a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8 Validity Not Before: Feb 9 20:01:07 2026 GMT Not After : Feb 10 20:01:07 2026 GMT Subject: CN=158c44d6b7b126eb7975d5f286628391eb33629b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:cf:81:7e:80:cb:a7:6f:fc:a4:86:6a:0c: df:05:7d:36:8b:7e:f4:54:e7:4d:4b:b5:45:16:1c: b9:df:80:fd:fc:7d:66:03:57:5d:94:71:55:51:fe: 46:3c:28:54:7b:fd:24:99:89:f4:4b:d4:4b:58:52: c2:13:27:aa:c7:76:0d:49:0d:05:d8:83:39:69:f9: 7a:36:6f:40:8d:fd:32:1f:ef:da:2b:2d:9d:8a:a9: 2e:cb:15:64:1f:4c:ba:6e:82:5d:87:fa:87:ef:cc: 1f:f8:0f:ce:e1:4a:65:46:95:54:98:86:0e:b6:ed: 60:e3:b0:2a:d6:bf:e6:ab:98:7e:5b:4a:83:5e:b7: 8b:1b:79:46:98:22:0e:cd:27:78:c6:35:48:10:ab: 31:ab:93:af:3a:db:3c:6d:20:f6:53:fa:1b:f4:8a: 4c:05:43:e8:a9:d2:91:4b:3e:2a:f9:e7:55:b5:2d: 5d:7c:85:e8:7d:7e:70:04:b0:b9:11:ff:47:c7:0d: d5:73:46:37:7a:47:23:b8:42:63:d2:1b:a1:d1:ec: a0:cb:95:32:42:0d:ce:9c:cd:81:4d:e9:28:e3:09: f2:0e:db:ab:94:2c:52:0f:45:cd:9b:08:3f:4a:f3: 6f:ac:bf:14:cf:fe:51:47:1c:b3:c9:c8:6e:00:68: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8C:44:D6:B7:B1:26:EB:79:75:D5:F2:86:62:83:91:EB:33:62:9B X509v3 Authority Key Identifier: keyid:D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b9:43:2d:3f:c2:aa:54:1f:3f:01:d7:88:0b:a1:bf:52:72: 69:2d:38:f6:74:cf:7a:fd:5d:f6:07:1f:1f:14:a4:a4:f8:e6: af:c1:22:e9:aa:02:e4:33:4b:44:ab:11:aa:54:e8:7a:d1:f3: bf:4e:d5:94:f5:b1:4d:a2:66:7c:41:7a:96:b3:02:85:f3:15: 89:ef:2f:cf:c2:7a:59:1f:bc:8b:6b:38:3b:78:dd:1a:2b:89: 18:c6:af:7e:a3:68:c1:90:39:cd:08:f0:a7:f6:43:f4:3a:6e: e0:e7:9b:ec:d5:de:16:a0:34:2f:ff:d5:95:53:10:13:e8:43: 99:9c:b2:f3:80:d0:92:2a:72:dc:07:66:7f:c1:6b:25:e6:b6: 1a:74:c1:ef:70:98:52:23:d1:da:9e:54:29:50:3e:c0:4b:ff: 1d:99:97:22:70:e5:3f:d4:19:6a:40:c5:31:18:85:e4:3f:c3: 90:5a:10:e7:34:03:5d:ac:df:8e:e0:ec:37:d2:f6:e8:24:33: 14:f4:53:4f:be:3f:34:d3:b3:2c:6c:71:7c:8d:07:f2:05:b5: 74:d6:de:00:9f:36:03:15:87:67:04:2b:90:21:aa:30:07:53: 87:ec:ec:0d:00:26:5e:1f:3c:84:e8:60:4f:07:b3:6f:d5:5a: 9d:52:00:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lWkvw6xONXSw25ehXoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGYwYzJiMmFkMTlmOGMwNmI0ZTEyNDkxZDYxMjk4NjQ0 NzFjYTgwHhcNMjYwMjA5MjAwMTA3WhcNMjYwMjEwMjAwMTA3WjAzMTEwLwYDVQQD EygxNThjNDRkNmI3YjEyNmViNzk3NWQ1ZjI4NjYyODM5MWViMzM2MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXPgX6Ay6dv/KSGagzfBX02i370 VOdNS7VFFhy534D9/H1mA1ddlHFVUf5GPChUe/0kmYn0S9RLWFLCEyeqx3YNSQ0F 2IM5afl6Nm9Ajf0yH+/aKy2diqkuyxVkH0y6boJdh/qH78wf+A/O4UplRpVUmIYO tu1g47Aq1r/mq5h+W0qDXreLG3lGmCIOzSd4xjVIEKsxq5OvOts8bSD2U/ob9IpM BUPoqdKRSz4q+edVtS1dfIXofX5wBLC5Ef9Hxw3Vc0Y3ekcjuEJj0huh0eygy5Uy Qg3OnM2BTeko4wnyDturlCxSD0XNmwg/SvNvrL8Uz/5RRxyzychuAGgRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWMRNa3sSbreXXV8oZig5HrM2KbMB8GA1UdIwQY MBaAFNSPDCsq0Z+MBrThJJHWEphkRxyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAt OTM2MTk2NzRhNDJlLzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAtOTM2MTk2NzRhNDJl LzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoblDLT/C qlQfPwHXiAuhv1JyaS049nTPev1d9gcfHxSkpPjmr8Ei6aoC5DNLRKsRqlToetHz v07VlPWxTaJmfEF6lrMChfMVie8vz8J6WR+8i2s4O3jdGiuJGMavfqNowZA5zQjw p/ZD9Dpu4Oeb7NXeFqA0L//VlVMQE+hDmZyy84DQkipy3Admf8FrJea2GnTB73CY UiPR2p5UKVA+wEv/HZmXInDlP9QZakDFMRiF5D/DkFoQ5zQDXazfjuDsN9L26CQz FPRTT74/NNOzLGxxfI0H8gW1dNbeAJ82AxWHZwQrkCGqMAdTh+zsDQAmXh88hOhg Twezb9VanVIAoQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:54 2026 by rpki-client