This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft File: _mraoZRFOXtBXvSivmTq_PNbcpA.mft (raw, json) Hash identifier: f33EoY4nw641aPgZFd4Y3NyS7YvKqRxnyLfwKnWzGMQ= Subject key identifier: A4:08:BD:B4:0B:A9:73:0E:AB:8A:DC:DD:7D:93:EB:2E:11:5C:4F:76 Authority key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90 Certificate issuer: /CN=fe6adaa19445397b415ef4a2be64eafcf35b7290 Certificate serial: 019C4434D4CA730F3C0E29DF025CB3700B9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft Manifest number: 0110 Signing time: Mon 09 Feb 2026 21:00:38 +0000 Manifest this update: Mon 09 Feb 2026 21:00:38 +0000 Manifest next update: Tue 10 Feb 2026 21:00:38 +0000 Files and hashes: 1: _mraoZRFOXtBXvSivmTq_PNbcpA.crl (hash: 96BCwyvvhO5urlXJPUuDuhH34ewiS43qO8tsuoseK94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:d4:ca:73:0f:3c:0e:29:df:02:5c:b3:70:0b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290 Validity Not Before: Feb 9 21:00:38 2026 GMT Not After : Feb 10 21:00:38 2026 GMT Subject: CN=a408bdb40ba9730eab8adcdd7d93eb2e115c4f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:cc:89:31:1a:67:34:36:e3:65:d6:b0:2e: e6:a3:db:be:12:86:09:c9:40:43:84:28:b7:46:86: 74:85:7d:4a:1e:f5:88:ce:d0:7c:d9:f0:68:c6:f6: b5:5d:1b:41:26:fa:e5:45:f9:0b:e1:52:a3:e3:b8: 27:e3:7c:df:26:ae:ef:ad:51:da:d6:6a:94:f8:76: ed:b8:e7:87:ba:f8:7b:67:9f:e2:74:76:56:cd:1e: 37:19:cf:1a:07:8f:25:3d:58:77:41:1d:cf:8d:de: 23:79:de:33:3a:de:9b:b4:8f:c2:bf:2c:97:b4:a5: a1:a8:a3:40:52:ff:b9:40:a2:40:01:74:3f:9f:63: 5f:b4:c0:fe:2e:79:f1:ba:88:37:7e:f8:cb:fd:6b: 88:b0:fa:07:2e:ea:24:69:3e:c9:d8:a3:58:7b:f6: 01:94:af:19:9a:36:18:c1:03:36:91:62:2c:29:83: 53:bd:19:3b:24:ca:cd:4d:cc:71:ff:13:77:8f:49: 60:33:e2:5b:dd:cc:e0:37:0f:a1:e6:ca:9e:de:43: ea:93:1a:58:5f:a3:a9:bb:b3:43:a8:78:8d:be:62: dd:06:24:91:14:0e:bf:2d:7f:ca:fe:26:e0:9a:42: ef:6f:57:a2:ea:7e:c2:ad:e3:ee:db:ac:5c:f1:aa: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:08:BD:B4:0B:A9:73:0E:AB:8A:DC:DD:7D:93:EB:2E:11:5C:4F:76 X509v3 Authority Key Identifier: keyid:FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4e:22:4d:d4:52:2d:f8:f2:39:e7:25:6e:e8:f3:78:fb:52: 3a:18:72:d9:f6:ef:3f:84:66:9a:1b:68:8b:1b:92:ab:25:25: d1:98:13:3b:fa:2f:2e:af:d8:7b:89:66:3b:bd:b5:cd:76:81: 96:02:0a:18:33:60:db:41:92:48:2d:a1:9b:30:e4:87:0d:ca: e3:f0:7e:48:fa:92:51:0f:7c:a5:eb:3b:4f:24:63:0c:a4:69: df:ca:a2:32:a7:ff:c9:c9:30:eb:e2:aa:fd:12:76:85:b4:72: c1:27:ee:a0:ac:5c:6d:f0:9d:9e:11:99:be:93:67:6d:92:61: ea:28:98:3d:32:8e:51:16:f9:ce:8f:f0:ea:d2:3d:84:9d:e3: 96:d1:d0:01:33:5b:31:37:ca:52:49:01:fd:f0:f1:cf:d9:70: 4d:e6:80:2e:ce:80:9e:8b:bb:15:cf:50:88:af:c3:a8:ae:06: 5b:76:7e:7e:9a:b1:64:2e:a1:41:f1:0c:2c:86:a3:ec:13:e9: 5c:cc:70:1e:ce:f7:1b:30:9d:53:ec:88:e3:be:7d:44:67:cc: 6e:20:10:1f:c6:28:07:b1:7c:24:4e:b6:e8:be:01:5c:dd:20: db:ba:2c:0f:53:fe:d6:d6:ce:3a:5a:9e:6a:a4:6f:24:66:52: f9:54:9c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENNTKcw88DinfAlyzcAufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmFkYWExOTQ0NTM5N2I0MTVlZjRhMmJlNjRlYWZjZjM1 YjcyOTAwHhcNMjYwMjA5MjEwMDM4WhcNMjYwMjEwMjEwMDM4WjAzMTEwLwYDVQQD EyhhNDA4YmRiNDBiYTk3MzBlYWI4YWRjZGQ3ZDkzZWIyZTExNWM0Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WbMiTEaZzQ242XWsC7mo9u+EoYJ yUBDhCi3RoZ0hX1KHvWIztB82fBoxva1XRtBJvrlRfkL4VKj47gn43zfJq7vrVHa 1mqU+HbtuOeHuvh7Z5/idHZWzR43Gc8aB48lPVh3QR3Pjd4jed4zOt6btI/CvyyX tKWhqKNAUv+5QKJAAXQ/n2NftMD+Lnnxuog3fvjL/WuIsPoHLuokaT7J2KNYe/YB lK8ZmjYYwQM2kWIsKYNTvRk7JMrNTcxx/xN3j0lgM+Jb3czgNw+h5sqe3kPqkxpY X6Opu7NDqHiNvmLdBiSRFA6/LX/K/ibgmkLvb1ei6n7CrePu26xc8aqC8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQIvbQLqXMOq4rc3X2T6y4RXE92MB8GA1UdIwQY MBaAFP5q2qGURTl7QV70or5k6vzzW3KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MjcxZjEtNmZiMy00ZTJiLWE3OWIt ZTMwOWIwOWQxZDU3LzEvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MjcxZjEtNmZiMy00ZTJiLWE3OWItZTMwOWIwOWQxZDU3 LzEvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK04iTdRS LfjyOeclbujzePtSOhhy2fbvP4RmmhtoixuSqyUl0ZgTO/ovLq/Ye4lmO721zXaB lgIKGDNg20GSSC2hmzDkhw3K4/B+SPqSUQ98pes7TyRjDKRp38qiMqf/yckw6+Kq /RJ2hbRywSfuoKxcbfCdnhGZvpNnbZJh6iiYPTKOURb5zo/w6tI9hJ3jltHQATNb MTfKUkkB/fDxz9lwTeaALs6Anou7Fc9QiK/DqK4GW3Z+fpqxZC6hQfEMLIaj7BPp XMxwHs73GzCdU+yI4759RGfMbiAQH8YoB7F8JE626L4BXN0g27osD1P+1tbOOlqe aqRvJGZS+VSc2w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:14 2026 by rpki-client