This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json) Hash identifier: 7s96JHIuWEy1mVWVc7A3vvWAER1o6W8ZszsrOipocuI= Subject key identifier: 4C:58:54:27:20:B4:14:89:66:E1:B6:41:54:7A:D7:72:72:D2:E2:CB Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6 Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6 Certificate serial: 019C427DA983643B8FEE22AF58FC553CDB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft Manifest number: 0904 Signing time: Mon 09 Feb 2026 13:00:57 +0000 Manifest this update: Mon 09 Feb 2026 13:00:57 +0000 Manifest next update: Tue 10 Feb 2026 13:00:57 +0000 Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: H2TuWc7501Ercv712ipxSdS5cH2/CfsAoqHsTDqJBus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a9:83:64:3b:8f:ee:22:af:58:fc:55:3c:db:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6 Validity Not Before: Feb 9 13:00:57 2026 GMT Not After : Feb 10 13:00:57 2026 GMT Subject: CN=4c58542720b4148966e1b641547ad77272d2e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:95:25:01:de:c1:2a:71:ad:0c:f8:f3:16: db:26:a2:2d:cc:d0:1f:c2:40:88:38:3f:26:af:4b: 2d:f8:e9:cc:96:f6:5b:8c:89:b1:13:62:db:ee:b9: be:19:82:fb:41:cb:5e:b5:56:24:cc:ac:3c:c6:8b: 3b:ad:a7:78:4f:49:b9:29:34:ff:6e:75:c0:29:0e: 42:ba:3b:a7:10:14:5d:40:b0:fc:9b:78:45:6c:35: bd:79:54:b5:8d:bf:b9:ec:c7:80:d7:12:72:0c:09: 37:01:54:eb:1c:cf:91:71:fb:e0:e9:28:21:7a:4a: 23:4f:22:eb:1a:ba:e5:bb:97:c0:a0:e6:7b:1c:11: c8:ee:65:e4:71:41:6f:d4:fd:d8:50:e5:cb:f4:36: db:cf:5c:21:aa:a7:ed:1f:62:dc:e5:1b:d0:e7:96: 0a:cf:43:73:c1:63:58:b6:50:8d:f4:79:c0:b1:3a: f3:54:39:6f:e0:52:92:31:1a:63:56:c6:38:53:ff: 64:67:89:f7:15:ec:b7:f8:9a:16:13:60:64:e5:44: 0f:15:f8:23:8e:f7:3a:ff:4d:16:27:27:c7:f0:8b: 5a:3d:fc:91:f1:41:3a:ad:5a:18:af:17:a1:94:b3: 18:3f:65:5e:f1:b8:9f:c2:86:0b:61:67:13:5c:3a: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:58:54:27:20:B4:14:89:66:E1:B6:41:54:7A:D7:72:72:D2:E2:CB X509v3 Authority Key Identifier: keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e0:3d:ad:c4:3d:29:d4:fc:c8:29:7c:27:97:b0:d4:67:43: f5:53:24:71:15:f9:d1:8a:f4:fd:73:df:a3:3a:93:be:7c:02: c6:c9:d7:f8:ec:2c:6a:b6:81:01:ba:1d:1a:d7:74:d8:15:1a: ce:d7:5a:95:81:d3:39:29:d0:1a:6c:10:af:7a:94:cb:43:a8: 3f:59:b4:e3:29:0b:9e:6e:c0:8b:ec:88:30:5c:a3:84:d2:56: 20:2f:f3:bf:8c:8b:35:fc:8d:0c:29:a3:8d:38:85:da:39:9b: f8:55:11:cd:0d:12:34:fc:bc:d0:d1:a0:61:e3:fb:9f:d6:94: 03:ac:f4:ea:b8:38:5e:cf:59:f9:33:ca:72:58:84:1f:6c:e5: e0:84:0e:c4:49:2c:23:ee:de:16:c6:ec:c4:42:92:54:1e:1a: 1c:dc:21:8c:c7:0b:c5:e9:1d:95:56:b7:25:b4:77:91:5e:3e: 5a:7e:83:4e:4c:c1:92:d0:4d:86:0e:af:3f:b0:0d:84:64:8a: cb:6f:bc:15:5e:2c:a3:9b:4f:97:bd:d6:6b:da:33:d5:ec:35: 50:f4:64:89:87:3a:85:f8:19:51:4f:29:30:d2:04:81:78:8b: 62:3a:fc:ae:07:2e:94:67:3c:a9:04:ec:ab:05:9a:94:b9:db: 46:3a:16:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfamDZDuP7iKvWPxVPNsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGY2YmY1NDM0YWFhMzJkM2U1ZjExM2IwMGM1YmIxNDAy ZjY3ZjYwHhcNMjYwMjA5MTMwMDU3WhcNMjYwMjEwMTMwMDU3WjAzMTEwLwYDVQQD Eyg0YzU4NTQyNzIwYjQxNDg5NjZlMWI2NDE1NDdhZDc3MjcyZDJlMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuyVJQHewSpxrQz48xbbJqItzNAf wkCIOD8mr0st+OnMlvZbjImxE2Lb7rm+GYL7QctetVYkzKw8xos7rad4T0m5KTT/ bnXAKQ5CujunEBRdQLD8m3hFbDW9eVS1jb+57MeA1xJyDAk3AVTrHM+Rcfvg6Sgh ekojTyLrGrrlu5fAoOZ7HBHI7mXkcUFv1P3YUOXL9Dbbz1whqqftH2Lc5RvQ55YK z0NzwWNYtlCN9HnAsTrzVDlv4FKSMRpjVsY4U/9kZ4n3Fey3+JoWE2Bk5UQPFfgj jvc6/00WJyfH8ItaPfyR8UE6rVoYrxehlLMYP2Ve8bifwoYLYWcTXDrydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExYVCcgtBSJZuG2QVR613Jy0uLLMB8GA1UdIwQY MBaAFNuPa/VDSqoy0+XxE7AMW7FAL2f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEt ZDk3OTY3OTRjNjFjLzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEtZDk3OTY3OTRjNjFj LzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOA9rcQ9 KdT8yCl8J5ew1GdD9VMkcRX50Yr0/XPfozqTvnwCxsnX+OwsaraBAbodGtd02BUa ztdalYHTOSnQGmwQr3qUy0OoP1m04ykLnm7Ai+yIMFyjhNJWIC/zv4yLNfyNDCmj jTiF2jmb+FURzQ0SNPy80NGgYeP7n9aUA6z06rg4Xs9Z+TPKcliEH2zl4IQOxEks I+7eFsbsxEKSVB4aHNwhjMcLxekdlVa3JbR3kV4+Wn6DTkzBktBNhg6vP7ANhGSK y2+8FV4so5tPl73Wa9oz1ew1UPRkiYc6hfgZUU8pMNIEgXiLYjr8rgculGc8qQTs qwWalLnbRjoWGw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:48 2026 by rpki-client