This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json) Hash identifier: OgpWZ4t10BUi3aAFujryAq5pQ8tJLuztpFSXgKXSlBo= Subject key identifier: 73:2B:36:54:35:8C:32:FC:D2:BE:D0:F4:F5:0E:AC:C4:BB:98:47:E6 Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Certificate serial: 019C420FAAEB2162E3AB179C02ABA7FF84AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft Manifest number: 07E1 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: Hb22D+tpZwBD8Y7Pmo6hTOSfjHG123l49fSAQBpdNNI=) 2: fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa (hash: nvenMpmvgQohsKJVJpGxy+qy+qgPY9hH3SAbWuq6Adk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:aa:eb:21:62:e3:ab:17:9c:02:ab:a7:ff:84:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=732b3654358c32fcd2bed0f4f50eacc4bb9847e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:55:16:09:ff:30:cf:86:99:0f:ae:43:23: c0:e2:bc:8a:ca:af:bc:72:fa:b4:e3:ad:e3:ab:ae: 7b:0e:9a:65:85:06:f5:5c:00:94:3e:f4:18:86:ba: 13:5d:2f:37:3f:f6:40:9a:26:7a:18:2a:19:42:88: b2:b7:4e:7e:eb:8d:00:02:45:cc:47:b2:10:c8:24: 26:fb:0f:14:0b:d3:da:c9:b9:61:e4:38:0a:74:ff: bb:fd:05:5d:ed:5c:dd:e6:f6:97:6d:49:0c:e7:25: 88:55:97:69:d4:b8:20:de:a1:aa:ed:dd:64:79:6e: 5f:a7:19:8d:f5:f4:f6:5d:54:a0:e0:3c:32:f4:b0: 3c:24:49:af:75:85:f6:42:6e:6d:6a:c5:e2:af:2c: e2:81:a3:34:f6:8b:1e:32:cf:46:a9:2d:56:57:43: fa:9c:a6:90:37:d5:7e:e7:f2:d3:37:bf:20:30:4f: c2:7b:6f:ef:2f:3d:36:66:fc:92:ad:7a:18:5c:e0: 41:b1:7c:c2:59:b4:24:d2:99:c0:2f:da:14:12:00: 2c:10:42:58:e8:5c:f3:0a:c0:56:30:1d:dd:a8:bf: 64:6a:63:1a:be:eb:9a:4d:40:61:d6:89:21:5c:c4: 0e:0a:cb:bf:43:84:e3:21:aa:f9:af:b5:df:64:27: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:36:54:35:8C:32:FC:D2:BE:D0:F4:F5:0E:AC:C4:BB:98:47:E6 X509v3 Authority Key Identifier: keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:fd:e2:fe:3b:fa:f2:d4:78:92:54:fc:b5:c5:20:c1:38: d4:86:76:1b:59:a9:79:ac:99:32:ae:ae:aa:29:9f:1a:eb:c6: 3e:23:19:c2:d9:4a:12:41:f2:70:28:d1:81:a5:e9:b5:4a:2f: 39:1c:df:4b:e5:03:d8:ac:c9:1e:af:2d:2b:4c:b4:78:26:90: f3:6a:c3:a1:ab:c3:b3:28:25:f9:32:cd:f4:ab:89:7f:f1:b9: 5a:81:8b:ea:4a:d7:75:1b:da:85:9b:38:6d:3f:cd:7d:6f:b9: 5d:94:ed:e5:fd:f0:54:74:08:62:15:17:6d:85:63:36:97:82: d9:f0:95:ac:65:a9:02:c5:bf:43:31:e2:23:60:ec:1f:e1:17: 77:2e:43:ab:82:b8:7c:bc:ba:6f:27:d7:c9:c3:00:7f:3d:7f: 71:30:29:3a:9a:f7:21:b4:4d:5b:66:a4:24:d3:ea:ca:5e:43: 93:64:bf:e5:75:60:33:e1:b4:28:d0:5d:33:0c:a6:aa:12:ef: 39:86:23:45:99:e2:b5:57:04:74:e7:aa:6b:6a:51:b7:53:63: 70:ac:55:af:60:03:1b:33:c3:51:d9:19:f1:b0:ff:8c:3e:fc: 0e:b4:b7:29:f7:d7:75:9d:28:c2:9b:7f:9b:7b:8c:b3:78:2f: ac:a4:72:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6rrIWLjqxecAqun/4SrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YzVjMTI2MmU4M2Q3YmZhOTAyYzJjODYyYTE1ZjFlNDJk MjU1OTEwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg3MzJiMzY1NDM1OGMzMmZjZDJiZWQwZjRmNTBlYWNjNGJiOTg0N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8FVFgn/MM+GmQ+uQyPA4ryKyq+8 cvq0463jq657DpplhQb1XACUPvQYhroTXS83P/ZAmiZ6GCoZQoiyt05+640AAkXM R7IQyCQm+w8UC9Payblh5DgKdP+7/QVd7Vzd5vaXbUkM5yWIVZdp1Lgg3qGq7d1k eW5fpxmN9fT2XVSg4Dwy9LA8JEmvdYX2Qm5tasXiryzigaM09oseMs9GqS1WV0P6 nKaQN9V+5/LTN78gME/Ce2/vLz02ZvySrXoYXOBBsXzCWbQk0pnAL9oUEgAsEEJY 6FzzCsBWMB3dqL9kamMavuuaTUBh1okhXMQOCsu/Q4TjIar5r7XfZCc8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMrNlQ1jDL80r7Q9PUOrMS7mEfmMB8GA1UdIwQY MBaAFEXFwSYug9e/qQLCyGKhXx5C0lWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMt ZjEwNjAzYjM3NjhkLzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMtZjEwNjAzYjM3Njhk LzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsb94v47 +vLUeJJU/LXFIME41IZ2G1mpeayZMq6uqimfGuvGPiMZwtlKEkHycCjRgaXptUov ORzfS+UD2KzJHq8tK0y0eCaQ82rDoavDsygl+TLN9KuJf/G5WoGL6krXdRvahZs4 bT/NfW+5XZTt5f3wVHQIYhUXbYVjNpeC2fCVrGWpAsW/QzHiI2DsH+EXdy5Dq4K4 fLy6byfXycMAfz1/cTApOpr3IbRNW2akJNPqyl5Dk2S/5XVgM+G0KNBdMwymqhLv OYYjRZnitVcEdOeqa2pRt1NjcKxVr2ADGzPDUdkZ8bD/jD78DrS3KffXdZ0owpt/ m3uMs3gvrKRy9A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:30 2026 by rpki-client