This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json) Hash identifier: p+1zYjkmAdQ9AdXyFOGBcfiotJToCdsyR1dapKWIpdY= Subject key identifier: C8:DF:41:F5:32:99:46:70:8F:55:69:4D:5D:D5:CC:3D:08:D2:33:D2 Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a Certificate serial: 019C427D012D89B91AB6BCC283E6AFCEF37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 13:00:14 +0000 Manifest this update: Mon 09 Feb 2026 13:00:14 +0000 Manifest next update: Tue 10 Feb 2026 13:00:14 +0000 Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: w3XiSFzxixy0iBjfCuf/991NeCo38YXAmH7vSqrrWaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:01:2d:89:b9:1a:b6:bc:c2:83:e6:af:ce:f3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a Validity Not Before: Feb 9 13:00:14 2026 GMT Not After : Feb 10 13:00:14 2026 GMT Subject: CN=c8df41f5329946708f55694d5dd5cc3d08d233d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:20:2e:be:1c:6c:8f:90:43:84:a7:bd:5e: 52:3a:3c:87:b5:f5:e6:6f:f1:0a:15:2e:83:32:40: ff:c9:9c:24:b0:55:a4:fa:bc:2a:69:e2:0a:b7:4d: 66:55:b6:33:6b:e0:4b:28:cc:b7:e7:e9:94:69:cf: b1:9f:2c:96:d1:50:1a:7a:10:82:f9:91:17:62:9e: 23:83:dc:3b:bc:fd:64:5e:80:56:f1:2f:cd:87:25: a4:a7:9b:d6:00:7e:a3:ef:55:e5:91:ed:cd:80:36: 9d:3f:07:7c:42:7d:58:84:c0:bc:89:94:a5:bb:4d: 92:3f:72:e2:49:fc:a4:f6:dc:07:9b:55:97:12:ad: 21:1c:06:3e:00:82:e4:6d:0b:53:6b:f3:0d:a4:7b: 2e:11:8f:51:69:76:ca:22:a0:5b:3c:7c:6a:b3:f6: d6:90:62:36:cc:3a:bc:e9:75:29:7f:1c:57:d9:90: 21:62:fe:d8:38:f1:a5:94:44:86:d0:1f:83:49:4a: 20:5d:ab:4f:e4:c4:c9:04:5f:f3:38:61:ed:e3:22: 79:46:0f:2d:f0:84:83:49:1d:46:47:ba:01:4a:21: c2:cf:ba:c2:41:6d:a2:d8:41:c7:29:f0:05:6f:a0: 8d:3a:bf:cf:0b:fa:c3:b7:2f:81:af:de:3f:07:c3: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DF:41:F5:32:99:46:70:8F:55:69:4D:5D:D5:CC:3D:08:D2:33:D2 X509v3 Authority Key Identifier: keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:75:b0:c9:bf:a2:4c:fb:fc:cf:4a:3e:37:ea:e0:1c:57:0e: 71:30:c1:30:fb:9d:73:32:5f:07:30:da:9f:88:07:cf:b7:89: 57:4d:27:ea:e1:35:85:86:01:fe:6a:5d:af:30:51:a0:ef:43: 5e:55:36:eb:3e:36:bb:f5:76:78:0a:a2:18:11:9b:55:84:4e: af:62:1b:d5:b0:c2:ba:ed:0a:90:da:a7:5e:66:af:a7:e9:2d: 3b:7b:88:39:d5:ec:de:9a:e0:b6:6f:4d:f7:e9:3c:86:6a:a6: 27:b9:f1:ae:49:db:4b:f8:ab:34:77:fe:29:ce:9d:f8:f4:c9: 43:a3:21:14:13:7c:32:5c:0b:ed:9a:71:87:8d:c8:a8:8c:16: d7:6f:15:91:a2:78:1b:e1:f2:2d:a3:b7:60:60:c9:48:af:ad: cf:48:16:d3:09:f9:a7:7f:67:09:6d:0b:57:a8:d3:67:d0:1a: 12:75:77:b5:d1:bd:d7:3e:42:34:03:ce:25:d7:28:0f:26:cf: a9:20:a4:7c:43:45:e0:15:f6:e8:82:b5:c1:32:64:a9:41:91: 21:29:f7:6c:8c:47:11:af:0c:08:19:7b:77:22:4a:ee:af:77: e5:bf:13:e9:58:9a:e6:f8:cc:ae:94:81:e6:9a:88:20:0a:38: 3b:5d:dd:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQEtibkatrzCg+avzvN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDU5N2I5NzNhZGExMDUyZjY1YjNlYTFkZTFlNDgyZTIz ZjNkMmEwHhcNMjYwMjA5MTMwMDE0WhcNMjYwMjEwMTMwMDE0WjAzMTEwLwYDVQQD EyhjOGRmNDFmNTMyOTk0NjcwOGY1NTY5NGQ1ZGQ1Y2MzZDA4ZDIzM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIogLr4cbI+QQ4SnvV5SOjyHtfXm b/EKFS6DMkD/yZwksFWk+rwqaeIKt01mVbYza+BLKMy35+mUac+xnyyW0VAaehCC +ZEXYp4jg9w7vP1kXoBW8S/NhyWkp5vWAH6j71Xlke3NgDadPwd8Qn1YhMC8iZSl u02SP3LiSfyk9twHm1WXEq0hHAY+AILkbQtTa/MNpHsuEY9RaXbKIqBbPHxqs/bW kGI2zDq86XUpfxxX2ZAhYv7YOPGllESG0B+DSUogXatP5MTJBF/zOGHt4yJ5Rg8t 8ISDSR1GR7oBSiHCz7rCQW2i2EHHKfAFb6CNOr/PC/rDty+Br94/B8Pt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjfQfUymUZwj1VpTV3VzD0I0jPSMB8GA1UdIwQY MBaAFNXVl7lzraEFL2Wz6h3h5ILiPz0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTIt ZjI1OGY3ZDUwZDc1LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTItZjI1OGY3ZDUwZDc1 LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnWwyb+i TPv8z0o+N+rgHFcOcTDBMPudczJfBzDan4gHz7eJV00n6uE1hYYB/mpdrzBRoO9D XlU26z42u/V2eAqiGBGbVYROr2Ib1bDCuu0KkNqnXmavp+ktO3uIOdXs3prgtm9N 9+k8hmqmJ7nxrknbS/irNHf+Kc6d+PTJQ6MhFBN8MlwL7Zpxh43IqIwW128VkaJ4 G+HyLaO3YGDJSK+tz0gW0wn5p39nCW0LV6jTZ9AaEnV3tdG91z5CNAPOJdcoDybP qSCkfENF4BX26IK1wTJkqUGRISn3bIxHEa8MCBl7dyJK7q935b8T6Via5vjMrpSB 5pqIIAo4O13d0w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:07 2026 by rpki-client