This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft File: 21LN5wkMV9jpwx1Rh0jfkiueBM4.mft (raw, json) Hash identifier: lb6S0ktpEgN5mnKeDvgLpnEsXQugEtql1hJY+o8aUUQ= Subject key identifier: 44:43:7A:10:7A:D9:54:59:7D:C8:CE:23:C3:AA:38:B4:79:16:98:B6 Authority key identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE Certificate issuer: /CN=db52cde7090c57d8e9c31d518748df922b9e04ce Certificate serial: 019C446C8484681BEE39431A7695FCCE0C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft Manifest number: 1684 Signing time: Mon 09 Feb 2026 22:01:28 +0000 Manifest this update: Mon 09 Feb 2026 22:01:28 +0000 Manifest next update: Tue 10 Feb 2026 22:01:28 +0000 Files and hashes: 1: 21LN5wkMV9jpwx1Rh0jfkiueBM4.crl (hash: x5KYPM+yBvPvblTGDgumTUMgRzOjEQ9u6HZgmf5Zawc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:84:84:68:1b:ee:39:43:1a:76:95:fc:ce:0c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db52cde7090c57d8e9c31d518748df922b9e04ce Validity Not Before: Feb 9 22:01:28 2026 GMT Not After : Feb 10 22:01:28 2026 GMT Subject: CN=44437a107ad954597dc8ce23c3aa38b4791698b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:01:2e:1f:eb:13:fc:e1:a1:b0:c6:16:ce:3d: 03:7e:c0:fd:4b:11:70:42:f6:28:49:3f:d7:cc:a5: 83:9a:ae:5d:29:96:07:83:c9:20:25:74:fd:96:06: ed:e4:15:9d:3e:b0:28:74:cb:ea:2e:35:66:ba:58: 02:15:f0:d1:93:56:47:fd:29:97:5e:91:f2:6b:88: 33:87:35:0b:df:65:7e:76:5a:40:b6:0b:74:3d:88: 68:9e:96:ab:65:3b:b3:2d:cd:b4:cb:29:e2:9e:96: ba:0e:8b:fc:48:8c:01:4a:a9:5d:11:65:02:f4:e0: 1f:1b:76:35:60:1e:3c:b8:b4:42:26:4d:b3:24:b5: 6d:53:05:2c:9a:8e:b8:4b:4c:f0:b2:85:9b:4c:be: ee:0b:ac:10:b7:c2:bc:24:7b:0b:cb:c3:c4:72:0d: 26:35:4d:2b:6c:44:b9:0d:eb:6d:d1:99:a7:14:88: 9d:c0:f2:f5:d9:95:d0:a2:24:2d:d5:1a:8a:8e:29: 34:6b:62:73:84:94:31:9b:31:2e:e8:06:ac:78:b4: 11:ab:60:c3:78:29:9e:4c:56:18:96:62:bc:f5:2d: 1a:5b:e7:44:48:7b:54:77:59:b0:bd:9f:4f:4c:b7: 5a:b8:71:e2:30:c4:5b:3e:39:98:99:df:fd:60:28: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:7A:10:7A:D9:54:59:7D:C8:CE:23:C3:AA:38:B4:79:16:98:B6 X509v3 Authority Key Identifier: keyid:DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:67:0f:27:6b:93:86:5f:af:80:51:94:cf:b6:fd:a4:86:59: 43:8e:13:72:6e:66:fc:ef:ed:0f:ae:02:d5:6e:1a:be:bf:49: 44:3b:6f:a8:77:24:ce:60:6a:ac:fd:3a:d0:3c:ac:58:3d:49: 3b:83:6c:9b:bc:2d:a2:aa:31:88:8c:bc:05:1c:b7:83:8d:2f: 5f:be:e6:ff:d3:f4:18:6b:a7:9b:b4:76:12:8d:21:38:ee:94: 50:55:3a:89:09:ad:ea:d9:1a:7a:ed:93:cf:bc:44:56:4f:62: e9:82:bc:e1:ff:ac:1d:c1:07:19:11:fb:2d:0e:3d:7a:09:1d: 4d:5f:69:5e:b6:d2:ca:af:35:85:d9:0a:77:15:05:fb:60:bd: 38:31:fd:e5:85:e7:70:35:ff:59:4f:ff:db:7b:35:33:f7:ae: 06:a7:de:06:c4:f2:0e:9f:b0:99:5a:26:49:8b:f8:c9:a2:de: 9d:b5:d4:ef:a4:bb:f1:41:7e:1b:84:91:5f:7e:86:60:e4:eb: d0:8f:78:1d:8c:ea:86:01:c6:9f:a9:7a:2e:fd:2a:af:39:de: 53:fd:c5:8a:bc:d8:a1:a9:d3:96:3b:1e:2d:52:ec:65:85:1a: c0:f8:63:d0:49:5c:69:4d:9e:74:e8:23:8a:71:99:db:2b:97: b3:e4:99:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbISEaBvuOUMadpX8zgwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNTJjZGU3MDkwYzU3ZDhlOWMzMWQ1MTg3NDhkZjkyMmI5 ZTA0Y2UwHhcNMjYwMjA5MjIwMTI4WhcNMjYwMjEwMjIwMTI4WjAzMTEwLwYDVQQD Eyg0NDQzN2ExMDdhZDk1NDU5N2RjOGNlMjNjM2FhMzhiNDc5MTY5OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAEuH+sT/OGhsMYWzj0DfsD9SxFw QvYoST/XzKWDmq5dKZYHg8kgJXT9lgbt5BWdPrAodMvqLjVmulgCFfDRk1ZH/SmX XpHya4gzhzUL32V+dlpAtgt0PYhonparZTuzLc20yyninpa6Dov8SIwBSqldEWUC 9OAfG3Y1YB48uLRCJk2zJLVtUwUsmo64S0zwsoWbTL7uC6wQt8K8JHsLy8PEcg0m NU0rbES5Dett0ZmnFIidwPL12ZXQoiQt1RqKjik0a2JzhJQxmzEu6AaseLQRq2DD eCmeTFYYlmK89S0aW+dESHtUd1mwvZ9PTLdauHHiMMRbPjmYmd/9YChurwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERDehB62VRZfcjOI8OqOLR5Fpi2MB8GA1UdIwQY MBaAFNtSzecJDFfY6cMdUYdI35IrngTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84ZjMwZWEtZWIyZS00NGNlLWE5M2Mt ZDBjYWRmZTg0YjE5LzEvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84ZjMwZWEtZWIyZS00NGNlLWE5M2MtZDBjYWRmZTg0YjE5 LzEvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmcPJ2uT hl+vgFGUz7b9pIZZQ44Tcm5m/O/tD64C1W4avr9JRDtvqHckzmBqrP060DysWD1J O4Nsm7wtoqoxiIy8BRy3g40vX77m/9P0GGunm7R2Eo0hOO6UUFU6iQmt6tkaeu2T z7xEVk9i6YK84f+sHcEHGRH7LQ49egkdTV9pXrbSyq81hdkKdxUF+2C9ODH95YXn cDX/WU//23s1M/euBqfeBsTyDp+wmVomSYv4yaLenbXU76S78UF+G4SRX36GYOTr 0I94HYzqhgHGn6l6Lv0qrzneU/3FirzYoanTljseLVLsZYUawPhj0ElcaU2edOgj inGZ2yuXs+SZ1w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:42 2026 by rpki-client