This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json) Hash identifier: kwFgaLj136G0x0gcinP7hkIq+3cyQUkeLwZ664xEIGM= Subject key identifier: 0D:18:07:2A:88:E2:08:B9:39:A0:0A:ED:9E:41:69:07:63:54:91:9B Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Certificate serial: 019C42463EE11B1CF4590968F16320B47681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft Manifest number: 04CB Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: ePhnqtOaRTUZigSJgKp44HAZY800F9/quZUqm2DQseA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3e:e1:1b:1c:f4:59:09:68:f1:63:20:b4:76:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=0d18072a88e208b939a00aed9e4169076354919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:57:8c:13:bc:85:44:e5:cb:ca:8d:55:36: a7:e3:ae:28:80:cf:f1:d4:2d:34:f9:fa:90:1f:5d: fd:b6:a1:f7:3a:18:8a:fe:09:c7:a6:d5:a2:13:8a: b6:49:68:7a:28:89:07:e2:f1:ca:e3:1a:89:71:d7: 2b:a2:af:3d:36:3b:d8:aa:2c:71:f5:3a:9e:0a:22: d9:d2:cd:7e:f5:36:4f:13:ef:4e:2f:7f:3b:a9:00: e2:75:07:0b:8a:e0:cb:13:d5:7b:14:03:54:ce:6b: 11:2a:b7:53:f0:3d:9e:18:c3:04:f4:07:8e:f5:2e: a8:37:c0:6d:a9:36:3a:64:d9:4a:c6:cf:5b:ca:b2: 16:fb:71:61:80:a1:29:88:a1:bc:f2:2e:ed:15:96: eb:a1:a5:87:4f:11:d0:08:13:d6:aa:d8:96:19:e4: 46:22:fc:e3:0d:1f:31:bc:4b:f2:36:4f:87:62:1b: 83:9e:60:27:19:a7:e8:0f:3b:89:ba:93:56:e4:15: 52:58:69:3e:17:6a:d5:85:ba:7e:5d:f6:6b:e3:98: 1c:e8:80:65:35:30:12:71:f1:a9:ee:b8:05:27:fc: cb:4b:12:7c:34:24:bc:d3:a7:dd:42:53:43:4e:13: c1:47:4d:5a:e3:e3:8c:15:46:17:b2:52:de:bf:04: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:07:2A:88:E2:08:B9:39:A0:0A:ED:9E:41:69:07:63:54:91:9B X509v3 Authority Key Identifier: keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b5:9d:d7:c1:8a:3b:d9:44:da:f1:d4:cd:cd:65:eb:70:f4: d1:32:0f:62:60:84:ca:8b:52:53:ff:ae:72:bf:6c:28:42:13: 84:2a:ef:23:e7:f7:91:55:06:a5:70:4f:66:a3:e0:86:35:34: 7e:e6:9d:49:2f:58:ac:75:e2:6e:ea:5e:80:43:84:44:4d:cc: 82:15:04:15:ad:74:6c:d5:23:0d:35:7f:c1:20:8a:8a:8a:2e: ad:91:e8:c7:a7:99:53:d9:55:4a:5b:91:44:e1:b3:b2:de:37: ec:f6:78:a2:d7:1c:5d:2b:6b:a6:98:1a:ba:79:3a:47:37:f9: 48:79:5d:06:1e:e7:99:6b:bb:49:e4:d2:49:2d:a5:6b:aa:5d: 96:2e:b5:e3:5f:92:70:56:34:be:9a:ab:b5:cf:6e:39:e8:21: ae:2d:bf:dc:ce:df:e5:3e:80:11:0e:50:37:c1:f4:c0:04:9c: 2e:6e:98:0c:d4:6f:15:c2:9d:fa:5a:b3:52:9f:eb:01:68:1b: 3b:7b:37:1f:22:43:c8:56:b6:12:4c:2b:43:e9:e0:54:7e:f3: 51:f3:7d:b4:11:0f:5e:02:70:f1:16:2c:56:36:97:f8:bf:53: 5a:c4:17:26:2a:ff:ab:a5:6a:b6:45:64:6b:91:01:d6:46:aa: 04:8d:a8:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRj7hGxz0WQlo8WMgtHaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj ZDQzMTEwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD EygwZDE4MDcyYTg4ZTIwOGI5MzlhMDBhZWQ5ZTQxNjkwNzYzNTQ5MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCtXjBO8hUTly8qNVTan464ogM/x 1C00+fqQH139tqH3OhiK/gnHptWiE4q2SWh6KIkH4vHK4xqJcdcroq89NjvYqixx 9TqeCiLZ0s1+9TZPE+9OL387qQDidQcLiuDLE9V7FANUzmsRKrdT8D2eGMME9AeO 9S6oN8BtqTY6ZNlKxs9byrIW+3FhgKEpiKG88i7tFZbroaWHTxHQCBPWqtiWGeRG IvzjDR8xvEvyNk+HYhuDnmAnGafoDzuJupNW5BVSWGk+F2rVhbp+XfZr45gc6IBl NTAScfGp7rgFJ/zLSxJ8NCS806fdQlNDThPBR01a4+OMFUYXslLevwQKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0YByqI4gi5OaAK7Z5BaQdjVJGbMB8GA1UdIwQY MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0 LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7Wd18GK O9lE2vHUzc1l63D00TIPYmCEyotSU/+ucr9sKEIThCrvI+f3kVUGpXBPZqPghjU0 fuadSS9YrHXibupegEOERE3MghUEFa10bNUjDTV/wSCKioourZHox6eZU9lVSluR ROGzst437PZ4otccXStrppgaunk6Rzf5SHldBh7nmWu7SeTSSS2la6pdli6141+S cFY0vpqrtc9uOeghri2/3M7f5T6AEQ5QN8H0wAScLm6YDNRvFcKd+lqzUp/rAWgb O3s3HyJDyFa2EkwrQ+ngVH7zUfN9tBEPXgJw8RYsVjaX+L9TWsQXJir/q6VqtkVk a5EB1kaqBI2oiA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client