This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json) Hash identifier: 5Z583eUF10jKKR4+FOxoVQgV9phs7LWhTQmmiq1B/1o= Subject key identifier: FC:98:D3:90:05:91:9D:B8:4D:F5:C0:1E:36:D6:73:4C:7F:B3:A2:52 Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16 Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916 Certificate serial: 019C4321D57FD3B960B1D4757B0755004418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft Manifest number: 07A1 Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: /kHG+OHcj887H0z/GUM5eD+8KADsHELk2NqPtoHOMr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d5:7f:d3:b9:60:b1:d4:75:7b:07:55:00:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=fc98d39005919db84df5c01e36d6734c7fb3a252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:51:4f:d3:6b:5f:d7:3a:51:d7:55:cc:39: 2c:db:38:1e:8d:e0:62:db:ca:ff:3d:ce:6d:46:90: de:3b:3e:78:a3:70:55:1a:69:0a:4f:1d:33:b4:f0: 2f:a9:1c:40:b4:ed:6e:d6:3b:8b:1f:94:73:df:77: a7:f5:29:15:65:1f:eb:7f:62:dc:71:b4:25:49:bd: b4:51:f4:b1:d4:62:08:20:85:99:44:bf:f5:d2:02: 5f:9c:3e:71:3c:d3:ca:c0:f9:9d:55:d9:36:8b:b4: 9d:2c:73:a2:6f:bd:9c:c5:59:0e:d6:09:bb:d5:d1: 63:34:0d:19:05:a5:db:22:e5:9d:f4:68:44:0c:29: 2e:2e:e1:45:03:30:85:30:20:af:62:bc:b9:32:57: 6f:a1:58:71:37:6b:2e:2e:c7:4f:40:db:28:5c:e5: da:9d:69:51:76:9e:13:dc:13:cb:8c:91:25:2e:5c: df:b7:c4:1d:8c:22:b4:09:d4:b2:f9:aa:0c:87:34: fd:d4:b7:25:2e:7f:df:2a:55:3c:24:7e:13:66:21: 38:b2:66:40:d2:a9:59:78:06:02:9d:42:fc:b1:99: 17:4a:32:ef:26:73:1f:9f:d5:6a:87:92:27:ad:38: 6d:de:c4:8d:55:f5:85:e6:4b:8a:f2:8e:89:a7:96: 66:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:D3:90:05:91:9D:B8:4D:F5:C0:1E:36:D6:73:4C:7F:B3:A2:52 X509v3 Authority Key Identifier: keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:8a:dd:e5:31:40:ad:5a:bd:b1:16:a7:46:d2:f3:f1:5e: b3:e2:60:4f:89:c6:ad:08:1e:f6:37:15:46:91:df:4f:aa:f1: 1b:e5:0a:1e:a3:84:3c:12:67:c2:98:2f:43:fe:55:c0:72:f7: a1:43:c0:8c:80:04:8c:d5:1a:08:36:de:81:d1:48:ec:1c:6a: b9:ed:cb:06:37:03:e6:7b:69:3a:bf:57:73:41:9b:c3:11:f4: 29:cc:de:a5:9f:5b:70:7a:7f:06:cc:b3:72:2a:69:b4:9c:4f: c6:6f:6d:9b:6f:ad:91:42:8a:e4:c0:9f:d2:ba:e9:e9:8d:18: 8c:78:2c:0b:e4:9c:d8:89:d4:27:de:e3:48:7a:a9:7a:42:ef: ac:3a:1a:7d:20:b4:9c:bd:18:6a:27:50:91:08:cb:9d:e0:79: c2:e9:9b:56:ef:50:74:be:f4:e6:b7:75:e7:c2:c5:6b:e3:5e: 87:59:52:9f:9a:ed:fe:5b:f8:d2:a6:63:a5:37:cb:61:8f:df: 19:1a:ba:84:97:db:5f:bc:61:1b:79:cd:6f:55:0f:2f:df:96: b0:85:7e:27:95:84:1d:bb:8c:ed:8e:70:92:61:ae:80:5c:9e: 62:42:b7:10:ae:60:da:ba:ce:50:c8:68:34:2d:e2:45:62:84: 73:1c:64:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdV/07lgsdR1ewdVAEQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQ0NjMzN2VkMzNjZWRlMzRkZWZmNTU3MTA1ZGM3MWMw M2E5MTYwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD EyhmYzk4ZDM5MDA1OTE5ZGI4NGRmNWMwMWUzNmQ2NzM0YzdmYjNhMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNRT9NrX9c6UddVzDks2zgejeBi 28r/Pc5tRpDeOz54o3BVGmkKTx0ztPAvqRxAtO1u1juLH5Rz33en9SkVZR/rf2Lc cbQlSb20UfSx1GIIIIWZRL/10gJfnD5xPNPKwPmdVdk2i7SdLHOib72cxVkO1gm7 1dFjNA0ZBaXbIuWd9GhEDCkuLuFFAzCFMCCvYry5MldvoVhxN2suLsdPQNsoXOXa nWlRdp4T3BPLjJElLlzft8QdjCK0CdSy+aoMhzT91LclLn/fKlU8JH4TZiE4smZA 0qlZeAYCnUL8sZkXSjLvJnMfn9Vqh5InrTht3sSNVfWF5kuK8o6Jp5Zm3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyY05AFkZ24TfXAHjbWc0x/s6JSMB8GA1UdIwQY MBaAFK0kRjN+0zzt403v9VcQXcccA6kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEt ZTcwN2RlYzdiZDZjLzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEtZTcwN2RlYzdiZDZj LzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfWK3eUx QK1avbEWp0bS8/Fes+JgT4nGrQge9jcVRpHfT6rxG+UKHqOEPBJnwpgvQ/5VwHL3 oUPAjIAEjNUaCDbegdFI7Bxque3LBjcD5ntpOr9Xc0GbwxH0KczepZ9bcHp/Bsyz cipptJxPxm9tm2+tkUKK5MCf0rrp6Y0YjHgsC+Sc2InUJ97jSHqpekLvrDoafSC0 nL0YaidQkQjLneB5wumbVu9QdL705rd158LFa+Neh1lSn5rt/lv40qZjpTfLYY/f GRq6hJfbX7xhG3nNb1UPL9+WsIV+J5WEHbuM7Y5wkmGugFyeYkK3EK5g2rrOUMho NC3iRWKEcxxkkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:32 2026 by rpki-client