This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft File: T7murXluvL6SUPqiksQOioWIx50.mft (raw, json) Hash identifier: Ml5HzszTNj3jSYk3Uz6D59EUJDgAOx9HBX2ioZUPK2M= Subject key identifier: 56:8A:ED:2E:99:4F:14:B4:3B:24:A5:33:F8:9C:F1:FB:D5:49:76:75 Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D Certificate issuer: /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d Certificate serial: 019C4322317F6B8823C64F41291A0F1AB68C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft Manifest number: 12F4 Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: kRLcZWnAUdJYbenXXzaKCeI9VZnldDDgrjQptHXLB7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:31:7f:6b:88:23:c6:4f:41:29:1a:0f:1a:b6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=568aed2e994f14b43b24a533f89cf1fbd5497675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:ac:73:b6:b1:c5:ec:c8:ba:66:ae:5a:60: 8f:27:a4:23:3e:97:b0:db:9d:9b:b3:10:be:6b:92: 32:2c:16:fe:d3:12:a7:09:b3:b8:01:36:84:12:79: 98:96:4b:1d:ec:31:09:c0:19:0f:fa:41:28:f8:29: 4a:74:d2:87:29:22:7c:ff:4a:6c:d3:7c:f7:6e:12: f8:15:01:b4:84:2c:04:49:eb:c5:e1:53:d7:12:d2: 79:29:97:f8:84:1a:7e:7c:3a:21:03:53:ca:f8:21: de:61:02:65:88:65:e3:3d:ee:c7:e0:db:65:dd:45: cb:35:91:96:a5:cd:c0:cb:6a:f8:56:78:c1:c7:05: ed:4d:67:67:3a:cf:45:d6:5d:5d:01:e7:8b:2b:80: 44:f2:b1:30:46:80:b7:9c:0e:bd:71:96:3f:36:96: 91:d7:6d:c1:96:48:bf:2b:0d:09:cb:8c:1e:d4:11: 5a:64:5d:d4:3b:f3:4d:64:b3:0b:3e:03:9b:84:fc: 9d:ec:5c:e9:6c:b7:a5:c3:f1:f9:82:93:ac:0c:2c: 44:9b:74:59:9a:0d:f9:6c:a4:f1:05:f1:a8:a6:87: f2:35:2e:a5:d7:c8:56:cb:c6:9d:20:f4:3a:ba:9f: c9:66:fc:46:c4:fd:ea:3a:b2:cc:82:20:34:b7:c5: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:ED:2E:99:4F:14:B4:3B:24:A5:33:F8:9C:F1:FB:D5:49:76:75 X509v3 Authority Key Identifier: keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:df:cc:ef:69:b0:77:c0:df:2b:f6:09:67:1f:3f:2f:7d:0f: 80:42:9b:e1:8d:de:3a:fa:7f:93:35:64:a2:bd:5e:17:93:9b: 1e:d0:8f:63:90:ee:50:69:88:9f:c1:f1:7f:5a:ea:1d:36:fd: 30:86:eb:d3:67:c9:fc:c0:a9:a0:06:b4:1c:27:9e:df:4f:ed: e5:fe:e7:4f:7b:5f:24:e1:e0:aa:ac:5e:9b:6d:cf:12:cf:af: 29:d6:bb:11:14:cf:39:27:fe:85:8f:fd:32:73:4d:5f:8d:c2: 82:95:9c:1a:a8:57:d2:2d:36:a2:d7:2b:98:4f:0a:5d:b2:34: a5:c6:c2:14:97:89:a6:8b:78:72:50:a0:4e:1b:97:47:db:bc: 2a:37:13:8e:38:62:10:04:71:d1:8e:d6:b2:58:47:da:6a:94: 3e:3b:27:37:15:95:da:19:39:de:d2:bc:26:ca:71:dc:83:3c: 50:f6:d7:52:1d:f7:83:10:d6:e6:6a:4d:00:1a:96:07:99:71: cf:33:6f:b9:49:6a:b0:64:e5:6e:1b:3e:91:74:ac:26:d9:2a: 3f:b3:29:9e:b8:30:5a:f1:d2:42:ff:58:b0:a0:eb:3e:9a:24: 21:76:b0:6e:bd:20:22:51:33:1c:29:1f:54:12:85:16:d0:ed: f8:9a:1f:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjF/a4gjxk9BKRoPGraMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjlhZWFkNzk2ZWJjYmU5MjUwZmFhMjkyYzQwZThhODU4 OGM3OWQwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD Eyg1NjhhZWQyZTk5NGYxNGI0M2IyNGE1MzNmODljZjFmYmQ1NDk3Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocGsc7axxezIumauWmCPJ6QjPpew 252bsxC+a5IyLBb+0xKnCbO4ATaEEnmYlksd7DEJwBkP+kEo+ClKdNKHKSJ8/0ps 03z3bhL4FQG0hCwESevF4VPXEtJ5KZf4hBp+fDohA1PK+CHeYQJliGXjPe7H4Ntl 3UXLNZGWpc3Ay2r4VnjBxwXtTWdnOs9F1l1dAeeLK4BE8rEwRoC3nA69cZY/NpaR 123Blki/Kw0Jy4we1BFaZF3UO/NNZLMLPgObhPyd7FzpbLelw/H5gpOsDCxEm3RZ mg35bKTxBfGopofyNS6l18hWy8adIPQ6up/JZvxGxP3qOrLMgiA0t8XGCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaK7S6ZTxS0OySlM/ic8fvVSXZ1MB8GA1UdIwQY MBaAFE+5rq15bry+klD6opLEDoqFiMedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5Mjct NzZhOTEwOWE2MmU3LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5MjctNzZhOTEwOWE2MmU3 LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN/M72mw d8DfK/YJZx8/L30PgEKb4Y3eOvp/kzVkor1eF5ObHtCPY5DuUGmIn8Hxf1rqHTb9 MIbr02fJ/MCpoAa0HCee30/t5f7nT3tfJOHgqqxem23PEs+vKda7ERTPOSf+hY/9 MnNNX43CgpWcGqhX0i02otcrmE8KXbI0pcbCFJeJpot4clCgThuXR9u8KjcTjjhi EARx0Y7WslhH2mqUPjsnNxWV2hk53tK8Jspx3IM8UPbXUh33gxDW5mpNABqWB5lx zzNvuUlqsGTlbhs+kXSsJtkqP7MpnrgwWvHSQv9YsKDrPpokIXawbr0gIlEzHCkf VBKFFtDt+JofUA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:15 2026 by rpki-client