This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json) Hash identifier: qthEbUptGu5azXj+GWCCFrO7h7NmiWnuUV1Yo1LoaH8= Subject key identifier: 63:13:41:2C:12:E8:9C:6A:07:CC:88:B5:72:6E:8B:85:3C:24:2B:E4 Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4 Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4 Certificate serial: 019C43222FFB621A8E9F46EF8259DCD28C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:39 +0000 Manifest this update: Mon 09 Feb 2026 16:00:39 +0000 Manifest next update: Tue 10 Feb 2026 16:00:39 +0000 Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: Ota/ul8WK+x7QLRvo4FfHrkBTdUVB/whHwPwfFVTce8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2f:fb:62:1a:8e:9f:46:ef:82:59:dc:d2:8c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4 Validity Not Before: Feb 9 16:00:39 2026 GMT Not After : Feb 10 16:00:39 2026 GMT Subject: CN=6313412c12e89c6a07cc88b5726e8b853c242be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:49:eb:2b:b0:e3:35:b0:8c:89:77:f4:a5: fa:2f:8e:9a:f6:00:f5:e5:7b:30:5c:23:7e:ea:77: 07:ad:84:26:d8:f2:d0:d1:52:53:a4:a3:9b:d1:5a: 8a:f5:9c:59:43:99:46:b8:15:ea:94:93:d7:bc:f4: 0b:6f:23:32:9f:b8:44:30:ce:5b:d8:2b:82:e6:42: f4:1c:ad:f0:28:73:95:30:71:26:72:eb:28:f9:90: 93:6d:05:88:f3:91:a6:ae:58:f7:bd:52:5a:c2:50: 0e:40:b4:51:83:ff:76:a4:ac:db:05:c0:b0:cd:5e: a7:25:8b:0d:ae:84:26:77:4f:ec:cb:a0:e5:1b:5b: 87:0d:cd:c4:77:9f:73:3a:7b:fd:20:d3:80:bf:79: 18:ff:d8:d1:1a:91:ad:5c:75:13:f1:b9:99:08:5f: 84:f8:54:80:c3:06:58:66:34:59:9e:d1:73:1e:4f: 20:61:59:67:52:44:9e:55:ab:3a:30:ea:f8:e4:b3: 8c:56:c5:28:81:97:c1:de:28:1f:0f:4f:f1:59:27: d7:f4:47:f5:6a:96:63:6f:44:14:e7:d1:6d:2c:bd: 82:0e:26:20:83:7e:0c:b4:83:78:01:16:2a:db:0f: 61:88:9f:c4:66:ab:d7:5b:b0:e0:03:1f:1a:b9:50: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:41:2C:12:E8:9C:6A:07:CC:88:B5:72:6E:8B:85:3C:24:2B:E4 X509v3 Authority Key Identifier: keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:15:39:a3:0b:7a:e8:5a:17:c6:fc:b9:93:54:31:8f:e8:34: 88:37:26:9f:b5:d3:bb:b7:0c:8a:c1:60:eb:d6:47:95:94:12: 16:05:bc:73:82:d5:e7:32:65:87:30:e7:ed:06:bd:e6:9d:87: e0:81:41:da:ed:f0:fa:bd:db:d5:bb:ed:74:06:9b:7f:ba:7b: cb:b7:69:89:89:96:e8:7d:c9:f2:7d:a3:17:57:50:8d:08:3c: ec:db:15:2f:a1:2e:5c:d6:f4:6e:68:70:d6:01:72:52:3a:2f: 65:ac:61:a7:22:97:5d:60:cf:dd:46:2b:22:e7:7c:31:20:f6: 49:b0:5d:06:13:c0:48:68:fd:ca:d1:eb:ea:8f:27:36:85:72: ae:7b:58:ae:02:67:f1:3d:11:b4:87:7b:49:b0:f0:72:1a:9c: 25:26:30:c7:71:d0:ea:cc:73:10:d5:d8:2f:54:64:53:96:60: 0a:2e:90:0d:4b:e1:fa:3d:c8:0a:1d:97:5c:f9:c5:56:2b:d8: 1f:d8:81:16:2c:93:f8:cf:1c:41:6b:ac:43:e5:7f:61:ba:01: 37:1a:32:82:ca:cc:ac:89:58:ea:4b:46:a3:26:f8:13:29:69: 73:09:03:94:43:7f:9d:2f:c2:70:35:b0:d4:52:6e:ef:ab:34: 6b:d6:79:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIi/7YhqOn0bvglnc0oyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjhiZGQwYzhlMWI1MDRkMjk0ZjhhMzkwNGM4ZDU3YWU2 MzgzZjQwHhcNMjYwMjA5MTYwMDM5WhcNMjYwMjEwMTYwMDM5WjAzMTEwLwYDVQQD Eyg2MzEzNDEyYzEyZTg5YzZhMDdjYzg4YjU3MjZlOGI4NTNjMjQyYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHpJ6yuw4zWwjIl39KX6L46a9gD1 5XswXCN+6ncHrYQm2PLQ0VJTpKOb0VqK9ZxZQ5lGuBXqlJPXvPQLbyMyn7hEMM5b 2CuC5kL0HK3wKHOVMHEmcuso+ZCTbQWI85Gmrlj3vVJawlAOQLRRg/92pKzbBcCw zV6nJYsNroQmd0/sy6DlG1uHDc3Ed59zOnv9INOAv3kY/9jRGpGtXHUT8bmZCF+E +FSAwwZYZjRZntFzHk8gYVlnUkSeVas6MOr45LOMVsUogZfB3igfD0/xWSfX9Ef1 apZjb0QU59FtLL2CDiYgg34MtIN4ARYq2w9hiJ/EZqvXW7DgAx8auVAqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMTQSwS6JxqB8yItXJui4U8JCvkMB8GA1UdIwQY MBaAFEYovdDI4bUE0pT4o5BMjVeuY4P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2It NWY4YjYzYjExZjBiLzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2ItNWY4YjYzYjExZjBi LzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBU5owt6 6FoXxvy5k1Qxj+g0iDcmn7XTu7cMisFg69ZHlZQSFgW8c4LV5zJlhzDn7Qa95p2H 4IFB2u3w+r3b1bvtdAabf7p7y7dpiYmW6H3J8n2jF1dQjQg87NsVL6EuXNb0bmhw 1gFyUjovZaxhpyKXXWDP3UYrIud8MSD2SbBdBhPASGj9ytHr6o8nNoVyrntYrgJn 8T0RtId7SbDwchqcJSYwx3HQ6sxzENXYL1RkU5ZgCi6QDUvh+j3ICh2XXPnFVivY H9iBFiyT+M8cQWusQ+V/YboBNxoygsrMrIlY6ktGoyb4EylpcwkDlEN/nS/CcDWw 1FJu76s0a9Z5xA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:21 2026 by rpki-client