This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json) Hash identifier: 4UBTdVVHOUnmAFQzodDvLDvofKXNoZyjdgLoAfqfwLk= Subject key identifier: 8F:52:A2:C2:46:16:29:04:17:C7:B1:AA:64:9D:EF:39:7B:9C:E9:DF Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Certificate serial: 019C427DE76AF858F51E1A5351CD6513E90A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:01:13 +0000 Manifest this update: Mon 09 Feb 2026 13:01:13 +0000 Manifest next update: Tue 10 Feb 2026 13:01:13 +0000 Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 4Y9oJGnbnaHwi/1MIVxEYlpUDaIQoP4UlXmBkJzSxIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e7:6a:f8:58:f5:1e:1a:53:51:cd:65:13:e9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Validity Not Before: Feb 9 13:01:13 2026 GMT Not After : Feb 10 13:01:13 2026 GMT Subject: CN=8f52a2c24616290417c7b1aa649def397b9ce9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:35:6f:b2:d1:2f:3e:c9:6f:1a:e9:2d:e1: fe:76:fd:09:48:90:7a:98:e9:39:1a:cf:aa:40:2c: fe:ce:e6:ba:b1:15:45:e6:70:99:0c:c8:96:67:9a: 3a:d1:3e:3d:51:3e:fd:d2:79:40:9c:35:bf:35:fa: d2:d6:29:25:d5:61:bb:79:ed:cb:a9:ec:86:29:f5: 29:c9:70:e7:61:b9:8f:40:46:ba:41:84:13:f4:cc: 29:81:a7:9d:d0:e9:76:d5:bc:cb:05:f4:3f:b5:12: 1e:11:1d:37:ed:80:ae:be:7e:72:4f:7d:73:cd:2e: 1b:f0:de:9b:92:7f:02:20:06:26:55:f5:92:fe:5b: c9:0f:f8:f2:46:a3:2f:b1:ba:e9:0b:87:7f:de:48: 9e:bf:2a:72:47:a9:ed:9a:13:9d:21:18:a4:47:82: a8:e2:c7:53:d3:49:9c:d3:16:ad:d0:fd:67:0a:ac: 37:84:ff:b4:66:31:71:a4:83:2f:39:cf:ec:44:34: 1e:0f:64:23:b3:0a:87:42:4f:4f:e9:18:f8:fe:97: 52:8a:f4:6d:f3:fb:52:73:70:44:01:a7:69:0b:96: 65:05:48:12:04:ab:c2:2d:94:b1:05:f0:df:b7:1f: 95:b7:76:8e:c5:8a:65:f2:cc:d4:0e:02:d2:c6:29: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:A2:C2:46:16:29:04:17:C7:B1:AA:64:9D:EF:39:7B:9C:E9:DF X509v3 Authority Key Identifier: keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:48:0b:eb:bc:18:21:90:64:6e:82:a3:01:b9:82:f2:ed:77: 90:3a:46:f1:fe:14:e6:13:c0:99:36:dd:40:ca:0e:d6:3f:5e: dd:14:4d:31:1f:75:7b:98:5e:e4:d6:7c:cb:29:03:ab:49:d4: a3:38:96:e9:fa:1b:b2:e3:79:c6:df:0b:bb:53:45:82:ce:27: 17:76:16:28:ff:5e:cf:7f:e7:cc:70:4d:e3:bc:48:16:73:9c: c7:15:68:75:e6:dd:70:7e:20:da:d9:43:2f:16:4b:72:22:25: 72:d8:b1:ec:5f:81:40:fd:74:2a:30:d8:2d:c2:fb:e1:83:53: 05:20:58:57:b0:7e:ac:ac:05:33:73:9e:b2:00:b4:1c:10:b7: 17:07:7e:af:a9:85:75:63:a8:d4:8b:a4:54:fe:34:9d:69:23: 94:fd:96:97:d1:ad:9d:c2:cb:6b:78:73:2c:71:c5:18:07:4f: 63:07:8f:2b:74:8c:42:5c:ae:00:a4:8e:5f:59:73:c5:8d:f9: bc:f9:6a:d3:6f:7b:88:cc:6a:24:b7:bb:e8:37:9a:4a:a6:93: 71:86:aa:58:b5:4a:9f:e8:fb:3e:14:83:73:76:8a:ce:9b:65: 58:a7:79:b1:a6:43:0c:50:47:c9:40:de:f0:4b:2d:f0:00:9d: f5:c3:35:95 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCfedq+Fj1HhpTUc1lE+kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj YTMxOWEwHhcNMjYwMjA5MTMwMTEzWhcNMjYwMjEwMTMwMTEzWjAzMTEwLwYDVQQD Eyg4ZjUyYTJjMjQ2MTYyOTA0MTdjN2IxYWE2NDlkZWYzOTdiOWNlOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ak1b7LRLz7JbxrpLeH+dv0JSJB6 mOk5Gs+qQCz+zua6sRVF5nCZDMiWZ5o60T49UT790nlAnDW/NfrS1ikl1WG7ee3L qeyGKfUpyXDnYbmPQEa6QYQT9Mwpgaed0Ol21bzLBfQ/tRIeER037YCuvn5yT31z zS4b8N6bkn8CIAYmVfWS/lvJD/jyRqMvsbrpC4d/3kievypyR6ntmhOdIRikR4Ko 4sdT00mc0xat0P1nCqw3hP+0ZjFxpIMvOc/sRDQeD2QjswqHQk9P6Rj4/pdSivRt 8/tSc3BEAadpC5ZlBUgSBKvCLZSxBfDftx+Vt3aOxYpl8szUDgLSxikt0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI9SosJGFikEF8exqmSd7zl7nOnfMB8GA1UdIwQY MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2 LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0gL 67wYIZBkboKjAbmC8u13kDpG8f4U5hPAmTbdQMoO1j9e3RRNMR91e5he5NZ8yykD q0nUoziW6fobsuN5xt8Lu1NFgs4nF3YWKP9ez3/nzHBN47xIFnOcxxVodebdcH4g 2tlDLxZLciIlctix7F+BQP10KjDYLcL74YNTBSBYV7B+rKwFM3OesgC0HBC3Fwd+ r6mFdWOo1IukVP40nWkjlP2Wl9GtncLLa3hzLHHFGAdPYwePK3SMQlyuAKSOX1lz xY35vPlq0297iMxqJLe76DeaSqaTcYaqWLVKn+j7PhSDc3aKzptlWKd5saZDDFBH yUDe8Est8ACd9cM1lQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:13 2026 by rpki-client