This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json) Hash identifier: q3iOxYW4fFCDZTqiXpB7m4/+ErQZG5gZiGZ+5kPG3Cw= Subject key identifier: BB:E2:E8:16:7A:F4:8F:E7:53:D6:65:E2:0E:F4:56:09:BB:CA:19:8A Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536 Certificate serial: 019C4358E358F02FBFCDBC20BEBF3D2B4CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft Manifest number: 0172 Signing time: Mon 09 Feb 2026 17:00:24 +0000 Manifest this update: Mon 09 Feb 2026 17:00:24 +0000 Manifest next update: Tue 10 Feb 2026 17:00:24 +0000 Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: 9qn7bLJbjOo+cPbFfNCnqgpsDyTSPmrSH7LVVgFVR9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e3:58:f0:2f:bf:cd:bc:20:be:bf:3d:2b:4c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536 Validity Not Before: Feb 9 17:00:24 2026 GMT Not After : Feb 10 17:00:24 2026 GMT Subject: CN=bbe2e8167af48fe753d665e20ef45609bbca198a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:7e:ed:5e:53:0f:a9:75:e8:b3:e0:84:0c: df:7f:af:e7:ef:c0:41:d0:f8:44:89:92:4f:23:de: 7a:9b:96:ab:fe:c7:cf:c4:f0:25:fa:24:0e:68:7d: 23:a5:01:ed:9e:90:ec:38:68:34:dd:82:8e:c5:00: 24:c8:8e:89:35:d0:67:3a:47:98:cb:80:20:78:d6: c8:af:b1:9b:00:ce:e9:77:8f:d9:30:6e:36:30:f7: 57:da:9d:4d:f0:1c:cf:57:84:85:a8:3b:03:35:dd: 84:30:4f:70:e2:10:95:74:fc:f8:de:aa:a6:ac:60: f9:74:63:25:93:c5:7e:ce:02:27:9d:0d:bc:a5:c7: 69:88:71:19:aa:84:ae:dc:9b:26:84:7a:41:d7:ba: fd:0c:f8:53:b9:28:90:14:07:d4:b8:b8:fc:29:a8: 97:08:30:04:de:ef:d3:b0:e5:cb:7d:76:75:2b:5a: c1:08:14:65:31:31:49:c5:3f:95:0d:d6:b9:c1:ad: d5:08:97:eb:d8:7f:68:5c:cd:87:11:9f:5d:8e:a1: da:22:2f:67:2b:93:9d:5c:58:ad:a0:46:0e:df:e1: ad:2b:92:7a:81:38:f8:d7:91:a8:d3:ca:83:24:14: a6:88:20:4c:d6:e1:72:12:8f:5d:a5:45:85:08:ba: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:E8:16:7A:F4:8F:E7:53:D6:65:E2:0E:F4:56:09:BB:CA:19:8A X509v3 Authority Key Identifier: keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:d2:ea:8a:0f:68:08:f6:a1:df:20:30:63:73:70:5a:f0: 08:e8:98:aa:f3:a2:d7:a9:79:dd:13:61:87:b5:e4:47:dc:79: 31:9c:65:64:bd:cb:a3:f9:50:75:03:62:cd:cb:c9:4b:33:27: 2a:b4:4a:63:e7:e5:f3:c4:0e:ac:cf:c9:7d:89:86:d9:aa:c9: 17:d2:0e:b4:8a:54:16:e5:27:93:1e:eb:4a:1b:51:7d:59:b0: e7:17:da:28:10:12:9f:80:de:d0:89:c1:66:7a:33:7d:b1:91: 67:db:c0:88:e1:59:3f:0f:59:e0:d9:9d:f8:c5:33:4d:7b:5a: 7f:9a:84:6e:87:78:05:7d:c1:80:df:de:f5:01:2b:fd:a3:26: 4d:fb:2d:93:a0:03:f6:9f:21:8d:87:5a:19:b6:bc:3e:48:57: a1:04:7e:a4:ce:41:88:71:68:de:91:ad:52:98:be:fc:5c:b4: db:d1:22:44:2f:94:9f:3b:1b:70:d5:71:f9:46:80:8d:bf:c2: b8:29:44:c0:75:89:c9:e0:18:f8:d6:fb:f2:9d:24:e1:a2:c8: ca:54:20:b3:0e:5e:83:b3:f9:af:7c:dc:fd:d5:69:14:fa:f9: 64:3f:82:b8:73:63:ca:cb:d7:7e:ae:d4:09:0e:a5:13:35:16: f7:be:01:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWONY8C+/zbwgvr89K0zXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy YjM1MzYwHhcNMjYwMjA5MTcwMDI0WhcNMjYwMjEwMTcwMDI0WjAzMTEwLwYDVQQD EyhiYmUyZTgxNjdhZjQ4ZmU3NTNkNjY1ZTIwZWY0NTYwOWJiY2ExOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzV+7V5TD6l16LPghAzff6/n78BB 0PhEiZJPI956m5ar/sfPxPAl+iQOaH0jpQHtnpDsOGg03YKOxQAkyI6JNdBnOkeY y4AgeNbIr7GbAM7pd4/ZMG42MPdX2p1N8BzPV4SFqDsDNd2EME9w4hCVdPz43qqm rGD5dGMlk8V+zgInnQ28pcdpiHEZqoSu3JsmhHpB17r9DPhTuSiQFAfUuLj8KaiX CDAE3u/TsOXLfXZ1K1rBCBRlMTFJxT+VDda5wa3VCJfr2H9oXM2HEZ9djqHaIi9n K5OdXFitoEYO3+GtK5J6gTj415Go08qDJBSmiCBM1uFyEo9dpUWFCLpbwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvi6BZ69I/nU9Zl4g70Vgm7yhmKMB8GA1UdIwQY MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4/S6ooP aAj2od8gMGNzcFrwCOiYqvOi16l53RNhh7XkR9x5MZxlZL3Lo/lQdQNizcvJSzMn KrRKY+fl88QOrM/JfYmG2arJF9IOtIpUFuUnkx7rShtRfVmw5xfaKBASn4De0InB ZnozfbGRZ9vAiOFZPw9Z4Nmd+MUzTXtaf5qEbod4BX3BgN/e9QEr/aMmTfstk6AD 9p8hjYdaGba8PkhXoQR+pM5BiHFo3pGtUpi+/Fy029EiRC+UnzsbcNVx+UaAjb/C uClEwHWJyeAY+Nb78p0k4aLIylQgsw5eg7P5r3zc/dVpFPr5ZD+CuHNjysvXfq7U CQ6lEzUW974B1A== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:19 2026 by rpki-client