This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json) Hash identifier: 15cxwSUYWmqclMdu49C0sVs1yzIkt3YT8DZD8COxWFQ= Subject key identifier: 25:EF:B4:90:7B:AE:37:C2:79:13:F7:15:47:50:DC:20:0C:F0:F4:35 Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc Certificate serial: 019C421004A29A11994DDA9DB23C866A08A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft Manifest number: 0839 Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: pWK/K4yhB/9p298wxVhRxWzlcz1xM58PAomMLOUiRb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:04:a2:9a:11:99:4d:da:9d:b2:3c:86:6a:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=25efb4907bae37c27913f7154750dc200cf0f435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:72:c2:d6:54:83:d1:0d:33:09:19:ff:d2: b7:84:54:05:c0:c4:b2:83:d8:6e:5b:e8:b5:2e:48: ea:5b:48:53:e9:5d:69:dd:c0:ef:5d:b4:61:65:da: fc:4c:f9:76:5e:25:25:7f:55:47:12:29:d4:e9:38: 05:03:14:da:de:72:ab:f1:ca:b3:5b:7f:03:78:1f: 27:40:64:60:5f:26:13:85:51:1b:df:ce:b4:00:d8: b5:2e:d1:3b:a7:c6:92:b0:a4:1f:3d:9d:ef:2a:85: b9:f9:da:a0:9f:af:ad:1b:52:6c:ca:9c:91:2a:c5: 21:86:e1:91:1e:a3:2d:b2:7b:df:f3:ab:5f:16:b8: 1e:63:44:a7:13:7f:7d:97:8e:21:d9:ab:5e:05:e9: 08:53:ad:6d:47:c0:65:33:d8:2e:03:2e:54:90:1d: 05:89:8b:5a:87:54:e8:c2:b4:11:a4:00:ae:fa:4c: 87:f0:db:98:24:6b:41:eb:b2:0a:4d:58:f5:ab:36: a8:1d:81:ec:3d:c3:f9:ec:3f:42:42:6b:3d:da:ec: 86:24:33:5e:86:80:1c:9b:e1:7e:74:35:46:82:76: e1:2c:8c:b1:36:2f:fd:73:0d:c0:72:af:44:2e:fa: 68:fd:a8:35:a3:b5:bf:ff:b3:3c:10:75:26:83:c7: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:B4:90:7B:AE:37:C2:79:13:F7:15:47:50:DC:20:0C:F0:F4:35 X509v3 Authority Key Identifier: keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6f:ce:28:cb:06:d8:04:c8:d3:46:64:9f:a6:f1:23:81:d2: b2:ea:c1:68:b3:9f:80:a2:57:ac:14:29:ec:28:b2:cd:c9:e0: e0:5c:32:44:df:29:24:b8:93:08:22:27:b3:a4:f7:39:36:de: 0b:48:b1:32:b7:fc:7e:01:95:a3:80:43:03:25:40:11:11:90: e7:55:d1:aa:26:e6:08:7a:43:78:a3:c3:bb:94:f2:83:9f:77: f2:4d:16:6e:e4:28:e7:3a:78:11:71:98:ca:3c:a9:6c:59:58: 8b:52:05:55:8c:e0:05:a6:e1:ec:d6:5f:42:85:8b:18:d0:bc: da:46:dc:72:b8:17:7d:21:54:ec:e5:d6:78:41:9f:5a:91:ef: 13:05:d3:16:6c:10:07:20:37:5c:09:e7:fe:fe:0c:23:c9:8a: 9d:8b:91:6c:d6:7c:29:11:70:ce:78:5e:d7:32:a0:f7:a5:80: 96:2a:6c:e5:f7:a9:37:b9:f8:49:b4:3c:47:10:1a:60:90:12: 65:54:dc:b9:f6:cd:2f:b2:29:27:f5:81:f3:58:2e:7e:92:c2: 77:7a:b4:16:b2:8a:21:ba:ca:1f:1a:11:b4:8d:6b:2c:80:57: f1:8c:e6:9b:9b:c6:bc:fa:c7:65:4f:d2:ef:fc:b9:42:7a:7d: 70:3b:29:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEASimhGZTdqdsjyGagimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjJmYmE0NWFkNjUzMWE2M2QxNzM1MDE0ZjY5OTgwN2Y0 N2ZiZGMwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EygyNWVmYjQ5MDdiYWUzN2MyNzkxM2Y3MTU0NzUwZGMyMDBjZjBmNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq1ywtZUg9ENMwkZ/9K3hFQFwMSy g9huW+i1LkjqW0hT6V1p3cDvXbRhZdr8TPl2XiUlf1VHEinU6TgFAxTa3nKr8cqz W38DeB8nQGRgXyYThVEb3860ANi1LtE7p8aSsKQfPZ3vKoW5+dqgn6+tG1JsypyR KsUhhuGRHqMtsnvf86tfFrgeY0SnE399l44h2ateBekIU61tR8BlM9guAy5UkB0F iYtah1TowrQRpACu+kyH8NuYJGtB67IKTVj1qzaoHYHsPcP57D9CQms92uyGJDNe hoAcm+F+dDVGgnbhLIyxNi/9cw3Acq9ELvpo/ag1o7W//7M8EHUmg8deWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXvtJB7rjfCeRP3FUdQ3CAM8PQ1MB8GA1UdIwQY MBaAFGry+6Ra1lMaY9FzUBT2mYB/R/vcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmIt MTk3ZWM5YTExNWFhLzEvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmItMTk3ZWM5YTExNWFh LzEvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW/OKMsG 2ATI00Zkn6bxI4HSsurBaLOfgKJXrBQp7Ciyzcng4FwyRN8pJLiTCCIns6T3OTbe C0ixMrf8fgGVo4BDAyVAERGQ51XRqibmCHpDeKPDu5Tyg5938k0WbuQo5zp4EXGY yjypbFlYi1IFVYzgBabh7NZfQoWLGNC82kbccrgXfSFU7OXWeEGfWpHvEwXTFmwQ ByA3XAnn/v4MI8mKnYuRbNZ8KRFwznhe1zKg96WAlips5fepN7n4SbQ8RxAaYJAS ZVTcufbNL7IpJ/WB81gufpLCd3q0FrKKIbrKHxoRtI1rLIBX8Yzmm5vGvPrHZU/S 7/y5Qnp9cDspiA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:37 2026 by rpki-client