This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json) Hash identifier: ZlRT0paWr30oR9ka7fruzBpOyDqRb07Ety1F5MIop/s= Subject key identifier: 78:4C:DF:CD:70:8A:5C:D9:99:98:EC:76:2B:9D:F3:53:E6:45:5D:84 Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36 Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436 Certificate serial: 019C4322E89880914D4427E0A27AA8D0C92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft Manifest number: 0EAF Signing time: Mon 09 Feb 2026 16:01:27 +0000 Manifest this update: Mon 09 Feb 2026 16:01:27 +0000 Manifest next update: Tue 10 Feb 2026 16:01:27 +0000 Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: ynUtufAq2wfss7mzTTvY76eGdLWznxXjX0TdRfDofxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e8:98:80:91:4d:44:27:e0:a2:7a:a8:d0:c9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436 Validity Not Before: Feb 9 16:01:27 2026 GMT Not After : Feb 10 16:01:27 2026 GMT Subject: CN=784cdfcd708a5cd99998ec762b9df353e6455d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:72:24:1c:7d:6f:70:4b:c3:4d:68:13:af: 65:22:a3:3a:77:c9:22:b5:f4:ba:a6:2d:dc:59:44: f9:78:e3:e7:d9:62:82:c8:e7:86:cd:f4:20:ba:11: 40:04:f0:d5:b3:ea:1b:17:4c:b2:b2:f5:47:3e:0b: 22:19:5d:28:4d:fb:0f:21:1e:7c:eb:70:0e:4e:b8: e7:fb:55:bc:3d:64:a0:7b:27:ad:19:cf:32:35:63: df:a3:e6:a1:31:63:fe:dc:9c:7b:fc:c3:4d:20:86: cb:80:3d:5c:6f:03:ca:33:5d:e5:e5:b6:26:69:88: c0:f6:2c:10:46:3d:99:94:1d:54:dc:42:e5:33:5b: 28:4f:b4:07:52:bf:31:7f:22:9c:c8:29:63:2c:f2: db:85:a1:27:fa:8d:44:3a:f5:90:68:fe:c0:5e:d9: 49:8c:cd:e1:e4:7f:9c:4f:86:e7:96:c5:cd:4f:47: 77:1a:2e:ee:3f:42:0c:81:29:d5:86:fd:2b:db:db: 6d:11:bd:c4:2c:a6:7d:c7:17:e8:42:48:01:8f:92: a6:85:f3:99:1e:13:f3:f8:a5:4b:44:63:45:04:c4: d3:ba:df:de:8a:8f:33:bb:c8:e4:5b:f7:56:d4:8f: f0:c0:08:3f:fc:a2:f5:cf:43:2a:85:65:b0:9e:97: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:DF:CD:70:8A:5C:D9:99:98:EC:76:2B:9D:F3:53:E6:45:5D:84 X509v3 Authority Key Identifier: keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:12:90:05:36:ee:fa:cb:a4:12:a0:f6:45:a2:d9:75:92: 00:66:1b:9c:a3:70:1e:e9:9f:41:9b:70:f0:ef:81:fa:6f:89: e7:f3:3f:6b:57:c4:a4:1d:8e:a8:43:05:b8:85:ac:45:6b:7f: e9:54:92:22:77:b3:42:ae:3c:3f:3c:94:58:13:ab:d0:e0:4a: a1:4a:f9:b3:a7:5d:e2:82:2d:d7:b9:11:64:01:30:8f:2b:ae: ee:b2:7d:38:21:fe:47:d5:b9:76:59:b2:76:18:e8:81:f8:04: d5:48:8b:08:e9:0c:7d:2c:6b:3c:79:c9:31:23:ec:c7:fa:a3: 3e:43:4f:c8:29:b3:ef:32:fc:75:50:67:3b:0d:c4:c2:fc:ae: a2:3e:48:e9:5c:4c:3a:78:6c:d4:19:01:71:8b:6e:80:3e:54: 6c:98:44:f3:21:91:ba:14:b6:fc:62:a6:74:b2:04:ae:5f:6a: bc:58:8b:4b:1b:ed:f6:c4:1b:1e:c3:9e:ee:a4:c4:96:79:93: eb:82:ee:9c:1c:a5:9e:01:e5:dc:c1:ef:4c:b1:2d:69:15:04: 34:a8:44:2b:73:9c:b0:43:c9:7c:2c:3b:53:bf:b4:a3:ed:95: 1d:b2:9b:7c:e4:3f:f0:51:b7:e8:a3:67:f7:b6:05:b7:7c:bd: b2:eb:7d:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuiYgJFNRCfgonqo0MkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDI0MDlhMWY4YzFjZWU1OTc0ZGI4YTQyZTFlYjY3MmVl ODM0MzYwHhcNMjYwMjA5MTYwMTI3WhcNMjYwMjEwMTYwMTI3WjAzMTEwLwYDVQQD Eyg3ODRjZGZjZDcwOGE1Y2Q5OTk5OGVjNzYyYjlkZjM1M2U2NDU1ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0tyJBx9b3BLw01oE69lIqM6d8ki tfS6pi3cWUT5eOPn2WKCyOeGzfQguhFABPDVs+obF0yysvVHPgsiGV0oTfsPIR58 63AOTrjn+1W8PWSgeyetGc8yNWPfo+ahMWP+3Jx7/MNNIIbLgD1cbwPKM13l5bYm aYjA9iwQRj2ZlB1U3ELlM1soT7QHUr8xfyKcyCljLPLbhaEn+o1EOvWQaP7AXtlJ jM3h5H+cT4bnlsXNT0d3Gi7uP0IMgSnVhv0r29ttEb3ELKZ9xxfoQkgBj5KmhfOZ HhPz+KVLRGNFBMTTut/eio8zu8jkW/dW1I/wwAg//KL1z0MqhWWwnpfoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhM381wilzZmZjsdiud81PmRV2EMB8GA1UdIwQY MBaAFL9CQJofjBzuWXTbikLh62cu6DQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NzJiNGEtZDIzMC00NjAzLThhNDIt YTUxZjQ2YmI3NDY0LzEvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81NzJiNGEtZDIzMC00NjAzLThhNDItYTUxZjQ2YmI3NDY0 LzEvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJYSkAU2 7vrLpBKg9kWi2XWSAGYbnKNwHumfQZtw8O+B+m+J5/M/a1fEpB2OqEMFuIWsRWt/ 6VSSInezQq48PzyUWBOr0OBKoUr5s6dd4oIt17kRZAEwjyuu7rJ9OCH+R9W5dlmy dhjogfgE1UiLCOkMfSxrPHnJMSPsx/qjPkNPyCmz7zL8dVBnOw3Ewvyuoj5I6VxM Onhs1BkBcYtugD5UbJhE8yGRuhS2/GKmdLIErl9qvFiLSxvt9sQbHsOe7qTElnmT 64LunBylngHl3MHvTLEtaRUENKhEK3OcsEPJfCw7U7+0o+2VHbKbfOQ/8FG36KNn 97YFt3y9sut9yw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:38 2026 by rpki-client