This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json) Hash identifier: guqnYFuXf7+8+hor34o3oxJxykyzIq6PCdvW2sUSW30= Subject key identifier: A9:82:93:FB:71:73:4F:2B:B4:36:0E:60:56:68:9D:3E:06:EC:94:B5 Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Certificate serial: 019C43FE2C90EFD41B443A14FFBF15D5F1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft Manifest number: 0E37 Signing time: Mon 09 Feb 2026 20:00:56 +0000 Manifest this update: Mon 09 Feb 2026 20:00:56 +0000 Manifest next update: Tue 10 Feb 2026 20:00:56 +0000 Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: DQL9c1ufJmWYetIE+NLVYIpI5SoYhJYlFfw1t1ZnQjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:2c:90:ef:d4:1b:44:3a:14:ff:bf:15:d5:f1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Validity Not Before: Feb 9 20:00:56 2026 GMT Not After : Feb 10 20:00:56 2026 GMT Subject: CN=a98293fb71734f2bb4360e6056689d3e06ec94b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:76:05:1d:c4:88:25:24:47:51:7a:ce:42:00: e3:dd:be:b6:b9:70:50:46:7c:b1:01:93:3e:aa:f1: 17:e1:6d:4d:86:07:35:60:24:34:aa:26:e4:05:10: 6d:de:bd:cb:7a:24:69:44:2a:fb:5c:dc:5f:12:bb: c8:18:c4:bd:b9:43:c2:12:b5:d7:7a:22:60:2c:a7: ff:75:4e:97:35:1c:7f:0c:77:63:88:fd:0f:68:de: 24:c4:a2:61:f8:7e:27:44:e8:8b:23:5c:de:e8:d9: 16:75:82:43:12:d1:eb:46:c0:13:06:54:ce:d6:dd: c6:ad:c4:ec:ec:8f:0a:6b:0f:11:67:bc:2d:ad:73: ff:c6:68:d0:b7:6c:92:d9:50:93:2b:de:b3:60:3e: 56:b8:cb:09:70:68:05:7b:40:81:be:9e:90:44:f1: aa:c3:43:ba:75:af:26:db:27:e3:fd:63:0f:d2:68: 05:30:8d:9c:6b:11:dc:c2:89:0b:e3:3f:4b:fb:75: 2a:82:0d:44:1b:67:f3:e9:49:2f:07:4d:c9:a8:fe: b6:6b:5e:0b:db:11:3e:25:33:b1:96:dc:60:12:e0: 17:28:5b:bc:e5:4b:e6:5c:81:1b:bb:e8:0f:73:37: f8:e7:35:9f:c8:5a:c9:74:0f:ec:5d:95:14:21:62: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:93:FB:71:73:4F:2B:B4:36:0E:60:56:68:9D:3E:06:EC:94:B5 X509v3 Authority Key Identifier: keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:69:d3:54:c1:f9:29:cd:41:fa:86:4e:7f:a7:4f:32:89:44: f9:a0:ac:2e:17:50:58:e4:bf:0a:5f:37:0a:ae:35:48:9c:07: 25:a2:51:b7:23:66:ec:94:43:99:da:ef:e7:f4:3a:1e:46:58: 8e:2f:4e:fa:16:95:0a:e6:9a:f5:10:cf:3a:b3:cb:c9:36:30: f1:08:cd:e2:e7:3d:77:7d:bc:93:93:aa:10:ca:e5:03:31:96: a9:80:e5:0c:52:a2:cc:90:89:c3:74:62:67:ba:3c:ac:c2:85: 3a:f2:36:23:07:26:dd:b6:0f:ed:7c:b9:9e:82:57:3c:52:0f: 43:3b:f5:75:3d:ba:af:08:96:0d:62:51:43:a5:da:20:41:9f: 4d:b4:db:29:60:9e:77:6d:7f:9f:05:59:6a:5c:db:89:7f:57: 42:76:3a:56:34:59:eb:6f:17:1d:11:a1:1b:6f:a5:44:f4:54: e3:24:38:5a:07:c9:93:a2:d1:ac:ff:0e:98:d6:87:11:b6:1f: 32:9b:66:dc:13:e1:5b:a8:c4:83:bd:32:18:09:ad:ff:26:fe: 56:7b:aa:d2:78:90:ae:5c:99:43:db:68:a8:77:33:07:ab:0a: 1c:7d:74:61:a0:86:eb:b3:5a:c3:57:72:43:3d:26:2a:26:d2: 13:53:a1:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/iyQ79QbRDoU/78V1fHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx OGIyMWMwHhcNMjYwMjA5MjAwMDU2WhcNMjYwMjEwMjAwMDU2WjAzMTEwLwYDVQQD EyhhOTgyOTNmYjcxNzM0ZjJiYjQzNjBlNjA1NjY4OWQzZTA2ZWM5NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83YFHcSIJSRHUXrOQgDj3b62uXBQ RnyxAZM+qvEX4W1Nhgc1YCQ0qibkBRBt3r3LeiRpRCr7XNxfErvIGMS9uUPCErXX eiJgLKf/dU6XNRx/DHdjiP0PaN4kxKJh+H4nROiLI1ze6NkWdYJDEtHrRsATBlTO 1t3GrcTs7I8Kaw8RZ7wtrXP/xmjQt2yS2VCTK96zYD5WuMsJcGgFe0CBvp6QRPGq w0O6da8m2yfj/WMP0mgFMI2caxHcwokL4z9L+3Uqgg1EG2fz6UkvB03JqP62a14L 2xE+JTOxltxgEuAXKFu85UvmXIEbu+gPczf45zWfyFrJdA/sXZUUIWKi/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmCk/txc08rtDYOYFZonT4G7JS1MB8GA1UdIwQY MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWnTVMH5 Kc1B+oZOf6dPMolE+aCsLhdQWOS/Cl83Cq41SJwHJaJRtyNm7JRDmdrv5/Q6HkZY ji9O+haVCuaa9RDPOrPLyTYw8QjN4uc9d328k5OqEMrlAzGWqYDlDFKizJCJw3Ri Z7o8rMKFOvI2Iwcm3bYP7Xy5noJXPFIPQzv1dT26rwiWDWJRQ6XaIEGfTbTbKWCe d21/nwVZalzbiX9XQnY6VjRZ628XHRGhG2+lRPRU4yQ4WgfJk6LRrP8OmNaHEbYf Mptm3BPhW6jEg70yGAmt/yb+Vnuq0niQrlyZQ9toqHczB6sKHH10YaCG67Naw1dy Qz0mKibSE1Oh7g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:11 2026 by rpki-client