This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json) Hash identifier: AyGEZwm45zVLWchcmVlGzReDiGJFlLS0CQad6ep13HY= Subject key identifier: 7E:B3:D3:8A:D2:23:87:08:97:4C:F6:BC:10:AC:7E:56:42:81:74:1A Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Certificate serial: 019C427DB21951513796FCA1D2D5A6FBC573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 13:00:59 +0000 Manifest this update: Mon 09 Feb 2026 13:00:59 +0000 Manifest next update: Tue 10 Feb 2026 13:00:59 +0000 Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: BOqxWHejRjwnL87GFGHs08p/w544QjTGroIdA9iy934=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b2:19:51:51:37:96:fc:a1:d2:d5:a6:fb:c5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Validity Not Before: Feb 9 13:00:59 2026 GMT Not After : Feb 10 13:00:59 2026 GMT Subject: CN=7eb3d38ad2238708974cf6bc10ac7e564281741a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:a5:37:32:7c:6c:29:0f:4b:98:fb:d6:9e: ac:5b:1b:d4:46:1d:77:bd:d9:75:f5:e4:56:00:d1: 3d:c2:d2:67:7c:d4:b7:3c:f6:57:50:af:cf:2a:29: 31:46:f1:82:4a:9e:22:9b:39:ca:18:4c:91:ab:12: 93:f9:fd:ce:17:5d:c5:3d:45:a6:a5:23:26:ec:2d: d9:a8:5c:7c:2b:c8:67:22:9c:ac:12:64:d8:59:80: 55:5b:5d:b7:3d:4f:db:43:b9:37:c9:fd:2d:41:ec: fc:aa:b9:a0:f0:0b:34:2a:32:30:64:36:55:f2:bf: af:df:39:9d:76:cf:97:8c:7b:e6:1f:7c:39:82:32: 8f:a0:55:af:28:5a:80:0a:f6:33:e3:6f:ec:df:77: 86:47:fd:ce:79:44:f1:3c:36:1d:d0:89:3a:ce:0b: 7b:f3:a9:47:dd:f0:f7:c7:a5:72:2a:50:a3:47:b2: 78:29:60:7c:02:8c:58:8b:ed:17:6e:b9:e2:35:d1: 48:ca:ed:b5:c2:c1:28:f5:cb:94:0d:9f:ad:0e:fc: 2c:dd:9b:7b:9e:31:d2:e1:cf:66:95:48:3a:a7:22: ef:e6:c3:15:f3:99:1b:30:00:30:49:82:a6:f0:0b: 49:6e:44:cc:20:72:e3:de:db:cd:d1:37:fe:3e:b4: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:D3:8A:D2:23:87:08:97:4C:F6:BC:10:AC:7E:56:42:81:74:1A X509v3 Authority Key Identifier: keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c5:c4:7b:90:43:bc:31:e0:48:dd:a6:3e:66:37:af:7f:e0: 7d:ed:1f:b3:b9:4e:c5:8c:a7:9a:f1:b7:e5:c4:44:4e:a4:c6: fe:97:6e:ee:b4:27:82:93:19:75:21:f4:e1:60:dd:bf:fb:ba: db:95:a8:e3:62:00:70:3d:c5:34:24:08:2e:57:16:1b:55:90: 5e:0d:9a:cc:ff:93:fb:79:7a:27:81:ba:22:0f:16:f4:f5:10: 52:24:27:6e:59:35:a0:e2:dd:f2:96:7a:97:4c:fd:d1:f8:d4: ab:17:c4:fb:8f:df:f2:91:6e:28:1c:86:f0:05:b7:93:ee:70: c5:b3:f7:7a:2c:99:e3:0d:ee:1b:ce:68:b6:76:fb:49:07:27: cb:5d:a4:eb:b8:f9:c5:e1:55:d6:d9:c0:a4:55:f7:5c:a8:49: 64:a8:bc:88:2d:99:3d:89:13:2c:ea:df:72:b1:37:80:b4:05: c0:51:f9:62:ba:1d:43:83:67:86:eb:d7:3f:20:6a:bd:cc:47: be:0f:ae:d1:0f:76:2c:41:b2:06:12:a9:9d:ab:1a:3f:15:27: 05:e8:fc:10:ff:93:94:8f:6c:15:d0:fb:b5:31:f9:f8:51:9b: 6b:71:e5:6b:7d:70:fd:9f:34:2a:f5:a7:a0:b5:4d:a1:13:1a: 68:c0:36:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbIZUVE3lvyh0tWm+8VzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4 NDk5NzQwHhcNMjYwMjA5MTMwMDU5WhcNMjYwMjEwMTMwMDU5WjAzMTEwLwYDVQQD Eyg3ZWIzZDM4YWQyMjM4NzA4OTc0Y2Y2YmMxMGFjN2U1NjQyODE3NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUulNzJ8bCkPS5j71p6sWxvURh13 vdl19eRWANE9wtJnfNS3PPZXUK/PKikxRvGCSp4imznKGEyRqxKT+f3OF13FPUWm pSMm7C3ZqFx8K8hnIpysEmTYWYBVW123PU/bQ7k3yf0tQez8qrmg8As0KjIwZDZV 8r+v3zmdds+XjHvmH3w5gjKPoFWvKFqACvYz42/s33eGR/3OeUTxPDYd0Ik6zgt7 86lH3fD3x6VyKlCjR7J4KWB8AoxYi+0XbrniNdFIyu21wsEo9cuUDZ+tDvws3Zt7 njHS4c9mlUg6pyLv5sMV85kbMAAwSYKm8AtJbkTMIHLj3tvN0Tf+PrS3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6z04rSI4cIl0z2vBCsflZCgXQaMB8GA1UdIwQY MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3 LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8XEe5BD vDHgSN2mPmY3r3/gfe0fs7lOxYynmvG35cRETqTG/pdu7rQngpMZdSH04WDdv/u6 25Wo42IAcD3FNCQILlcWG1WQXg2azP+T+3l6J4G6Ig8W9PUQUiQnblk1oOLd8pZ6 l0z90fjUqxfE+4/f8pFuKByG8AW3k+5wxbP3eiyZ4w3uG85otnb7SQcny12k67j5 xeFV1tnApFX3XKhJZKi8iC2ZPYkTLOrfcrE3gLQFwFH5YrodQ4NnhuvXPyBqvcxH vg+u0Q92LEGyBhKpnasaPxUnBej8EP+TlI9sFdD7tTH5+FGba3Hla31w/Z80KvWn oLVNoRMaaMA2bg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:00 2026 by rpki-client