This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json) Hash identifier: 0CHM+yM3GrK7ibJPT4Z4uutp3gKJuC4LZQvSR6gA2rA= Subject key identifier: ED:54:B1:4D:F4:6F:5B:BD:24:9E:A3:30:37:E3:98:50:88:06:65:B2 Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35 Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35 Certificate serial: 019C4321D9D5CA0382E206FF760A3DC171BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft Manifest number: 0B31 Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: eW2RNz+ysJweno2j+1mCcnkO2Zw8nZLMOSKLwQTuZ2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d9:d5:ca:03:82:e2:06:ff:76:0a:3d:c1:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=ed54b14df46f5bbd249ea33037e39850880665b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:b3:87:f5:9e:f8:e2:94:d7:c4:40:24:d0: 6a:78:aa:42:44:b3:cb:dc:4a:bc:28:5d:8e:77:a2: 46:1a:e5:65:50:c7:24:bf:01:17:6b:b9:d8:f5:86: ca:9d:8c:06:08:05:8e:f2:20:46:5c:c9:ec:13:04: b1:3a:74:aa:f1:07:1f:1c:41:a2:9a:cd:47:b7:0c: 99:b1:60:4c:a0:d4:cf:30:ab:d2:ec:20:f4:02:75: 61:d6:89:4c:a0:4c:6e:03:ff:8e:f7:24:26:67:43: 60:25:83:fc:08:b8:80:fc:3b:25:50:d7:b1:b1:0f: e9:43:95:ea:46:1f:1a:8d:7e:ed:3f:d9:fb:68:cf: 4b:cb:ac:0b:75:c7:05:f4:a3:71:e5:28:5f:ee:c1: 56:d5:e0:66:87:a4:13:fe:29:fa:f7:de:19:49:c1: 41:fe:ad:03:85:b0:44:93:e7:10:bd:f9:53:0e:5f: 25:be:15:30:95:7e:04:1d:4b:c9:0c:e4:fa:5a:65: 08:bd:3a:3e:70:43:c0:09:4e:13:21:d3:89:99:6b: 1c:44:1e:5c:a9:57:7d:b1:24:86:65:bc:e2:8f:80: 7e:66:d8:ab:58:44:93:27:d2:9f:cb:b2:2a:46:fd: d1:83:97:a8:c3:48:46:c4:33:38:64:b6:70:2e:fb: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:54:B1:4D:F4:6F:5B:BD:24:9E:A3:30:37:E3:98:50:88:06:65:B2 X509v3 Authority Key Identifier: keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:51:26:53:dd:c6:d3:68:1c:6e:cc:6d:90:ef:e5:65:a4:a9: 5e:6a:78:c0:be:46:ed:18:b1:32:f8:80:01:1e:5d:ff:61:88: 72:21:5a:da:d0:45:ec:10:5f:5f:20:5f:e3:16:74:a0:4c:51: 83:c7:fa:20:b2:e6:04:6e:df:70:e0:3f:f7:77:ad:7a:49:1b: 0e:a4:79:38:bd:5a:15:48:2f:4f:ed:e7:a6:5f:e7:a5:c7:54: f3:d4:77:f5:fa:98:e6:fe:43:b2:c7:0d:73:58:cb:81:71:72: ec:c9:10:9e:69:7e:7b:13:02:7d:cd:ac:4a:87:3a:99:bb:30: cf:27:c6:3b:75:9e:fe:bd:7b:bb:fc:31:ea:ff:71:6c:7c:9c: 85:25:65:af:66:73:7a:66:4e:2a:c7:9b:cf:b2:e2:71:60:3e: e4:83:06:1a:c5:68:33:1f:ad:f1:bf:76:ad:18:00:c3:a3:ba: 47:ef:d9:c4:6b:51:87:eb:dc:79:cb:b9:16:c6:e8:62:01:ce: cc:21:d5:bf:24:a2:ac:f4:2c:8e:c3:7d:f8:bd:f2:a0:17:66: f7:fc:84:c7:37:65:af:bf:a3:1e:4b:bb:b3:59:6d:63:8e:80: f7:02:fd:59:9d:b4:60:10:56:fd:f3:0f:e8:ff:82:8f:e2:83: c0:1b:2c:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdnVygOC4gb/dgo9wXG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh NDFiMzUwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EyhlZDU0YjE0ZGY0NmY1YmJkMjQ5ZWEzMzAzN2UzOTg1MDg4MDY2NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUyzh/We+OKU18RAJNBqeKpCRLPL 3Eq8KF2Od6JGGuVlUMckvwEXa7nY9YbKnYwGCAWO8iBGXMnsEwSxOnSq8QcfHEGi ms1HtwyZsWBMoNTPMKvS7CD0AnVh1olMoExuA/+O9yQmZ0NgJYP8CLiA/DslUNex sQ/pQ5XqRh8ajX7tP9n7aM9Ly6wLdccF9KNx5Shf7sFW1eBmh6QT/in6994ZScFB /q0DhbBEk+cQvflTDl8lvhUwlX4EHUvJDOT6WmUIvTo+cEPACU4TIdOJmWscRB5c qVd9sSSGZbzij4B+ZtirWESTJ9Kfy7IqRv3Rg5eow0hGxDM4ZLZwLvt3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1UsU30b1u9JJ6jMDfjmFCIBmWyMB8GA1UdIwQY MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlEmU93G 02gcbsxtkO/lZaSpXmp4wL5G7RixMviAAR5d/2GIciFa2tBF7BBfXyBf4xZ0oExR g8f6ILLmBG7fcOA/93etekkbDqR5OL1aFUgvT+3npl/npcdU89R39fqY5v5DsscN c1jLgXFy7MkQnml+exMCfc2sSoc6mbswzyfGO3We/r17u/wx6v9xbHychSVlr2Zz emZOKsebz7LicWA+5IMGGsVoMx+t8b92rRgAw6O6R+/ZxGtRh+vcecu5FsboYgHO zCHVvySirPQsjsN9+L3yoBdm9/yExzdlr7+jHku7s1ltY46A9wL9WZ20YBBW/fMP 6P+Cj+KDwBss4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:43 2026 by rpki-client