This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json) Hash identifier: 28gCwHMgZkD++ANNvY0nhnZcc4RS2iPA+sg09a0rxxY= Subject key identifier: FA:79:1A:06:14:83:79:A6:0F:6E:90:5F:8E:59:97:3C:67:3E:AD:72 Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Certificate serial: 019C4246A76CB03EA9DEBD3DBD9DB4766364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: FuXQ1y3ZmL0O9godeP3gL3vTBE5Y569vrCXigDVimf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a7:6c:b0:3e:a9:de:bd:3d:bd:9d:b4:76:63:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=fa791a06148379a60f6e905f8e59973c673ead72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:07:21:f3:08:d3:31:2e:53:74:10:ac:72: 98:8c:5c:7b:9a:ff:fc:12:ad:5b:06:6f:0c:d5:ef: 17:e0:33:dc:89:e7:dd:ae:96:ad:ea:68:ac:01:bf: 52:d4:b9:32:1c:1f:0b:d3:92:2f:0f:4d:0e:83:3c: af:44:d9:8f:82:7f:8b:32:d5:f4:f0:d9:e2:da:16: c0:01:fb:db:11:d3:be:03:37:22:b2:09:72:af:f7: 20:b2:7a:93:d5:31:6c:25:ef:53:f3:46:ad:ab:0d: 49:e8:bf:10:67:44:af:37:c0:d1:21:e1:33:f2:92: a0:af:f0:0b:90:a9:bf:54:8a:92:ec:e1:f8:69:12: 38:cf:ae:06:6c:2b:f7:83:19:66:19:e3:1b:c4:56: bc:9f:1d:83:89:ae:2b:04:97:e8:5a:5d:68:45:bd: 0e:61:2f:ca:0f:40:db:0a:f3:9c:33:6a:8c:ba:44: 86:40:83:24:5a:96:02:32:b9:0c:61:16:68:71:73: fb:ed:a4:b7:0a:22:7f:09:29:a9:ca:6b:34:c7:f9: d8:84:76:43:c6:7c:f3:50:8c:49:65:98:0f:13:1f: ed:24:a5:6a:9a:99:4e:b1:fb:8f:27:e0:b5:51:ab: 49:33:d9:f2:56:c8:ca:97:9f:d6:ea:e5:d9:c3:26: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:79:1A:06:14:83:79:A6:0F:6E:90:5F:8E:59:97:3C:67:3E:AD:72 X509v3 Authority Key Identifier: keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:2c:80:46:8a:3d:27:0a:d2:72:3e:b5:c4:8c:f8:cd:8f: 6b:ad:32:81:e9:df:17:ad:3a:89:ad:1a:bd:dc:d9:4c:30:4f: 7a:94:95:9d:3a:a1:a8:97:06:d3:74:b0:39:9c:aa:66:01:df: 1b:2f:1c:e3:31:16:08:ba:36:fc:d5:9e:cd:d1:25:f0:29:12: b9:c9:d6:44:e0:de:14:11:5c:3c:de:20:9d:11:f4:b6:af:45: a0:e1:7f:79:1a:00:3e:0e:7e:e8:dc:91:5f:00:86:a0:3e:b3: ca:7e:54:b4:6e:3c:fd:83:24:50:1f:cb:f4:ba:d3:7e:87:e2: 6e:0d:1b:1e:fc:5c:eb:3d:f9:7b:9f:b4:55:ab:15:14:5e:6d: 67:9d:05:4b:7b:97:9d:38:ea:a8:d3:8e:56:de:94:b2:7b:cb: 24:90:bd:65:b0:6e:08:44:ba:96:6e:e0:2f:86:d8:b6:0a:0f: 44:d4:26:3a:50:23:ca:e9:03:6d:b2:11:e2:28:4e:35:67:c3: 93:8b:8f:ae:44:d7:ea:ea:48:60:ad:7e:39:13:e8:3b:de:8c: 6c:fa:89:37:c4:37:57:0f:cb:5d:e6:68:d7:9b:05:3f:da:cc: 65:a2:fe:50:7a:af:03:bf:ce:cd:10:63:84:2d:65:2d:01:5b: 3f:46:a7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqdssD6p3r09vZ20dmNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx YTJjNDkwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD EyhmYTc5MWEwNjE0ODM3OWE2MGY2ZTkwNWY4ZTU5OTczYzY3M2VhZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpwHIfMI0zEuU3QQrHKYjFx7mv/8 Eq1bBm8M1e8X4DPciefdrpat6misAb9S1LkyHB8L05IvD00OgzyvRNmPgn+LMtX0 8Nni2hbAAfvbEdO+Azcisglyr/cgsnqT1TFsJe9T80atqw1J6L8QZ0SvN8DRIeEz 8pKgr/ALkKm/VIqS7OH4aRI4z64GbCv3gxlmGeMbxFa8nx2Dia4rBJfoWl1oRb0O YS/KD0DbCvOcM2qMukSGQIMkWpYCMrkMYRZocXP77aS3CiJ/CSmpyms0x/nYhHZD xnzzUIxJZZgPEx/tJKVqmplOsfuPJ+C1UatJM9nyVsjKl5/W6uXZwybW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp5GgYUg3mmD26QX45ZlzxnPq1yMB8GA1UdIwQY MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfksgEaK PScK0nI+tcSM+M2Pa60ygenfF606ia0avdzZTDBPepSVnTqhqJcG03SwOZyqZgHf Gy8c4zEWCLo2/NWezdEl8CkSucnWRODeFBFcPN4gnRH0tq9FoOF/eRoAPg5+6NyR XwCGoD6zyn5UtG48/YMkUB/L9LrTfofibg0bHvxc6z35e5+0VasVFF5tZ50FS3uX nTjqqNOOVt6UsnvLJJC9ZbBuCES6lm7gL4bYtgoPRNQmOlAjyukDbbIR4ihONWfD k4uPrkTX6upIYK1+ORPoO96MbPqJN8Q3Vw/LXeZo15sFP9rMZaL+UHqvA7/OzRBj hC1lLQFbP0an1g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:34 2026 by rpki-client