This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft File: RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft (raw, json) Hash identifier: d12PF5zXFZySw6A4ABGI0SRh3lccKBKzIPtFt1ZDll4= Subject key identifier: 79:60:72:68:B6:F3:EE:1A:91:AF:37:41:CC:B4:DF:F6:0A:9B:ED:FA Authority key identifier: 46:9B:81:DD:81:0C:FF:E3:6B:6C:40:17:42:0E:91:B7:6B:C4:92:33 Certificate issuer: /CN=469b81dd810cffe36b6c4017420e91b76bc49233 Certificate serial: 019C42B43C472FA4509D20932D07EB2F0DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft Manifest number: 49 Signing time: Mon 09 Feb 2026 14:00:34 +0000 Manifest this update: Mon 09 Feb 2026 14:00:34 +0000 Manifest next update: Tue 10 Feb 2026 14:00:34 +0000 Files and hashes: 1: RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl (hash: aFZAiFcngFsiulR2sEsrBbAnIOcckOBSpdmkAgnrYVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3c:47:2f:a4:50:9d:20:93:2d:07:eb:2f:0d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469b81dd810cffe36b6c4017420e91b76bc49233 Validity Not Before: Feb 9 14:00:34 2026 GMT Not After : Feb 10 14:00:34 2026 GMT Subject: CN=79607268b6f3ee1a91af3741ccb4dff60a9bedfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:2d:bc:67:4f:3b:87:78:b7:2a:06:15:5d: 00:ed:7c:ec:dd:40:a4:3f:fc:7e:f3:85:88:08:33: 8c:84:61:ac:09:db:82:f6:c1:88:43:d1:de:7a:11: 5e:c9:4c:df:80:d9:81:af:b9:cd:a8:2b:3c:a2:29: 88:99:8c:2b:bf:e7:2a:ba:61:f0:53:d0:7f:1c:74: 87:57:1d:79:34:cb:7e:8a:d3:6a:e0:97:96:42:2d: b1:0b:6e:c3:47:bd:d9:89:4b:f9:de:4d:4c:fb:39: e8:df:96:2d:73:04:cc:27:85:79:1f:ef:16:cd:b3: 22:d0:8a:65:6e:46:e6:4a:d8:c7:da:1b:40:6d:62: 09:dc:0e:c1:66:a3:91:93:fc:73:84:35:0d:d3:b1: 49:a2:27:e4:cd:ef:69:01:45:e8:23:df:7a:b5:63: 2b:7b:71:63:07:4f:9c:20:7a:94:46:37:e6:9d:b8: 3d:b6:4c:94:a6:3d:82:6c:fc:68:60:b6:3c:49:c9: d4:bd:0f:d7:4f:f4:68:ef:b3:5b:76:c7:08:fe:2f: f6:a3:bd:89:c6:ba:db:75:4c:6e:3f:20:2c:39:2c: 7d:76:32:dd:ae:86:ca:a2:4d:42:99:b8:96:df:29: 1b:01:3a:4e:fa:a3:07:5d:e1:08:df:6d:96:12:87: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:72:68:B6:F3:EE:1A:91:AF:37:41:CC:B4:DF:F6:0A:9B:ED:FA X509v3 Authority Key Identifier: keyid:46:9B:81:DD:81:0C:FF:E3:6B:6C:40:17:42:0E:91:B7:6B:C4:92:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/RpuB3YEM_-NrbEAXQg6Rt2vEkjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:75:d4:ee:5b:00:bf:92:3d:0f:5c:d0:a4:49:25:a0:57: 7e:dc:7b:a9:b5:a5:8c:f0:cb:18:57:cd:fe:b5:9e:5d:8b:70: 9d:8f:dd:43:55:1f:80:da:f8:74:88:86:bc:5f:32:4c:db:99: cc:5d:b4:f8:e7:0e:97:3c:ae:04:0e:be:8c:a2:4f:40:ce:0d: 24:ea:05:81:76:1a:2a:44:56:7b:15:51:7d:7f:0d:62:aa:56: 7b:ca:9c:c6:52:64:da:dd:58:70:0f:fe:ec:14:5c:87:98:95: e9:ea:e5:ff:05:2e:c6:b9:fb:11:fe:e7:a3:35:8b:18:c2:c2: bf:dc:b9:c5:26:f8:3b:21:af:8e:98:40:4b:f8:e0:f2:4d:d3: 8c:50:3a:7e:70:b7:f6:7c:37:92:2a:da:b1:57:09:80:26:e6: 95:97:8d:55:b3:1a:fa:7b:ea:d3:10:5e:1a:ab:82:f8:08:64: c9:b3:b7:53:49:b0:12:b3:ec:b9:9d:77:cb:6c:bf:bc:fd:1d: eb:45:45:51:43:43:40:b4:82:1a:da:e7:bc:8f:19:17:da:1e: 81:b1:37:fb:15:d4:1a:2a:ca:40:5b:a7:ff:61:10:b3:64:cd: fe:e8:7b:6e:de:dd:27:aa:59:34:db:79:b0:64:7b:fd:f1:b8: 79:f6:70:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDxHL6RQnSCTLQfrLw3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OWI4MWRkODEwY2ZmZTM2YjZjNDAxNzQyMGU5MWI3NmJj NDkyMzMwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD Eyg3OTYwNzI2OGI2ZjNlZTFhOTFhZjM3NDFjY2I0ZGZmNjBhOWJlZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLMtvGdPO4d4tyoGFV0A7Xzs3UCk P/x+84WICDOMhGGsCduC9sGIQ9HeehFeyUzfgNmBr7nNqCs8oimImYwrv+cqumHw U9B/HHSHVx15NMt+itNq4JeWQi2xC27DR73ZiUv53k1M+zno35YtcwTMJ4V5H+8W zbMi0IplbkbmStjH2htAbWIJ3A7BZqORk/xzhDUN07FJoifkze9pAUXoI996tWMr e3FjB0+cIHqURjfmnbg9tkyUpj2CbPxoYLY8ScnUvQ/XT/Ro77NbdscI/i/2o72J xrrbdUxuPyAsOSx9djLdrobKok1CmbiW3ykbATpO+qMHXeEI322WEoeAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlgcmi28+4aka83Qcy03/YKm+36MB8GA1UdIwQY MBaAFEabgd2BDP/ja2xAF0IOkbdrxJIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnB1QjNZRU1fLU5yYkVBWFFnNlJ0MnZFa2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85MTFiYzAtMDgwYy00NDBjLWIxNjMt MGEwNGYzYzk3NmU2LzEvUnB1QjNZRU1fLU5yYkVBWFFnNlJ0MnZFa2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85MTFiYzAtMDgwYy00NDBjLWIxNjMtMGEwNGYzYzk3NmU2 LzEvUnB1QjNZRU1fLU5yYkVBWFFnNlJ0MnZFa2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnp11O5b AL+SPQ9c0KRJJaBXftx7qbWljPDLGFfN/rWeXYtwnY/dQ1UfgNr4dIiGvF8yTNuZ zF20+OcOlzyuBA6+jKJPQM4NJOoFgXYaKkRWexVRfX8NYqpWe8qcxlJk2t1YcA/+ 7BRch5iV6erl/wUuxrn7Ef7nozWLGMLCv9y5xSb4OyGvjphAS/jg8k3TjFA6fnC3 9nw3kirasVcJgCbmlZeNVbMa+nvq0xBeGquC+AhkybO3U0mwErPsuZ13y2y/vP0d 60VFUUNDQLSCGtrnvI8ZF9oegbE3+xXUGirKQFun/2EQs2TN/uh7bt7dJ6pZNNt5 sGR7/fG4efZwbA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:05 2026 by rpki-client