This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: 2WIdwNKLrrSgwXmgRJIhn8Pzw7Nn70Vhv5Z3vYsJ9e8= Subject key identifier: E8:BE:FF:7A:DE:27:2F:86:9A:6A:98:3E:58:49:29:4F:B0:BB:D7:24 Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019C4390B859DBE3C0C69AFD7AC83FED54FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 0635 Signing time: Mon 09 Feb 2026 18:01:23 +0000 Manifest this update: Mon 09 Feb 2026 18:01:23 +0000 Manifest next update: Tue 10 Feb 2026 18:01:23 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: DBjyYy3o11g8/5kQ/j/VTC0KSEw+2rzek5riwHXS9n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:b8:59:db:e3:c0:c6:9a:fd:7a:c8:3f:ed:54:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Feb 9 18:01:23 2026 GMT Not After : Feb 10 18:01:23 2026 GMT Subject: CN=e8beff7ade272f869a6a983e5849294fb0bbd724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:76:63:f4:71:e3:b3:9b:36:32:49:5f:00: 9a:6c:bf:b4:22:ef:b5:d1:01:42:d4:30:ba:1f:03: eb:98:31:94:36:da:74:bb:b8:28:9d:ae:79:ce:d8: 63:65:b5:53:04:9e:8b:80:e9:9c:55:d1:e4:16:1f: 0f:0a:0b:a3:8d:aa:96:aa:12:9a:18:89:de:ff:ff: 28:8c:93:25:f4:f8:f2:78:fb:f3:d7:ef:e3:da:99: 65:4d:cc:70:de:68:82:61:17:90:e6:c8:80:0c:55: 04:db:df:40:33:c4:8c:ec:38:4d:e9:33:c7:9c:b9: 88:59:4e:7f:b1:80:1d:30:3b:e0:ba:10:c6:e8:37: a0:9e:d2:8e:6a:69:0d:d0:42:16:45:ed:5a:18:43: ee:98:80:1e:f6:94:94:03:92:d3:a4:66:50:47:4f: 3a:85:0d:3b:2a:ca:83:78:9e:94:28:2d:06:46:a8: c6:ef:86:40:0e:76:4b:25:5f:4d:a9:e0:1c:ef:e5: 1e:a3:ba:27:7d:18:a7:73:56:4f:eb:db:62:31:4b: 1a:af:8b:ca:2f:cb:42:44:8a:39:21:bb:82:2d:22: 5f:3e:20:15:19:3c:8a:58:51:98:2a:bd:e0:a1:11: 78:21:00:e3:cd:da:0c:11:a6:6e:47:c9:57:60:fe: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:FF:7A:DE:27:2F:86:9A:6A:98:3E:58:49:29:4F:B0:BB:D7:24 X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c0:9f:44:b4:ad:8d:83:e8:a8:fc:94:f1:3a:de:bc:3d:d6: 45:73:61:e2:e6:e8:09:3f:b8:e7:ea:17:35:24:4e:cb:ba:79: c8:07:f7:e0:48:f9:01:b2:cd:b0:bf:45:25:6a:bb:27:2c:cf: dc:8a:29:02:48:cb:0a:14:b2:9c:1f:fd:03:5d:4c:5e:7c:5d: 2a:5e:ee:af:63:e8:aa:80:6d:72:58:a3:c3:ff:9b:54:a5:11: 60:a5:40:60:1c:a4:4f:d6:6f:be:61:90:5d:21:05:6e:65:fb: 33:5e:85:a3:a5:78:7d:ad:88:b8:43:5a:0a:f6:d2:24:e3:30: 47:6f:ae:70:2e:06:89:8c:71:5f:2b:ee:58:f6:c2:d2:5f:24: 05:b7:83:f9:6c:ec:bc:bc:5a:34:8b:74:43:fe:ef:f5:95:9c: 08:0e:e0:cc:24:f0:c5:c3:81:d6:3b:3a:dc:2c:11:24:80:4f: 83:5b:19:0b:34:99:f2:36:4e:ab:05:f0:77:e0:27:fc:44:d9: 33:c9:cd:af:12:cb:73:58:7c:11:76:e8:57:fc:e5:76:7b:98: 0c:b7:27:cf:3c:9b:ea:f8:34:21:3a:db:9d:b3:1a:ba:d3:7a: a6:7e:fc:5f:34:c3:54:f9:43:9d:2b:bc:c7:c7:18:c8:28:7c: 37:cb:bf:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkLhZ2+PAxpr9esg/7VT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjYwMjA5MTgwMTIzWhcNMjYwMjEwMTgwMTIzWjAzMTEwLwYDVQQD EyhlOGJlZmY3YWRlMjcyZjg2OWE2YTk4M2U1ODQ5Mjk0ZmIwYmJkNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p52Y/Rx47ObNjJJXwCabL+0Iu+1 0QFC1DC6HwPrmDGUNtp0u7gona55zthjZbVTBJ6LgOmcVdHkFh8PCgujjaqWqhKa GIne//8ojJMl9PjyePvz1+/j2pllTcxw3miCYReQ5siADFUE299AM8SM7DhN6TPH nLmIWU5/sYAdMDvguhDG6DegntKOamkN0EIWRe1aGEPumIAe9pSUA5LTpGZQR086 hQ07KsqDeJ6UKC0GRqjG74ZADnZLJV9NqeAc7+Ueo7onfRinc1ZP69tiMUsar4vK L8tCRIo5IbuCLSJfPiAVGTyKWFGYKr3goRF4IQDjzdoMEaZuR8lXYP7xVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi+/3reJy+GmmqYPlhJKU+wu9ckMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8CfRLSt jYPoqPyU8TrevD3WRXNh4uboCT+45+oXNSROy7p5yAf34Ej5AbLNsL9FJWq7JyzP 3IopAkjLChSynB/9A11MXnxdKl7ur2PoqoBtclijw/+bVKURYKVAYBykT9ZvvmGQ XSEFbmX7M16Fo6V4fa2IuENaCvbSJOMwR2+ucC4GiYxxXyvuWPbC0l8kBbeD+Wzs vLxaNIt0Q/7v9ZWcCA7gzCTwxcOB1js63CwRJIBPg1sZCzSZ8jZOqwXwd+An/ETZ M8nNrxLLc1h8EXboV/zldnuYDLcnzzyb6vg0ITrbnbMautN6pn78XzTDVPlDnSu8 x8cYyCh8N8u/0w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:31 2026 by rpki-client