This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json) Hash identifier: t/6txejD3/Nj+Tld5ANj3zKhcjcLqrYHLL/VkBq/9tM= Subject key identifier: 0C:92:5A:FB:A6:3D:C7:01:08:48:02:49:49:31:B0:DA:FC:D3:FF:CA Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7 Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7 Certificate serial: 019C43FE70E3153A108C007D2EB4987FF882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 20:01:14 +0000 Manifest this update: Mon 09 Feb 2026 20:01:14 +0000 Manifest next update: Tue 10 Feb 2026 20:01:14 +0000 Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: gsjGR9N4+huRv5N6CUDurcT6N1GXxnxu/LlCTwVZ9Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:70:e3:15:3a:10:8c:00:7d:2e:b4:98:7f:f8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7 Validity Not Before: Feb 9 20:01:14 2026 GMT Not After : Feb 10 20:01:14 2026 GMT Subject: CN=0c925afba63dc701084802494931b0dafcd3ffca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:d0:50:72:73:f9:60:81:a5:ab:23:7c:04: d2:ea:36:ce:da:7b:60:c1:f8:75:2c:0a:71:c2:c0: 7d:19:ea:93:e9:48:96:b0:f7:0e:60:bf:8b:3d:43: 57:a6:44:f8:ec:8b:b8:2d:20:7b:05:b4:4a:11:d9: 70:a3:82:27:bf:9f:bc:de:5e:3a:a6:68:6f:1e:41: a9:c2:ba:92:22:0d:8e:40:e4:0f:e5:ea:80:87:bb: c9:a4:0a:2c:ac:66:23:61:e6:18:fe:7e:cc:1a:69: 7f:f5:8d:25:d4:be:0e:d3:83:4f:bf:93:f9:2b:21: cd:d2:6e:08:cd:36:63:1b:fd:ea:b6:55:d0:82:82: 62:26:ea:8b:97:66:f3:30:ee:ba:cf:a5:33:b4:8a: 96:2c:73:7a:00:94:94:a3:2f:9f:d3:e2:80:d0:c4: e4:bc:9f:31:cb:c2:4e:20:c2:57:c1:3c:20:06:f5: c1:0a:c7:a8:00:7b:aa:39:37:eb:8e:01:3e:1f:c8: 8f:f5:1c:c5:28:4c:eb:71:24:08:2d:d4:4e:76:da: df:9f:19:7d:19:12:04:fb:f9:78:0b:95:f8:7b:d5: ff:25:ee:ee:32:e7:bb:ba:3f:7f:c1:de:48:e2:2d: af:3f:c5:c3:c4:c3:3c:b4:41:84:92:45:db:cf:a9: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:5A:FB:A6:3D:C7:01:08:48:02:49:49:31:B0:DA:FC:D3:FF:CA X509v3 Authority Key Identifier: keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c8:4a:e4:67:b6:84:7c:4d:25:7f:c0:e0:f1:de:67:33:6b: 19:c1:22:c7:a1:08:9c:49:72:66:fc:38:b3:6b:b5:d0:bc:54: 22:73:c1:b9:01:e1:c5:c7:f5:e5:9d:7d:2c:9d:69:0e:28:d2: c4:82:c3:25:8c:dc:a2:f8:3d:6b:75:80:41:9d:c1:05:93:15: 69:39:cc:b5:58:02:63:40:28:8b:76:51:0f:f8:5a:bb:29:cf: a1:d2:42:f2:34:35:1f:57:03:9f:20:ce:50:7c:f4:ad:c6:b0: c3:41:83:b9:92:1d:ef:bb:41:85:2a:85:1c:36:90:08:d5:6d: f6:7e:20:4d:3a:6e:56:30:cb:e9:37:65:6e:12:fe:9e:fc:fb: 0e:02:e6:97:cf:44:cb:d2:5f:24:88:cb:9e:b8:76:8c:e2:bb: b7:2b:ee:63:ce:36:92:7e:f9:44:f5:d0:7c:3a:7e:76:24:23: 81:0f:e7:57:b6:55:04:22:5d:19:1b:e7:66:9f:59:d0:dd:5b: f8:2c:3a:76:1b:54:c7:2e:05:2e:18:f8:5a:ad:33:dc:44:9c: 9a:ae:50:a4:ed:c3:9d:e7:f8:75:7a:d0:35:19:f8:56:53:cb: 96:27:3d:19:ab:ac:b9:5a:e2:d2:62:e6:9a:d4:87:57:20:a7: 95:a3:79:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nDjFToQjAB9LrSYf/iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOGI3OTgxMGNlYmM1YmEyYTUyZjdhMDhkNTE5NmQzM2U4 Y2RjZTcwHhcNMjYwMjA5MjAwMTE0WhcNMjYwMjEwMjAwMTE0WjAzMTEwLwYDVQQD EygwYzkyNWFmYmE2M2RjNzAxMDg0ODAyNDk0OTMxYjBkYWZjZDNmZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymXQUHJz+WCBpasjfATS6jbO2ntg wfh1LApxwsB9GeqT6UiWsPcOYL+LPUNXpkT47Iu4LSB7BbRKEdlwo4Inv5+83l46 pmhvHkGpwrqSIg2OQOQP5eqAh7vJpAosrGYjYeYY/n7MGml/9Y0l1L4O04NPv5P5 KyHN0m4IzTZjG/3qtlXQgoJiJuqLl2bzMO66z6UztIqWLHN6AJSUoy+f0+KA0MTk vJ8xy8JOIMJXwTwgBvXBCseoAHuqOTfrjgE+H8iP9RzFKEzrcSQILdROdtrfnxl9 GRIE+/l4C5X4e9X/Je7uMue7uj9/wd5I4i2vP8XDxMM8tEGEkkXbz6nnuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAySWvumPccBCEgCSUkxsNr80//KMB8GA1UdIwQY MBaAFG+LeYEM68W6KlL3oI1RltM+jNznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2Et NDQzNTUzMjhiN2IwLzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2EtNDQzNTUzMjhiN2Iw LzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8hK5Ge2 hHxNJX/A4PHeZzNrGcEix6EInElyZvw4s2u10LxUInPBuQHhxcf15Z19LJ1pDijS xILDJYzcovg9a3WAQZ3BBZMVaTnMtVgCY0Aoi3ZRD/hauynPodJC8jQ1H1cDnyDO UHz0rcaww0GDuZId77tBhSqFHDaQCNVt9n4gTTpuVjDL6TdlbhL+nvz7DgLml89E y9JfJIjLnrh2jOK7tyvuY842kn75RPXQfDp+diQjgQ/nV7ZVBCJdGRvnZp9Z0N1b +Cw6dhtUxy4FLhj4Wq0z3EScmq5QpO3Dnef4dXrQNRn4VlPLlic9GausuVri0mLm mtSHVyCnlaN5Ug== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:56 2026 by rpki-client