This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json) Hash identifier: XTQqaNWsSNE7PeZ7ayxWfv0EZ+a6GojZ+hmIKIuAcI0= Subject key identifier: 56:53:F3:B5:1C:21:AF:21:EC:75:59:F8:86:C5:91:2A:29:70:62:1F Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e Certificate serial: 019C420FC687E5002315CB149B5298455B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft Manifest number: 0EE1 Signing time: Mon 09 Feb 2026 11:00:55 +0000 Manifest this update: Mon 09 Feb 2026 11:00:55 +0000 Manifest next update: Tue 10 Feb 2026 11:00:55 +0000 Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: ChbOJoHD8Gsk5qSjxe7SZhs1X3b77ay8M+DAVKYbuto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c6:87:e5:00:23:15:cb:14:9b:52:98:45:5b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e385733213b34236019a140ff19c5398ed71730e Validity Not Before: Feb 9 11:00:55 2026 GMT Not After : Feb 10 11:00:55 2026 GMT Subject: CN=5653f3b51c21af21ec7559f886c5912a2970621f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:b9:64:01:86:4e:db:bd:73:93:92:09:4f: 06:a1:1e:7b:ea:67:66:ea:0a:da:09:32:57:63:e7: 8a:b0:0f:dc:a1:fe:b3:f0:18:c8:ac:8f:22:67:52: 3e:b0:34:ca:a4:bf:c2:5b:94:09:29:db:1a:64:c6: af:c8:79:fd:fb:d1:29:bc:b9:19:93:d3:0f:bc:b7: 94:4a:41:76:24:57:df:07:9b:59:75:0d:6c:4c:9a: 79:ff:86:a0:9d:ce:4a:17:a3:bb:d4:29:0d:04:f9: d2:60:29:09:37:78:0d:ac:b0:05:1a:d4:9e:55:be: 6b:aa:75:b6:e0:fc:94:69:b7:a5:11:d5:80:a9:6c: f2:46:50:7a:29:3d:69:1c:03:8f:15:bd:7f:0f:8b: 9a:ba:db:e5:e5:9f:29:2b:09:31:74:f9:26:00:81: 2c:5a:02:b3:cd:78:b6:d2:5c:a3:6a:be:1d:e4:53: 5f:91:ef:4f:e0:22:59:30:7a:23:19:2d:9b:77:01: f0:cf:99:26:d2:c6:ba:48:fa:2b:36:d8:57:65:6c: 96:17:b5:13:bf:33:42:41:d8:f7:7d:30:19:e0:f7: 86:c1:a3:21:9c:83:67:84:20:52:68:5c:c7:f7:18: af:7c:b5:13:42:36:f0:5f:07:d2:20:ac:a0:73:41: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:F3:B5:1C:21:AF:21:EC:75:59:F8:86:C5:91:2A:29:70:62:1F X509v3 Authority Key Identifier: keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fa:c8:fb:d6:59:c2:02:8b:24:8f:ba:7c:40:3c:95:ef:77: 2d:f9:90:9a:c0:2c:6e:0f:4e:70:2f:5d:a6:7c:ba:26:d6:a5: 59:63:c5:2f:3e:f0:87:ab:2c:7b:3c:dd:0a:c0:4a:ab:3c:57: 3a:6c:93:20:79:e6:ec:b6:44:59:51:79:c0:c8:31:30:4e:95: 4d:59:23:2c:06:a9:5a:56:06:3e:f3:5a:b3:46:de:d8:2e:8e: 53:86:79:4a:e7:de:f1:c8:1f:94:3a:4e:98:4e:f5:d5:98:6d: 72:a4:97:5e:d5:09:d4:b1:63:79:a5:b8:38:2e:11:5d:9f:8e: 89:d2:4d:50:09:a3:35:1f:9e:dd:b1:28:3b:40:fa:0f:9c:68: dc:35:f9:c5:9f:b8:60:01:f9:1c:31:a8:5d:30:40:d9:6d:71: e0:18:0f:87:2f:ad:39:cc:28:bc:b4:d9:c5:e1:ac:b0:1c:85: c5:8c:8d:82:45:70:40:e6:99:1e:3b:31:32:c0:77:2e:78:39: 41:d6:21:ec:d3:73:e1:a4:31:70:ca:b7:07:53:8f:a7:06:82: b7:e1:49:5c:70:17:c5:1d:fb:23:02:45:6d:84:97:07:2f:89: 5c:cb:5d:54:bf:0e:d2:42:c1:ae:5e:b5:95:c7:d8:42:b5:4d: e4:0d:63:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8aH5QAjFcsUm1KYRVuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3 MTczMGUwHhcNMjYwMjA5MTEwMDU1WhcNMjYwMjEwMTEwMDU1WjAzMTEwLwYDVQQD Eyg1NjUzZjNiNTFjMjFhZjIxZWM3NTU5Zjg4NmM1OTEyYTI5NzA2MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQm5ZAGGTtu9c5OSCU8GoR576mdm 6graCTJXY+eKsA/cof6z8BjIrI8iZ1I+sDTKpL/CW5QJKdsaZMavyHn9+9EpvLkZ k9MPvLeUSkF2JFffB5tZdQ1sTJp5/4agnc5KF6O71CkNBPnSYCkJN3gNrLAFGtSe Vb5rqnW24PyUabelEdWAqWzyRlB6KT1pHAOPFb1/D4uautvl5Z8pKwkxdPkmAIEs WgKzzXi20lyjar4d5FNfke9P4CJZMHojGS2bdwHwz5km0sa6SPorNthXZWyWF7UT vzNCQdj3fTAZ4PeGwaMhnINnhCBSaFzH9xivfLUTQjbwXwfSIKygc0GZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZT87UcIa8h7HVZ+IbFkSopcGIfMB8GA1UdIwQY MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3 LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/rI+9ZZ wgKLJI+6fEA8le93LfmQmsAsbg9OcC9dpny6JtalWWPFLz7wh6ssezzdCsBKqzxX OmyTIHnm7LZEWVF5wMgxME6VTVkjLAapWlYGPvNas0be2C6OU4Z5Sufe8cgflDpO mE711ZhtcqSXXtUJ1LFjeaW4OC4RXZ+OidJNUAmjNR+e3bEoO0D6D5xo3DX5xZ+4 YAH5HDGoXTBA2W1x4BgPhy+tOcwovLTZxeGssByFxYyNgkVwQOaZHjsxMsB3Lng5 QdYh7NNz4aQxcMq3B1OPpwaCt+FJXHAXxR37IwJFbYSXBy+JXMtdVL8O0kLBrl61 lcfYQrVN5A1jPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:57 2026 by rpki-client