This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json) Hash identifier: H2xdhneYrwSchMeghOgTgy1we+AQZA72IUhL9an4pWE= Subject key identifier: CE:DF:71:9F:5C:04:9F:12:23:29:B3:06:FA:4D:43:65:F3:65:80:B5 Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Certificate serial: 019C43908EF68A1C4845BE73A8D0196E2BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft Manifest number: 0BA3 Signing time: Mon 09 Feb 2026 18:01:13 +0000 Manifest this update: Mon 09 Feb 2026 18:01:13 +0000 Manifest next update: Tue 10 Feb 2026 18:01:13 +0000 Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: /sGnEzr/py5IiUvtXI2zQxLRiIPr7GHzhhho6fFlr04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:8e:f6:8a:1c:48:45:be:73:a8:d0:19:6e:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Validity Not Before: Feb 9 18:01:13 2026 GMT Not After : Feb 10 18:01:13 2026 GMT Subject: CN=cedf719f5c049f122329b306fa4d4365f36580b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:db:c6:d5:ad:26:0a:90:2b:2a:66:97:c4: ec:76:99:24:09:fd:7b:90:2a:ae:52:ed:20:4e:b4: 1f:7b:f1:e4:04:a3:f9:90:a6:1d:77:b1:b4:be:f8: da:fa:d4:c2:d0:ce:51:93:01:66:e3:95:5e:76:60: 5c:0d:eb:48:74:0d:a9:51:dc:b0:72:1a:d2:31:e8: 1e:cf:de:1d:3b:ba:db:4f:95:1e:b7:d1:84:01:4e: d1:98:34:fc:4a:04:99:e4:de:af:97:73:3c:b6:72: 03:63:e8:0e:de:03:1f:61:ff:11:8d:88:56:6f:5e: 08:cf:9b:4e:1b:68:7b:44:47:a4:3b:64:7f:eb:5a: 7c:8e:3f:5b:af:e0:06:f6:ca:22:57:cc:6e:5f:58: b1:05:0b:41:fc:88:70:47:34:40:31:ec:3c:0d:19: 03:a0:4e:02:ab:5f:9c:33:f1:f4:57:47:20:66:90: 14:1d:de:2d:d8:5a:69:1d:4d:9d:01:f9:f0:72:1f: 6f:e8:84:60:4f:73:99:b0:32:23:cc:05:1f:86:ec: 14:73:21:80:0a:d9:9c:ca:94:9d:de:eb:f7:3b:d4: 4c:4d:af:d6:0a:6a:cb:7d:6f:35:10:ad:b5:b3:46: f6:ff:63:ad:08:1a:94:0b:0b:7b:d6:db:19:54:46: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:71:9F:5C:04:9F:12:23:29:B3:06:FA:4D:43:65:F3:65:80:B5 X509v3 Authority Key Identifier: keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:b6:63:23:1c:b7:12:0e:9a:fa:56:0a:ef:46:70:02:eb: 34:15:87:1f:af:40:84:e0:17:3a:98:ae:97:06:9f:c2:b8:c6: 11:21:42:ea:aa:69:0e:92:c2:f6:2e:73:5f:37:eb:1f:05:8f: 33:01:95:72:a2:94:38:4a:ec:74:8a:08:0f:3b:84:48:62:31: 9f:a1:73:19:60:63:3d:9a:e8:f5:19:12:27:78:d4:7c:7c:81: ea:9d:ce:48:47:bc:a6:e2:ac:3e:fa:89:e1:1f:c3:c9:f5:5a: ff:12:25:cb:87:5a:01:13:f2:7c:d7:37:4b:f1:1e:a3:1e:ae: 53:00:7b:14:be:5f:19:e9:ad:58:72:10:b4:a0:91:61:89:4e: ee:af:8c:42:41:95:3b:80:f0:72:93:53:9c:85:29:54:73:b3: 58:eb:d4:91:c9:6a:13:48:bb:6b:d7:f9:78:a1:e6:72:e4:fb: 6f:19:9c:a5:3d:21:f7:68:2c:60:8d:9a:d0:74:ae:39:4c:1e: 3a:a6:d9:89:bd:b9:54:37:47:0c:e6:1e:0b:1b:3d:84:96:94: 6d:cc:46:d4:bf:ff:68:27:11:99:5e:3a:17:1c:39:8e:27:3f: fd:ac:3e:8f:d0:82:80:7a:3f:19:24:c4:0b:15:a5:85:b8:27: 3f:10:cb:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkI72ihxIRb5zqNAZbiu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj OTRlMTMwHhcNMjYwMjA5MTgwMTEzWhcNMjYwMjEwMTgwMTEzWjAzMTEwLwYDVQQD EyhjZWRmNzE5ZjVjMDQ5ZjEyMjMyOWIzMDZmYTRkNDM2NWYzNjU4MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLbbxtWtJgqQKypml8TsdpkkCf17 kCquUu0gTrQfe/HkBKP5kKYdd7G0vvja+tTC0M5RkwFm45VedmBcDetIdA2pUdyw chrSMegez94dO7rbT5Uet9GEAU7RmDT8SgSZ5N6vl3M8tnIDY+gO3gMfYf8RjYhW b14Iz5tOG2h7REekO2R/61p8jj9br+AG9soiV8xuX1ixBQtB/IhwRzRAMew8DRkD oE4Cq1+cM/H0V0cgZpAUHd4t2FppHU2dAfnwch9v6IRgT3OZsDIjzAUfhuwUcyGA CtmcypSd3uv3O9RMTa/WCmrLfW81EK21s0b2/2OtCBqUCwt71tsZVEbwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7fcZ9cBJ8SIymzBvpNQ2XzZYC1MB8GA1UdIwQY MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGy2YyMc txIOmvpWCu9GcALrNBWHH69AhOAXOpiulwafwrjGESFC6qppDpLC9i5zXzfrHwWP MwGVcqKUOErsdIoIDzuESGIxn6FzGWBjPZro9RkSJ3jUfHyB6p3OSEe8puKsPvqJ 4R/DyfVa/xIly4daARPyfNc3S/Eeox6uUwB7FL5fGemtWHIQtKCRYYlO7q+MQkGV O4DwcpNTnIUpVHOzWOvUkclqE0i7a9f5eKHmcuT7bxmcpT0h92gsYI2a0HSuOUwe OqbZib25VDdHDOYeCxs9hJaUbcxG1L//aCcRmV46Fxw5jic//aw+j9CCgHo/GSTE CxWlhbgnPxDLyg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:59 2026 by rpki-client