This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json) Hash identifier: +RtoED2s3mOFGqAZM9ThYsVZwvLRcvHFSKfXRiOvKMM= Subject key identifier: E2:38:27:98:13:06:B9:01:74:C9:58:16:45:2A:89:9E:27:DC:8B:45 Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Certificate serial: 019C41D8F915E3B1A9245168F180F47E6D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft Manifest number: 0447 Signing time: Mon 09 Feb 2026 10:01:04 +0000 Manifest this update: Mon 09 Feb 2026 10:01:04 +0000 Manifest next update: Tue 10 Feb 2026 10:01:04 +0000 Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: G7ilfVPLzKNgxp6CfHEPSO4GEHLeTZtHnx4z8NY9lhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f9:15:e3:b1:a9:24:51:68:f1:80:f4:7e:6d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Validity Not Before: Feb 9 10:01:04 2026 GMT Not After : Feb 10 10:01:04 2026 GMT Subject: CN=e23827981306b90174c95816452a899e27dc8b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:cd:16:3b:de:d0:0f:f7:a2:4d:ba:6f:fc: 10:96:ba:aa:46:53:e0:0e:e5:f8:fa:cd:26:13:76: 29:34:78:9e:92:0d:36:f6:46:7b:fd:4a:59:dc:3f: 89:24:ea:21:0f:7d:75:58:13:d4:7d:a2:45:77:f1: b1:34:29:15:29:2a:1a:10:f6:fe:3b:f5:bc:fe:c8: d7:e3:b7:a1:cb:8e:e2:81:6c:62:78:4b:4d:e4:e7: 29:8a:27:f2:27:b2:63:93:f4:30:3b:23:9e:36:42: 66:d0:cb:5a:18:6f:f0:5d:72:94:50:3c:c0:82:e7: f2:7b:d1:4a:bb:90:8d:fc:a7:a8:e1:fe:c0:51:77: bd:e5:c2:7c:35:cb:86:6c:bd:15:83:11:91:5b:20: 93:9d:12:47:08:9a:e8:2e:28:4e:e7:9c:c7:3a:ca: 2b:b2:d9:f6:63:6e:c7:5a:02:e9:05:83:ad:0b:ae: f8:db:2c:4c:62:31:bd:89:a7:3e:72:5e:f0:da:5b: b2:4d:74:f6:ff:4b:cf:ed:02:4a:f5:c1:34:58:75: 47:f8:0b:af:1c:3d:b8:15:54:09:41:be:88:89:9d: 55:1d:3b:c8:1b:49:5b:45:6f:bc:a3:c3:2a:b9:bb: 98:7c:83:43:4b:25:e3:91:13:6e:77:87:68:f6:35: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:38:27:98:13:06:B9:01:74:C9:58:16:45:2A:89:9E:27:DC:8B:45 X509v3 Authority Key Identifier: keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:5e:b1:49:d4:b6:8e:b3:ad:fa:49:32:64:13:d6:87:06: 64:6a:e4:14:13:7e:3b:6c:83:7e:86:53:8a:fb:2b:d7:86:a3: 25:21:c7:10:b6:7a:78:c3:21:9a:c5:e7:2b:d3:a6:c4:38:4a: 51:4c:65:f3:85:d3:d9:2b:1e:84:75:2d:ec:bf:e4:27:dd:e7: 70:a2:ec:5d:8f:d5:da:c2:ae:2a:16:78:78:92:7b:99:24:b1: 73:40:d7:fa:ac:cc:26:bc:65:14:85:c2:df:79:c4:fd:e9:af: 5e:c6:d4:f3:96:2c:13:61:e1:69:b4:4e:59:47:39:91:d4:20: bd:d3:f6:ce:da:9e:42:33:86:50:bc:e2:ca:52:29:59:83:cc: f8:38:29:e5:5e:01:8b:1f:6d:cf:4d:f4:d8:a5:b9:ba:df:a4: 9c:79:34:02:88:5e:80:61:c2:12:d2:ef:44:2c:be:39:77:7c: 0a:17:5d:33:87:6a:9e:97:54:38:91:86:bc:31:6f:7b:0f:1d: 88:de:51:00:86:35:ed:45:a3:91:df:2c:d1:2c:74:8d:70:34: 46:39:1b:3e:95:8c:bc:69:64:8d:c4:31:00:af:c2:fd:1d:07: c5:74:51:e6:01:a0:f0:43:da:21:a0:e2:37:90:25:31:8c:7f: 37:ea:19:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PkV47GpJFFo8YD0fm0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmViOTYxNzI1ZTRkNWJiNGYyNTQ4OTg2ZDk2ZmNjNmQz NDllNjQwHhcNMjYwMjA5MTAwMTA0WhcNMjYwMjEwMTAwMTA0WjAzMTEwLwYDVQQD EyhlMjM4Mjc5ODEzMDZiOTAxNzRjOTU4MTY0NTJhODk5ZTI3ZGM4YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrXNFjve0A/3ok26b/wQlrqqRlPg DuX4+s0mE3YpNHiekg029kZ7/UpZ3D+JJOohD311WBPUfaJFd/GxNCkVKSoaEPb+ O/W8/sjX47ehy47igWxieEtN5OcpiifyJ7Jjk/QwOyOeNkJm0MtaGG/wXXKUUDzA gufye9FKu5CN/Keo4f7AUXe95cJ8NcuGbL0VgxGRWyCTnRJHCJroLihO55zHOsor stn2Y27HWgLpBYOtC6742yxMYjG9iac+cl7w2luyTXT2/0vP7QJK9cE0WHVH+Auv HD24FVQJQb6IiZ1VHTvIG0lbRW+8o8MqubuYfINDSyXjkRNud4do9jX0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI4J5gTBrkBdMlYFkUqiZ4n3ItFMB8GA1UdIwQY MBaAFK2+uWFyXk1btPJUiYbZb8xtNJ5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQt ODNkNjI1YmYxYmYxLzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQtODNkNjI1YmYxYmYx LzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj65esUnU to6zrfpJMmQT1ocGZGrkFBN+O2yDfoZTivsr14ajJSHHELZ6eMMhmsXnK9OmxDhK UUxl84XT2SsehHUt7L/kJ93ncKLsXY/V2sKuKhZ4eJJ7mSSxc0DX+qzMJrxlFIXC 33nE/emvXsbU85YsE2HhabROWUc5kdQgvdP2ztqeQjOGULziylIpWYPM+Dgp5V4B ix9tz0302KW5ut+knHk0AohegGHCEtLvRCy+OXd8ChddM4dqnpdUOJGGvDFvew8d iN5RAIY17UWjkd8s0Sx0jXA0RjkbPpWMvGlkjcQxAK/C/R0HxXRR5gGg8EPaIaDi N5AlMYx/N+oZJA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:27 2026 by rpki-client