This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json) Hash identifier: t5RZ4nlaW2Y02lw/ZseZg142DNhVFt1tBuBmDHM9Qs4= Subject key identifier: BA:EA:F7:22:2A:B7:9A:F7:E1:5C:D0:C9:F9:62:40:01:E9:9E:A2:0F Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d Certificate serial: 019C4322A003161C1D7E8F2A4823FF1664FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: QiF3YiCb/pGo3TH+OQL+vALjf+5pxUacou0GQNkMOX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a0:03:16:1c:1d:7e:8f:2a:48:23:ff:16:64:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=baeaf7222ab79af7e15cd0c9f9624001e99ea20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:41:7a:37:33:fc:6c:8d:45:9e:01:80:a7: 9b:53:18:35:37:cb:bc:2c:1d:d6:0b:70:ee:7f:9e: 0b:c0:95:8e:96:d3:29:9f:82:ce:2c:dc:f7:c5:a9: 7f:bc:12:51:fa:0d:70:62:eb:f2:4a:98:b8:17:26: 18:7e:ee:bc:e5:a7:68:78:f5:44:1a:1d:20:98:89: 1f:d8:c9:9f:25:59:8d:74:48:79:ec:8c:32:38:95: da:31:ef:7b:7b:ce:27:e3:0a:d8:1d:8a:65:ce:98: 2e:e9:ca:ab:65:91:ac:80:5d:11:63:56:99:16:5c: 25:06:f2:9e:7a:e9:6a:f0:cc:b1:7d:89:c6:e4:b2: d1:71:08:5d:1e:de:dc:13:1e:b2:b0:45:4f:f5:12: 76:0f:c4:61:e1:ea:43:94:b5:8b:02:55:39:e1:62: 95:37:1a:bb:e1:88:70:de:fb:d8:83:59:2a:f4:fb: 0d:13:d2:36:c7:29:f6:78:48:b3:60:2c:7f:75:0b: 6d:b7:39:5a:fd:04:63:17:dc:a1:07:d4:a9:fa:57: c6:f5:bc:70:18:b0:91:c5:91:20:3b:fd:7f:5f:f8: 42:d3:a4:d1:1c:48:84:e1:0e:39:8d:35:b6:54:90: c8:ab:41:53:4d:4f:11:34:61:43:cd:13:27:b0:da: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EA:F7:22:2A:B7:9A:F7:E1:5C:D0:C9:F9:62:40:01:E9:9E:A2:0F X509v3 Authority Key Identifier: keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9f:fa:77:74:43:69:b2:41:41:9f:39:10:34:b3:26:5d:ee: a0:f6:a4:3c:cb:51:22:0f:2d:e4:31:af:88:43:2e:a5:1f:35: ae:11:db:81:0b:7f:ee:b7:bf:d4:ab:19:75:98:37:38:eb:2b: 04:e1:90:8d:a9:f1:f0:20:87:dc:1b:4e:7d:40:eb:ba:2e:76: fe:21:4b:35:6a:2e:7c:94:6d:61:5d:11:98:d1:b5:94:c4:45: d9:37:a8:9f:9b:87:7d:6c:f5:c2:f2:fe:44:f8:25:6f:c1:f2: eb:8c:b3:5f:7e:7e:87:91:87:4e:e4:0c:4b:62:cf:0c:87:fa: b5:5f:07:50:77:94:44:91:8a:e6:9f:ae:2b:e0:ec:76:92:b7: 0c:43:bf:47:28:df:ed:c8:32:c8:9c:6a:9f:e6:a2:bd:1e:68: c1:cc:c1:b0:16:62:56:4e:8e:67:27:78:ef:77:13:27:1b:f5: 67:74:93:41:f1:27:e3:29:fe:21:d3:24:c8:c8:07:55:19:5c: 10:70:24:18:89:43:cc:91:1c:13:0f:95:26:6b:82:b1:94:7f: 2c:bb:5d:a4:ca:03:e5:ca:86:f8:bd:1e:6a:cd:a2:52:85:ca: a1:1b:f7:be:f1:90:b3:bf:71:64:a7:54:b3:32:f8:15:dc:64: 7d:0d:2a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqADFhwdfo8qSCP/FmT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0 N2QzN2QwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD EyhiYWVhZjcyMjJhYjc5YWY3ZTE1Y2QwYzlmOTYyNDAwMWU5OWVhMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5tBejcz/GyNRZ4BgKebUxg1N8u8 LB3WC3Duf54LwJWOltMpn4LOLNz3xal/vBJR+g1wYuvySpi4FyYYfu685adoePVE Gh0gmIkf2MmfJVmNdEh57IwyOJXaMe97e84n4wrYHYplzpgu6cqrZZGsgF0RY1aZ FlwlBvKeeulq8MyxfYnG5LLRcQhdHt7cEx6ysEVP9RJ2D8Rh4epDlLWLAlU54WKV Nxq74Yhw3vvYg1kq9PsNE9I2xyn2eEizYCx/dQtttzla/QRjF9yhB9Sp+lfG9bxw GLCRxZEgO/1/X/hC06TRHEiE4Q45jTW2VJDIq0FTTU8RNGFDzRMnsNrUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrq9yIqt5r34VzQyfliQAHpnqIPMB8GA1UdIwQY MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5/6d3RD abJBQZ85EDSzJl3uoPakPMtRIg8t5DGviEMupR81rhHbgQt/7re/1KsZdZg3OOsr BOGQjanx8CCH3BtOfUDrui52/iFLNWoufJRtYV0RmNG1lMRF2Teon5uHfWz1wvL+ RPglb8Hy64yzX35+h5GHTuQMS2LPDIf6tV8HUHeURJGK5p+uK+DsdpK3DEO/Ryjf 7cgyyJxqn+aivR5owczBsBZiVk6OZyd473cTJxv1Z3STQfEn4yn+IdMkyMgHVRlc EHAkGIlDzJEcEw+VJmuCsZR/LLtdpMoD5cqG+L0eas2iUoXKoRv3vvGQs79xZKdU szL4FdxkfQ0qGg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:11 2026 by rpki-client