This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json) Hash identifier: 3jMQIj/+w9zl+vkuzWlXe37/QonUWIi6QhkEKwbL78U= Subject key identifier: DA:11:8D:9D:21:E0:59:DD:25:C0:45:3C:8B:9F:2A:3F:0A:B6:E5:2D Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8 Certificate serial: 019C432300E588E729525F1EC7EF4AE806CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:33 +0000 Manifest this update: Mon 09 Feb 2026 16:01:33 +0000 Manifest next update: Tue 10 Feb 2026 16:01:33 +0000 Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: eiYCWr1lhSrbLgKBq+/7GJeGpYDJXxYI58drErg0B4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:00:e5:88:e7:29:52:5f:1e:c7:ef:4a:e8:06:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8 Validity Not Before: Feb 9 16:01:33 2026 GMT Not After : Feb 10 16:01:33 2026 GMT Subject: CN=da118d9d21e059dd25c0453c8b9f2a3f0ab6e52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:75:a2:c8:44:9d:ff:b8:3d:dd:fc:81:b1: 58:8b:b1:1b:28:11:9d:ca:61:60:2f:95:61:be:98: a7:05:63:f1:7f:71:c7:c1:de:31:01:65:be:07:80: f5:f9:03:ed:a1:89:29:e4:7f:7b:53:13:ff:df:dc: 36:41:ac:1b:09:5d:53:4a:67:19:32:f8:d7:30:8c: a5:d9:76:3f:c9:19:c8:40:cb:9c:17:db:f0:26:f4: 05:03:d2:c6:70:4a:06:3f:e4:b0:dd:c7:25:d5:f7: 94:21:69:a2:d5:c3:22:b6:98:0b:37:62:ca:aa:a9: cb:2e:45:5d:72:ae:d2:09:20:b0:12:6a:55:3a:b2: eb:cb:cd:0d:45:65:65:bf:e6:a5:d4:28:37:29:93: e0:c2:af:2e:05:47:19:4d:af:ae:a9:8b:91:7d:cb: 0c:40:ee:50:c2:19:2e:6f:a5:5f:70:1e:45:a1:6c: 2f:b9:70:41:07:68:60:1e:2e:36:09:32:12:57:b3: 39:a6:09:2c:59:0b:eb:ac:23:0a:48:52:14:de:01: 43:63:74:01:b0:93:f5:01:6c:4e:65:7c:e0:2a:b6: 76:19:6d:d5:49:1e:fa:37:bd:94:56:7b:2b:6c:f2: 17:be:39:de:1e:a1:f0:60:5d:ce:24:df:cd:22:67: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:8D:9D:21:E0:59:DD:25:C0:45:3C:8B:9F:2A:3F:0A:B6:E5:2D X509v3 Authority Key Identifier: keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:b5:9e:d3:96:56:84:2a:e7:9b:1f:da:a1:55:5f:67:a0: 31:4c:3c:71:5a:35:85:0e:e2:11:68:f9:60:3a:3e:3e:e5:28: 9b:af:72:49:f8:70:3a:03:05:6f:7c:ca:b4:3a:c3:ad:dc:44: d1:e4:e6:df:24:22:45:7e:b2:17:bc:e2:51:3f:bd:4f:7e:06: 95:01:bd:f3:d3:65:ea:92:3b:d6:ee:b5:1b:f2:7f:22:04:9c: c2:f2:d5:7c:b9:b6:7a:e0:3c:e8:68:46:ab:f9:e6:44:8d:41: 75:e5:a2:eb:a0:95:b0:32:d7:5b:1d:e3:16:a3:03:b7:6f:1f: 18:9b:96:94:d8:53:01:58:ad:9d:3b:6e:e8:d4:f5:b7:23:e0: 88:65:b9:68:2a:5d:5c:73:65:b2:fb:4c:f8:58:6f:ec:29:60: 5e:68:b9:56:ea:ff:fb:fc:5e:7b:40:d0:85:b9:eb:c0:58:ca: 8d:00:8f:97:27:a7:46:93:72:5f:61:5b:0f:63:6b:5b:cc:07: 08:6f:ed:ea:84:c3:64:24:75:b3:a6:33:24:cd:64:b6:aa:9b: db:ea:a4:61:32:e0:8a:9e:69:ab:eb:ec:fa:26:2e:76:aa:b9: 5d:4e:2e:85:99:7d:53:75:a7:3c:6a:1d:99:05:4f:5b:4c:85: f0:19:15:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIwDliOcpUl8ex+9K6AbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjk0OTQyNjZhMzg3MTkwNDRkODI5YTRhMGE4ZjE3YTQw NzA0ZTgwHhcNMjYwMjA5MTYwMTMzWhcNMjYwMjEwMTYwMTMzWjAzMTEwLwYDVQQD EyhkYTExOGQ5ZDIxZTA1OWRkMjVjMDQ1M2M4YjlmMmEzZjBhYjZlNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOJ1oshEnf+4Pd38gbFYi7EbKBGd ymFgL5VhvpinBWPxf3HHwd4xAWW+B4D1+QPtoYkp5H97UxP/39w2QawbCV1TSmcZ MvjXMIyl2XY/yRnIQMucF9vwJvQFA9LGcEoGP+Sw3ccl1feUIWmi1cMitpgLN2LK qqnLLkVdcq7SCSCwEmpVOrLry80NRWVlv+al1Cg3KZPgwq8uBUcZTa+uqYuRfcsM QO5Qwhkub6VfcB5FoWwvuXBBB2hgHi42CTISV7M5pgksWQvrrCMKSFIU3gFDY3QB sJP1AWxOZXzgKrZ2GW3VSR76N72UVnsrbPIXvjneHqHwYF3OJN/NImdQUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoRjZ0h4FndJcBFPIufKj8KtuUtMB8GA1UdIwQY MBaAFK65SUJmo4cZBE2CmkoKjxekBwToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUt MmE3YjU4YmRmOTQ1LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUtMmE3YjU4YmRmOTQ1 LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb61ntOW VoQq55sf2qFVX2egMUw8cVo1hQ7iEWj5YDo+PuUom69ySfhwOgMFb3zKtDrDrdxE 0eTm3yQiRX6yF7ziUT+9T34GlQG989Nl6pI71u61G/J/IgScwvLVfLm2euA86GhG q/nmRI1BdeWi66CVsDLXWx3jFqMDt28fGJuWlNhTAVitnTtu6NT1tyPgiGW5aCpd XHNlsvtM+Fhv7ClgXmi5Vur/+/xee0DQhbnrwFjKjQCPlyenRpNyX2FbD2NrW8wH CG/t6oTDZCR1s6YzJM1ktqqb2+qkYTLgip5pq+vs+iYudqq5XU4uhZl9U3WnPGod mQVPW0yF8BkVNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:35 2026 by rpki-client