This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json) Hash identifier: De4pMMlw8wwP8zXeN3pS+t6nFziBOjcu81zKGhtaxtY= Subject key identifier: 16:59:24:44:96:BE:A4:61:0B:0D:EA:7A:AD:6A:17:C5:34:7B:B8:BD Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Certificate serial: 019C424682A8DBDCA975DF94830772DD068B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: /XctRXni6Wb5Cvo1OM8wEh6bv1uGyeQP5tN5IMibaj8=) 2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:82:a8:db:dc:a9:75:df:94:83:07:72:dd:06:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=1659244496bea4610b0dea7aad6a17c5347bb8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:32:0a:49:62:cc:9c:c4:74:bd:46:f1:d8: e8:84:71:9e:f1:77:ec:34:fe:cb:48:e0:4c:71:c4: 12:e7:5a:55:c3:86:a7:f8:79:d8:af:c5:88:05:b6: dc:bb:93:9f:29:36:c8:77:36:a1:6e:92:91:22:49: ba:b7:37:62:ad:ae:a0:9b:dc:4f:d7:2d:e1:a3:88: 75:5a:e1:89:a4:b1:ad:e5:97:c8:e1:ae:e9:8f:d4: 8f:98:85:06:1f:13:a3:88:9b:eb:d5:c2:8f:06:8e: 62:28:48:61:24:2e:56:d8:b2:b3:9e:f8:61:78:c1: cc:37:16:b7:f9:ea:8a:02:02:68:eb:b3:4e:3d:09: c5:f1:8c:94:b7:58:f6:58:bd:e3:eb:0c:88:bd:e0: d2:04:b1:3e:77:7b:f7:34:d8:1c:08:1c:d4:d6:dc: 9c:3d:cd:e1:73:87:cf:64:e2:e7:f3:b6:20:42:87: 80:b8:18:2b:1a:e9:56:6c:f1:66:55:54:5d:de:c2: 4c:8a:92:74:28:48:23:3e:1c:6f:43:71:51:54:43: ca:25:b7:fe:4a:7c:22:97:19:25:0d:50:33:73:56: 76:5a:96:4a:79:c9:23:11:14:7b:e2:9b:27:22:bb: dc:df:be:b5:6c:f6:9c:05:36:9c:85:e3:85:72:00: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:24:44:96:BE:A4:61:0B:0D:EA:7A:AD:6A:17:C5:34:7B:B8:BD X509v3 Authority Key Identifier: keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ca:e9:42:aa:00:d4:e4:00:b4:47:ad:12:c1:e2:f3:07:07: 3c:98:be:a7:77:e5:cb:58:e7:18:03:dd:a3:45:1d:b0:4d:84: 59:6a:e5:be:ca:2e:6d:72:c4:d0:09:19:0c:c1:ef:26:76:fa: 84:ea:c7:82:f8:0b:7a:3e:6c:39:21:70:e3:5d:9a:2a:32:c3: 69:d2:3a:99:1a:09:33:af:74:a5:1b:0e:a9:17:8c:54:dd:46: 16:6e:5f:0d:84:5d:d6:2c:0b:9e:36:d6:dd:d7:e7:bb:3e:0c: 17:50:02:f8:f9:e3:74:41:2b:3f:39:32:83:db:b7:24:c0:0f: 9e:67:d1:4d:0f:f6:fc:0b:10:e6:50:85:39:40:42:79:c7:0d: d3:36:e5:0b:00:2c:6d:49:55:ba:9b:af:e5:ac:50:7c:2f:29: 43:a8:61:a1:e1:ae:05:aa:d6:60:fe:41:b6:9d:3e:38:fb:4d: 6a:1e:34:d8:79:5f:7b:45:ab:c6:18:35:e1:7d:a8:97:60:97: 5a:32:ec:7b:59:aa:15:70:d6:ab:d0:6e:66:d2:f9:c0:aa:81: 46:cf:5a:5a:70:e9:fa:1f:e0:b8:1b:ba:53:d0:c0:76:ba:08: 7a:f9:21:db:38:f0:45:c5:63:51:06:f4:93:df:bf:01:e6:65: 5f:ca:ab:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoKo29ypdd+Ugwdy3QaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4 NmRmZDAwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD EygxNjU5MjQ0NDk2YmVhNDYxMGIwZGVhN2FhZDZhMTdjNTM0N2JiOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOMyCklizJzEdL1G8djohHGe8Xfs NP7LSOBMccQS51pVw4an+HnYr8WIBbbcu5OfKTbIdzahbpKRIkm6tzdira6gm9xP 1y3ho4h1WuGJpLGt5ZfI4a7pj9SPmIUGHxOjiJvr1cKPBo5iKEhhJC5W2LKznvhh eMHMNxa3+eqKAgJo67NOPQnF8YyUt1j2WL3j6wyIveDSBLE+d3v3NNgcCBzU1tyc Pc3hc4fPZOLn87YgQoeAuBgrGulWbPFmVVRd3sJMipJ0KEgjPhxvQ3FRVEPKJbf+ SnwilxklDVAzc1Z2WpZKeckjERR74psnIrvc3761bPacBTacheOFcgBP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZZJESWvqRhCw3qeq1qF8U0e7i9MB8GA1UdIwQY MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsrpQqoA 1OQAtEetEsHi8wcHPJi+p3fly1jnGAPdo0UdsE2EWWrlvsoubXLE0AkZDMHvJnb6 hOrHgvgLej5sOSFw412aKjLDadI6mRoJM690pRsOqReMVN1GFm5fDYRd1iwLnjbW 3dfnuz4MF1AC+PnjdEErPzkyg9u3JMAPnmfRTQ/2/AsQ5lCFOUBCeccN0zblCwAs bUlVupuv5axQfC8pQ6hhoeGuBarWYP5Btp0+OPtNah402Hlfe0Wrxhg14X2ol2CX WjLse1mqFXDWq9BuZtL5wKqBRs9aWnDp+h/guBu6U9DAdroIevkh2zjwRcVjUQb0 k9+/AeZlX8qrsg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:00 2026 by rpki-client