This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft File: rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json) Hash identifier: kYF5eWSsWMMfdaKYFydH0BdR+tE1QFroIIpVGzIZZPY= Subject key identifier: BE:C0:61:0E:CD:A6:F6:A3:05:CD:71:9B:4B:76:87:4C:7D:E5:62:47 Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 Certificate issuer: /CN=ac04564ab139766f1dee648b35a0a18bbd362109 Certificate serial: 019C4359094D6415881441ADAF07AE0484FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 17:00:34 +0000 Manifest this update: Mon 09 Feb 2026 17:00:34 +0000 Manifest next update: Tue 10 Feb 2026 17:00:34 +0000 Files and hashes: 1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: Z/YVhMcOV7cyqX/PanJsxTn48Jj8AbfSE3FwfBqGLyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:09:4d:64:15:88:14:41:ad:af:07:ae:04:84:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109 Validity Not Before: Feb 9 17:00:34 2026 GMT Not After : Feb 10 17:00:34 2026 GMT Subject: CN=bec0610ecda6f6a305cd719b4b76874c7de56247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:d5:18:eb:90:f1:98:3e:9c:bf:b2:82:a9: e4:42:eb:60:4b:06:a1:c0:22:31:10:4b:7c:c4:ae: 96:a3:c9:f1:f8:ce:3e:da:f4:92:85:6e:38:38:3c: de:da:4f:b2:a2:e2:33:de:14:77:59:08:c7:65:4e: 81:13:0f:02:a1:5b:7f:36:76:6c:3c:68:87:ea:cc: 4d:f5:a5:af:9b:47:a5:af:da:4b:e7:87:4b:3f:9b: 72:ce:6d:b3:c7:e5:ea:f2:bb:6f:31:61:4d:12:38: 05:2c:a0:47:6a:c0:8d:57:55:f5:a1:49:62:2c:58: 7b:1b:f3:29:80:82:0a:1a:e3:b8:05:01:fb:48:6c: 58:00:b4:9e:3d:3f:fd:7d:ac:b6:dc:ee:8e:99:93: 5c:b1:74:0d:2c:e0:76:4b:58:79:29:62:9b:ac:b7: 83:af:40:15:87:32:b7:9a:f9:4f:55:1f:ca:f5:14: 6e:bb:89:7f:14:b0:27:1e:d0:4e:90:38:94:14:01: b0:db:32:c5:22:a1:68:94:ef:6e:17:50:c6:08:a0: 04:07:41:b4:e4:d4:52:7a:6c:f7:fc:13:52:69:af: 36:16:a6:a0:86:05:ee:88:13:ec:06:89:c5:29:57: 12:c0:76:61:f4:0b:03:9c:d7:c5:b6:59:fe:2b:1d: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:61:0E:CD:A6:F6:A3:05:CD:71:9B:4B:76:87:4C:7D:E5:62:47 X509v3 Authority Key Identifier: keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:30:d9:3a:ea:62:6b:e1:e8:fd:c5:73:9a:75:54:79:2a:1d: a3:81:63:00:f3:e8:fa:bd:68:d2:23:20:f5:14:8c:3a:95:d8: 71:9a:be:2f:1d:3a:e0:34:ac:3f:10:88:67:3b:da:19:e3:9a: c8:13:50:96:68:f6:0a:eb:46:76:5d:ab:8a:2b:95:43:b3:d8: dc:a2:ee:4e:72:80:53:9b:1a:52:21:d7:82:77:b7:34:90:6a: ea:28:1a:0e:11:20:eb:04:1a:e5:39:0b:74:ca:1f:84:10:7e: ce:3a:17:f6:8b:9e:08:94:f2:e8:5e:13:76:cd:a0:70:8d:2d: 1a:79:43:74:d0:6a:e9:35:a8:84:3b:d4:90:11:23:82:15:f3: 17:b8:4d:90:67:8e:7b:c5:db:7a:65:2a:a3:e7:26:c4:c4:5f: 52:43:b7:13:8c:d5:27:4b:00:91:fa:b1:ee:37:dc:17:e1:ff: 65:34:aa:0e:19:11:ea:c5:2b:9c:6d:6a:0d:05:97:68:b6:15: 33:31:8a:cd:2e:f7:60:91:51:b6:e0:36:d5:7b:6f:78:e9:30: 14:3e:84:4e:84:f4:d9:e5:2f:a4:9e:c1:14:2e:48:c6:a5:b6: e6:6f:69:18:90:9c:01:a8:8a:cb:9e:75:41:4a:12:34:2a:e5: 27:2f:68:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQlNZBWIFEGtrweuBIT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDQ1NjRhYjEzOTc2NmYxZGVlNjQ4YjM1YTBhMThiYmQz NjIxMDkwHhcNMjYwMjA5MTcwMDM0WhcNMjYwMjEwMTcwMDM0WjAzMTEwLwYDVQQD EyhiZWMwNjEwZWNkYTZmNmEzMDVjZDcxOWI0Yjc2ODc0YzdkZTU2MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR/VGOuQ8Zg+nL+ygqnkQutgSwah wCIxEEt8xK6Wo8nx+M4+2vSShW44ODze2k+youIz3hR3WQjHZU6BEw8CoVt/NnZs PGiH6sxN9aWvm0elr9pL54dLP5tyzm2zx+Xq8rtvMWFNEjgFLKBHasCNV1X1oUli LFh7G/MpgIIKGuO4BQH7SGxYALSePT/9fay23O6OmZNcsXQNLOB2S1h5KWKbrLeD r0AVhzK3mvlPVR/K9RRuu4l/FLAnHtBOkDiUFAGw2zLFIqFolO9uF1DGCKAEB0G0 5NRSemz3/BNSaa82FqaghgXuiBPsBonFKVcSwHZh9AsDnNfFtln+Kx0ULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7AYQ7NpvajBc1xm0t2h0x95WJHMB8GA1UdIwQY MBaAFKwEVkqxOXZvHe5kizWgoYu9NiEJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMt Mjg0ZTliY2Y4MmM1LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMtMjg0ZTliY2Y4MmM1 LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTDZOupi a+Ho/cVzmnVUeSodo4FjAPPo+r1o0iMg9RSMOpXYcZq+Lx064DSsPxCIZzvaGeOa yBNQlmj2CutGdl2riiuVQ7PY3KLuTnKAU5saUiHXgne3NJBq6igaDhEg6wQa5TkL dMofhBB+zjoX9oueCJTy6F4Tds2gcI0tGnlDdNBq6TWohDvUkBEjghXzF7hNkGeO e8XbemUqo+cmxMRfUkO3E4zVJ0sAkfqx7jfcF+H/ZTSqDhkR6sUrnG1qDQWXaLYV MzGKzS73YJFRtuA21XtveOkwFD6EToT02eUvpJ7BFC5IxqW25m9pGJCcAaiKy551 QUoSNCrlJy9oKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:30 2026 by rpki-client