This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json) Hash identifier: FekO6C2lSU6zu9m8RsTZf8RaT2L6PKx6Kj/LNoMj8mo= Subject key identifier: 54:C1:D5:19:EC:79:C8:91:64:CA:DA:4A:FA:B6:89:86:78:AF:16:98 Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62 Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62 Certificate serial: 019C42EB0834461ADAF76AE59546B313C653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 15:00:25 +0000 Manifest this update: Mon 09 Feb 2026 15:00:25 +0000 Manifest next update: Tue 10 Feb 2026 15:00:25 +0000 Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: 3v+0hh9NGoui/T9EdMHdk869I2Ju671gk9cPUaHtQF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:08:34:46:1a:da:f7:6a:e5:95:46:b3:13:c6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62 Validity Not Before: Feb 9 15:00:25 2026 GMT Not After : Feb 10 15:00:25 2026 GMT Subject: CN=54c1d519ec79c89164cada4afab6898678af1698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:e4:96:2d:d7:d4:2b:68:f1:ae:1d:b5:26: f8:b1:5c:84:d4:1d:d7:17:a6:a2:35:60:b0:5b:ee: d2:f6:cd:22:00:c6:c0:8f:56:4a:f9:0c:69:ce:7b: c2:b8:5e:83:f8:cc:0c:e2:72:63:d9:4a:3a:eb:c8: e7:d3:cf:6d:61:3f:ca:57:57:61:d4:03:75:55:f3: 10:8d:6f:34:ad:1a:0f:92:ba:bb:2e:ea:a9:1e:03: a3:a3:d5:b2:9d:d4:f7:80:d7:e7:72:a0:ec:6c:a4: 0b:58:1f:53:e3:52:4a:80:77:97:7e:76:89:52:ea: 47:e8:ef:51:4e:b1:e3:ad:63:e6:53:57:84:d2:c7: 42:02:ab:3e:23:2c:10:0d:b0:42:9a:68:0a:3d:a9: b5:ae:f0:9f:0d:e1:2a:a1:a4:3c:b4:80:25:cd:47: 1d:87:1e:46:88:cc:c8:7d:be:07:e2:78:29:4f:6c: fe:cf:9c:39:8e:b0:d4:39:cc:b0:e5:24:5f:3a:5d: 26:a1:e4:f7:22:3e:e8:61:30:59:59:76:ff:56:02: 6a:d1:c0:b7:03:48:6e:4d:cc:56:0e:2a:76:9d:cd: 6b:de:ee:26:37:aa:e2:65:8d:cf:ec:ae:fc:95:c7: f1:08:e8:95:aa:57:1d:10:3d:5d:1f:b7:c1:1e:e9: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:D5:19:EC:79:C8:91:64:CA:DA:4A:FA:B6:89:86:78:AF:16:98 X509v3 Authority Key Identifier: keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e5:fe:2f:8c:73:bf:6f:c2:3c:f5:5e:60:cf:03:2d:f4:0c: 21:07:36:b4:23:50:8e:7d:cd:d1:18:cb:0f:d0:59:f8:c3:81: b0:3a:e5:4b:a2:c1:db:8d:b5:d6:f9:78:8e:82:d8:08:f8:55: 59:e3:49:c6:02:59:6c:4b:1d:ad:95:65:5d:86:9a:c7:d3:76: f3:15:25:23:26:42:73:dd:a6:0a:a4:00:27:0b:a0:6d:82:a6: 70:84:e9:60:3c:45:41:e3:28:ce:ca:81:ac:f2:72:19:e9:b0: 50:4f:0c:0c:e6:59:04:1b:87:df:91:01:de:a7:c1:de:c7:cd: c1:1c:54:77:4f:4b:11:a0:34:a5:d7:d8:4c:4a:bd:32:98:86: 8f:17:0a:24:9c:45:89:cd:00:69:cc:0d:d7:a6:fb:3f:02:a3: bc:76:8d:e7:87:4d:f0:e4:58:eb:ae:04:86:7f:f1:2d:87:26: fc:61:ac:d0:2d:86:df:8e:29:cf:00:f0:07:43:03:c0:df:65: 14:25:5c:f3:f4:34:22:3e:45:59:a4:96:0d:fc:71:59:33:ae: ad:e1:19:4a:4f:0e:90:46:82:48:3c:0e:be:80:2c:9d:2a:32: 13:d4:6d:88:93:ab:f2:72:70:8f:03:68:06:0b:0a:9e:cb:87: f0:6a:b6:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wg0Rhra92rllUazE8ZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWRkZWI2ZWExMzk1ZjY5OGY0MmU3NTQxYWVmNDkyNDI2 MjVmNjIwHhcNMjYwMjA5MTUwMDI1WhcNMjYwMjEwMTUwMDI1WjAzMTEwLwYDVQQD Eyg1NGMxZDUxOWVjNzljODkxNjRjYWRhNGFmYWI2ODk4Njc4YWYxNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ubkli3X1Cto8a4dtSb4sVyE1B3X F6aiNWCwW+7S9s0iAMbAj1ZK+QxpznvCuF6D+MwM4nJj2Uo668jn089tYT/KV1dh 1AN1VfMQjW80rRoPkrq7LuqpHgOjo9WyndT3gNfncqDsbKQLWB9T41JKgHeXfnaJ UupH6O9RTrHjrWPmU1eE0sdCAqs+IywQDbBCmmgKPam1rvCfDeEqoaQ8tIAlzUcd hx5GiMzIfb4H4ngpT2z+z5w5jrDUOcyw5SRfOl0moeT3Ij7oYTBZWXb/VgJq0cC3 A0huTcxWDip2nc1r3u4mN6riZY3P7K78lcfxCOiVqlcdED1dH7fBHulyZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTB1RnseciRZMraSvq2iYZ4rxaYMB8GA1UdIwQY MBaAFESt3rbqE5X2mPQudUGu9JJCYl9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQt NDcxNGY5NzFiNzhiLzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQtNDcxNGY5NzFiNzhi LzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuX+L4xz v2/CPPVeYM8DLfQMIQc2tCNQjn3N0RjLD9BZ+MOBsDrlS6LB24211vl4joLYCPhV WeNJxgJZbEsdrZVlXYaax9N28xUlIyZCc92mCqQAJwugbYKmcITpYDxFQeMozsqB rPJyGemwUE8MDOZZBBuH35EB3qfB3sfNwRxUd09LEaA0pdfYTEq9MpiGjxcKJJxF ic0AacwN16b7PwKjvHaN54dN8ORY664Ehn/xLYcm/GGs0C2G344pzwDwB0MDwN9l FCVc8/Q0Ij5FWaSWDfxxWTOureEZSk8OkEaCSDwOvoAsnSoyE9RtiJOr8nJwjwNo BgsKnsuH8Gq2NQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:33 2026 by rpki-client