This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json) Hash identifier: cb3Da1veFErdaq5RPZp28ngm+kFJrwJjGEBCA5WY5S0= Subject key identifier: 38:86:1C:23:36:DB:67:1F:15:16:7B:D6:1D:82:FE:34:DE:D0:40:4F Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4 Certificate serial: 019C4322A8B332ED10B890B1913667810220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:10 +0000 Manifest this update: Mon 09 Feb 2026 16:01:10 +0000 Manifest next update: Tue 10 Feb 2026 16:01:10 +0000 Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: y1lyvSyLvI4Nxg3NSgY5lacW0II7XXBGMgJt/BGOWzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a8:b3:32:ed:10:b8:90:b1:91:36:67:81:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4 Validity Not Before: Feb 9 16:01:10 2026 GMT Not After : Feb 10 16:01:10 2026 GMT Subject: CN=38861c2336db671f15167bd61d82fe34ded0404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:07:f2:d1:ad:ef:a9:46:79:a9:b7:46:c1: e5:c2:db:1d:17:e0:94:59:70:32:af:95:1c:57:6f: df:eb:32:ad:1f:da:88:53:a4:f8:a0:7c:85:2f:a2: b5:6b:67:cd:d6:f9:3c:d6:38:91:df:bd:98:b4:55: 54:ca:aa:28:19:51:1a:ed:21:4b:8e:6a:8f:56:30: 3c:dd:0d:bc:e4:8d:d1:71:8e:af:98:e5:f5:5b:b3: 23:ec:68:43:2b:ff:22:8b:16:b6:c7:4b:8d:93:d4: b8:fa:b0:9c:40:b8:20:21:e0:88:31:60:1f:d7:83: 97:eb:1d:3f:ff:2e:ad:fe:44:4c:af:cb:67:9e:af: 6d:34:fc:cd:5f:af:cf:fc:dd:e9:ba:68:7f:c1:8a: fa:6d:21:54:45:5d:74:54:65:fd:76:f4:0c:5e:0d: 6d:bf:da:a4:2a:07:de:42:9c:de:f3:12:a6:3c:35: 8c:d3:99:66:f4:e7:a0:29:0d:6c:6e:ec:98:fb:17: b8:66:88:87:b7:3a:81:1e:35:97:07:4b:21:3b:36: 1a:c5:00:5a:25:8f:be:dc:36:dc:5f:2f:9b:1b:01: bc:c9:bc:4a:d2:4a:80:b6:fa:da:5b:2c:5c:8c:d1: d3:2b:42:ec:e3:48:6c:61:66:b6:d3:10:c8:f6:a0: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:1C:23:36:DB:67:1F:15:16:7B:D6:1D:82:FE:34:DE:D0:40:4F X509v3 Authority Key Identifier: keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:53:ea:63:83:b1:d8:51:47:5a:cc:5c:b1:97:7c:dd:0d:83: db:af:05:8d:2c:4e:e3:4b:6f:25:d7:73:23:5c:2e:43:b3:b1: 43:e4:d2:53:36:70:9e:4a:09:bf:0e:04:bf:55:f7:6f:8f:5f: dd:ae:9c:5a:20:07:08:87:46:4b:c8:1d:76:9f:9b:1d:59:2d: 48:3c:2c:2c:ae:23:5a:ed:56:39:a5:ae:25:b8:ab:03:52:fc: a9:9e:e7:1d:d6:7d:7a:af:26:ab:4f:2c:d5:98:8b:23:eb:59: 27:17:48:3a:15:30:90:d4:7e:bd:bf:16:18:c2:d5:73:be:e0: 00:1f:dd:dd:7e:06:1a:78:2c:4a:ba:99:d0:52:92:05:31:14: e1:a6:f0:98:12:f6:b7:9d:6b:16:0c:c4:96:ea:ff:1a:e7:0f: 67:32:8a:ad:67:0c:cd:79:67:ee:4b:ac:81:61:8b:c7:2d:c7: b1:13:51:b3:d0:5f:bb:ef:39:d8:de:49:03:b1:02:7a:3e:b8: 64:6c:18:74:1f:75:58:78:94:c7:4f:19:65:69:6a:b9:93:4e: 79:f7:2f:b5:3a:83:29:a1:fa:b2:d5:c4:fe:88:e6:d9:01:23: ce:23:11:30:61:93:84:a5:cd:2e:34:42:da:4c:80:f0:83:8c: bc:c2:4a:1d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIqizMu0QuJCxkTZngQIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx Nzk4YzQwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD EygzODg2MWMyMzM2ZGI2NzFmMTUxNjdiZDYxZDgyZmUzNGRlZDA0MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmQH8tGt76lGeam3RsHlwtsdF+CU WXAyr5UcV2/f6zKtH9qIU6T4oHyFL6K1a2fN1vk81jiR372YtFVUyqooGVEa7SFL jmqPVjA83Q285I3RcY6vmOX1W7Mj7GhDK/8iixa2x0uNk9S4+rCcQLggIeCIMWAf 14OX6x0//y6t/kRMr8tnnq9tNPzNX6/P/N3pumh/wYr6bSFURV10VGX9dvQMXg1t v9qkKgfeQpze8xKmPDWM05lm9OegKQ1sbuyY+xe4ZoiHtzqBHjWXB0shOzYaxQBa JY++3DbcXy+bGwG8ybxK0kqAtvraWyxcjNHTK0Ls40hsYWa20xDI9qAmTQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDiGHCM222cfFRZ71h2C/jTe0EBPMB8GA1UdIwQY MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVPq Y4Ox2FFHWsxcsZd83Q2D268FjSxO40tvJddzI1wuQ7OxQ+TSUzZwnkoJvw4Ev1X3 b49f3a6cWiAHCIdGS8gddp+bHVktSDwsLK4jWu1WOaWuJbirA1L8qZ7nHdZ9eq8m q08s1ZiLI+tZJxdIOhUwkNR+vb8WGMLVc77gAB/d3X4GGngsSrqZ0FKSBTEU4abw mBL2t51rFgzElur/GucPZzKKrWcMzXln7kusgWGLxy3HsRNRs9Bfu+852N5JA7EC ej64ZGwYdB91WHiUx08ZZWlquZNOefcvtTqDKaH6stXE/ojm2QEjziMRMGGThKXN LjRC2kyA8IOMvMJKHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:24 2026 by rpki-client