This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json) Hash identifier: 4AApgPS50Tx/Ech9O8KkKdVPPWaGeOaaRVjxPLhvxb0= Subject key identifier: 02:1B:5C:2E:E9:0B:E6:49:DE:62:4E:DD:27:CD:28:29:04:8B:B2:A2 Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789 Certificate serial: 019C446C34D9701CABDA0269ECF8A3B32D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft Manifest number: 118C Signing time: Mon 09 Feb 2026 22:01:07 +0000 Manifest this update: Mon 09 Feb 2026 22:01:07 +0000 Manifest next update: Tue 10 Feb 2026 22:01:07 +0000 Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: FS3XWpYYtPaMQHoaXyNnF/PZJD3mAMdC9TOLP/X4L18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:34:d9:70:1c:ab:da:02:69:ec:f8:a3:b3:2d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789 Validity Not Before: Feb 9 22:01:07 2026 GMT Not After : Feb 10 22:01:07 2026 GMT Subject: CN=021b5c2ee90be649de624edd27cd2829048bb2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:2f:22:20:5e:ef:12:08:9f:f9:32:1d:97: e7:4a:85:71:b7:fd:7a:02:83:0a:6a:f7:2c:e4:ed: ce:46:62:f8:70:1c:5d:f3:5a:39:3a:9f:a9:17:f9: f4:21:ff:9b:55:05:f1:ed:9b:20:df:01:53:3d:4f: 67:c1:4a:02:27:48:e4:14:81:ff:2b:a3:a8:69:d5: f1:54:b6:df:16:fa:11:61:ca:d3:f4:b1:93:89:4e: d9:6a:27:61:98:64:c2:09:68:36:ab:58:20:5f:eb: b3:7c:bc:b9:2f:39:af:7e:07:c7:47:c0:2c:cb:ba: 32:f7:a0:ec:31:c8:ee:68:01:8f:94:10:c0:71:d5: d6:68:2b:13:e7:92:ec:9d:c3:9a:bb:08:8d:c2:0d: d3:4d:7b:3f:a8:46:d9:2a:3b:16:95:a8:cc:63:75: c0:9c:aa:78:3a:db:f1:b3:2f:f0:96:e0:8a:74:f7: 26:25:32:d6:10:66:7d:03:36:59:81:b9:ac:1a:d5: b7:f6:9a:c5:00:29:fd:b1:82:f5:eb:e4:98:e5:37: 7e:30:4a:5f:ca:08:b4:07:b2:a2:85:42:6c:53:ed: ad:b6:c1:44:87:95:a3:6c:b5:b1:bd:b3:c8:a8:ce: ac:f9:57:fd:ed:3d:7b:e8:7b:c6:e6:40:a6:e9:f6: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1B:5C:2E:E9:0B:E6:49:DE:62:4E:DD:27:CD:28:29:04:8B:B2:A2 X509v3 Authority Key Identifier: keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3a:fd:a0:87:67:9c:81:7c:ed:7b:96:a8:0e:85:d2:3f:c1: d7:ab:ea:0c:b7:f6:de:4b:8c:cd:93:c4:ad:aa:35:48:4d:b5: cd:dc:2c:8e:fd:68:34:06:ed:d9:93:c6:70:f7:65:f8:5f:3e: 9c:c8:c9:e8:7a:89:14:3b:1a:d9:85:9f:c5:7b:bc:30:7c:e7: fe:e0:cb:c4:46:83:ac:e4:b5:ff:b6:b2:d3:9d:87:2b:00:bc: 81:f3:e0:36:b7:64:17:6c:b0:e9:1d:51:ed:d7:76:8e:1a:71: b2:c5:6c:e6:e8:a0:9b:83:b2:0d:cd:56:ae:45:a5:60:f1:e0: b8:d6:c1:c3:ed:32:4c:b7:d5:fd:a9:f7:a3:3a:fa:1f:4d:77: f8:7f:ea:57:5c:c0:ac:75:86:a0:86:67:42:de:00:5d:e5:2e: eb:9f:1c:de:13:ee:59:0a:cb:b3:be:45:75:b7:6e:64:12:0d: e0:c8:90:5e:8a:7b:b8:01:cc:a8:39:85:95:21:2f:d0:c3:4f: 1b:67:f9:dc:c3:17:65:87:0c:be:35:c0:95:07:a5:73:46:a0: 07:38:4c:fd:f5:15:ec:70:60:85:5b:43:56:38:e3:bd:3b:b7: 98:43:d3:ad:97:58:96:a2:1b:ce:3e:80:77:39:ec:37:f0:cd: fd:b4:01:6f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxEbDTZcByr2gJp7Pijsy0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Yjc3MDE2MDU1Mzc2MGMzNTY3ZGY1MWE4NDdlZDZjNTI5 YzA3ODkwHhcNMjYwMjA5MjIwMTA3WhcNMjYwMjEwMjIwMTA3WjAzMTEwLwYDVQQD EygwMjFiNWMyZWU5MGJlNjQ5ZGU2MjRlZGQyN2NkMjgyOTA0OGJiMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukgvIiBe7xIIn/kyHZfnSoVxt/16 AoMKavcs5O3ORmL4cBxd81o5Op+pF/n0If+bVQXx7Zsg3wFTPU9nwUoCJ0jkFIH/ K6OoadXxVLbfFvoRYcrT9LGTiU7ZaidhmGTCCWg2q1ggX+uzfLy5LzmvfgfHR8As y7oy96DsMcjuaAGPlBDAcdXWaCsT55LsncOauwiNwg3TTXs/qEbZKjsWlajMY3XA nKp4Otvxsy/wluCKdPcmJTLWEGZ9AzZZgbmsGtW39prFACn9sYL16+SY5Td+MEpf ygi0B7KihUJsU+2ttsFEh5WjbLWxvbPIqM6s+Vf97T176HvG5kCm6fb+GQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAIbXC7pC+ZJ3mJO3SfNKCkEi7KiMB8GA1UdIwQY MBaAFPi3cBYFU3YMNWffUahH7WxSnAeJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MZHdGZ1ZUZGd3MVo5OVJxRWZ0YkZLY0I0ay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMzI1M2FjLThmYTctNDI1Yi04YTkw LTliOWI0MDE0NTllNi8xLzEtTGR3RmdWVGRndzFaOTlScUVmdGJGS2NCNGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVlLzMyNTNhYy04ZmE3LTQyNWItOGE5MC05YjliNDAxNDU5 ZTYvMS8xLUxkd0ZnVlRkZ3cxWjk5UnFFZnRiRktjQjRrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzr9 oIdnnIF87XuWqA6F0j/B16vqDLf23kuMzZPErao1SE21zdwsjv1oNAbt2ZPGcPdl +F8+nMjJ6HqJFDsa2YWfxXu8MHzn/uDLxEaDrOS1/7ay052HKwC8gfPgNrdkF2yw 6R1R7dd2jhpxssVs5uigm4OyDc1WrkWlYPHguNbBw+0yTLfV/an3ozr6H013+H/q V1zArHWGoIZnQt4AXeUu658c3hPuWQrLs75FdbduZBIN4MiQXop7uAHMqDmFlSEv 0MNPG2f53MMXZYcMvjXAlQelc0agBzhM/fUV7HBghVtDVjjjvTu3mEPTrZdYlqIb zj6AdznsN/DN/bQBbw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:58 2026 by rpki-client