This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json) Hash identifier: pm7KVC5SXGqYkBIfHbdTM1aWpdrMS1vJAhmRs/L4BHY= Subject key identifier: 89:12:FE:04:96:D6:FA:21:4C:19:CD:D4:06:8E:68:F7:0B:F3:6B:B0 Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35 Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35 Certificate serial: 019C451039A77CB653A81DD7E9D754FD9B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft Manifest number: 0B55 Signing time: Tue 10 Feb 2026 01:00:17 +0000 Manifest this update: Tue 10 Feb 2026 01:00:17 +0000 Manifest next update: Wed 11 Feb 2026 01:00:17 +0000 Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: 6tZtFCUEnxqZFiZEofZZ0qMQ8acCY2oXt+D7D/PRdJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:39:a7:7c:b6:53:a8:1d:d7:e9:d7:54:fd:9b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35 Validity Not Before: Feb 10 01:00:17 2026 GMT Not After : Feb 11 01:00:17 2026 GMT Subject: CN=8912fe0496d6fa214c19cdd4068e68f70bf36bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:f3:c5:b8:ee:6f:62:2f:09:0b:fe:bb:9d: 45:51:82:71:d9:bc:85:de:e5:61:d8:a8:47:1d:d4: 31:4a:36:d7:68:29:74:d4:22:d8:27:af:a0:87:c7: fa:50:21:94:25:b9:6e:05:7b:68:6f:25:44:18:0d: 97:43:37:99:1c:ec:ed:23:04:fb:36:f8:15:71:0d: 82:ad:f7:f6:24:75:2d:a3:7e:d6:4b:e3:7e:c6:67: b7:9b:97:ad:c9:d7:12:ba:8c:9e:fc:98:3c:f0:4d: e5:45:48:55:9e:8d:32:76:4d:bc:48:7c:0a:d3:37: f3:a3:a7:aa:1a:87:c0:50:e4:0b:4e:f2:64:19:ec: 1a:e1:8f:22:5c:9b:f8:17:8c:0c:e9:33:61:a2:00: 02:51:c0:f6:28:d8:a7:99:50:0d:38:a0:ed:d8:dd: f3:65:80:09:f8:30:6a:dd:79:56:e2:3a:9f:c8:bf: 4e:3e:d5:e5:ad:4f:09:b5:cd:f1:41:2a:66:a7:36: 47:05:ff:ea:34:97:ec:57:49:9a:1f:57:82:b5:3f: 82:60:de:14:a6:a6:08:95:4d:2e:80:15:b9:b9:8a: 35:36:6a:15:f3:57:3e:d2:86:0f:ce:fb:d7:68:5d: 0a:e7:b9:41:36:35:e6:0c:bb:aa:5b:c4:f8:29:2a: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:12:FE:04:96:D6:FA:21:4C:19:CD:D4:06:8E:68:F7:0B:F3:6B:B0 X509v3 Authority Key Identifier: keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:d6:4d:68:87:ce:b5:be:66:fc:b9:c4:2e:89:64:10:d7: 24:54:79:d7:a6:50:15:8a:a3:b5:3d:d0:f7:b6:83:19:25:9e: 7a:30:dd:c9:a9:f8:c5:02:73:e3:12:01:f2:2f:9d:cb:4a:88: 93:a5:bc:b0:6a:a6:01:71:5b:22:d7:0c:1e:9b:c3:df:c5:0d: 0f:d5:84:ed:36:61:bb:20:2c:e3:09:6e:89:2f:24:78:6c:78: 75:8d:43:dc:68:02:8f:b3:ce:eb:31:3c:cd:02:18:36:75:4d: 8d:b2:a6:6d:8a:9a:e0:8c:3a:67:86:0c:53:99:53:6c:ee:cf: 95:2c:b4:c4:a6:5f:ef:d6:ab:c6:9a:85:79:0c:7f:f5:be:4d: 2c:4e:7a:fb:1c:2d:29:0f:80:e0:ed:9f:f6:d8:00:08:f3:ed: aa:cf:29:6d:c0:dc:10:12:81:9d:b4:90:7f:1f:21:32:10:00: 17:e8:1c:a0:76:7a:e2:94:84:87:b1:df:44:8f:a0:f6:81:8a: b9:4b:79:2c:ec:6d:d1:c5:9f:ee:06:96:e4:ca:bf:75:d1:4e: 36:0d:9c:24:00:00:80:cb:41:03:0b:af:f1:7c:69:53:44:c5: a9:17:b8:8d:90:b5:9e:32:53:0e:63:4a:84:90:ed:e3:96:77: f6:37:c9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEDmnfLZTqB3X6ddU/ZtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzVlMGU0NDVkOTQ3MzE1NGFlZWQ3NDQ2OWIyY2ZiYTM2 NjRlMzUwHhcNMjYwMjEwMDEwMDE3WhcNMjYwMjExMDEwMDE3WjAzMTEwLwYDVQQD Eyg4OTEyZmUwNDk2ZDZmYTIxNGMxOWNkZDQwNjhlNjhmNzBiZjM2YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsALzxbjub2IvCQv+u51FUYJx2byF 3uVh2KhHHdQxSjbXaCl01CLYJ6+gh8f6UCGUJbluBXtobyVEGA2XQzeZHOztIwT7 NvgVcQ2Crff2JHUto37WS+N+xme3m5etydcSuoye/Jg88E3lRUhVno0ydk28SHwK 0zfzo6eqGofAUOQLTvJkGewa4Y8iXJv4F4wM6TNhogACUcD2KNinmVANOKDt2N3z ZYAJ+DBq3XlW4jqfyL9OPtXlrU8Jtc3xQSpmpzZHBf/qNJfsV0maH1eCtT+CYN4U pqYIlU0ugBW5uYo1NmoV81c+0oYPzvvXaF0K57lBNjXmDLuqW8T4KSrawQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkS/gSW1vohTBnN1AaOaPcL82uwMB8GA1UdIwQY MBaAFOvF4ORF2UcxVK7tdEabLPujZk41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUt OGRlYzJlMTYzYTg2LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUtOGRlYzJlMTYzYTg2 LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQXWTWiH zrW+Zvy5xC6JZBDXJFR516ZQFYqjtT3Q97aDGSWeejDdyan4xQJz4xIB8i+dy0qI k6W8sGqmAXFbItcMHpvD38UND9WE7TZhuyAs4wluiS8keGx4dY1D3GgCj7PO6zE8 zQIYNnVNjbKmbYqa4Iw6Z4YMU5lTbO7PlSy0xKZf79arxpqFeQx/9b5NLE56+xwt KQ+A4O2f9tgACPPtqs8pbcDcEBKBnbSQfx8hMhAAF+gcoHZ64pSEh7HfRI+g9oGK uUt5LOxt0cWf7gaW5Mq/ddFONg2cJAAAgMtBAwuv8XxpU0TFqRe4jZC1njJTDmNK hJDt45Z39jfJSQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:18 2026 by rpki-client