This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json) Hash identifier: rqgkcBMOxMDR+mxENMH8Bss3oB+/wuAwljX/gC0cR84= Subject key identifier: 6B:CA:A5:28:B9:17:A8:6C:13:E6:54:0B:C8:95:EF:A6:34:92:D7:0E Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534 Certificate serial: 019C420F7DC163E6D5A486CBF1BA82B46AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft Manifest number: 1802 Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: 6MjPn1jd9HAlA1vpB2PtJ1zfsW8DVDzOXkCSP4oaeUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7d:c1:63:e6:d5:a4:86:cb:f1:ba:82:b4:6a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534 Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=6bcaa528b917a86c13e6540bc895efa63492d70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:5d:60:69:54:05:41:c6:3f:f3:7c:49:86: e0:bf:31:ae:e5:29:13:cc:e3:cf:22:c6:35:4a:65: c9:77:6a:68:11:26:c5:d6:d3:0f:8a:4f:69:4e:0e: a1:3c:1f:18:f1:37:0f:dd:70:a2:69:7b:b3:c9:05: 86:72:06:a2:9d:fb:16:36:6b:94:cc:71:c9:2a:c2: 00:40:21:5a:a7:e4:7b:72:a0:45:69:ad:cc:5c:fd: 76:e6:91:4a:c4:9d:e2:8c:60:2e:f0:c2:80:2a:a9: 28:74:12:92:58:90:2f:17:97:21:e3:47:4b:70:20: 60:de:0b:ae:c1:2c:30:f7:7a:70:f7:6c:ef:dd:58: 2b:6c:b2:a5:2a:2f:ef:38:ff:cb:d5:05:e7:ed:47: f6:11:0a:85:53:d0:22:ba:7c:2b:eb:32:d4:5c:2e: 4a:d6:0e:03:34:97:28:17:e6:79:30:70:49:e2:d1: a4:ac:a9:c3:b0:7c:68:c4:36:f5:b3:a9:be:39:d3: cc:31:fb:0a:bc:fa:cd:1c:7d:80:4f:79:24:2f:83: 89:94:6f:db:de:08:6c:a9:74:bd:58:28:10:d7:35: 64:52:8d:8f:7f:6b:51:10:e4:a4:03:a6:bf:0f:26: 7a:96:e3:92:ef:40:f4:56:90:e5:d2:48:32:a7:bc: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:A5:28:B9:17:A8:6C:13:E6:54:0B:C8:95:EF:A6:34:92:D7:0E X509v3 Authority Key Identifier: keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c1:31:34:03:b5:e3:e4:85:30:13:f4:c5:47:4f:48:6f:a2: ca:a1:1b:e4:50:3e:8b:90:f6:f1:58:04:2b:24:84:05:fa:ae: 45:09:3b:d0:49:fa:a4:89:e1:d0:f4:b2:37:1c:f8:1e:d3:e8: 8f:a0:2d:94:77:a4:31:6c:53:b2:5d:d1:da:e1:30:57:34:37: 07:29:b4:3d:48:b8:d6:99:5e:d7:76:3f:22:2e:16:8b:66:18: eb:bf:5e:01:f1:c4:ab:13:05:78:eb:71:1e:a0:03:82:db:49: 85:51:f1:09:64:b1:2e:11:d0:bd:00:a1:c4:60:81:c8:d3:ed: b8:18:a5:70:c1:8c:fb:1c:13:ff:8d:c3:54:87:53:ba:04:33: 29:f3:5c:1f:3c:8a:d6:ce:81:4c:a5:a0:46:7b:e8:63:57:e9: 68:a7:1c:8c:8a:08:e0:84:ef:e2:ea:31:a1:76:3f:10:83:51: 94:e1:83:e7:90:dc:3a:6d:fd:e0:a6:a9:8b:a4:12:f5:91:d0: a3:b0:fb:cc:d4:85:3b:c0:c3:68:e9:13:ec:9e:1b:bc:cf:01: 5e:12:e9:fa:33:7d:57:33:b8:33:94:a9:25:39:70:f3:dc:e0: 85:36:aa:b4:87:0b:54:7a:15:b2:3f:c4:30:79:29:f6:ce:81: 88:6d:75:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD33BY+bVpIbL8bqCtGrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYmYwYmRjZDkwMTYyMmIxNmZmZDQxNDRiNTg4ODcwNzMy MmM1MzQwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD Eyg2YmNhYTUyOGI5MTdhODZjMTNlNjU0MGJjODk1ZWZhNjM0OTJkNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKhdYGlUBUHGP/N8SYbgvzGu5SkT zOPPIsY1SmXJd2poESbF1tMPik9pTg6hPB8Y8TcP3XCiaXuzyQWGcgainfsWNmuU zHHJKsIAQCFap+R7cqBFaa3MXP125pFKxJ3ijGAu8MKAKqkodBKSWJAvF5ch40dL cCBg3guuwSww93pw92zv3VgrbLKlKi/vOP/L1QXn7Uf2EQqFU9Aiunwr6zLUXC5K 1g4DNJcoF+Z5MHBJ4tGkrKnDsHxoxDb1s6m+OdPMMfsKvPrNHH2AT3kkL4OJlG/b 3ghsqXS9WCgQ1zVkUo2Pf2tREOSkA6a/DyZ6luOS70D0VpDl0kgyp7wadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvKpSi5F6hsE+ZUC8iV76Y0ktcOMB8GA1UdIwQY MBaAFA6/C9zZAWIrFv/UFEtYiHBzIsU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTkt YzQ0N2I0MTkzMjEwLzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTktYzQ0N2I0MTkzMjEw LzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncExNAO1 4+SFMBP0xUdPSG+iyqEb5FA+i5D28VgEKySEBfquRQk70En6pInh0PSyNxz4HtPo j6AtlHekMWxTsl3R2uEwVzQ3Bym0PUi41ple13Y/Ii4Wi2YY679eAfHEqxMFeOtx HqADgttJhVHxCWSxLhHQvQChxGCByNPtuBilcMGM+xwT/43DVIdTugQzKfNcHzyK 1s6BTKWgRnvoY1fpaKccjIoI4ITv4uoxoXY/EINRlOGD55DcOm394Kapi6QS9ZHQ o7D7zNSFO8DDaOkT7J4bvM8BXhLp+jN9VzO4M5SpJTlw89zghTaqtIcLVHoVsj/E MHkp9s6BiG11cg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:49 2026 by rpki-client