This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json) Hash identifier: e+R1bbe/nWKpP6Y8sa+DNzDY5p3nWxqpKygjZOTaLz4= Subject key identifier: 44:59:53:51:70:34:BA:7A:74:24:8B:16:EF:69:78:A5:27:FA:19:58 Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc Certificate serial: 019C41A154BE06E7A9A2873E7C6F41A0E2A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft Manifest number: 1809 Signing time: Mon 09 Feb 2026 09:00:17 +0000 Manifest this update: Mon 09 Feb 2026 09:00:17 +0000 Manifest next update: Tue 10 Feb 2026 09:00:17 +0000 Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: IhNv3r2wqwgvNtujKUpgvs5GJTHb+FmpjseJKoc7pJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:54:be:06:e7:a9:a2:87:3e:7c:6f:41:a0:e2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc Validity Not Before: Feb 9 09:00:17 2026 GMT Not After : Feb 10 09:00:17 2026 GMT Subject: CN=445953517034ba7a74248b16ef6978a527fa1958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:7b:ec:13:8b:db:a6:2a:24:ed:af:5f:9d: e9:2e:8e:2a:b8:10:a4:af:1e:bb:d6:cd:0c:7a:f9: d1:0f:fb:22:58:37:45:cb:e9:4d:e9:3b:7c:d1:49: 11:86:4d:d7:96:f9:a5:7a:27:0a:90:0c:55:47:4d: ff:f1:d3:b6:a7:31:51:a6:0f:ab:f5:23:b4:e7:27: e2:5f:10:48:5f:67:c4:7b:1d:24:29:cf:71:2a:61: 13:f1:0c:1f:4c:69:02:57:f3:4d:f4:e9:53:c2:89: 44:0e:a0:6c:14:71:86:0c:eb:03:b8:40:32:e9:b0: 63:09:d3:c6:34:f2:49:0d:b1:cd:f5:29:db:ae:90: b7:0d:c6:e5:4a:1d:78:f7:75:88:79:5a:a2:66:6f: b0:f3:63:ce:fe:42:d5:83:73:62:f6:ad:29:73:88: d3:44:1a:27:4e:29:f0:78:c1:4f:d1:54:9d:3a:bc: ac:c4:ba:23:53:3a:34:77:4d:92:6e:51:ad:53:af: 93:79:0b:30:a6:b0:e1:a3:47:cb:89:71:fd:50:79: 7b:b2:a8:1b:39:c4:53:32:8b:b5:a8:74:74:ea:b3: b7:78:09:4c:7a:3f:be:7b:42:45:bb:b0:db:f2:11: 80:64:d1:ea:89:f6:13:f3:c4:3d:50:6b:68:c1:49: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:59:53:51:70:34:BA:7A:74:24:8B:16:EF:69:78:A5:27:FA:19:58 X509v3 Authority Key Identifier: keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9c:f4:7a:e0:86:d9:b8:f7:b0:c5:e6:09:5c:ff:19:c7:39: 86:3f:98:73:4e:6c:09:ff:28:4e:05:b4:ba:7e:27:27:bb:c1: e4:c0:60:f3:32:5d:bb:9f:45:ad:36:20:d9:47:1a:bf:c8:a1: 47:e1:0b:9d:b7:d9:cf:1c:5c:22:68:76:90:c7:ed:34:d1:6a: 86:59:1b:ca:7c:6e:47:0b:17:e0:83:05:c3:25:b9:ee:2d:7a: bd:ff:5a:c9:32:d4:fd:cb:11:08:d9:1c:53:a7:40:2e:7d:5a: f3:46:53:dd:85:08:ba:e1:d3:52:50:2e:25:47:8c:e6:f7:6c: 75:9a:c5:29:65:d9:2c:d0:d2:d4:72:60:d2:7a:8b:88:1a:73: 7f:24:87:3d:92:39:2f:26:99:28:d6:11:b8:bb:b7:ee:6d:1b: a8:cb:0a:9a:3c:16:b8:3e:2e:3e:3e:fc:29:d1:31:0f:97:99: 8b:08:31:a8:69:0c:46:d1:fc:ce:1c:19:08:4f:11:99:98:3b: c5:20:e2:86:f5:9b:b3:e1:00:ad:1f:4a:0e:d2:27:9f:62:7e: 10:33:aa:f8:c2:34:d0:d0:4b:df:96:c0:0c:a2:1d:fe:3b:2e: aa:34:bd:b2:4d:af:5c:72:de:0f:33:aa:24:36:88:6b:36:2e: 76:d3:9d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVS+Buepooc+fG9BoOKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNTNkNTJhNDAyNDkxZjRmOTlmZTU0NzFiZGQxYTVkZDZm NDJiYmMwHhcNMjYwMjA5MDkwMDE3WhcNMjYwMjEwMDkwMDE3WjAzMTEwLwYDVQQD Eyg0NDU5NTM1MTcwMzRiYTdhNzQyNDhiMTZlZjY5NzhhNTI3ZmExOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hB77BOL26YqJO2vX53pLo4quBCk rx671s0MevnRD/siWDdFy+lN6Tt80UkRhk3XlvmleicKkAxVR03/8dO2pzFRpg+r 9SO05yfiXxBIX2fEex0kKc9xKmET8QwfTGkCV/NN9OlTwolEDqBsFHGGDOsDuEAy 6bBjCdPGNPJJDbHN9SnbrpC3DcblSh1493WIeVqiZm+w82PO/kLVg3Ni9q0pc4jT RBonTinweMFP0VSdOrysxLojUzo0d02SblGtU6+TeQswprDho0fLiXH9UHl7sqgb OcRTMou1qHR06rO3eAlMej++e0JFu7Db8hGAZNHqifYT88Q9UGtowUkVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERZU1FwNLp6dCSLFu9peKUn+hlYMB8GA1UdIwQY MBaAFCNT1SpAJJH0+Z/lRxvdGl3W9Cu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZjFhZjYtZGQxYi00MTE3LWFjMTct ZGVhYjg1ODZmMmNlLzEvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZjFhZjYtZGQxYi00MTE3LWFjMTctZGVhYjg1ODZmMmNl LzEvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZz0euCG 2bj3sMXmCVz/Gcc5hj+Yc05sCf8oTgW0un4nJ7vB5MBg8zJdu59FrTYg2Ucav8ih R+ELnbfZzxxcImh2kMftNNFqhlkbynxuRwsX4IMFwyW57i16vf9ayTLU/csRCNkc U6dALn1a80ZT3YUIuuHTUlAuJUeM5vdsdZrFKWXZLNDS1HJg0nqLiBpzfySHPZI5 LyaZKNYRuLu37m0bqMsKmjwWuD4uPj78KdExD5eZiwgxqGkMRtH8zhwZCE8RmZg7 xSDihvWbs+EArR9KDtInn2J+EDOq+MI00NBL35bADKId/jsuqjS9sk2vXHLeDzOq JDaIazYudtOdfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:40 2026 by rpki-client