This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json) Hash identifier: jadLb29FnXZB02mWrzLfDBi2JDLsp+P7L7IFogsKA1M= Subject key identifier: 9C:F8:1E:A2:BD:D3:5F:03:55:64:2B:12:FE:2C:6E:A8:08:21:B1:A4 Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54 Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654 Certificate serial: 019C427DB5B5C6104E946BEB276251224E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft Manifest number: 04B5 Signing time: Mon 09 Feb 2026 13:01:00 +0000 Manifest this update: Mon 09 Feb 2026 13:01:00 +0000 Manifest next update: Tue 10 Feb 2026 13:01:00 +0000 Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: gHTey10nf3jKnFHOG787rTW7NcnhupY0UeIqARWszzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b5:b5:c6:10:4e:94:6b:eb:27:62:51:22:4e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654 Validity Not Before: Feb 9 13:01:00 2026 GMT Not After : Feb 10 13:01:00 2026 GMT Subject: CN=9cf81ea2bdd35f0355642b12fe2c6ea80821b1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:08:14:65:71:77:69:8a:d8:f1:27:63:b7: 79:78:82:96:96:c0:a5:c1:c8:ec:6b:c7:af:7b:ea: f4:da:79:98:d7:2d:eb:3e:83:51:eb:53:30:59:3d: f0:ea:ea:58:8f:cd:f4:f4:b4:b8:9e:ee:48:e2:3c: 8a:e9:7d:68:43:e6:26:33:17:ba:54:26:de:1e:a3: 40:ea:fa:1d:c5:34:f8:f6:9d:1b:4e:46:3f:f3:d3: c8:d5:c7:0b:57:a8:b1:41:d3:95:63:a8:e2:34:33: f7:6f:73:64:fe:c6:b0:5e:3d:30:da:8e:e3:74:99: ba:16:4e:a2:72:f3:dc:a6:92:2c:d9:34:90:e0:d2: 0a:2b:f0:20:da:24:cb:f9:5e:11:d3:5e:bc:ef:06: c6:9d:5a:f8:81:d6:fc:3b:71:fb:6c:be:81:ab:fd: 35:e2:cd:15:34:33:63:d6:a3:60:48:b9:25:10:b4: fc:03:fc:c0:a1:48:2d:77:98:5e:03:1e:99:93:c5: f6:8d:01:a1:e3:07:6e:be:de:37:d6:a2:de:de:dd: 80:73:44:86:81:f1:b7:ea:43:c2:88:04:1f:0d:58: 26:ad:76:2a:28:7d:79:0f:cd:bd:fa:c1:e9:d5:e9: 99:32:f0:9f:a3:9c:89:bb:1c:15:49:0d:2d:d2:b9: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F8:1E:A2:BD:D3:5F:03:55:64:2B:12:FE:2C:6E:A8:08:21:B1:A4 X509v3 Authority Key Identifier: keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:93:82:6e:43:7c:67:d3:53:5a:4e:1c:f6:8d:25:02:05:86: 70:84:a5:c7:cb:5e:e8:0f:2f:e9:a3:4a:44:32:7c:c3:e6:08: 90:e9:09:41:4e:0e:5a:5b:53:b3:65:35:81:a1:cf:f3:fb:70: 8c:e2:2e:d9:28:70:62:56:44:59:62:30:01:46:5e:51:f3:11: 1c:4d:7c:06:4e:66:ae:b5:77:b5:4f:0a:56:20:f8:3b:a6:fa: 4f:a9:6e:6c:f3:36:0f:0e:13:48:76:8b:ec:49:4b:bb:e9:89: d2:15:2c:59:e9:fd:8d:e2:5e:2c:4d:05:4e:f8:80:04:73:ae: aa:7e:e4:4c:78:60:ea:04:7f:58:17:6a:a5:34:ea:5f:ae:ee: a2:48:37:7a:15:ed:3a:e2:2b:55:af:f4:fc:56:38:e3:86:a2: 22:c2:49:ef:0d:88:d2:fc:a9:ed:ca:7c:59:24:04:ed:dd:86: 0a:2e:49:4a:fb:77:58:f0:27:ca:4f:c7:ec:70:c2:48:df:96: 8b:eb:2b:08:d8:98:89:cd:39:ff:f4:a2:4a:2c:ff:3e:0e:3c: a0:d8:fb:41:d7:9a:81:9d:67:63:4e:c3:e0:23:36:ea:63:42: bf:13:1a:b3:a7:24:41:f1:94:f2:fc:2c:b9:f1:96:05:36:0a: 93:8a:a4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbW1xhBOlGvrJ2JRIk6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTQyZGFkMGJhZWRlNGE4YjExNTBmNDU5YTAzZjAxMWNk YmE2NTQwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD Eyg5Y2Y4MWVhMmJkZDM1ZjAzNTU2NDJiMTJmZTJjNmVhODA4MjFiMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkEIFGVxd2mK2PEnY7d5eIKWlsCl wcjsa8eve+r02nmY1y3rPoNR61MwWT3w6upYj8309LS4nu5I4jyK6X1oQ+YmMxe6 VCbeHqNA6vodxTT49p0bTkY/89PI1ccLV6ixQdOVY6jiNDP3b3Nk/sawXj0w2o7j dJm6Fk6icvPcppIs2TSQ4NIKK/Ag2iTL+V4R01687wbGnVr4gdb8O3H7bL6Bq/01 4s0VNDNj1qNgSLklELT8A/zAoUgtd5heAx6Zk8X2jQGh4wduvt431qLe3t2Ac0SG gfG36kPCiAQfDVgmrXYqKH15D829+sHp1emZMvCfo5yJuxwVSQ0t0rku4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz4HqK9018DVWQrEv4sbqgIIbGkMB8GA1UdIwQY MBaAFK9ULa0Lrt5KixFQ9FmgPwEc26ZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMt NmI1MDA4NGY0MjY0LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMtNmI1MDA4NGY0MjY0 LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZOCbkN8 Z9NTWk4c9o0lAgWGcISlx8te6A8v6aNKRDJ8w+YIkOkJQU4OWltTs2U1gaHP8/tw jOIu2ShwYlZEWWIwAUZeUfMRHE18Bk5mrrV3tU8KViD4O6b6T6lubPM2Dw4TSHaL 7ElLu+mJ0hUsWen9jeJeLE0FTviABHOuqn7kTHhg6gR/WBdqpTTqX67uokg3ehXt OuIrVa/0/FY444aiIsJJ7w2I0vyp7cp8WSQE7d2GCi5JSvt3WPAnyk/H7HDCSN+W i+srCNiYic05//SiSiz/Pg48oNj7QdeagZ1nY07D4CM26mNCvxMas6ckQfGU8vws ufGWBTYKk4qkpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:08 2026 by rpki-client