This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json) Hash identifier: erSKawrOl0JgG93br/k5sDl6Q3yhuVGyZKr4fLrbVTA= Subject key identifier: 4C:73:9D:BA:62:08:5B:AB:A7:02:09:B0:9E:DB:75:A1:77:A5:8C:04 Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4 Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4 Certificate serial: 019C432237834AA957DEB51A0F46309C6A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft Manifest number: 0C1C Signing time: Mon 09 Feb 2026 16:00:41 +0000 Manifest this update: Mon 09 Feb 2026 16:00:41 +0000 Manifest next update: Tue 10 Feb 2026 16:00:41 +0000 Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: utkyxMI6KD0bOVDA0HpcUgt9DkFbdpeuNNCG7fJf2LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:37:83:4a:a9:57:de:b5:1a:0f:46:30:9c:6a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4 Validity Not Before: Feb 9 16:00:41 2026 GMT Not After : Feb 10 16:00:41 2026 GMT Subject: CN=4c739dba62085baba70209b09edb75a177a58c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:18:70:7a:61:f9:09:ea:03:7e:22:18:5f: 45:50:0a:ef:50:f6:7e:87:99:7e:de:ef:40:81:7e: a7:33:ff:17:7d:5b:60:c6:c7:70:9a:39:10:92:f4: 03:25:83:5e:23:1b:d8:4a:1f:07:c7:38:9c:84:56: a5:06:93:b3:0c:8e:2e:5a:2b:c4:97:4d:1c:02:26: 92:69:5f:a9:89:9c:a6:af:a8:19:55:7a:e1:49:83: 29:c6:53:15:47:2a:49:31:f2:bd:ef:81:71:76:4b: de:d3:86:a3:ba:ed:28:c7:be:5c:30:a1:38:5e:54: 3f:d7:bb:d7:8f:b4:7a:d0:d4:8d:be:05:7c:33:37: db:90:37:34:0c:5a:82:d4:e5:7a:bf:6f:76:0f:c5: c6:62:4f:01:1a:1f:e1:6f:f5:1e:27:6b:d2:cc:e4: 1d:d1:70:6b:34:00:79:6b:64:35:43:56:5a:72:f5: 18:66:96:e7:59:a6:2d:bd:5a:4f:72:58:8a:a4:10: 63:f2:0e:b2:00:71:41:fa:eb:25:44:4b:bb:08:25: c6:14:4b:6f:03:d4:cb:b1:fa:c1:f7:b1:6d:11:15: 51:f8:62:cb:03:d0:6f:cb:6d:14:be:f7:59:77:35: 49:39:f4:0a:4a:c1:f2:66:a7:26:ad:9b:6a:e8:d8: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:9D:BA:62:08:5B:AB:A7:02:09:B0:9E:DB:75:A1:77:A5:8C:04 X509v3 Authority Key Identifier: keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:01:92:bb:00:f2:5f:f2:6b:6c:1e:99:ae:1b:52:9c:62:41: 0c:f2:84:8b:4c:91:9a:61:83:ee:9b:fa:30:ab:d0:33:de:8a: 00:20:f0:dc:ce:80:25:c4:c9:61:fb:9d:17:0b:0b:8c:40:3c: f2:fc:01:8c:f8:81:61:3b:23:65:29:32:0a:41:41:36:14:58: 8f:cc:3d:cb:11:9e:2f:78:4c:2e:db:10:aa:31:5e:3b:63:c7: a2:37:30:8d:77:cb:e8:a6:7d:9a:02:b6:77:b8:31:cb:8f:b6: 8a:e3:42:5f:f2:fc:2c:07:ed:00:e6:a8:4f:83:22:91:c0:a1: 60:7e:55:8d:14:90:b3:95:64:47:77:91:d1:95:e5:38:45:62: 61:a6:81:71:24:61:ea:09:ef:a1:68:f4:0e:9c:ec:0c:90:d4: c3:f2:2a:e5:93:cb:be:e0:9c:07:83:04:a1:6f:2c:b9:3c:3a: 40:7e:f2:ff:b5:61:09:29:a5:67:74:6d:31:42:47:24:9a:e5: 83:9c:1a:50:15:9c:be:fd:1b:a2:a1:85:82:80:22:e8:ff:90: b5:37:d9:d4:20:bb:e4:9f:28:d2:8b:79:e4:72:95:94:ed:cb: 1c:1f:4d:d8:bf:13:b5:df:cd:61:7e:35:8c:ad:db:2f:e3:fc: 60:56:5f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjeDSqlX3rUaD0YwnGoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDVmYjBkMzM2ZDIwN2Y3NTM2Y2UyOTVmOWU2OTg2Mjhh MTRlZTQwHhcNMjYwMjA5MTYwMDQxWhcNMjYwMjEwMTYwMDQxWjAzMTEwLwYDVQQD Eyg0YzczOWRiYTYyMDg1YmFiYTcwMjA5YjA5ZWRiNzVhMTc3YTU4YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CMYcHph+QnqA34iGF9FUArvUPZ+ h5l+3u9AgX6nM/8XfVtgxsdwmjkQkvQDJYNeIxvYSh8HxzichFalBpOzDI4uWivE l00cAiaSaV+piZymr6gZVXrhSYMpxlMVRypJMfK974Fxdkve04ajuu0ox75cMKE4 XlQ/17vXj7R60NSNvgV8MzfbkDc0DFqC1OV6v292D8XGYk8BGh/hb/UeJ2vSzOQd 0XBrNAB5a2Q1Q1ZacvUYZpbnWaYtvVpPcliKpBBj8g6yAHFB+uslREu7CCXGFEtv A9TLsfrB97FtERVR+GLLA9Bvy20UvvdZdzVJOfQKSsHyZqcmrZtq6NistQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExznbpiCFurpwIJsJ7bdaF3pYwEMB8GA1UdIwQY MBaAFLJF+w0zbSB/dTbOKV+eaYYooU7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2tYN0RUTnRJSDkxTnM0cFg1NXBoaWloVHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTcyY2ItNGI0Yi00M2YxLThkMjct ZjYyNzY2OTc0MzUzLzEvc2tYN0RUTnRJSDkxTnM0cFg1NXBoaWloVHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTcyY2ItNGI0Yi00M2YxLThkMjctZjYyNzY2OTc0MzUz LzEvc2tYN0RUTnRJSDkxTnM0cFg1NXBoaWloVHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wGSuwDy X/JrbB6ZrhtSnGJBDPKEi0yRmmGD7pv6MKvQM96KACDw3M6AJcTJYfudFwsLjEA8 8vwBjPiBYTsjZSkyCkFBNhRYj8w9yxGeL3hMLtsQqjFeO2PHojcwjXfL6KZ9mgK2 d7gxy4+2iuNCX/L8LAftAOaoT4MikcChYH5VjRSQs5VkR3eR0ZXlOEViYaaBcSRh 6gnvoWj0DpzsDJDUw/Iq5ZPLvuCcB4MEoW8suTw6QH7y/7VhCSmlZ3RtMUJHJJrl g5waUBWcvv0boqGFgoAi6P+QtTfZ1CC75J8o0ot55HKVlO3LHB9N2L8Ttd/NYX41 jK3bL+P8YFZfjA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:03 2026 by rpki-client