This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json) Hash identifier: L2JXHPfTN+XacHHmGxUMOtjBTvLwTfbaXHIIo7BXRt4= Subject key identifier: D7:4B:8A:03:A9:08:86:3D:4E:D1:F6:0A:20:69:EA:D9:F8:89:C6:EC Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65 Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165 Certificate serial: 019C432277B8E1E74B9A82E1E311279370FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft Manifest number: 08C4 Signing time: Mon 09 Feb 2026 16:00:58 +0000 Manifest this update: Mon 09 Feb 2026 16:00:58 +0000 Manifest next update: Tue 10 Feb 2026 16:00:58 +0000 Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: WMEEWqOyp2J0ggEVcpScESg2aBGgBwKsqa+DizWBsio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:77:b8:e1:e7:4b:9a:82:e1:e3:11:27:93:70:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5509d77622d30868f23613c5a816e724840165 Validity Not Before: Feb 9 16:00:58 2026 GMT Not After : Feb 10 16:00:58 2026 GMT Subject: CN=d74b8a03a908863d4ed1f60a2069ead9f889c6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:e9:a7:c9:d8:1a:51:db:c0:c9:c9:6a:3d: 2e:61:b4:35:92:a1:44:19:17:5d:0c:67:41:e4:67: 2d:d4:04:e0:54:12:1c:f1:b8:5a:db:61:62:e7:b6: 0c:da:27:ff:a2:54:11:39:34:9a:11:c0:36:ad:92: 86:cc:f3:97:9d:67:ac:8a:56:d0:3a:a5:df:ce:bd: f7:d1:20:ec:ac:df:e1:ec:85:de:e4:7c:ae:70:db: 12:35:56:ea:11:16:75:69:49:03:b7:7d:00:db:f6: 45:d7:02:d2:99:96:48:b5:9b:6a:8d:91:43:ba:0e: 5c:2a:96:d4:9e:03:26:21:85:8c:fb:5c:41:dd:09: a3:7c:c6:e3:d7:41:6d:43:65:11:c5:d7:26:d4:7e: 6c:4e:ee:f4:e5:66:7a:84:33:04:cd:4c:d5:a2:97: c0:63:27:3d:00:be:1c:a2:d9:f5:62:1a:31:23:51: 3a:45:ef:2d:28:1c:a7:f4:0d:f5:49:68:f3:5f:60: 86:1e:a5:b7:75:05:55:0f:03:c2:72:70:ef:0e:ae: 8b:ea:bb:99:7d:3f:f6:8d:79:21:64:9d:69:00:d0: 18:49:0b:1d:91:2f:55:71:d6:12:da:78:d0:0f:e5: a0:f5:69:6f:03:72:ad:08:ab:a6:67:67:f7:7c:22: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4B:8A:03:A9:08:86:3D:4E:D1:F6:0A:20:69:EA:D9:F8:89:C6:EC X509v3 Authority Key Identifier: keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:6b:49:ef:d4:dc:8b:b2:b1:f2:68:72:3e:c3:3c:24:6a:4e: fa:1b:1f:c2:63:3c:6d:0d:f1:a7:e0:ab:e5:0a:b5:73:db:dd: 6a:f6:10:90:32:bc:e4:d6:c3:24:c9:ba:8d:1a:60:46:10:4e: f3:f1:e1:da:c2:06:5a:d4:6d:1e:85:97:cd:5e:a6:8b:54:90: 48:b8:3f:70:be:e0:8a:e3:c7:3c:8e:56:6f:1c:21:0a:5d:6d: a9:d9:62:fc:69:1f:7c:fe:db:36:85:cf:8d:db:99:43:b4:c2: 87:17:bd:d4:03:49:92:c8:02:76:40:cb:ee:0c:a1:3e:a8:40: 1b:2e:3e:c6:fb:5a:d1:55:62:80:6e:61:64:13:9e:15:7e:40: 24:f3:f7:45:36:9f:fc:11:6c:24:cd:7c:fb:2c:63:d4:7a:3f: 63:c6:6f:60:64:82:23:18:19:8d:42:e3:40:3c:4e:2e:4f:03: e5:e2:1d:b2:e1:b1:e1:64:2d:3a:0d:63:fa:53:54:8d:ad:17: ef:70:b3:20:04:3c:e4:f7:6a:df:81:af:fb:90:c3:a4:5b:cc: f2:d9:f3:d9:1b:f2:32:fc:f1:0b:93:67:22:90:9c:84:71:82: 2f:2d:ab:11:21:df:76:d8:a9:58:4a:a0:65:e0:92:94:d0:d0: ea:17:1e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIne44edLmoLh4xEnk3D+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTUwOWQ3NzYyMmQzMDg2OGYyMzYxM2M1YTgxNmU3MjQ4 NDAxNjUwHhcNMjYwMjA5MTYwMDU4WhcNMjYwMjEwMTYwMDU4WjAzMTEwLwYDVQQD EyhkNzRiOGEwM2E5MDg4NjNkNGVkMWY2MGEyMDY5ZWFkOWY4ODljNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA473pp8nYGlHbwMnJaj0uYbQ1kqFE GRddDGdB5Gct1ATgVBIc8bha22Fi57YM2if/olQROTSaEcA2rZKGzPOXnWesilbQ OqXfzr330SDsrN/h7IXe5HyucNsSNVbqERZ1aUkDt30A2/ZF1wLSmZZItZtqjZFD ug5cKpbUngMmIYWM+1xB3QmjfMbj10FtQ2URxdcm1H5sTu705WZ6hDMEzUzVopfA Yyc9AL4cotn1YhoxI1E6Re8tKByn9A31SWjzX2CGHqW3dQVVDwPCcnDvDq6L6ruZ fT/2jXkhZJ1pANAYSQsdkS9VcdYS2njQD+Wg9WlvA3KtCKumZ2f3fCJBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdLigOpCIY9TtH2CiBp6tn4icbsMB8GA1UdIwQY MBaAFK9VCdd2ItMIaPI2E8WoFuckhAFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMt MGFlZTZlMjM3MjQzLzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMtMGFlZTZlMjM3MjQz LzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGtJ79Tc i7Kx8mhyPsM8JGpO+hsfwmM8bQ3xp+Cr5Qq1c9vdavYQkDK85NbDJMm6jRpgRhBO 8/Hh2sIGWtRtHoWXzV6mi1SQSLg/cL7giuPHPI5WbxwhCl1tqdli/GkffP7bNoXP jduZQ7TChxe91ANJksgCdkDL7gyhPqhAGy4+xvta0VVigG5hZBOeFX5AJPP3RTaf /BFsJM18+yxj1Ho/Y8ZvYGSCIxgZjULjQDxOLk8D5eIdsuGx4WQtOg1j+lNUja0X 73CzIAQ85Pdq34Gv+5DDpFvM8tnz2RvyMvzxC5NnIpCchHGCLy2rESHfdtipWEqg ZeCSlNDQ6hce8g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:39:32 2026 by rpki-client