This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json) Hash identifier: x7FbFZhNK4cTR/7UVaFiX3qGLQjxdJjDwcj7DJZ7eRo= Subject key identifier: 63:D3:E0:E7:86:10:B9:34:9F:9C:4F:F3:EC:D1:68:02:F6:76:4C:AB Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85 Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85 Certificate serial: 019C4246A7E86342BA9C0A7F1CD6AB94052D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft Manifest number: 0250 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: kqJRXV+1u3x+uueSLvxyFJdxGG8AiUPEptfQ99/uWLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a7:e8:63:42:ba:9c:0a:7f:1c:d6:ab:94:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=63d3e0e78610b9349f9c4ff3ecd16802f6764cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:c0:06:51:34:8d:e4:da:57:8d:fb:20:2e: 13:60:f6:91:0e:d7:99:6f:a5:b7:dc:ab:7a:ca:95: 60:00:12:87:86:2e:0a:88:4d:b4:26:ad:79:1a:2a: ba:08:ac:23:f5:b9:b5:a9:a9:3d:27:8e:86:4e:26: 50:aa:de:27:b8:43:d8:11:2d:bc:8a:cc:be:94:7f: 09:0b:d7:a0:ea:8c:91:c6:db:ce:cb:b7:b1:4e:80: 75:b6:63:01:a2:d9:e9:ba:a1:bc:96:f2:89:da:59: 7d:00:9f:f2:e7:66:76:0c:ef:85:2d:7f:79:38:0a: 39:dd:1f:7c:26:57:98:97:a5:07:89:46:26:65:99: d4:16:05:f9:c4:29:7c:b9:e0:c0:04:72:fe:06:d1: 81:b7:67:8a:35:6d:a6:4e:c3:00:5e:8b:38:80:85: 20:5a:a7:43:fc:01:6a:94:fd:3e:a1:71:e4:47:99: 26:4f:b6:95:5f:0f:ac:e6:ef:9c:39:12:8c:c2:69: 91:66:ee:81:00:d8:1e:bb:b2:1b:a0:fa:b2:25:70: a8:59:fa:88:b7:55:21:49:ca:8c:1f:3f:e0:13:ca: aa:b6:ef:2a:89:f2:5b:c1:da:47:89:1d:cf:86:74: 35:c1:bb:22:d0:55:30:e6:cc:cd:a0:c9:64:6f:90: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D3:E0:E7:86:10:B9:34:9F:9C:4F:F3:EC:D1:68:02:F6:76:4C:AB X509v3 Authority Key Identifier: keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:6a:0e:8b:f6:e3:ca:26:bd:56:8a:6e:32:77:51:6d:1c:6f: 7c:0c:67:a0:3a:13:2c:d8:b1:f8:5f:44:48:87:5f:e3:44:63: 83:6e:d1:2b:0c:f5:c5:82:d7:96:0d:a2:49:73:1b:f6:64:b8: 08:53:02:34:1c:dc:05:43:ba:f2:ba:15:e6:25:7a:d2:13:46: 33:9d:22:a3:46:93:02:2e:2a:6a:a0:84:48:81:5a:56:ef:b5: 52:98:0c:6c:fa:21:f9:5c:32:a3:79:c5:71:99:d4:cc:d6:17: 8c:a3:62:00:be:d7:16:de:d3:55:e6:19:6d:93:09:4a:26:19: fe:22:82:c7:b0:70:88:c7:91:a5:17:6c:5b:73:8b:d5:9b:7e: ab:06:90:7f:94:d3:68:53:82:fb:2f:a9:bb:7a:2a:90:2d:7f: 51:2d:20:1c:8b:3d:8e:d8:00:81:a8:27:9e:5c:ae:d5:f1:5e: b7:f6:d1:c7:a0:e7:cb:17:cf:1d:70:92:02:3c:ad:0b:09:5d: 6a:5e:42:a8:7a:37:56:51:e8:d0:4c:fc:1f:78:a2:08:9f:7f: 23:28:79:ed:15:96:6f:fb:e9:55:fe:97:41:66:63:20:f2:5b: 37:61:f4:29:e4:e7:b6:c8:a4:b0:1f:6d:58:c7:5f:a2:a9:06: a6:00:d2:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqfoY0K6nAp/HNarlAUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWM1NmRkOGQ0OTdiMTA2ODEzYTIyNWExODE3MTQ5M2Vl MzJhODUwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD Eyg2M2QzZTBlNzg2MTBiOTM0OWY5YzRmZjNlY2QxNjgwMmY2NzY0Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2nABlE0jeTaV437IC4TYPaRDteZ b6W33Kt6ypVgABKHhi4KiE20Jq15Giq6CKwj9bm1qak9J46GTiZQqt4nuEPYES28 isy+lH8JC9eg6oyRxtvOy7exToB1tmMBotnpuqG8lvKJ2ll9AJ/y52Z2DO+FLX95 OAo53R98JleYl6UHiUYmZZnUFgX5xCl8ueDABHL+BtGBt2eKNW2mTsMAXos4gIUg WqdD/AFqlP0+oXHkR5kmT7aVXw+s5u+cORKMwmmRZu6BANgeu7IboPqyJXCoWfqI t1UhScqMHz/gE8qqtu8qifJbwdpHiR3PhnQ1wbsi0FUw5szNoMlkb5BsQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPT4OeGELk0n5xP8+zRaAL2dkyrMB8GA1UdIwQY MBaAFGtcVt2NSXsQaBOiJaGBcUk+4yqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2Et YTcxMzZhMTQ1ZjFjLzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2EtYTcxMzZhMTQ1ZjFj LzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3moOi/bj yia9VopuMndRbRxvfAxnoDoTLNix+F9ESIdf40Rjg27RKwz1xYLXlg2iSXMb9mS4 CFMCNBzcBUO68roV5iV60hNGM50io0aTAi4qaqCESIFaVu+1UpgMbPoh+Vwyo3nF cZnUzNYXjKNiAL7XFt7TVeYZbZMJSiYZ/iKCx7BwiMeRpRdsW3OL1Zt+qwaQf5TT aFOC+y+pu3oqkC1/US0gHIs9jtgAgagnnlyu1fFet/bRx6DnyxfPHXCSAjytCwld al5CqHo3VlHo0Ez8H3iiCJ9/Iyh57RWWb/vpVf6XQWZjIPJbN2H0KeTntsiksB9t WMdfoqkGpgDSag== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:12 2026 by rpki-client