This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json) Hash identifier: cfxBKyLb6oNrmjKBoZVJQ8acV7AlHzyByZMbcACYICI= Subject key identifier: 94:2D:FF:34:F6:4D:F9:2B:94:2A:90:B3:19:EA:07:AE:06:77:CC:DC Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Certificate serial: 019C432251FAFA4A691378DD5E0CAC418866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft Manifest number: 0CF4 Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: 7NxR3sOFS1dF1HN/NtDekz/HWZGuP8q1WqiYouLemNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:51:fa:fa:4a:69:13:78:dd:5e:0c:ac:41:88:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=942dff34f64df92b942a90b319ea07ae0677ccdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:fd:9f:44:72:c8:d6:fc:7d:21:b3:9f:82: ad:0f:6f:e4:81:9c:e9:22:96:8d:27:a3:20:4c:74: 15:02:ee:40:c5:c3:d2:26:18:f3:b2:b5:64:f5:d1: 2d:61:7d:44:1c:e8:ef:5b:b7:7a:0f:50:22:70:ce: e6:77:5a:72:4f:96:35:5f:50:cb:9b:1a:64:05:17: 8a:d5:ed:62:89:c0:37:13:40:a3:70:38:3d:c7:c7: da:57:94:f4:c4:12:53:e1:cf:08:dd:17:d2:6c:c2: f5:42:73:91:ac:e3:04:85:a8:eb:65:22:94:90:3f: 9b:cb:b3:13:5c:66:9e:ef:d4:c8:a6:0d:ae:53:44: 7d:28:27:48:ec:3c:a2:52:cc:3e:05:4a:40:1c:66: de:60:f6:09:95:d6:3b:da:fd:33:23:ea:c0:ca:07: 3d:06:9c:4f:ee:3a:a2:f9:a2:8f:be:bc:74:d6:e4: 42:15:cd:0e:4d:2c:d6:b5:ce:66:51:26:51:f0:fa: 18:70:e5:34:24:83:32:8b:b7:4c:bc:61:45:21:c1: eb:fa:84:56:80:4f:e8:ff:22:b2:b7:c5:1a:4f:5e: a8:09:fc:58:0a:c3:32:59:7e:8c:25:cb:80:09:1d: 61:4b:a4:b5:a7:8c:68:a7:1c:07:dd:ef:8c:16:3d: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:FF:34:F6:4D:F9:2B:94:2A:90:B3:19:EA:07:AE:06:77:CC:DC X509v3 Authority Key Identifier: keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:05:94:95:95:0c:b5:8b:cd:58:dc:17:96:10:0d:d5:81:63: c5:13:44:d7:ad:af:99:ec:09:41:ad:de:bd:a2:3d:04:3f:1c: 4c:3a:15:f6:bb:9a:df:fa:99:31:ff:b8:ad:df:82:5f:1a:11: 4b:2b:18:2a:dc:7e:3c:2b:61:39:39:41:d3:c3:92:ba:1c:dd: 7c:1c:d5:3c:34:cd:ac:da:86:73:a3:c3:77:4c:85:77:d9:75: 5f:7d:97:cb:3b:1a:e4:ed:06:78:a0:e9:75:d0:db:98:77:49: 93:80:60:4c:fb:7c:cf:75:f7:26:6a:2e:b8:f2:67:00:b3:6b: 70:d4:0e:5e:f6:1e:f0:7c:2c:1e:d5:d6:e3:2c:49:80:d9:34: 63:e1:14:22:ad:99:b4:8d:10:ca:57:c5:e2:42:eb:9c:c5:cf: 62:c8:89:b0:72:a0:af:f5:12:7c:a7:e1:1a:b2:94:2e:35:cb: 32:4c:e0:ac:dc:33:56:c1:08:b7:a8:d2:0f:f9:a5:67:10:7b: 07:ea:cd:f3:da:2d:86:c3:3a:e9:b9:f2:fe:98:61:1f:d6:ca: 8e:f2:93:37:17:0f:64:e5:fb:9a:97:eb:ac:0b:f5:27:c2:ac: 9a:df:ce:ce:c6:ab:93:38:ec:d6:32:06:db:15:07:9e:35:e8: c5:f2:db:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlH6+kppE3jdXgysQYhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3 MmY0MTcwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD Eyg5NDJkZmYzNGY2NGRmOTJiOTQyYTkwYjMxOWVhMDdhZTA2NzdjY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohj9n0RyyNb8fSGzn4KtD2/kgZzp IpaNJ6MgTHQVAu5AxcPSJhjzsrVk9dEtYX1EHOjvW7d6D1AicM7md1pyT5Y1X1DL mxpkBReK1e1iicA3E0CjcDg9x8faV5T0xBJT4c8I3RfSbML1QnORrOMEhajrZSKU kD+by7MTXGae79TIpg2uU0R9KCdI7DyiUsw+BUpAHGbeYPYJldY72v0zI+rAygc9 BpxP7jqi+aKPvrx01uRCFc0OTSzWtc5mUSZR8PoYcOU0JIMyi7dMvGFFIcHr+oRW gE/o/yKyt8UaT16oCfxYCsMyWX6MJcuACR1hS6S1p4xopxwH3e+MFj2b1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQt/zT2TfkrlCqQsxnqB64Gd8zcMB8GA1UdIwQY MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgWUlZUM tYvNWNwXlhAN1YFjxRNE162vmewJQa3evaI9BD8cTDoV9rua3/qZMf+4rd+CXxoR SysYKtx+PCthOTlB08OSuhzdfBzVPDTNrNqGc6PDd0yFd9l1X32Xyzsa5O0GeKDp ddDbmHdJk4BgTPt8z3X3JmouuPJnALNrcNQOXvYe8HwsHtXW4yxJgNk0Y+EUIq2Z tI0QylfF4kLrnMXPYsiJsHKgr/USfKfhGrKULjXLMkzgrNwzVsEIt6jSD/mlZxB7 B+rN89othsM66bny/phhH9bKjvKTNxcPZOX7mpfrrAv1J8Ksmt/Ozsarkzjs1jIG 2xUHnjXoxfLbzw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:58 2026 by rpki-client