This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json) Hash identifier: bD6bSwG8K9Dg7crXyRROJsbs1CbxM50JqLDTmRx5rY0= Subject key identifier: D2:F8:A2:3B:5C:EB:DD:9C:D3:51:62:35:3A:13:F3:2A:58:85:57:64 Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98 Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798 Certificate serial: 019C4322216FF8D7B34A7A7E6D44A5CE572D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: DiFx41XDuhaGlXcAOovK7gmpdXquawGw+LU6ZLqXLjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:21:6f:f8:d7:b3:4a:7a:7e:6d:44:a5:ce:57:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66dde950da56f1203327e50e2b395c402251798 Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=d2f8a23b5cebdd9cd35162353a13f32a58855764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:51:d4:a3:2b:11:d0:94:2c:c0:ff:72:15: 00:26:4e:af:df:b3:41:cd:17:58:47:2e:6a:64:1a: 67:9c:c3:e8:0c:b9:83:60:28:bd:80:ef:43:52:f4: 9b:c2:d6:3c:a8:8b:c4:89:22:ca:d9:d0:f9:8f:2a: 4c:10:38:63:a0:7e:f0:e3:f3:14:2d:4f:cf:99:4b: bd:b4:b5:87:d9:6c:dd:da:73:28:aa:7a:67:21:44: c2:e9:7c:fe:39:61:d1:d8:30:ff:a2:68:88:2b:22: 53:62:a3:b1:74:9c:f4:f1:7f:ea:23:7a:c0:10:da: 68:5a:1f:ff:43:4d:58:99:4c:0d:39:4b:95:6e:34: 27:4d:7b:b7:ee:fb:83:44:90:25:2a:29:3c:e6:e9: 26:fe:a4:d3:5e:2a:cb:89:d3:4f:c1:d3:2a:f6:4d: 23:8b:e5:b3:0f:c5:bc:a8:c9:b1:a4:20:2b:f5:13: 04:20:d9:5d:b2:4d:88:72:e2:7f:e6:48:12:76:c1: b6:7e:44:e1:1d:59:e3:fa:df:d1:e7:05:c5:29:3f: f6:b4:8d:2a:de:d8:32:a3:80:56:7b:65:ae:a9:6b: 64:72:26:c2:0e:1d:4b:e1:23:d4:25:4d:65:ca:21: c7:bc:6b:c7:aa:be:57:b3:83:3d:b1:2b:8a:b7:51: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:A2:3B:5C:EB:DD:9C:D3:51:62:35:3A:13:F3:2A:58:85:57:64 X509v3 Authority Key Identifier: keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:4c:1e:1f:11:53:bc:99:bc:4d:46:d6:08:ad:ab:49:35: 51:27:eb:4f:a4:26:91:97:77:ce:81:90:4b:38:92:73:4f:8d: 1c:97:e7:67:17:bd:1c:f7:3a:05:1f:97:89:20:17:e5:7f:5f: 4f:eb:c6:b1:91:4a:66:14:39:0a:46:4d:9f:59:d1:4a:62:0d: d2:63:57:25:c6:07:25:4d:1a:6f:30:6d:1d:f9:05:4d:22:0e: aa:e2:fa:a3:7b:51:67:86:f0:dc:93:36:42:a9:7d:c6:7a:64: 01:45:cf:77:9e:9b:6e:07:94:07:29:d2:9b:65:d2:b6:ee:4f: 62:e2:05:f5:16:25:00:6c:74:9f:dd:53:61:9a:6a:b1:42:4c: 66:ed:77:f5:0e:7a:48:45:8b:d9:83:db:8b:48:52:8f:2f:66: 92:67:0d:ed:8d:7e:98:cc:d0:4b:6a:ee:cf:47:03:13:72:8f: 14:71:95:53:30:ff:f3:cf:dc:bf:32:8f:b9:bc:f5:f6:e6:5a: 0a:ab:02:47:91:db:6c:87:e8:4e:ea:68:3d:f3:a8:ee:17:f6: de:76:3b:46:f6:0f:ad:11:79:87:57:85:9c:58:6d:7b:13:85: 5b:a3:6c:5d:c1:ef:0e:9e:dc:f9:15:a4:b7:1b:ec:90:ea:d3: 5c:36:35:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiFv+NezSnp+bUSlzlctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmRkZTk1MGRhNTZmMTIwMzMyN2U1MGUyYjM5NWM0MDIy NTE3OTgwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD EyhkMmY4YTIzYjVjZWJkZDljZDM1MTYyMzUzYTEzZjMyYTU4ODU1NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPRR1KMrEdCULMD/chUAJk6v37NB zRdYRy5qZBpnnMPoDLmDYCi9gO9DUvSbwtY8qIvEiSLK2dD5jypMEDhjoH7w4/MU LU/PmUu9tLWH2Wzd2nMoqnpnIUTC6Xz+OWHR2DD/omiIKyJTYqOxdJz08X/qI3rA ENpoWh//Q01YmUwNOUuVbjQnTXu37vuDRJAlKik85ukm/qTTXirLidNPwdMq9k0j i+WzD8W8qMmxpCAr9RMEINldsk2IcuJ/5kgSdsG2fkThHVnj+t/R5wXFKT/2tI0q 3tgyo4BWe2WuqWtkcibCDh1L4SPUJU1lyiHHvGvHqr5Xs4M9sSuKt1GT6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL4ojtc692c01FiNToT8ypYhVdkMB8GA1UdIwQY MBaAFNZt3pUNpW8SAzJ+UOKzlcQCJReYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAt ODk3NTJlNGJmNWQzLzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAtODk3NTJlNGJmNWQz LzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS1MHh8R U7yZvE1G1gitq0k1USfrT6QmkZd3zoGQSziSc0+NHJfnZxe9HPc6BR+XiSAX5X9f T+vGsZFKZhQ5CkZNn1nRSmIN0mNXJcYHJU0abzBtHfkFTSIOquL6o3tRZ4bw3JM2 Qql9xnpkAUXPd56bbgeUBynSm2XStu5PYuIF9RYlAGx0n91TYZpqsUJMZu139Q56 SEWL2YPbi0hSjy9mkmcN7Y1+mMzQS2ruz0cDE3KPFHGVUzD/88/cvzKPubz19uZa CqsCR5HbbIfoTupoPfOo7hf23nY7RvYPrRF5h1eFnFhtexOFW6NsXcHvDp7c+RWk txvskOrTXDY10g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client