This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json) Hash identifier: OMMshyq/wvhOt6UsD0fTk2MwUUSBwoWG3G5gmoLobXM= Subject key identifier: 8E:BD:CC:F0:99:85:00:D5:BE:2D:F7:66:73:70:3B:BE:6E:C0:74:95 Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb Certificate serial: 019C4322944EFC494A3D5EBF39D5D1F63008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft Manifest number: 0B6C Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: I2SXjSeXFEjHkwtpxj8Uf0V55m0fDwFBgFnPwS1T8ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:94:4e:fc:49:4a:3d:5e:bf:39:d5:d1:f6:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=8ebdccf0998500d5be2df76673703bbe6ec07495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a3:ad:03:25:2c:d5:5d:08:2b:2d:4f:64:39: 47:6f:bd:e0:94:70:38:84:02:72:93:cb:52:f3:2c: 38:76:b7:9d:d3:59:5a:fb:ad:d5:b9:46:8a:c4:6b: 6e:8e:47:07:ad:c2:17:26:05:ae:75:6f:93:44:5e: c8:3d:1a:b1:69:6c:0e:ce:d4:f3:bc:6b:2a:5e:52: 09:55:a0:fc:d2:76:bd:dc:ee:31:69:76:27:ee:c5: 83:33:f2:0b:34:ad:45:78:8f:17:29:00:af:1d:87: e5:bd:8b:42:1c:01:c3:ad:87:39:8b:ad:00:0a:7f: 85:12:26:5e:dd:fb:b2:d8:16:0c:88:9a:c4:b2:b6: dd:29:9b:62:e0:72:f9:7a:06:f0:c0:ec:3a:f7:d8: 51:1b:64:ad:35:ab:e8:da:ce:11:eb:5a:ef:8d:c8: 20:6d:6c:8a:52:1b:08:db:2b:fd:6a:ba:a0:7a:80: aa:be:8d:6e:62:11:ff:ce:31:6e:52:b0:79:2c:91: 48:9f:aa:d7:17:8f:fb:18:cb:0e:69:32:7c:59:6a: 8b:fa:0e:ec:cb:4e:be:bd:a9:18:35:17:63:43:68: 76:99:74:97:17:8f:f2:69:0f:cc:ef:1e:66:be:f5: 82:44:75:c3:12:61:e7:62:fd:23:7b:f1:50:2e:96: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:CC:F0:99:85:00:D5:BE:2D:F7:66:73:70:3B:BE:6E:C0:74:95 X509v3 Authority Key Identifier: keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ca:7c:9f:7d:8e:15:9d:d4:ad:26:d1:e9:eb:c1:25:b9:b7: 10:80:fa:5e:18:81:75:3e:f3:c8:b5:3e:89:0d:fa:5d:fc:3c: f7:48:96:e6:a3:9f:ea:35:cc:81:5d:f6:dd:2e:38:7e:bc:d3: 80:7a:7e:bb:eb:67:1d:4b:d3:ee:66:3a:ac:b6:cd:be:5a:6a: ef:9d:de:f0:46:02:bd:bd:42:b3:16:6d:c0:46:6c:57:0e:f3: 53:3b:53:07:e6:fd:b1:9f:21:3c:88:8f:de:fc:da:9c:13:84: fb:ad:a2:1a:d7:38:92:1a:f5:42:d2:bd:59:c2:02:eb:e0:f0: 5a:f4:79:cb:c3:62:50:3d:38:ca:2c:1a:36:5a:18:c5:fa:24: 4f:a1:d5:54:b3:bc:13:1e:b4:b5:d3:6d:61:85:3a:b9:40:7f: 60:23:8b:52:24:23:50:36:1b:4d:50:55:d1:88:ba:93:7d:3f: 2e:ad:5e:8f:22:8a:60:78:1d:9d:a8:be:83:29:7d:c9:de:b6: 09:dd:11:4a:31:28:c2:09:7a:6f:16:fe:f1:93:c1:59:75:57: d1:ad:a6:8f:92:51:4b:7f:a0:d5:23:83:12:a5:fb:05:a5:11: 6a:a3:10:66:ba:b0:de:15:77:56:e5:73:28:50:13:21:c3:ba: ad:f6:b8:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpRO/ElKPV6/OdXR9jAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx MjQ5ZmIwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD Eyg4ZWJkY2NmMDk5ODUwMGQ1YmUyZGY3NjY3MzcwM2JiZTZlYzA3NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56OtAyUs1V0IKy1PZDlHb73glHA4 hAJyk8tS8yw4dred01la+63VuUaKxGtujkcHrcIXJgWudW+TRF7IPRqxaWwOztTz vGsqXlIJVaD80na93O4xaXYn7sWDM/ILNK1FeI8XKQCvHYflvYtCHAHDrYc5i60A Cn+FEiZe3fuy2BYMiJrEsrbdKZti4HL5egbwwOw699hRG2StNavo2s4R61rvjcgg bWyKUhsI2yv9arqgeoCqvo1uYhH/zjFuUrB5LJFIn6rXF4/7GMsOaTJ8WWqL+g7s y06+vakYNRdjQ2h2mXSXF4/yaQ/M7x5mvvWCRHXDEmHnYv0je/FQLpYZ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI69zPCZhQDVvi33ZnNwO75uwHSVMB8GA1UdIwQY MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMp8n32O FZ3UrSbR6evBJbm3EID6XhiBdT7zyLU+iQ36Xfw890iW5qOf6jXMgV323S44frzT gHp+u+tnHUvT7mY6rLbNvlpq753e8EYCvb1CsxZtwEZsVw7zUztTB+b9sZ8hPIiP 3vzanBOE+62iGtc4khr1QtK9WcIC6+DwWvR5y8NiUD04yiwaNloYxfokT6HVVLO8 Ex60tdNtYYU6uUB/YCOLUiQjUDYbTVBV0Yi6k30/Lq1ejyKKYHgdnai+gyl9yd62 Cd0RSjEowgl6bxb+8ZPBWXVX0a2mj5JRS3+g1SODEqX7BaURaqMQZrqw3hV3VuVz KFATIcO6rfa4QA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:20 2026 by rpki-client