This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json) Hash identifier: /3ukBnUp7FiaU50G8mkeJGAlexRYPoqqADoLN0HrWMU= Subject key identifier: 87:E3:D3:6C:99:BC:30:C4:C8:51:95:81:55:E1:6A:FD:D2:57:02:20 Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c Certificate serial: 019C4322F0893D50804B331B684FE843F517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft Manifest number: 11D7 Signing time: Mon 09 Feb 2026 16:01:29 +0000 Manifest this update: Mon 09 Feb 2026 16:01:29 +0000 Manifest next update: Tue 10 Feb 2026 16:01:29 +0000 Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: 4q45KiYSgLjWdPGnNB9wO+2od6FbKSBgQ8aaelonVAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f0:89:3d:50:80:4b:33:1b:68:4f:e8:43:f5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c Validity Not Before: Feb 9 16:01:29 2026 GMT Not After : Feb 10 16:01:29 2026 GMT Subject: CN=87e3d36c99bc30c4c851958155e16afdd2570220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:6b:bc:c5:fe:8d:45:51:84:f1:83:6e:59: ad:d7:88:75:87:18:61:cc:96:b2:a2:46:40:35:55: da:8a:a5:1f:00:7b:d5:b4:e7:c3:a6:9a:95:d8:1f: f6:3b:a2:cf:07:a1:8c:04:a8:9b:40:46:6b:4e:92: 95:1b:75:18:22:bd:07:e1:cd:8d:5b:a4:56:38:db: ef:ac:22:c6:33:ed:d4:66:15:a0:e2:23:ed:0c:5c: d3:db:7d:c4:e2:14:89:58:f8:97:00:3c:e7:38:5a: 8c:47:15:fa:4c:22:a7:ec:d4:93:ac:56:2a:2f:2e: b9:cc:50:e6:04:36:38:83:e1:c1:84:f4:6e:64:05: 06:ad:be:1c:39:b8:eb:bb:6a:7a:1b:49:fc:be:5f: f8:42:07:7d:fb:0a:a4:22:51:f4:9e:b3:ec:77:65: fe:40:03:b0:80:fa:5f:89:92:1a:ca:3c:a9:a1:23: c1:57:1d:90:73:ca:7f:16:0b:3f:f0:6c:d0:5f:60: f2:55:45:50:76:ab:66:93:87:01:01:18:1a:0b:9d: f9:6b:4c:d6:59:76:0e:29:68:f5:b8:27:b2:09:d1: d6:aa:a2:0d:e2:75:4b:65:a1:e8:7c:56:41:27:99: b5:a9:c1:fd:d3:41:5c:a1:a4:6a:63:8e:6b:88:4a: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:D3:6C:99:BC:30:C4:C8:51:95:81:55:E1:6A:FD:D2:57:02:20 X509v3 Authority Key Identifier: keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:af:8a:92:90:76:5f:eb:34:cc:2b:5a:79:6c:4e:3d:36:cb: 59:b0:b8:b3:2f:b2:2a:e6:dd:75:ab:f3:e3:ae:ba:04:49:0e: 85:9f:1f:ac:ac:f0:76:0a:43:65:c4:78:33:09:00:6c:e7:e2: df:ef:f9:8f:fb:a9:2e:3f:ee:3f:e0:b8:af:e1:e0:d1:69:6d: 76:d1:dc:5d:ed:55:87:63:4d:4a:a9:04:5b:c9:50:c2:d0:4a: ac:f3:7d:5e:0b:41:16:7c:7f:05:4f:4c:bd:76:db:2b:cc:7a: 39:1d:12:0e:4e:d5:3c:52:ff:57:8e:a1:a8:a6:7d:89:c8:91: fb:c9:33:80:76:82:31:8e:db:3b:86:b0:96:4d:c0:d3:71:83: 5b:76:56:ce:41:dd:00:10:34:27:3b:df:3d:80:2f:29:28:2b: 68:31:b5:54:7b:11:24:91:53:f1:e5:9b:dd:df:04:12:25:2d: 00:78:00:36:01:6d:cd:a7:3f:70:ed:f0:11:6d:98:ec:c4:2c: 6a:59:49:4e:04:36:5d:fc:27:4d:a0:30:67:95:1c:77:d7:c2: 0e:1f:ab:bf:17:31:46:37:b9:47:d5:73:b4:95:9a:5c:b7:94: 57:0d:4f:46:78:bf:d3:1a:d1:c7:e9:4e:e0:69:b5:e1:fc:a4: cf:2e:47:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvCJPVCASzMbaE/oQ/UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYWRlNmI2MmEzMjdhY2M0MDNmZWVjM2UxYWIxY2I2ZGUy ZDVlMGMwHhcNMjYwMjA5MTYwMTI5WhcNMjYwMjEwMTYwMTI5WjAzMTEwLwYDVQQD Eyg4N2UzZDM2Yzk5YmMzMGM0Yzg1MTk1ODE1NWUxNmFmZGQyNTcwMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QRrvMX+jUVRhPGDblmt14h1hxhh zJayokZANVXaiqUfAHvVtOfDppqV2B/2O6LPB6GMBKibQEZrTpKVG3UYIr0H4c2N W6RWONvvrCLGM+3UZhWg4iPtDFzT233E4hSJWPiXADznOFqMRxX6TCKn7NSTrFYq Ly65zFDmBDY4g+HBhPRuZAUGrb4cObjru2p6G0n8vl/4Qgd9+wqkIlH0nrPsd2X+ QAOwgPpfiZIayjypoSPBVx2Qc8p/Fgs/8GzQX2DyVUVQdqtmk4cBARgaC535a0zW WXYOKWj1uCeyCdHWqqIN4nVLZaHofFZBJ5m1qcH900FcoaRqY45riEqdyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfj02yZvDDEyFGVgVXhav3SVwIgMB8GA1UdIwQY MBaAFHOt5rYqMnrMQD/uw+GrHLbeLV4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTct ODc2YjU1NjQzZDA3LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTctODc2YjU1NjQzZDA3 LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK+KkpB2 X+s0zCtaeWxOPTbLWbC4sy+yKubddavz4666BEkOhZ8frKzwdgpDZcR4MwkAbOfi 3+/5j/upLj/uP+C4r+Hg0WltdtHcXe1Vh2NNSqkEW8lQwtBKrPN9XgtBFnx/BU9M vXbbK8x6OR0SDk7VPFL/V46hqKZ9iciR+8kzgHaCMY7bO4awlk3A03GDW3ZWzkHd ABA0JzvfPYAvKSgraDG1VHsRJJFT8eWb3d8EEiUtAHgANgFtzac/cO3wEW2Y7MQs allJTgQ2XfwnTaAwZ5Ucd9fCDh+rvxcxRje5R9VztJWaXLeUVw1PRni/0xrRx+lO 4Gm14fykzy5HnQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:43 2026 by rpki-client