This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json) Hash identifier: oqk7IrZrbG9Kb4CZW7RneRWHmXgJqmGSqiHFn0Zd3K8= Subject key identifier: F6:6D:CF:E4:7E:1E:44:F1:88:90:1D:E3:D2:32:93:AD:DD:37:33:6B Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5 Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5 Certificate serial: 019C44349F0E6614C572CE72BD55F6210EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft Manifest number: 02FA Signing time: Mon 09 Feb 2026 21:00:24 +0000 Manifest this update: Mon 09 Feb 2026 21:00:24 +0000 Manifest next update: Tue 10 Feb 2026 21:00:24 +0000 Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: hbogbQOZP/xpMsFmwji38Jg68jPtIApYu6Orq5uHSfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:9f:0e:66:14:c5:72:ce:72:bd:55:f6:21:0e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5 Validity Not Before: Feb 9 21:00:24 2026 GMT Not After : Feb 10 21:00:24 2026 GMT Subject: CN=f66dcfe47e1e44f188901de3d23293addd37336b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:93:73:ad:88:58:3e:7c:dd:bf:89:48:3e: ef:45:75:21:7c:be:34:df:64:15:0d:25:c3:a6:f5: 6e:8a:e0:6a:3d:6c:31:4e:53:3f:7f:e6:80:c2:4e: 7b:a2:8f:e0:f0:c4:92:26:74:45:f5:e8:89:6d:f2: ec:40:7e:de:af:1f:c8:56:e6:21:fd:3e:d0:c5:2e: c3:3a:1f:08:8e:03:55:d8:5f:c6:60:52:e7:1f:1b: d7:81:5e:5c:06:38:05:de:d7:30:3e:30:cc:04:2a: cf:a2:a8:93:a6:d6:51:13:39:c4:4c:10:91:00:35: 74:ad:68:0d:52:06:f4:04:ac:86:24:f5:6d:ea:cc: 74:5e:6e:97:d7:ce:ab:44:b6:dc:c8:bb:a9:3f:36: 9d:0e:8f:82:88:07:89:07:11:5f:0c:87:1f:04:fb: 24:9d:33:ad:20:a5:41:aa:95:76:18:8e:ff:10:ac: 77:5d:87:2c:e0:f8:36:34:41:4f:73:d6:6f:26:2e: dc:72:29:3e:53:ff:fb:68:a8:15:bc:9f:92:3b:a3: bf:63:a5:4d:66:0e:a8:6b:bc:59:84:11:33:d5:5e: 9c:33:98:aa:41:5e:d4:9e:4d:c3:5f:14:1a:a8:08: 35:a8:e8:0b:18:db:46:24:12:01:56:5c:41:00:4d: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:CF:E4:7E:1E:44:F1:88:90:1D:E3:D2:32:93:AD:DD:37:33:6B X509v3 Authority Key Identifier: keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7c:3b:26:61:a8:4a:a7:f0:6c:e4:b4:83:13:d4:72:b1:31: 99:15:84:23:13:71:fe:a4:43:38:ae:df:c3:fa:76:5f:73:b8: da:e3:14:39:f3:e6:24:66:52:76:ee:39:0e:1c:2f:03:b6:08: 49:23:ac:96:5a:d1:38:e7:e3:0a:92:f7:84:88:42:23:cb:bb: 5c:c4:2d:22:9c:d6:35:1e:f4:8b:c1:2c:cd:ed:be:4e:82:2d: a0:e2:28:34:4f:8d:1d:f4:d8:31:df:ba:5e:ac:6f:23:2b:6e: a2:11:46:e0:95:0d:5c:e3:46:d4:df:64:72:d9:41:ec:a4:d4: 6b:eb:02:37:8b:fc:b9:c6:05:ec:d4:cc:9b:22:80:bb:74:63: 9c:1e:ae:c7:c5:00:87:35:6c:96:c1:40:6c:e7:75:21:90:33: a5:54:84:a1:02:27:40:7b:14:be:0e:44:ea:78:e0:3b:12:ad: 25:45:0c:d3:8d:67:9c:03:5e:08:05:24:6b:c8:19:1b:64:18: 80:e8:be:a0:46:e4:9e:4b:44:04:f5:f5:4e:0c:f1:fe:94:1f: b5:ec:5d:cf:89:3f:2b:31:3c:3c:2d:ac:8e:5b:d0:07:b9:44: df:c7:d8:3e:e2:1e:d8:a0:12:ff:4e:5a:95:1e:97:f0:37:9a: b8:b8:ea:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxENJ8OZhTFcs5yvVX2IQ7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTczODIwNDA2N2I3MzYxN2VjN2RmMjE4YzFiMjU2ZWNi NmY2ZjUwHhcNMjYwMjA5MjEwMDI0WhcNMjYwMjEwMjEwMDI0WjAzMTEwLwYDVQQD EyhmNjZkY2ZlNDdlMWU0NGYxODg5MDFkZTNkMjMyOTNhZGRkMzczMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbmTc62IWD583b+JSD7vRXUhfL40 32QVDSXDpvVuiuBqPWwxTlM/f+aAwk57oo/g8MSSJnRF9eiJbfLsQH7erx/IVuYh /T7QxS7DOh8IjgNV2F/GYFLnHxvXgV5cBjgF3tcwPjDMBCrPoqiTptZREznETBCR ADV0rWgNUgb0BKyGJPVt6sx0Xm6X186rRLbcyLupPzadDo+CiAeJBxFfDIcfBPsk nTOtIKVBqpV2GI7/EKx3XYcs4Pg2NEFPc9ZvJi7ccik+U//7aKgVvJ+SO6O/Y6VN Zg6oa7xZhBEz1V6cM5iqQV7Unk3DXxQaqAg1qOgLGNtGJBIBVlxBAE2FpwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPZtz+R+HkTxiJAd49Iyk63dNzNrMB8GA1UdIwQY MBaAFPinOCBAZ7c2F+x98hjBslbstvb1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LYzRJRUJudHpZWDdIM3lHTUd5VnV5Mjl2VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNDhlZjgyLTA5OTItNDI1NS05OTY0 LTQ5YmNkMzg0Y2ViMC8xLzEtS2M0SUVCbnR6WVg3SDN5R01HeVZ1eTI5dlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzQ4ZWY4Mi0wOTkyLTQyNTUtOTk2NC00OWJjZDM4NGNl YjAvMS8xLUtjNElFQm50ellYN0gzeUdNR3lWdXkyOXZVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3w7 JmGoSqfwbOS0gxPUcrExmRWEIxNx/qRDOK7fw/p2X3O42uMUOfPmJGZSdu45Dhwv A7YISSOsllrROOfjCpL3hIhCI8u7XMQtIpzWNR70i8Esze2+ToItoOIoNE+NHfTY Md+6XqxvIytuohFG4JUNXONG1N9kctlB7KTUa+sCN4v8ucYF7NTMmyKAu3RjnB6u x8UAhzVslsFAbOd1IZAzpVSEoQInQHsUvg5E6njgOxKtJUUM041nnANeCAUka8gZ G2QYgOi+oEbknktEBPX1Tgzx/pQftexdz4k/KzE8PC2sjlvQB7lE38fYPuIe2KAS /05alR6X8DeauLjqbA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:58 2026 by rpki-client