This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json) Hash identifier: F1runcx8suIGoQVN2eoC8Omqazr/zc8MvuWlkutTqfI= Subject key identifier: 17:1A:A9:01:D7:27:63:55:D1:20:37:0A:53:CE:10:7F:5C:A6:E6:E2 Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Certificate serial: 019C420FC5F8755CD77A2A57A54E9F5A89AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft Manifest number: 01DD Signing time: Mon 09 Feb 2026 11:00:55 +0000 Manifest this update: Mon 09 Feb 2026 11:00:55 +0000 Manifest next update: Tue 10 Feb 2026 11:00:55 +0000 Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: kzqE9/QuVUU/BVqQTHKLdi91O3o1odXwzSJRvAe75So=) 2: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c5:f8:75:5c:d7:7a:2a:57:a5:4e:9f:5a:89:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Validity Not Before: Feb 9 11:00:55 2026 GMT Not After : Feb 10 11:00:55 2026 GMT Subject: CN=171aa901d7276355d120370a53ce107f5ca6e6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:d9:87:cf:58:59:e5:fc:b7:96:e7:9b:3d: ed:d8:ae:c6:39:a1:91:a2:05:0d:ba:70:41:18:02: cc:3c:a7:55:18:7c:4b:c9:53:1e:b6:3c:ca:b1:80: 4a:07:88:f5:2c:03:5e:69:e8:26:9e:a3:38:8b:38: 1d:b1:22:c2:74:c4:d5:54:59:ea:88:a2:b9:fe:59: 40:be:cf:b2:84:7f:50:ad:9a:0e:4f:5b:a9:b9:40: d1:9d:10:e2:28:94:b2:81:9e:6c:2f:45:b2:4b:77: bc:73:7e:75:d5:7a:89:7c:a7:6f:80:d3:45:27:bc: eb:e6:5f:0f:17:b5:79:45:f9:61:67:83:16:df:ad: b1:f3:5a:4f:7e:3f:22:60:c7:97:c1:fd:65:77:c1: a6:08:28:76:c3:34:d8:11:a9:59:1b:d6:c6:cf:60: 03:3a:3b:dd:ca:29:35:7f:4f:e3:0c:db:64:92:5a: 7b:2f:31:49:0c:2d:af:51:c6:63:db:63:a5:db:42: c0:e5:e9:94:c8:b0:f5:c8:fd:40:ef:a8:fb:4f:96: a5:96:e6:c7:73:6a:9f:3a:3c:d1:96:7c:9a:9c:6e: 1b:e2:58:30:15:43:7c:f0:ca:d3:ff:f1:ea:21:6b: 20:1a:2e:b9:57:90:80:96:58:5f:f3:62:a2:9c:1e: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1A:A9:01:D7:27:63:55:D1:20:37:0A:53:CE:10:7F:5C:A6:E6:E2 X509v3 Authority Key Identifier: keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:62:16:55:69:dd:1e:5e:ec:c2:25:c5:b1:69:2b:7c:8d:58: e1:98:cc:78:2b:7d:53:82:14:6a:b4:7e:42:60:92:df:8c:3f: 11:6e:5d:ae:c3:cc:b0:e1:e7:b1:07:88:0b:f8:76:5f:b5:92: 3d:51:fa:6a:68:47:10:f3:91:c2:b1:5a:2c:04:ef:c8:e7:e4: 36:d9:96:a0:a0:c2:e5:cf:ae:ac:05:60:22:a3:c9:ca:17:02: 5a:03:93:08:44:f9:2f:be:d8:c6:79:a1:eb:e5:f5:c5:fb:42: de:ec:c5:d4:f0:d1:35:86:fd:67:b8:9d:b9:39:08:7e:ab:c8: 2c:68:a7:dd:1b:b2:cf:79:cf:48:7f:4f:2e:d6:8f:e4:2c:56: 87:cd:ac:7d:4f:f6:ba:a4:23:5e:50:34:fa:cf:9c:d0:0a:88: c0:15:6d:80:f7:9a:bd:3b:0f:80:1c:04:78:01:f3:27:c3:80: 99:38:c0:da:71:6f:8f:5b:27:48:ee:a0:af:54:6a:de:8a:1c: 3c:fb:84:69:75:4a:63:06:b7:e3:83:31:9d:8c:e6:10:74:48: 42:ac:e0:51:ae:13:44:93:d2:4d:c3:9b:80:55:39:95:7b:fe: 73:00:f6:b0:3a:36:7c:ee:f8:3d:53:04:3e:33:db:51:ca:4f: fe:81:58:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8X4dVzXeipXpU6fWomqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm ZjY2NDMwHhcNMjYwMjA5MTEwMDU1WhcNMjYwMjEwMTEwMDU1WjAzMTEwLwYDVQQD EygxNzFhYTkwMWQ3Mjc2MzU1ZDEyMDM3MGE1M2NlMTA3ZjVjYTZlNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59PZh89YWeX8t5bnmz3t2K7GOaGR ogUNunBBGALMPKdVGHxLyVMetjzKsYBKB4j1LANeaegmnqM4izgdsSLCdMTVVFnq iKK5/llAvs+yhH9QrZoOT1upuUDRnRDiKJSygZ5sL0WyS3e8c3511XqJfKdvgNNF J7zr5l8PF7V5RflhZ4MW362x81pPfj8iYMeXwf1ld8GmCCh2wzTYEalZG9bGz2AD Ojvdyik1f0/jDNtkklp7LzFJDC2vUcZj22Ol20LA5emUyLD1yP1A76j7T5allubH c2qfOjzRlnyanG4b4lgwFUN88MrT//HqIWsgGi65V5CAllhf82KinB5XPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcaqQHXJ2NV0SA3ClPOEH9cpubiMB8GA1UdIwQY MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct ZTMzN2JmZTAyNzliLzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWIWVWnd Hl7swiXFsWkrfI1Y4ZjMeCt9U4IUarR+QmCS34w/EW5drsPMsOHnsQeIC/h2X7WS PVH6amhHEPORwrFaLATvyOfkNtmWoKDC5c+urAVgIqPJyhcCWgOTCET5L77Yxnmh 6+X1xftC3uzF1PDRNYb9Z7iduTkIfqvILGin3Ruyz3nPSH9PLtaP5CxWh82sfU/2 uqQjXlA0+s+c0AqIwBVtgPeavTsPgBwEeAHzJ8OAmTjA2nFvj1snSO6gr1Rq3ooc PPuEaXVKYwa344MxnYzmEHRIQqzgUa4TRJPSTcObgFU5lXv+cwD2sDo2fO74PVME PjPbUcpP/oFYOg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:25 2026 by rpki-client