This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json) Hash identifier: BbDOOUklotnnSe4yF6CcOWbw0Fd5vwudnC0eZ67gln4= Subject key identifier: 02:75:9C:FB:2C:8C:FB:00:7A:70:44:35:CF:70:A0:EC:89:66:64:A9 Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726 Certificate serial: 019C4133E3D219ED0C79B07D1C81CBD0A644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft Manifest number: 0E3B Signing time: Mon 09 Feb 2026 07:00:45 +0000 Manifest this update: Mon 09 Feb 2026 07:00:45 +0000 Manifest next update: Tue 10 Feb 2026 07:00:45 +0000 Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: 7gZrw54E5TTWOE1fBH6LjpuL6Aq4d6uxidCHONGFJYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:e3:d2:19:ed:0c:79:b0:7d:1c:81:cb:d0:a6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726 Validity Not Before: Feb 9 07:00:45 2026 GMT Not After : Feb 10 07:00:45 2026 GMT Subject: CN=02759cfb2c8cfb007a704435cf70a0ec896664a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:1a:7f:a4:6f:ec:30:d4:2e:4d:57:76:55: 34:2a:0a:8f:bb:27:4b:88:20:14:25:f0:f2:67:0c: b6:73:48:93:c0:1b:35:55:0b:97:10:2b:77:29:c8: c0:3c:16:2d:13:d3:5b:09:7d:0f:71:c5:ec:1b:90: 3c:b1:2a:2d:e1:d9:8a:73:0a:eb:5b:7d:af:22:d4: b2:b3:e1:19:42:5b:f3:86:6d:7d:73:21:9b:0a:e7: 04:82:45:ee:d9:d3:e4:90:1e:ed:2b:79:1f:92:3b: 1b:7f:10:92:55:4d:dd:2b:c1:ba:ca:77:c1:c3:ae: 9e:11:6a:61:8a:9e:67:53:8d:bc:44:58:c2:1e:2c: 53:99:fb:77:f6:e0:c0:5b:fd:7f:3f:00:01:3a:72: c4:f2:46:de:6e:77:10:9b:e8:d2:cb:8b:3c:93:05: 21:65:9b:80:6a:ae:f8:2e:63:34:28:b0:7a:e0:41: 1c:e9:f5:0b:c8:9b:7b:d5:b9:41:9d:77:c3:e0:a8: 24:b9:4d:3e:5c:83:98:1f:b9:4c:f0:a9:d1:26:ff: af:0a:ed:bb:9f:31:4e:a2:de:5d:bb:9e:46:85:d8: 63:aa:1b:ed:52:b7:2e:17:7a:08:0e:c6:cd:9f:d4: 3a:cc:b5:d9:87:79:a1:3e:35:e4:ff:51:55:52:d9: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:9C:FB:2C:8C:FB:00:7A:70:44:35:CF:70:A0:EC:89:66:64:A9 X509v3 Authority Key Identifier: keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e5:bc:e8:b0:ad:16:80:e3:bc:8d:ad:93:ff:71:32:cb:ac: cd:97:cb:82:51:02:95:bf:5c:c3:61:15:f5:aa:aa:54:87:18: 01:f7:3d:fc:c4:78:fd:b6:2d:35:eb:b8:ae:2c:00:54:8e:64: 48:b7:09:6c:6d:70:b1:66:57:1c:1b:e8:4a:f1:ff:7f:ce:47: 6c:da:34:fa:58:67:f8:63:db:29:7d:d8:3d:23:be:21:94:18: bc:bd:ef:8f:3c:2d:3c:06:05:92:af:60:81:f1:9a:e3:6c:2d: a1:65:0f:56:cc:ce:7e:09:e0:97:e2:03:e3:89:1b:5e:b8:92: b6:b8:4e:24:cf:d2:07:ce:ff:fe:1c:6a:93:6b:a3:82:90:c0: 32:20:4d:cb:88:0b:77:1f:3f:97:f1:16:08:da:dc:ae:3a:0f: 55:c2:8b:41:4c:dd:0a:94:67:5a:ce:03:6c:b6:40:6e:69:0b: f0:7f:7b:cc:31:2e:cb:85:a8:54:45:fa:2d:f7:37:de:7a:86: 63:0e:69:2f:80:91:d2:b3:5a:42:84:d4:f8:30:0e:18:55:ba: 5e:49:46:76:54:b4:0a:1d:fb:e6:ba:50:c3:a3:8a:20:0c:cb: 99:8e:ac:11:a3:c5:51:84:3c:f1:f2:62:c9:ca:25:e6:5a:b8: 10:ec:29:8b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBM+PSGe0MebB9HIHL0KZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOGU2MGU1NjM5OWZmOTM0NjBiMzQyN2NkNTUyNzRiNWE4 M2U3MjYwHhcNMjYwMjA5MDcwMDQ1WhcNMjYwMjEwMDcwMDQ1WjAzMTEwLwYDVQQD EygwMjc1OWNmYjJjOGNmYjAwN2E3MDQ0MzVjZjcwYTBlYzg5NjY2NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62gaf6Rv7DDULk1XdlU0KgqPuydL iCAUJfDyZwy2c0iTwBs1VQuXECt3KcjAPBYtE9NbCX0PccXsG5A8sSot4dmKcwrr W32vItSys+EZQlvzhm19cyGbCucEgkXu2dPkkB7tK3kfkjsbfxCSVU3dK8G6ynfB w66eEWphip5nU428RFjCHixTmft39uDAW/1/PwABOnLE8kbebncQm+jSy4s8kwUh ZZuAaq74LmM0KLB64EEc6fULyJt71blBnXfD4KgkuU0+XIOYH7lM8KnRJv+vCu27 nzFOot5du55GhdhjqhvtUrcuF3oIDsbNn9Q6zLXZh3mhPjXk/1FVUtnV/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAJ1nPssjPsAenBENc9woOyJZmSpMB8GA1UdIwQY MBaAFPuOYOVjmf+TRgs0J81VJ0tag+cmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS00NWc1V09aXzVOR0N6UW56VlVuUzFxRDV5WS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2ViLTg2MTAtNDBlOS04MmFm LWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFuelZVblMxcUQ1eVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FlL2M2NGNlYi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZj ZmYvMS8xLTQ1ZzVXT1pfNU5HQ3pRbnpWVW5TMXFENXlZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOW8 6LCtFoDjvI2tk/9xMsuszZfLglEClb9cw2EV9aqqVIcYAfc9/MR4/bYtNeu4riwA VI5kSLcJbG1wsWZXHBvoSvH/f85HbNo0+lhn+GPbKX3YPSO+IZQYvL3vjzwtPAYF kq9ggfGa42wtoWUPVszOfgngl+ID44kbXriStrhOJM/SB87//hxqk2ujgpDAMiBN y4gLdx8/l/EWCNrcrjoPVcKLQUzdCpRnWs4DbLZAbmkL8H97zDEuy4WoVEX6Lfc3 3nqGYw5pL4CR0rNaQoTU+DAOGFW6XklGdlS0Ch375rpQw6OKIAzLmY6sEaPFUYQ8 8fJiycol5lq4EOwpiw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:30 2026 by rpki-client