This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json) Hash identifier: f6FlcKGaudMZt4tv+WiJeH/1OR8o7BQeHUGzyR/XzdI= Subject key identifier: 6A:78:BE:F7:73:04:FD:94:A5:AF:EC:20:DB:72:91:E9:38:2F:26:C8 Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434 Certificate serial: 019C4322DB1249F4A27C8452FB1288EE4CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft Manifest number: 08C1 Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: DQISIH6WwWCDCv/DG/QMCsVzWyW9P3CEu/FnyseJ4ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:db:12:49:f4:a2:7c:84:52:fb:12:88:ee:4c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434 Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=6a78bef77304fd94a5afec20db7291e9382f26c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:31:57:d6:37:fe:84:77:d9:06:f3:40:5d: c0:16:cb:1a:39:70:49:d9:e7:bf:26:9d:4d:56:4c: c4:c9:4a:93:4d:73:17:fe:3a:6e:02:7a:cc:bd:e4: 65:3b:ef:27:b3:ce:32:43:ce:f6:84:78:3f:0d:4b: c5:fa:53:a4:ce:08:12:2b:39:57:b2:37:15:82:42: 80:ec:3e:1e:3a:d1:2d:a4:2c:f5:0f:ad:21:51:57: 37:b3:a0:00:81:5d:4c:d9:1d:de:0e:04:a5:90:cd: 48:ec:a0:db:1d:62:19:10:7f:1f:01:80:6a:76:2a: dd:93:ad:97:b1:fe:04:28:cd:e5:92:63:05:1b:d9: bf:5e:f2:81:f5:96:5a:4f:76:2e:7f:ec:a1:7b:64: c7:38:b6:cd:00:ac:fd:d7:e0:de:c7:5a:67:73:45: 64:0e:55:d8:50:5d:ff:15:25:55:f8:b4:62:ee:bb: d3:00:7f:24:c9:96:47:a7:c7:75:cc:e2:95:9d:4e: 4a:49:89:5c:61:bc:f4:80:1f:eb:06:40:02:a7:20: 69:ec:bc:1b:21:0f:58:2a:75:72:b8:d5:fb:76:07: 69:c7:d0:c4:ec:78:3d:2c:c3:44:be:39:18:f1:aa: 70:aa:01:9f:d4:5e:64:4b:21:6a:1d:79:c8:bb:30: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:BE:F7:73:04:FD:94:A5:AF:EC:20:DB:72:91:E9:38:2F:26:C8 X509v3 Authority Key Identifier: keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:88:79:db:98:45:42:c0:f9:14:56:2f:1c:7d:8a:6e:2e:10: 02:91:07:72:f3:0e:3a:fb:82:11:09:6c:1f:bf:fb:0b:97:71: 05:38:b5:8c:60:07:21:06:d4:2b:01:40:a7:db:2b:b1:53:bc: 3b:d5:30:b0:5a:06:ee:1e:f4:e9:94:7f:7c:85:46:c6:df:d5: 80:c6:5f:53:a4:56:cb:97:7d:cb:e0:fe:7f:04:b6:ef:9b:05: c4:6e:1c:56:6c:dd:87:23:20:82:75:31:75:00:f9:89:e8:6b: 8b:ce:ff:cc:b4:49:2a:20:c4:74:44:58:f7:db:6b:ad:98:1d: 5a:7a:ad:3c:db:00:76:44:b8:fd:68:9d:82:44:18:b7:90:74: 4e:23:6b:0c:1d:cd:a5:d8:58:da:d2:da:00:cc:85:51:dc:fc: 96:28:c2:28:b4:5c:d7:05:34:9f:3d:35:f7:63:4b:1f:0b:32: 60:27:40:6c:c7:28:53:8f:b0:9e:d4:01:63:69:80:3e:a1:8a: ea:92:f1:f6:9d:0f:ca:e8:1f:c1:c7:19:7e:39:1a:97:8f:27: 34:9c:9c:1f:7f:72:a7:6b:5f:74:b5:32:a1:48:17:8d:41:f1: 05:6b:14:92:63:0d:75:db:b5:bf:e3:cc:ef:41:e3:b2:1b:a3: f7:4f:03:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItsSSfSifIRS+xKI7ky6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy MzY0MzQwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD Eyg2YTc4YmVmNzczMDRmZDk0YTVhZmVjMjBkYjcyOTFlOTM4MmYyNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YoxV9Y3/oR32QbzQF3AFssaOXBJ 2ee/Jp1NVkzEyUqTTXMX/jpuAnrMveRlO+8ns84yQ872hHg/DUvF+lOkzggSKzlX sjcVgkKA7D4eOtEtpCz1D60hUVc3s6AAgV1M2R3eDgSlkM1I7KDbHWIZEH8fAYBq dirdk62Xsf4EKM3lkmMFG9m/XvKB9ZZaT3Yuf+yhe2THOLbNAKz91+Dex1pnc0Vk DlXYUF3/FSVV+LRi7rvTAH8kyZZHp8d1zOKVnU5KSYlcYbz0gB/rBkACpyBp7Lwb IQ9YKnVyuNX7dgdpx9DE7Hg9LMNEvjkY8apwqgGf1F5kSyFqHXnIuzC94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp4vvdzBP2Upa/sINtykek4LybIMB8GA1UdIwQY MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3 LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYh525hF QsD5FFYvHH2Kbi4QApEHcvMOOvuCEQlsH7/7C5dxBTi1jGAHIQbUKwFAp9srsVO8 O9UwsFoG7h706ZR/fIVGxt/VgMZfU6RWy5d9y+D+fwS275sFxG4cVmzdhyMggnUx dQD5iehri87/zLRJKiDEdERY99trrZgdWnqtPNsAdkS4/WidgkQYt5B0TiNrDB3N pdhY2tLaAMyFUdz8lijCKLRc1wU0nz0192NLHwsyYCdAbMcoU4+wntQBY2mAPqGK 6pLx9p0PyugfwccZfjkal48nNJycH39yp2tfdLUyoUgXjUHxBWsUkmMNddu1v+PM 70Hjshuj908D/g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:59 2026 by rpki-client