This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json) Hash identifier: CdIVOk4plaTuo6V7sZuGDUM9ugyaZBg9/VHwyGJW+NY= Subject key identifier: 98:29:D6:B9:0A:C8:57:53:9C:E9:65:45:FB:C0:E9:09:EC:16:9C:3F Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Certificate serial: 019C451083E6E2B8252F90008C61EE9600E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft Manifest number: 138F Signing time: Tue 10 Feb 2026 01:00:36 +0000 Manifest this update: Tue 10 Feb 2026 01:00:36 +0000 Manifest next update: Wed 11 Feb 2026 01:00:36 +0000 Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: +4sNeVSqoKj8utHL4zfkIEOcAgWNnFNA/CgzmHF/ShQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:83:e6:e2:b8:25:2f:90:00:8c:61:ee:96:00:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Validity Not Before: Feb 10 01:00:36 2026 GMT Not After : Feb 11 01:00:36 2026 GMT Subject: CN=9829d6b90ac857539ce96545fbc0e909ec169c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:1c:42:23:60:3d:b4:fb:df:58:12:06:5b: e4:9e:41:68:8f:9a:1a:8f:c5:cf:c8:30:3d:9b:bb: f6:7b:58:69:24:20:d9:c9:d1:f1:71:cb:6a:aa:0f: 5e:1d:b4:8e:46:fc:f4:d9:19:4f:aa:1b:0f:b6:2e: e2:3d:81:46:ac:88:ba:93:d7:fa:fc:73:8e:9e:79: 6b:b7:90:0f:1f:98:c0:b2:7f:53:70:27:03:49:28: 5c:bb:72:34:6e:6a:59:42:aa:7c:2b:b9:c4:51:35: 21:0a:98:77:71:d2:43:58:37:af:f5:87:b8:6b:bb: a1:2a:72:a3:4c:15:d3:ca:68:84:65:9e:3c:0b:ea: f5:4f:b2:1e:de:39:4b:9a:2f:72:1e:cd:88:74:bf: d6:20:1e:ca:34:3f:51:4f:84:91:1e:bd:ee:d5:25: 00:fa:0b:e1:bc:66:69:32:85:5b:d5:85:ba:00:11: 14:42:a7:24:8d:86:de:96:52:89:1d:30:b4:35:97: 79:3e:2c:37:59:f6:7b:cc:cb:65:87:0f:a5:60:13: 95:30:7f:3d:4b:51:99:0e:83:17:3a:7f:77:54:1b: 9f:cf:2e:5d:4b:c5:76:67:13:86:87:f4:7e:0b:6b: 75:ab:70:83:f5:89:f1:85:a6:9a:6d:fb:c9:d2:8d: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:D6:B9:0A:C8:57:53:9C:E9:65:45:FB:C0:E9:09:EC:16:9C:3F X509v3 Authority Key Identifier: keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:dd:f4:a6:2b:f6:72:da:21:b4:79:d3:4f:7e:5c:d7:f6:06: 75:f0:c4:26:64:e5:96:64:28:2b:e5:93:7c:43:3c:11:68:ae: 84:41:40:e3:b3:c3:c8:24:e9:b6:3c:6d:8f:83:7d:d6:1c:12: cf:33:43:ee:9f:a2:fa:7d:32:12:7f:45:da:cc:12:bc:55:13: ad:37:1c:08:ff:e1:46:4c:83:44:8e:8a:98:30:92:0c:83:bb: 8a:74:62:d3:31:13:82:83:f9:cf:3e:8e:ab:07:8e:4a:63:b7: 74:10:e2:e9:03:4a:5f:22:dd:d3:ea:97:ca:a7:ab:65:40:4f: 3b:e8:96:b8:b3:44:c2:4a:4d:12:6b:0d:24:e9:a2:ef:9f:2f: 64:83:6c:6e:e5:d3:55:e9:76:8b:ff:4d:2b:3d:63:9e:47:c8: 61:3d:9e:f3:c0:82:8b:13:0c:a4:bc:98:8a:26:64:41:26:cc: 11:9b:3b:f8:7f:ea:3a:fd:0f:e3:31:5a:e6:54:7a:d2:1f:50: f0:4e:04:a4:93:68:02:32:95:d4:f5:40:dc:33:09:4c:df:cf: 67:4b:44:82:ba:90:47:33:6c:cc:cd:dd:03:31:b5:97:08:22: bf:4d:0d:9d:57:55:7f:3d:43:45:04:6b:5f:00:99:39:bf:84: e6:92:2f:09 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxFEIPm4rglL5AAjGHulgDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy MWI1YjUwHhcNMjYwMjEwMDEwMDM2WhcNMjYwMjExMDEwMDM2WjAzMTEwLwYDVQQD Eyg5ODI5ZDZiOTBhYzg1NzUzOWNlOTY1NDVmYmMwZTkwOWVjMTY5YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1McQiNgPbT731gSBlvknkFoj5oa j8XPyDA9m7v2e1hpJCDZydHxcctqqg9eHbSORvz02RlPqhsPti7iPYFGrIi6k9f6 /HOOnnlrt5APH5jAsn9TcCcDSShcu3I0bmpZQqp8K7nEUTUhCph3cdJDWDev9Ye4 a7uhKnKjTBXTymiEZZ48C+r1T7Ie3jlLmi9yHs2IdL/WIB7KND9RT4SRHr3u1SUA +gvhvGZpMoVb1YW6ABEUQqckjYbellKJHTC0NZd5Piw3WfZ7zMtlhw+lYBOVMH89 S1GZDoMXOn93VBufzy5dS8V2ZxOGh/R+C2t1q3CD9YnxhaaabfvJ0o0K7wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJgp1rkKyFdTnOllRfvA6QnsFpw/MB8GA1UdIwQY MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3 LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdN30 piv2ctohtHnTT35c1/YGdfDEJmTllmQoK+WTfEM8EWiuhEFA47PDyCTptjxtj4N9 1hwSzzND7p+i+n0yEn9F2swSvFUTrTccCP/hRkyDRI6KmDCSDIO7inRi0zETgoP5 zz6OqweOSmO3dBDi6QNKXyLd0+qXyqerZUBPO+iWuLNEwkpNEmsNJOmi758vZINs buXTVel2i/9NKz1jnkfIYT2e88CCixMMpLyYiiZkQSbMEZs7+H/qOv0P4zFa5lR6 0h9Q8E4EpJNoAjKV1PVA3DMJTN/PZ0tEgrqQRzNszM3dAzG1lwgiv00NnVdVfz1D RQRrXwCZOb+E5pIvCQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:53 2026 by rpki-client