This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json) Hash identifier: IprO1FStEmqTBd9drCm5V76y1rpxO4opzaraYVK21eE= Subject key identifier: 8B:E8:19:7A:D0:4B:0E:CC:8E:B0:CF:C3:44:82:E3:95:C9:2C:E0:30 Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Certificate serial: 019C432220759747E340BDC5924B55605D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft Manifest number: 138E Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: Q7aliREHUrky5Zi9a6/DJ3WD46cKlKFTFMrLjtTZVSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:20:75:97:47:e3:40:bd:c5:92:4b:55:60:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=8be8197ad04b0ecc8eb0cfc34482e395c92ce030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:0b:60:b8:52:f0:c4:5b:60:b5:40:bf:59: 6f:c4:25:c1:1f:58:eb:9b:c9:74:be:5c:0e:f6:d7: eb:37:61:b5:2d:dd:83:f1:a8:f5:02:f2:76:23:e4: 65:5c:87:65:cb:79:14:d9:47:60:45:7a:4a:b0:1c: 88:26:df:cb:2b:4e:8c:c9:ad:02:81:5a:34:18:cd: 1d:d5:b3:95:ca:f9:b8:d1:92:10:cd:28:4a:2d:7f: 91:34:14:21:5a:cb:a3:2a:08:f7:da:fc:a8:7e:45: f7:2a:88:9f:b8:45:d0:bb:ba:40:d6:0a:06:6b:a6: 45:9b:87:bf:bb:1f:6c:0d:b9:33:02:19:7b:18:50: fa:1d:eb:9f:a3:4e:3c:5d:c7:4f:3f:55:aa:da:03: a5:39:94:42:62:15:78:8d:b0:1f:0e:64:96:8d:46: 28:12:21:68:16:88:c1:a7:5e:b7:48:47:20:8f:41: f3:fd:63:d3:50:2b:60:cc:17:0d:c6:84:6c:af:2d: 0c:f4:ad:7a:70:f1:1f:fc:53:f9:43:4b:fd:4d:ee: 9a:0e:7b:62:31:bd:39:ee:d1:02:0a:94:a2:a4:21: de:b1:51:f0:6b:60:96:5c:29:27:6d:45:24:b7:7f: 23:ab:af:1b:0d:1d:1f:96:21:08:41:d8:ff:2e:a4: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:19:7A:D0:4B:0E:CC:8E:B0:CF:C3:44:82:E3:95:C9:2C:E0:30 X509v3 Authority Key Identifier: keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b8:ae:67:f2:3f:fd:89:e8:b1:fb:04:a6:10:2b:76:e4:ef: 3f:f7:29:07:bf:cf:ad:82:ab:fc:61:0f:42:2a:64:37:59:c9: 71:ae:f4:44:e3:31:14:b8:dd:d5:9a:07:c9:90:cd:ae:23:03: 4e:34:17:41:4b:46:16:3a:69:44:0f:51:36:fd:90:ac:1c:ed: 07:21:19:aa:52:9e:d7:5c:ac:85:0e:23:aa:7d:2e:41:88:fb: 70:2a:0f:6a:24:51:21:ff:6b:2a:89:44:2d:4e:f1:db:53:58: d4:4d:20:2e:c8:13:6c:9c:ec:0f:47:3c:d7:3c:6e:97:61:c3: 81:a1:17:e8:26:e5:35:83:bd:83:80:e7:bc:22:8b:6d:fc:e9: 14:e2:1e:37:46:78:84:8d:46:84:da:aa:7d:23:69:95:d4:e4: f3:43:b7:d9:90:1e:da:2e:81:36:d4:4f:81:25:bd:46:63:88: ef:e1:7f:6b:75:e3:3b:f0:4b:63:aa:ef:3c:9b:19:80:b6:58: 57:c5:08:6f:c0:34:d8:5d:a0:ed:e7:57:95:60:7f:e3:85:57: bb:2f:9c:e0:8f:7e:61:b5:8f:2e:fa:65:19:47:be:e3:3c:4d: 49:39:a0:69:35:b1:0d:05:0f:76:d8:12:04:57:09:55:48:76: a1:15:6f:74 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIiB1l0fjQL3FkktVYF0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy MWI1YjUwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD Eyg4YmU4MTk3YWQwNGIwZWNjOGViMGNmYzM0NDgyZTM5NWM5MmNlMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKoLYLhS8MRbYLVAv1lvxCXBH1jr m8l0vlwO9tfrN2G1Ld2D8aj1AvJ2I+RlXIdly3kU2UdgRXpKsByIJt/LK06Mya0C gVo0GM0d1bOVyvm40ZIQzShKLX+RNBQhWsujKgj32vyofkX3KoifuEXQu7pA1goG a6ZFm4e/ux9sDbkzAhl7GFD6Heufo048XcdPP1Wq2gOlOZRCYhV4jbAfDmSWjUYo EiFoFojBp163SEcgj0Hz/WPTUCtgzBcNxoRsry0M9K16cPEf/FP5Q0v9Te6aDnti Mb057tECCpSipCHesVHwa2CWXCknbUUkt38jq68bDR0fliEIQdj/LqQsGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIvoGXrQSw7MjrDPw0SC45XJLOAwMB8GA1UdIwQY MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3 LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbiu Z/I//YnosfsEphArduTvP/cpB7/PrYKr/GEPQipkN1nJca70ROMxFLjd1ZoHyZDN riMDTjQXQUtGFjppRA9RNv2QrBztByEZqlKe11yshQ4jqn0uQYj7cCoPaiRRIf9r KolELU7x21NY1E0gLsgTbJzsD0c81zxul2HDgaEX6CblNYO9g4DnvCKLbfzpFOIe N0Z4hI1GhNqqfSNpldTk80O32ZAe2i6BNtRPgSW9RmOI7+F/a3XjO/BLY6rvPJsZ gLZYV8UIb8A02F2g7edXlWB/44VXuy+c4I9+YbWPLvplGUe+4zxNSTmgaTWxDQUP dtgSBFcJVUh2oRVvdA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:15 2026 by rpki-client