This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json) Hash identifier: I+PHlHXiMI6lbBcCCNUkodLpE3h7c8zS/Ei7jCYpaHA= Subject key identifier: DA:B7:66:49:BC:78:1B:F8:41:AA:39:00:20:5D:F0:11:F0:F8:46:58 Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95 Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95 Certificate serial: 019C42EBB0EDE5718DD2D9D4782E4B84BE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft Manifest number: 0D1B Signing time: Mon 09 Feb 2026 15:01:08 +0000 Manifest this update: Mon 09 Feb 2026 15:01:08 +0000 Manifest next update: Tue 10 Feb 2026 15:01:08 +0000 Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: kUERobYHPJCLiEkoqrr0FYjOk2++tYMyKzCDlZEbhX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b0:ed:e5:71:8d:d2:d9:d4:78:2e:4b:84:be:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95 Validity Not Before: Feb 9 15:01:08 2026 GMT Not After : Feb 10 15:01:08 2026 GMT Subject: CN=dab76649bc781bf841aa3900205df011f0f84658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:c8:ef:d5:03:3c:11:85:fe:7a:76:5b:60: 05:2f:1b:6b:0e:97:62:dd:98:8f:73:a8:40:33:38: 4c:9a:d0:41:8f:b0:ee:b8:3f:4b:ab:39:fd:ce:ac: 5a:11:ed:7d:a0:e2:6f:6c:62:b7:40:ba:de:99:1d: e6:a5:e0:45:92:3b:ca:f7:cd:75:30:fc:9d:51:02: 22:b3:3b:e0:e6:bc:fa:83:92:d4:55:ce:63:15:15: d8:1f:c6:37:79:42:3f:15:cb:aa:ff:f7:a6:73:ac: b5:1f:65:59:f9:52:c4:48:62:c6:5c:11:ba:6b:f2: 7b:3c:2d:80:ab:53:0a:4c:3d:b0:78:81:ff:58:30: 91:42:54:5a:70:de:e8:24:56:3c:1d:2f:2b:79:8f: bb:94:c9:c0:ae:f2:0c:48:92:07:cf:00:ab:bc:a5: 8d:7d:f8:71:68:dd:af:fe:b4:48:85:c8:1a:4b:ed: 0e:f0:51:2f:fd:a5:7e:2e:1b:67:2a:61:3e:78:2d: 0c:30:8d:2a:77:11:70:ad:7a:ec:5e:e5:0f:8b:e9: f5:cb:61:80:4b:8d:98:f4:9d:91:a6:12:2f:21:e4: 73:cc:a9:eb:a4:d2:29:26:f4:46:a9:fd:54:1a:f2: 79:3e:59:1e:a2:20:a4:5f:af:ce:a2:0d:e7:ed:a9: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:66:49:BC:78:1B:F8:41:AA:39:00:20:5D:F0:11:F0:F8:46:58 X509v3 Authority Key Identifier: keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:48:f7:39:2e:cc:83:d7:99:7a:0b:95:0e:9b:16:07:5f: 15:71:c6:35:9a:96:ff:9d:b4:af:b7:6f:c9:ad:e5:b4:89:47: d1:b0:ca:0f:d4:b2:f2:68:45:d5:11:c1:3f:c1:40:77:04:90: 2a:8f:3e:86:18:f0:ee:88:83:f5:12:ab:be:c5:ce:68:87:b3: a0:1d:3b:d0:00:14:fd:8a:67:49:63:03:54:57:4a:22:48:8d: 84:83:dc:13:a3:aa:4e:c8:8c:8b:80:c2:99:82:b2:7b:a3:35: ae:1e:7b:18:b0:19:9e:ed:96:3d:84:c6:f9:0c:72:4c:3e:5f: ae:41:6c:cc:3f:de:32:f0:32:00:0f:ec:4a:70:6e:f1:3f:6c: cc:a4:a2:59:21:b0:8c:ce:fe:d1:68:50:d7:87:05:fd:04:e4: f6:33:a7:fa:dd:7d:83:20:40:3d:5a:3c:8c:a8:76:78:f9:40: 85:8e:5f:70:7a:d1:af:36:06:f9:4b:73:45:ca:cd:74:fa:69: ba:01:15:1a:fa:4e:48:30:bc:e0:92:8d:4b:25:5a:7b:9e:52: bd:d6:6c:ff:d5:22:cd:13:57:0a:e4:cd:f5:a9:e6:ad:a9:9c: ff:3c:49:6f:5a:08:06:1c:cb:4a:2a:f1:54:aa:39:3e:4a:cc: ff:80:94:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67Dt5XGN0tnUeC5LhL6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTBkMWNhOGMxOTYxYzBiMTEyOGFhNTViODU3OTZiMTIw NDBhOTUwHhcNMjYwMjA5MTUwMTA4WhcNMjYwMjEwMTUwMTA4WjAzMTEwLwYDVQQD EyhkYWI3NjY0OWJjNzgxYmY4NDFhYTM5MDAyMDVkZjAxMWYwZjg0NjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfI79UDPBGF/np2W2AFLxtrDpdi 3ZiPc6hAMzhMmtBBj7DuuD9Lqzn9zqxaEe19oOJvbGK3QLremR3mpeBFkjvK9811 MPydUQIiszvg5rz6g5LUVc5jFRXYH8Y3eUI/Fcuq//emc6y1H2VZ+VLESGLGXBG6 a/J7PC2Aq1MKTD2weIH/WDCRQlRacN7oJFY8HS8reY+7lMnArvIMSJIHzwCrvKWN ffhxaN2v/rRIhcgaS+0O8FEv/aV+LhtnKmE+eC0MMI0qdxFwrXrsXuUPi+n1y2GA S42Y9J2RphIvIeRzzKnrpNIpJvRGqf1UGvJ5PlkeoiCkX6/Oog3n7ak6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq3Zkm8eBv4Qao5ACBd8BHw+EZYMB8GA1UdIwQY MBaAFNbg0cqMGWHAsRKKpVuFeWsSBAqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzkt NDdjZDQ2NDE5MmU3LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzktNDdjZDQ2NDE5MmU3 LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXJI9zku zIPXmXoLlQ6bFgdfFXHGNZqW/520r7dvya3ltIlH0bDKD9Sy8mhF1RHBP8FAdwSQ Ko8+hhjw7oiD9RKrvsXOaIezoB070AAU/YpnSWMDVFdKIkiNhIPcE6OqTsiMi4DC mYKye6M1rh57GLAZnu2WPYTG+QxyTD5frkFszD/eMvAyAA/sSnBu8T9szKSiWSGw jM7+0WhQ14cF/QTk9jOn+t19gyBAPVo8jKh2ePlAhY5fcHrRrzYG+UtzRcrNdPpp ugEVGvpOSDC84JKNSyVae55SvdZs/9UizRNXCuTN9anmramc/zxJb1oIBhzLSirx VKo5PkrM/4CUdw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:55 2026 by rpki-client