This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json) Hash identifier: Ydp/DrHRmEIK/5gRSdkLlTZd1tkUR/4WNR1YuhHZ1Jk= Subject key identifier: 9A:A7:D0:9F:E3:87:5F:AA:F7:87:3E:55:07:F9:25:F7:85:81:13:FE Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412 Certificate serial: 019C41342CB91709505267668405A7FBAD98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 07:01:04 +0000 Manifest this update: Mon 09 Feb 2026 07:01:04 +0000 Manifest next update: Tue 10 Feb 2026 07:01:04 +0000 Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: JVqgXhWEFRhiZ/cqG3W3+kocEViBqJNpVGh9YArU/Ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:2c:b9:17:09:50:52:67:66:84:05:a7:fb:ad:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412 Validity Not Before: Feb 9 07:01:04 2026 GMT Not After : Feb 10 07:01:04 2026 GMT Subject: CN=9aa7d09fe3875faaf7873e5507f925f7858113fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:d3:63:38:ca:22:fa:03:a4:43:78:29:6c: a5:9b:44:a2:59:3d:50:cd:ab:6a:73:5c:d0:2e:36: 12:4f:c4:3d:05:18:6c:c9:4c:e8:7e:9b:0b:05:82: a4:27:b4:27:02:01:d5:f8:0d:cf:15:37:2c:69:95: 3f:61:d6:57:ba:dc:89:76:60:fc:20:f5:a1:fe:c5: 59:92:98:15:07:7f:b6:cc:e2:c4:39:2a:4e:d5:c3: 68:b4:c6:a3:67:4b:8c:0f:ba:12:16:94:da:8b:76: e5:60:09:47:a1:0a:fe:7c:10:ae:ef:09:f0:37:10: 08:a3:7b:5a:9d:07:cd:41:cb:16:40:d2:00:7f:cd: 63:a8:d3:12:9b:b8:5b:8a:6f:5a:0e:1e:58:8b:e9: e6:67:26:56:2b:7b:80:72:2b:42:b2:3e:1b:d3:ac: 82:4b:8b:8a:b8:ae:91:1f:31:c2:91:d4:99:32:63: c8:3a:29:55:6f:30:56:9f:88:a3:31:86:24:1c:87: e6:bb:52:2e:97:ed:f1:80:6f:62:80:80:5e:67:d8: a0:79:cd:4e:7c:78:33:f2:93:a1:2f:b6:6d:5e:1b: 4a:e3:5b:7c:b9:88:b8:6c:f3:8d:17:be:12:81:ca: 0e:dc:a0:75:4c:13:9f:da:ae:a3:5b:fa:f7:b4:0d: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A7:D0:9F:E3:87:5F:AA:F7:87:3E:55:07:F9:25:F7:85:81:13:FE X509v3 Authority Key Identifier: keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:71:dc:6f:78:ff:84:86:9d:20:e6:ba:35:88:83:0f:72:85: 27:3e:9a:56:d2:9e:78:9c:8f:5b:ae:09:a1:c8:bb:65:ba:6c: 28:54:5e:aa:55:30:7d:a6:3e:fb:79:22:eb:8c:20:dc:22:64: 60:29:03:5a:02:ce:ba:50:e8:5f:89:62:ef:10:09:64:f3:a2: b8:db:71:3c:1c:bc:be:82:02:3c:95:72:da:07:c8:93:5b:3c: a0:22:b7:43:aa:57:69:69:7e:77:d4:33:e8:f4:99:0c:0e:38: 8c:75:ea:65:d0:5c:65:ad:35:2d:8a:fd:3d:ce:6e:e4:91:6d: 22:92:5c:c6:55:21:8b:2a:98:2d:70:fe:80:d5:54:b2:00:cb: 86:10:a8:8f:5b:be:9c:18:8d:34:28:d3:6e:ac:0f:f9:78:cb: 93:da:41:fc:6c:a4:b4:70:cd:40:9c:f5:d0:20:ab:89:ca:28: 26:5f:5a:0a:d6:fa:e3:31:e1:09:a6:c5:fd:fb:1b:a8:77:05: 50:58:ca:e8:e1:5d:46:a1:47:50:61:7d:19:b3:c2:4e:31:51: 28:a0:82:3d:d8:d9:ad:76:3e:18:5b:ca:db:92:3a:17:ef:6c: 3f:f6:44:8b:4e:05:ad:cf:46:df:70:49:3d:9d:df:91:26:16: cd:9d:bb:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBNCy5FwlQUmdmhAWn+62YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm ZTY0MTIwHhcNMjYwMjA5MDcwMTA0WhcNMjYwMjEwMDcwMTA0WjAzMTEwLwYDVQQD Eyg5YWE3ZDA5ZmUzODc1ZmFhZjc4NzNlNTUwN2Y5MjVmNzg1ODExM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fLTYzjKIvoDpEN4KWylm0SiWT1Q zatqc1zQLjYST8Q9BRhsyUzofpsLBYKkJ7QnAgHV+A3PFTcsaZU/YdZXutyJdmD8 IPWh/sVZkpgVB3+2zOLEOSpO1cNotMajZ0uMD7oSFpTai3blYAlHoQr+fBCu7wnw NxAIo3tanQfNQcsWQNIAf81jqNMSm7hbim9aDh5Yi+nmZyZWK3uAcitCsj4b06yC S4uKuK6RHzHCkdSZMmPIOilVbzBWn4ijMYYkHIfmu1Iul+3xgG9igIBeZ9igec1O fHgz8pOhL7ZtXhtK41t8uYi4bPONF74SgcoO3KB1TBOf2q6jW/r3tA2AuQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJqn0J/jh1+q94c+VQf5JfeFgRP+MB8GA1UdIwQY MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3Hc b3j/hIadIOa6NYiDD3KFJz6aVtKeeJyPW64Joci7ZbpsKFReqlUwfaY++3ki64wg 3CJkYCkDWgLOulDoX4li7xAJZPOiuNtxPBy8voICPJVy2gfIk1s8oCK3Q6pXaWl+ d9Qz6PSZDA44jHXqZdBcZa01LYr9Pc5u5JFtIpJcxlUhiyqYLXD+gNVUsgDLhhCo j1u+nBiNNCjTbqwP+XjLk9pB/GyktHDNQJz10CCricooJl9aCtb64zHhCabF/fsb qHcFUFjK6OFdRqFHUGF9GbPCTjFRKKCCPdjZrXY+GFvK25I6F+9sP/ZEi04Frc9G 33BJPZ3fkSYWzZ27Lg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:14 2026 by rpki-client