This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json) Hash identifier: IVrLzvr8300q/M3aW5RTd/7Kg7hrqARNtb+vM9YihKc= Subject key identifier: B7:3B:67:31:54:51:CF:2E:82:17:D6:BF:51:6D:73:BE:E8:B3:AF:19 Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4 Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4 Certificate serial: 019C4322F8DE128D0CAAEC86DD1309C54593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft Manifest number: 0D40 Signing time: Mon 09 Feb 2026 16:01:31 +0000 Manifest this update: Mon 09 Feb 2026 16:01:31 +0000 Manifest next update: Tue 10 Feb 2026 16:01:31 +0000 Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: QDCPkc58yWOuRdOPUFG8E522Heo6NBhmcIuMAVnBRBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f8:de:12:8d:0c:aa:ec:86:dd:13:09:c5:45:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4 Validity Not Before: Feb 9 16:01:31 2026 GMT Not After : Feb 10 16:01:31 2026 GMT Subject: CN=b73b67315451cf2e8217d6bf516d73bee8b3af19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:ff:8f:14:39:86:66:91:85:75:90:26:6a: 00:af:fb:1e:a3:62:c0:eb:e5:aa:af:27:f6:21:d1: d3:3d:73:c8:27:40:18:f0:09:36:f9:2f:d1:b1:88: 17:4e:15:05:cb:a5:fc:de:01:03:0d:11:e7:53:04: 39:72:35:4f:0f:cd:ec:6f:5f:56:6e:eb:bc:fa:71: 5d:5b:4d:24:39:4b:83:f3:64:a1:0b:8f:d2:f2:05: 29:75:77:c3:cc:ab:aa:a8:e0:f4:1e:88:a6:f1:b3: 5b:91:62:b4:f8:69:42:71:4a:a3:97:02:e0:67:cf: ec:7a:fd:3b:a1:5d:fa:79:29:a5:28:85:70:58:09: d9:b6:53:89:6b:e6:4c:ec:99:4c:95:3b:b3:53:00: 6d:1a:00:bb:65:ee:a4:15:dc:31:7f:be:1e:7c:35: f7:23:fc:bd:f1:8e:89:25:8c:8c:dc:b9:19:d9:08: 02:f5:b3:13:63:b8:4d:10:ce:1a:be:46:92:2c:69: 8b:fa:db:4a:6f:7c:53:b7:7f:4f:33:a3:2e:99:59: 4d:70:49:50:53:b8:13:a9:b8:a3:d7:0d:a5:88:ff: e3:e7:3a:45:f1:16:ba:dc:3c:f1:33:8c:b5:51:8a: ef:5f:5d:50:cd:f9:cb:42:c0:fe:1c:72:5d:87:77: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:67:31:54:51:CF:2E:82:17:D6:BF:51:6D:73:BE:E8:B3:AF:19 X509v3 Authority Key Identifier: keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:89:ca:0d:91:8e:04:ab:39:1b:e4:bc:e0:34:e0:86:b3:ed: 1c:ec:86:54:9e:09:52:47:bf:28:72:45:9c:f6:84:aa:97:bf: 07:b2:86:0e:7b:88:bf:19:ff:59:ea:35:c4:25:af:80:4c:2b: fb:fe:53:6b:a9:a3:b6:be:5a:aa:8b:ef:83:e0:b1:ef:e5:c0: f0:c1:3a:24:e7:48:4c:0c:85:e0:32:62:de:cc:bc:c5:09:f7: 74:8c:16:5c:46:d2:d1:20:b9:a1:5b:bf:e3:91:a7:2d:13:61: 36:56:2f:50:4e:4a:78:d8:95:1f:c8:d3:f2:46:b9:30:d6:95: eb:fb:e8:49:bb:c7:a7:85:11:dc:62:f2:31:93:41:2a:99:83: ee:cb:4f:65:62:d8:d0:5f:ee:43:0c:b0:a1:ae:b8:c2:30:a0: 46:e7:92:8f:b1:f5:37:42:ec:9b:01:03:4a:fa:c9:bd:1c:89: bf:44:f4:20:37:fc:74:48:c2:54:2f:79:b4:01:ad:dc:9a:18: c6:9d:f5:eb:88:74:e8:4b:9b:b0:da:bc:37:8f:af:a4:62:7d: 51:e4:a4:8c:55:83:52:d6:25:78:c2:39:cf:13:83:c0:09:96: b9:9f:5c:09:10:82:8e:5b:be:3a:ba:e7:0a:f2:33:56:01:ba: a2:ed:5f:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvjeEo0MquyG3RMJxUWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1 YmU2YzQwHhcNMjYwMjA5MTYwMTMxWhcNMjYwMjEwMTYwMTMxWjAzMTEwLwYDVQQD EyhiNzNiNjczMTU0NTFjZjJlODIxN2Q2YmY1MTZkNzNiZWU4YjNhZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0v/jxQ5hmaRhXWQJmoAr/seo2LA 6+Wqryf2IdHTPXPIJ0AY8Ak2+S/RsYgXThUFy6X83gEDDRHnUwQ5cjVPD83sb19W buu8+nFdW00kOUuD82ShC4/S8gUpdXfDzKuqqOD0Hoim8bNbkWK0+GlCcUqjlwLg Z8/sev07oV36eSmlKIVwWAnZtlOJa+ZM7JlMlTuzUwBtGgC7Ze6kFdwxf74efDX3 I/y98Y6JJYyM3LkZ2QgC9bMTY7hNEM4avkaSLGmL+ttKb3xTt39PM6MumVlNcElQ U7gTqbij1w2liP/j5zpF8Ra63DzxM4y1UYrvX11QzfnLQsD+HHJdh3dQiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc7ZzFUUc8ughfWv1Ftc77os68ZMB8GA1UdIwQY MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2 LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYnKDZGO BKs5G+S84DTghrPtHOyGVJ4JUke/KHJFnPaEqpe/B7KGDnuIvxn/Weo1xCWvgEwr +/5Ta6mjtr5aqovvg+Cx7+XA8ME6JOdITAyF4DJi3sy8xQn3dIwWXEbS0SC5oVu/ 45GnLRNhNlYvUE5KeNiVH8jT8ka5MNaV6/voSbvHp4UR3GLyMZNBKpmD7stPZWLY 0F/uQwywoa64wjCgRueSj7H1N0LsmwEDSvrJvRyJv0T0IDf8dEjCVC95tAGt3JoY xp3164h06EubsNq8N4+vpGJ9UeSkjFWDUtYleMI5zxODwAmWuZ9cCRCCjlu+Orrn CvIzVgG6ou1fyA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:01 2026 by rpki-client