This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json) Hash identifier: aiNioMfGyPRpMTWVRKdHHSwJGBvxQXr8LJ7s8p7IOFU= Subject key identifier: DE:81:14:03:56:8E:D4:BF:D2:A7:18:D7:35:87:AE:71:35:54:1D:23 Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36 Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36 Certificate serial: 019C43C6B5B303878AB01450157562E9B1F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft Manifest number: 0B81 Signing time: Mon 09 Feb 2026 19:00:21 +0000 Manifest this update: Mon 09 Feb 2026 19:00:21 +0000 Manifest next update: Tue 10 Feb 2026 19:00:21 +0000 Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: txc2x9tC8XVO6yN/Hsc4D2BYWwUnTEYvqiFZN191SwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b5:b3:03:87:8a:b0:14:50:15:75:62:e9:b1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36 Validity Not Before: Feb 9 19:00:21 2026 GMT Not After : Feb 10 19:00:21 2026 GMT Subject: CN=de811403568ed4bfd2a718d73587ae7135541d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:9b:9b:e6:06:a6:11:e8:e1:9b:38:66:96: c5:87:15:fc:7f:98:f1:5a:ee:37:9f:68:61:9b:bb: 67:97:22:f0:39:6b:98:56:65:3e:17:b3:ae:1d:20: 03:07:8a:12:6f:3f:3f:8a:ce:9c:e8:ba:36:29:77: 35:30:f5:c4:32:a3:25:6e:07:a6:06:f0:55:99:d4: 21:00:3c:e3:11:3e:4a:71:9f:35:58:2a:1f:50:7e: 37:7e:45:67:83:03:8b:9c:c0:43:cf:ca:84:90:b6: 4b:5d:4a:06:b1:9f:99:14:4d:c0:40:8d:d0:b3:12: a8:fc:f1:50:ca:ce:12:5b:a1:d7:45:b1:26:cb:79: af:8a:ca:cc:2e:65:9b:2b:61:91:54:0d:39:e8:54: 10:8e:a2:6d:59:2c:4b:0b:b0:9d:04:51:48:14:97: ee:14:b1:05:7c:76:2b:cd:22:22:57:fa:d1:9e:7a: 2e:41:6d:d8:06:69:4c:38:0b:d6:0b:21:c8:b8:08: cc:63:d4:9b:51:fc:e9:3e:69:e5:6d:3c:be:1b:8b: b6:59:41:6c:5d:9c:f9:76:7b:9f:49:f0:c6:d2:fc: 4e:34:3b:f5:5e:e7:f1:a4:9c:c4:58:8a:9a:fc:f5: 21:78:3e:0c:cd:9b:54:34:aa:fd:9c:82:b0:9d:36: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:81:14:03:56:8E:D4:BF:D2:A7:18:D7:35:87:AE:71:35:54:1D:23 X509v3 Authority Key Identifier: keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1b:af:1a:e9:41:99:d6:69:ec:c7:5d:a0:1d:db:f3:25:03: 34:0b:ad:36:fd:30:ea:c9:13:a0:c4:15:67:a6:c4:66:d9:56: 53:a1:3b:8c:c7:4d:af:0a:a7:96:5d:fd:c1:43:e4:33:3a:52: 68:39:6c:d8:c4:b3:84:f4:ae:b8:50:26:31:d1:16:d3:66:3c: c1:8f:ac:d3:f6:64:84:6f:53:2f:ac:7f:29:4a:68:1d:72:3b: bd:dc:9c:ce:4e:db:32:a8:c3:a6:df:ac:6e:31:cb:7c:3e:49: d4:d7:14:32:71:58:f4:84:3e:b2:f1:e9:a9:34:1f:07:91:a2: c6:97:94:87:b8:bb:64:85:f4:db:91:29:44:98:ea:80:49:5a: f5:b5:56:0d:c0:8d:ae:0a:0c:76:a4:20:25:a3:a5:30:38:30: 03:54:b4:57:ec:3e:52:de:2d:15:5e:a8:a8:20:0a:3b:65:be: 0a:d1:8c:54:7a:e8:94:42:d4:4d:73:a3:0b:0b:87:5e:33:14: 17:24:4c:39:83:aa:4b:8f:64:57:13:f3:40:07:e7:61:26:44: 4e:39:7f:2b:23:1d:35:ca:b7:7d:3b:7e:fb:de:db:30:29:cd: 01:78:29:4f:12:83:74:51:ca:bd:7f:63:c9:e2:7c:bc:19:6c: 84:6a:f5:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrWzA4eKsBRQFXVi6bHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Y2VkN2EyNWIxMDkwZjBkM2YzZWI5N2M4MTRhYjJmZjdk YmZjMzYwHhcNMjYwMjA5MTkwMDIxWhcNMjYwMjEwMTkwMDIxWjAzMTEwLwYDVQQD EyhkZTgxMTQwMzU2OGVkNGJmZDJhNzE4ZDczNTg3YWU3MTM1NTQxZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYubm+YGphHo4Zs4ZpbFhxX8f5jx Wu43n2hhm7tnlyLwOWuYVmU+F7OuHSADB4oSbz8/is6c6Lo2KXc1MPXEMqMlbgem BvBVmdQhADzjET5KcZ81WCofUH43fkVngwOLnMBDz8qEkLZLXUoGsZ+ZFE3AQI3Q sxKo/PFQys4SW6HXRbEmy3mvisrMLmWbK2GRVA056FQQjqJtWSxLC7CdBFFIFJfu FLEFfHYrzSIiV/rRnnouQW3YBmlMOAvWCyHIuAjMY9SbUfzpPmnlbTy+G4u2WUFs XZz5dnufSfDG0vxONDv1XufxpJzEWIqa/PUheD4MzZtUNKr9nIKwnTbGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6BFANWjtS/0qcY1zWHrnE1VB0jMB8GA1UdIwQY MBaAFMfO16JbEJDw0/Prl8gUqy/32/w2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDkt OGEyYjc4MDIwZmVlLzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDktOGEyYjc4MDIwZmVl LzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBuvGulB mdZp7MddoB3b8yUDNAutNv0w6skToMQVZ6bEZtlWU6E7jMdNrwqnll39wUPkMzpS aDls2MSzhPSuuFAmMdEW02Y8wY+s0/ZkhG9TL6x/KUpoHXI7vdyczk7bMqjDpt+s bjHLfD5J1NcUMnFY9IQ+svHpqTQfB5GixpeUh7i7ZIX025EpRJjqgEla9bVWDcCN rgoMdqQgJaOlMDgwA1S0V+w+Ut4tFV6oqCAKO2W+CtGMVHrolELUTXOjCwuHXjMU FyRMOYOqS49kVxPzQAfnYSZETjl/KyMdNcq3fTt++97bMCnNAXgpTxKDdFHKvX9j yeJ8vBlshGr1/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:25 2026 by rpki-client