This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.mft File: sI6jNAr8cIYtSY7oGDr_l95Lunc.mft (raw, json) Hash identifier: 1wOgoe/B4BV6rinqqgaAZsNGl5e7S8NmLNELxl9J6tc= Subject key identifier: D2:22:0A:1E:BA:4C:6A:A8:44:F3:79:9A:68:30:0F:5A:BF:69:BA:EE Authority key identifier: B0:8E:A3:34:0A:FC:70:86:2D:49:8E:E8:18:3A:FF:97:DE:4B:BA:77 Certificate issuer: /CN=b08ea3340afc70862d498ee8183aff97de4bba77 Certificate serial: 019C42461C337AA780CFD945108338DBBD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sI6jNAr8cIYtSY7oGDr_l95Lunc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.mft Manifest number: 39 Signing time: Mon 09 Feb 2026 12:00:16 +0000 Manifest this update: Mon 09 Feb 2026 12:00:16 +0000 Manifest next update: Tue 10 Feb 2026 12:00:16 +0000 Files and hashes: 1: sI6jNAr8cIYtSY7oGDr_l95Lunc.crl (hash: 5mcU3pF2o1NOsTax/ZFTj8AOwZ2uUhukZwT2y6UNKx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.mft rsync://rpki.ripe.net/repository/DEFAULT/sI6jNAr8cIYtSY7oGDr_l95Lunc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1c:33:7a:a7:80:cf:d9:45:10:83:38:db:bd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08ea3340afc70862d498ee8183aff97de4bba77 Validity Not Before: Feb 9 12:00:16 2026 GMT Not After : Feb 10 12:00:16 2026 GMT Subject: CN=d2220a1eba4c6aa844f3799a68300f5abf69baee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:85:63:62:c7:84:3d:7d:6a:3c:48:11:2e: 5c:46:d3:31:40:09:32:fe:de:1e:f1:16:2b:fd:5c: 71:4b:8c:50:dc:50:53:fc:ab:e5:dd:6c:72:84:70: 07:29:f8:86:81:db:8d:ed:e3:ee:ec:bf:58:39:3b: a0:34:86:19:84:c9:a6:82:67:d0:21:ef:db:7f:5e: 1f:5d:92:1d:20:f0:e1:e2:5d:b5:3e:71:bb:de:bc: 8a:97:26:c2:32:df:29:af:84:c6:69:c8:05:b3:b9: 33:cb:04:87:de:ea:02:14:20:a9:cd:67:60:35:82: 89:26:fd:77:30:7a:40:eb:97:77:ba:1b:fc:5f:50: 2e:5b:7a:cd:75:97:13:67:48:e4:cf:ff:31:ae:b3: 78:66:5c:c1:d1:1f:82:02:ee:cf:e1:8e:13:4f:cc: 63:94:d2:f9:7b:0b:e7:db:5e:95:25:b1:9b:ec:31: 0a:3f:b2:48:a3:fa:31:2b:83:fc:87:0c:67:15:c2: 88:41:84:bd:b3:9c:21:24:2d:fc:df:58:10:74:bb: 48:86:eb:fd:b4:ff:22:e0:36:2c:db:f1:80:43:7f: 2d:95:a9:b5:80:30:98:f9:04:41:7e:c0:90:f7:9f: 80:e2:1e:66:32:44:d8:2d:86:45:a3:25:5d:ef:1c: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:0A:1E:BA:4C:6A:A8:44:F3:79:9A:68:30:0F:5A:BF:69:BA:EE X509v3 Authority Key Identifier: keyid:B0:8E:A3:34:0A:FC:70:86:2D:49:8E:E8:18:3A:FF:97:DE:4B:BA:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sI6jNAr8cIYtSY7oGDr_l95Lunc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1532b2-3282-4d82-bbce-d5ad4369ce1e/1/sI6jNAr8cIYtSY7oGDr_l95Lunc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:38:25:4c:0a:a5:45:f3:25:69:4c:3d:8a:85:da:b6:27: 40:2f:82:23:82:50:5e:e7:28:25:83:98:5c:d1:16:b2:b1:3b: 0b:62:d7:1a:fc:dd:7f:a6:8b:07:e6:b6:e5:08:15:48:6f:19: 46:e3:f9:f7:3b:b9:87:56:58:3e:9f:33:6b:42:e5:27:e1:df: 7e:03:1d:ed:fc:c5:31:db:44:27:31:2b:1e:af:b3:64:96:f3: 0c:db:5b:91:5a:9d:38:e1:68:41:7d:f8:d5:28:71:31:56:e8: 2c:0c:1b:1f:9a:de:ce:77:36:2d:ac:d4:3b:d5:fa:8b:9f:73: d8:b9:91:5f:6b:3a:d2:73:2e:06:66:eb:78:89:26:09:dd:34: 96:c3:e7:fb:b5:4c:8a:f0:63:be:98:f3:63:60:02:08:9e:ad: 05:42:0d:3c:93:99:38:b1:d0:43:dd:15:33:f3:ad:61:70:7c: ca:5b:a7:1e:f8:11:5b:26:3e:b4:e7:24:d6:3b:bf:4f:cf:41: b3:41:90:b8:d4:3f:32:b1:c3:61:65:a5:8c:3d:58:a4:7c:30: 82:52:e8:3d:d9:a7:f1:7e:a4:cb:c7:e1:d6:b2:6b:97:4d:1f: f9:92:d7:95:ae:95:56:1b:7d:b7:c7:23:65:6e:e6:12:f0:31: 56:44:4c:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhwzeqeAz9lFEIM4270rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOGVhMzM0MGFmYzcwODYyZDQ5OGVlODE4M2FmZjk3ZGU0 YmJhNzcwHhcNMjYwMjA5MTIwMDE2WhcNMjYwMjEwMTIwMDE2WjAzMTEwLwYDVQQD EyhkMjIyMGExZWJhNGM2YWE4NDRmMzc5OWE2ODMwMGY1YWJmNjliYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW6FY2LHhD19ajxIES5cRtMxQAky /t4e8RYr/VxxS4xQ3FBT/Kvl3WxyhHAHKfiGgduN7ePu7L9YOTugNIYZhMmmgmfQ Ie/bf14fXZIdIPDh4l21PnG73ryKlybCMt8pr4TGacgFs7kzywSH3uoCFCCpzWdg NYKJJv13MHpA65d3uhv8X1AuW3rNdZcTZ0jkz/8xrrN4ZlzB0R+CAu7P4Y4TT8xj lNL5ewvn216VJbGb7DEKP7JIo/oxK4P8hwxnFcKIQYS9s5whJC3831gQdLtIhuv9 tP8i4DYs2/GAQ38tlam1gDCY+QRBfsCQ95+A4h5mMkTYLYZFoyVd7xz6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIiCh66TGqoRPN5mmgwD1q/abruMB8GA1UdIwQY MBaAFLCOozQK/HCGLUmO6Bg6/5feS7p3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0k2ak5BcjhjSVl0U1k3b0dEcl9sOTVMdW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xNTMyYjItMzI4Mi00ZDgyLWJiY2Ut ZDVhZDQzNjljZTFlLzEvc0k2ak5BcjhjSVl0U1k3b0dEcl9sOTVMdW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xNTMyYjItMzI4Mi00ZDgyLWJiY2UtZDVhZDQzNjljZTFl LzEvc0k2ak5BcjhjSVl0U1k3b0dEcl9sOTVMdW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhM4JUwK pUXzJWlMPYqF2rYnQC+CI4JQXucoJYOYXNEWsrE7C2LXGvzdf6aLB+a25QgVSG8Z RuP59zu5h1ZYPp8za0LlJ+HffgMd7fzFMdtEJzErHq+zZJbzDNtbkVqdOOFoQX34 1ShxMVboLAwbH5reznc2LazUO9X6i59z2LmRX2s60nMuBmbreIkmCd00lsPn+7VM ivBjvpjzY2ACCJ6tBUINPJOZOLHQQ90VM/OtYXB8ylunHvgRWyY+tOck1ju/T89B s0GQuNQ/MrHDYWWljD1YpHwwglLoPdmn8X6ky8fh1rJrl00f+ZLXla6VVht9t8cj ZW7mEvAxVkRMww== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:56 2026 by rpki-client