This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json) Hash identifier: 11SqDA0C+wN1jJnFEH8QBcGDGONU2hJ22dJ2KJ41ifQ= Subject key identifier: 51:F1:76:86:56:D2:AE:97:FA:E1:55:4B:B0:3F:E6:61:45:33:4E:9C Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0 Certificate serial: 019C4322C44B0C79C7114902F68162F24A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft Manifest number: 0EE0 Signing time: Mon 09 Feb 2026 16:01:17 +0000 Manifest this update: Mon 09 Feb 2026 16:01:17 +0000 Manifest next update: Tue 10 Feb 2026 16:01:17 +0000 Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: O6UjHvsoMY35Kuek9HqSVTwdpgNvdxQ/+T2YuU5rwko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c4:4b:0c:79:c7:11:49:02:f6:81:62:f2:4a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0 Validity Not Before: Feb 9 16:01:17 2026 GMT Not After : Feb 10 16:01:17 2026 GMT Subject: CN=51f1768656d2ae97fae1554bb03fe66145334e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:71:3a:0a:fd:5c:a2:74:01:a6:4b:52:9f: 61:d0:a7:64:4c:ef:3a:d0:32:d0:54:4f:f3:1a:46: 7c:f6:d5:53:43:d9:09:df:f4:2b:11:1e:d9:ae:dd: db:d8:1c:dd:3d:b3:2c:22:6b:c0:4a:d7:da:96:86: d2:4a:2f:a5:24:2e:bd:0c:55:22:f3:9d:46:70:cd: 00:15:e4:26:ad:bd:a0:7e:c8:76:aa:a4:03:cd:5d: 35:0a:20:7e:a3:ca:e8:6b:ca:ec:85:51:a1:bb:e0: c7:d0:14:d4:2c:11:b5:41:cb:83:55:c3:53:7a:51: 44:07:57:ba:1b:09:06:7e:8f:96:a5:da:76:4e:c0: dc:b1:3f:5c:fa:02:32:0b:a8:13:db:0c:f6:c1:7c: 51:c7:6d:17:db:3e:fb:e0:8a:70:f4:0e:16:8d:58: df:35:b5:44:71:1e:5d:85:2e:2f:ef:8e:0a:03:1e: 67:90:3d:93:be:06:03:b5:97:07:36:33:a5:f2:27: 79:f0:25:fd:94:c8:6b:95:fc:dc:79:08:27:be:4a: 70:e4:fb:5a:fa:82:69:7a:56:ff:c8:ab:3a:c2:d0: 6b:90:5f:b1:43:7c:44:7c:2a:ad:1c:ba:9d:df:c6: b3:b3:af:8e:8a:2c:30:2e:b0:6e:8c:cb:27:52:a9: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:76:86:56:D2:AE:97:FA:E1:55:4B:B0:3F:E6:61:45:33:4E:9C X509v3 Authority Key Identifier: keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:88:48:1c:75:82:3a:f0:93:d9:c6:63:79:a0:0c:a6:b4: 3e:b2:05:05:4d:78:59:08:eb:8c:99:d5:a9:98:28:ff:5a:41: 73:7c:67:7e:39:98:c8:4e:b6:24:3f:31:cf:1f:a3:2b:c5:f3: 0f:de:cd:bf:72:bc:3f:5c:d9:87:53:40:19:06:03:f1:16:f7: ba:3c:67:b1:ba:6f:a4:68:57:2f:3a:70:b9:ed:d1:23:51:4e: 62:6e:c3:92:ab:a5:af:ff:ce:90:ce:64:96:8a:fc:1d:0c:18: c3:3c:d8:96:1a:07:9f:3a:4c:bc:02:01:9b:dd:f3:24:7b:25: 79:c1:67:9f:38:05:61:72:44:40:96:79:20:06:f2:4a:41:18: d1:05:20:01:15:96:55:52:bd:2f:d5:c9:91:0b:65:db:8d:86: 85:32:25:07:ab:88:25:ac:2d:40:80:86:a4:7e:6b:8c:da:09: 2e:3d:61:1c:ac:43:ea:1e:0d:5c:31:76:53:c1:b2:37:45:a0: 23:7a:fc:e6:94:8e:63:b2:ff:33:24:96:f9:d6:a1:96:4e:35: e6:3d:ac:e1:0a:cf:58:e1:30:96:2a:76:4b:3e:60:b7:28:4b: 0d:bc:eb:b2:90:f3:4c:3e:3a:78:e9:01:e2:08:a7:03:c1:8e: 11:e1:cd:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsRLDHnHEUkC9oFi8kpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4 NmQ1YzAwHhcNMjYwMjA5MTYwMTE3WhcNMjYwMjEwMTYwMTE3WjAzMTEwLwYDVQQD Eyg1MWYxNzY4NjU2ZDJhZTk3ZmFlMTU1NGJiMDNmZTY2MTQ1MzM0ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkNxOgr9XKJ0AaZLUp9h0KdkTO86 0DLQVE/zGkZ89tVTQ9kJ3/QrER7Zrt3b2BzdPbMsImvAStfalobSSi+lJC69DFUi 851GcM0AFeQmrb2gfsh2qqQDzV01CiB+o8roa8rshVGhu+DH0BTULBG1QcuDVcNT elFEB1e6GwkGfo+Wpdp2TsDcsT9c+gIyC6gT2wz2wXxRx20X2z774Ipw9A4WjVjf NbVEcR5dhS4v744KAx5nkD2TvgYDtZcHNjOl8id58CX9lMhrlfzceQgnvkpw5Pta +oJpelb/yKs6wtBrkF+xQ3xEfCqtHLqd38azs6+OiiwwLrBujMsnUqmfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHxdoZW0q6X+uFVS7A/5mFFM06cMB8GA1UdIwQY MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2 LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZiISBx1 gjrwk9nGY3mgDKa0PrIFBU14WQjrjJnVqZgo/1pBc3xnfjmYyE62JD8xzx+jK8Xz D97Nv3K8P1zZh1NAGQYD8Rb3ujxnsbpvpGhXLzpwue3RI1FOYm7Dkqulr//OkM5k lor8HQwYwzzYlhoHnzpMvAIBm93zJHslecFnnzgFYXJEQJZ5IAbySkEY0QUgARWW VVK9L9XJkQtl242GhTIlB6uIJawtQICGpH5rjNoJLj1hHKxD6h4NXDF2U8GyN0Wg I3r85pSOY7L/MySW+dahlk415j2s4QrPWOEwlip2Sz5gtyhLDbzrspDzTD46eOkB 4ginA8GOEeHNzA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:03 2026 by rpki-client