This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json) Hash identifier: Gp3XD5ZlcyjblmqWpCTZpKkWQCueOddpmvH7l5SsIlY= Subject key identifier: EF:3B:24:F9:14:EC:B8:FD:3E:D8:77:49:46:F6:40:9F:D7:33:75:68 Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Certificate serial: 019C4322A4BC1600FC160F205FF443B7C678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 6b2JrDgcYM1cvZVIKHoEDVdNydLtfkJts/BoNwdfn+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a4:bc:16:00:fc:16:0f:20:5f:f4:43:b7:c6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=ef3b24f914ecb8fd3ed8774946f6409fd7337568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:d4:33:1a:7d:1c:ab:24:3e:e4:81:cb:f8: b0:0d:13:39:18:65:74:ef:66:16:0b:f8:53:45:7a: 9d:5a:ae:a1:36:f4:02:0f:7c:9e:5b:17:78:36:84: cf:1a:d9:1c:21:bf:b0:40:e3:45:bd:5a:3f:70:04: 65:1a:ba:73:05:17:9f:ca:29:df:b1:72:29:fa:0c: 2e:73:94:ee:40:2c:28:20:7e:fd:18:27:5a:54:9c: 0b:8c:61:71:86:44:8b:b0:a7:61:e2:6d:29:b1:df: 52:73:8d:1f:1c:e8:f2:71:f4:70:22:60:8a:c9:54: b4:90:89:ec:a2:11:cf:91:9b:f3:b0:ba:44:d5:7c: d1:de:7e:01:2f:db:c1:d4:73:b3:46:54:74:b7:5f: 35:c8:56:9d:ca:b7:16:1b:7e:54:eb:e2:e6:50:19: 23:62:d9:d8:f3:a4:16:2e:f8:de:7d:8e:9a:66:a3: 73:ab:71:ab:73:e1:92:17:9e:ef:0d:ae:38:34:3f: 48:5a:b6:a0:22:dc:e0:7e:08:47:a7:0b:ed:d2:be: e1:4a:0a:56:5b:0c:df:8d:eb:e0:38:1e:de:57:0b: 21:c8:fd:95:ab:16:66:f7:39:4e:13:39:24:75:68: a1:c2:d5:01:48:16:6d:ce:98:37:11:d6:7a:d1:39: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3B:24:F9:14:EC:B8:FD:3E:D8:77:49:46:F6:40:9F:D7:33:75:68 X509v3 Authority Key Identifier: keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:da:fc:9c:d5:09:83:a1:af:1c:74:03:0f:26:d7:5f:75:2d: 22:cd:19:ba:41:c5:b5:2e:a6:75:db:6b:9d:77:fb:df:91:80: 35:46:2f:a0:8d:6f:bc:41:f0:19:57:cb:27:29:ad:1e:2d:8a: 50:6b:6a:95:b1:00:4d:b7:6f:fd:a5:fc:a2:59:8d:e2:f6:f3: ed:79:3d:25:d4:ef:88:2d:97:b8:9c:1c:d3:42:13:5c:3c:0e: e7:b1:0b:36:83:44:af:40:80:5c:95:03:fa:b1:9f:fa:e7:85: 43:c4:84:a4:68:da:2c:1f:5f:18:6f:bf:2b:35:ab:f9:b9:0b: dd:c0:d5:35:ba:8d:c7:bb:49:a7:94:07:d0:ad:ff:31:5e:5c: e3:df:d9:8d:25:be:78:57:0a:59:dd:bd:dd:20:f3:61:b5:8c: 65:b5:b8:cb:6b:b4:e1:b7:51:ee:da:25:12:78:37:57:2f:3f: 8a:7b:32:c6:74:8b:3d:d0:69:91:a9:5f:48:eb:3b:da:67:84: c8:f2:cc:b1:39:bb:f1:c1:1f:c1:3c:ce:e3:b8:0f:0d:89:14: 91:fb:df:19:53:b1:9f:35:93:3f:4f:ec:43:38:73:11:30:e2: d0:c5:a5:11:e6:6f:77:9e:3f:ba:c7:f8:92:f7:c2:2c:52:68: 05:3d:57:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqS8FgD8Fg8gX/RDt8Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh ZjM3YzYwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD EyhlZjNiMjRmOTE0ZWNiOGZkM2VkODc3NDk0NmY2NDA5ZmQ3MzM3NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0/UMxp9HKskPuSBy/iwDRM5GGV0 72YWC/hTRXqdWq6hNvQCD3yeWxd4NoTPGtkcIb+wQONFvVo/cARlGrpzBRefyinf sXIp+gwuc5TuQCwoIH79GCdaVJwLjGFxhkSLsKdh4m0psd9Sc40fHOjycfRwImCK yVS0kInsohHPkZvzsLpE1XzR3n4BL9vB1HOzRlR0t181yFadyrcWG35U6+LmUBkj YtnY86QWLvjefY6aZqNzq3Grc+GSF57vDa44ND9IWragItzgfghHpwvt0r7hSgpW WwzfjevgOB7eVwshyP2VqxZm9zlOEzkkdWihwtUBSBZtzpg3EdZ60TnOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO87JPkU7Lj9Pth3SUb2QJ/XM3VoMB8GA1UdIwQY MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0 LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNr8nNUJ g6GvHHQDDybXX3UtIs0ZukHFtS6mddtrnXf735GANUYvoI1vvEHwGVfLJymtHi2K UGtqlbEATbdv/aX8olmN4vbz7Xk9JdTviC2XuJwc00ITXDwO57ELNoNEr0CAXJUD +rGf+ueFQ8SEpGjaLB9fGG+/KzWr+bkL3cDVNbqNx7tJp5QH0K3/MV5c49/ZjSW+ eFcKWd293SDzYbWMZbW4y2u04bdR7tolEng3Vy8/insyxnSLPdBpkalfSOs72meE yPLMsTm78cEfwTzO47gPDYkUkfvfGVOxnzWTP0/sQzhzETDi0MWlEeZvd54/usf4 kvfCLFJoBT1XQw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:19 2026 by rpki-client