This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json) Hash identifier: 1kZU0xHbGCyccqIT9Os6bn+eN5QrlwHZWVtNTEhLEfc= Subject key identifier: E5:27:44:8E:7D:E3:62:80:54:83:BA:65:45:48:A6:52:1C:30:BC:EF Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Certificate serial: 019C427DE049EE7B47821E60E4BEF7ECC1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft Manifest number: 0AFE Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: uIgmUZm+Rne42k5hfIa8X24Br4a9Pc+j4FwWgtNlgZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e0:49:ee:7b:47:82:1e:60:e4:be:f7:ec:c1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=e527448e7de362805483ba654548a6521c30bcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:6c:e4:ca:52:d3:9f:bf:42:44:1e:fd:e1: 78:e5:5c:71:f5:1a:80:1b:dc:76:74:e5:a4:9c:b9: d0:d3:d6:13:a4:6d:09:c6:88:c2:0d:d2:47:03:68: eb:4b:5f:10:58:89:a6:5e:19:1d:d5:49:d6:ee:2a: 9b:36:58:c4:a6:ba:b9:16:71:db:6c:34:e0:8d:dc: 15:65:39:e5:cf:5e:f1:2a:c0:d8:8c:db:e0:53:ff: 71:43:db:1a:8c:bc:28:39:57:de:c9:1f:08:cc:11: 73:02:f8:65:a2:f2:a7:45:bd:80:07:15:75:55:9d: 0a:d4:1f:ad:51:44:03:33:aa:a9:18:ea:94:8d:be: 81:3c:2d:65:80:4d:9c:25:15:fa:fb:ca:a5:86:26: 89:74:fc:74:f4:c0:ae:f8:b8:55:76:c4:d6:99:4f: b1:79:99:2b:4c:32:30:14:64:e5:03:78:5e:15:70: 95:91:4a:b5:f9:52:1b:f3:9c:e5:93:b4:36:23:8a: 60:70:a1:e6:13:b1:e7:87:47:75:c6:b9:56:87:99: 15:d0:30:e8:47:08:1c:39:1d:90:b4:a1:72:06:79: 1f:2c:32:d4:a8:35:21:1d:09:e3:6b:e5:f7:b2:05: ca:d9:63:c2:e8:ae:e7:d5:d7:77:18:19:b5:ca:88: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:44:8E:7D:E3:62:80:54:83:BA:65:45:48:A6:52:1C:30:BC:EF X509v3 Authority Key Identifier: keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:31:07:9e:41:1d:52:cc:d2:3b:75:5f:96:f6:95:32:e5:a7: 9d:ad:7b:a1:41:0d:ed:53:d7:a7:d3:c9:30:65:9f:e9:9b:14: ae:75:83:d2:14:6c:02:2a:a1:26:02:bf:2c:3e:10:22:ba:3a: 42:a9:66:87:82:b8:cd:6b:12:5a:48:96:53:1c:ec:dc:b5:ba: 65:e6:f7:17:13:eb:a1:bd:14:73:f8:e0:a9:82:a1:ef:fd:e7: f0:78:19:f8:ae:32:bb:85:8d:86:2e:ec:ce:4f:8b:83:1c:3f: b8:81:9b:0f:32:30:72:70:02:16:6c:f6:fe:65:19:4b:88:0d: a8:f7:78:4a:e2:49:e2:d1:1f:78:0d:5c:2c:8a:24:22:d3:1a: 40:b4:90:ed:b1:46:e3:24:ac:b1:21:db:5e:33:8d:b4:1b:34: 9b:e9:6e:99:02:85:72:b0:00:6b:7d:86:94:a0:26:46:a1:ab: f6:1f:2d:04:7f:a8:da:66:f7:62:b5:38:fd:66:dd:1f:2c:99: e9:8f:ac:41:b0:21:8f:76:f0:20:45:55:a8:6a:24:fb:c6:29: 35:46:58:37:6b:14:b0:dd:38:3f:29:d2:dc:19:43:26:39:8e: 34:ff:3b:69:58:27:f9:1e:43:d3:2c:06:8e:90:ca:be:2f:5f: e4:84:f9:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeBJ7ntHgh5g5L737MHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5 NDljNDYwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EyhlNTI3NDQ4ZTdkZTM2MjgwNTQ4M2JhNjU0NTQ4YTY1MjFjMzBiY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDhs5MpS05+/QkQe/eF45Vxx9RqA G9x2dOWknLnQ09YTpG0JxojCDdJHA2jrS18QWImmXhkd1UnW7iqbNljEprq5FnHb bDTgjdwVZTnlz17xKsDYjNvgU/9xQ9sajLwoOVfeyR8IzBFzAvhlovKnRb2ABxV1 VZ0K1B+tUUQDM6qpGOqUjb6BPC1lgE2cJRX6+8qlhiaJdPx09MCu+LhVdsTWmU+x eZkrTDIwFGTlA3heFXCVkUq1+VIb85zlk7Q2I4pgcKHmE7Hnh0d1xrlWh5kV0DDo RwgcOR2QtKFyBnkfLDLUqDUhHQnja+X3sgXK2WPC6K7n1dd3GBm1yoj6cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUnRI5942KAVIO6ZUVIplIcMLzvMB8GA1UdIwQY MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDEHnkEd UszSO3VflvaVMuWnna17oUEN7VPXp9PJMGWf6ZsUrnWD0hRsAiqhJgK/LD4QIro6 Qqlmh4K4zWsSWkiWUxzs3LW6Zeb3FxProb0Uc/jgqYKh7/3n8HgZ+K4yu4WNhi7s zk+Lgxw/uIGbDzIwcnACFmz2/mUZS4gNqPd4SuJJ4tEfeA1cLIokItMaQLSQ7bFG 4ySssSHbXjONtBs0m+lumQKFcrAAa32GlKAmRqGr9h8tBH+o2mb3YrU4/WbdHyyZ 6Y+sQbAhj3bwIEVVqGok+8YpNUZYN2sUsN04PynS3BlDJjmONP87aVgn+R5D0ywG jpDKvi9f5IT5Rg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:31 2026 by rpki-client