This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json) Hash identifier: PmxhKqU+/rX4G3ZepPRcXlaw2ULdpShIFHSA9pGG0EU= Subject key identifier: 54:80:71:DC:BC:FE:18:94:E3:39:A0:A8:E7:A3:50:9D:31:2F:F3:51 Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Certificate serial: 019C427D79EAAF11AD145157E61E3C2061D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft Manifest number: 0704 Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: Mpx50GrymeAQ++1qDThupMIGWL7VFRN6bDRqPpw//bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:79:ea:af:11:ad:14:51:57:e6:1e:3c:20:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=548071dcbcfe1894e339a0a8e7a3509d312ff351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:b7:82:ce:f2:27:e9:d4:51:8e:07:da:78: 86:e1:29:2d:b7:97:e1:4e:31:0f:ba:77:78:ff:06: 38:dc:d1:0b:3b:92:9d:e6:b9:2d:18:ea:04:be:a2: ca:5c:35:1e:c6:7f:b7:0a:70:66:2a:90:ba:a5:b1: 37:b7:d6:be:d4:11:d0:f7:da:79:a7:00:08:ec:db: a7:db:40:6a:5f:a1:a9:eb:4d:83:5c:da:2b:8a:61: be:22:63:c9:66:56:f1:6d:ac:65:9e:96:6c:d3:ec: d2:6f:cf:b4:fe:7f:a8:04:9d:4f:ab:da:89:e4:f8: 93:60:18:7d:81:cf:eb:dd:cd:ee:f1:4b:58:e5:f8: d5:67:7f:35:73:e9:d4:bf:d1:af:76:07:6f:50:49: f6:dd:3e:22:4e:5a:99:ba:a6:32:e4:2f:50:eb:28: b9:aa:81:ef:b2:46:fc:15:3f:60:12:9c:8d:ef:9d: df:c5:92:0f:b8:82:15:42:bb:d1:8b:b9:35:5e:19: 7f:3d:45:59:17:de:c2:81:89:ea:5d:1f:28:28:6f: 4f:56:b0:4a:aa:8f:7a:78:84:f5:ef:c2:e8:b5:26: 92:6f:6a:e6:e2:c8:6a:d4:49:18:42:ec:eb:ec:83: 74:fb:8c:8b:66:20:08:b3:44:50:c8:f2:78:03:16: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:80:71:DC:BC:FE:18:94:E3:39:A0:A8:E7:A3:50:9D:31:2F:F3:51 X509v3 Authority Key Identifier: keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e7:89:89:c7:a1:d6:a7:78:56:7c:47:80:f9:b1:1d:b8:1d: 67:34:6d:3d:16:30:26:1b:89:5d:de:10:32:56:8e:47:ba:42: 9a:3c:4d:63:4f:3f:52:82:0d:10:4c:39:38:20:70:f4:7b:06: ee:bc:dc:e2:6d:ab:ec:42:67:38:84:ea:3e:e2:52:64:08:87: a0:be:af:f9:be:17:01:58:77:59:c4:ec:46:3d:da:50:e8:53: 44:95:a9:a6:c7:c3:16:ee:92:f2:1d:b3:9e:87:ad:2e:3d:bb: fd:84:d0:1e:e2:49:ed:1f:ff:36:da:fa:aa:93:08:60:55:4b: 1c:80:23:16:78:99:23:ad:5e:27:1b:fa:24:95:3f:3f:67:d5: 32:12:4a:00:22:0e:2f:52:21:74:94:74:37:4e:ca:d4:9c:af: 01:3f:fc:80:2f:d8:97:5a:3f:7f:99:f6:ae:e4:a6:f3:b3:f2: 22:cd:a7:2e:e1:c1:78:e1:5b:bb:39:34:90:82:29:0c:27:08: 45:e0:24:b4:77:da:96:54:ee:c0:71:66:2d:9b:af:8a:95:4a: a2:f0:dd:5c:cb:aa:cc:31:20:04:8b:10:e3:77:ef:91:a6:8c: 31:b2:8b:cb:25:90:1b:1f:b0:f2:3d:d4:a8:9a:58:5a:23:dd: b1:7f:f3:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXnqrxGtFFFX5h48IGHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj NGFlNGYwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD Eyg1NDgwNzFkY2JjZmUxODk0ZTMzOWEwYThlN2EzNTA5ZDMxMmZmMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt63gs7yJ+nUUY4H2niG4Sktt5fh TjEPund4/wY43NELO5Kd5rktGOoEvqLKXDUexn+3CnBmKpC6pbE3t9a+1BHQ99p5 pwAI7Nun20BqX6Gp602DXNorimG+ImPJZlbxbaxlnpZs0+zSb8+0/n+oBJ1Pq9qJ 5PiTYBh9gc/r3c3u8UtY5fjVZ381c+nUv9GvdgdvUEn23T4iTlqZuqYy5C9Q6yi5 qoHvskb8FT9gEpyN753fxZIPuIIVQrvRi7k1Xhl/PUVZF97CgYnqXR8oKG9PVrBK qo96eIT178LotSaSb2rm4shq1EkYQuzr7IN0+4yLZiAIs0RQyPJ4Axb7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSAcdy8/hiU4zmgqOejUJ0xL/NRMB8GA1UdIwQY MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+eJiceh 1qd4VnxHgPmxHbgdZzRtPRYwJhuJXd4QMlaOR7pCmjxNY08/UoINEEw5OCBw9HsG 7rzc4m2r7EJnOITqPuJSZAiHoL6v+b4XAVh3WcTsRj3aUOhTRJWppsfDFu6S8h2z noetLj27/YTQHuJJ7R//Ntr6qpMIYFVLHIAjFniZI61eJxv6JJU/P2fVMhJKACIO L1IhdJR0N07K1JyvAT/8gC/Yl1o/f5n2ruSm87PyIs2nLuHBeOFbuzk0kIIpDCcI ReAktHfallTuwHFmLZuvipVKovDdXMuqzDEgBIsQ43fvkaaMMbKLyyWQGx+w8j3U qJpYWiPdsX/zEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:31 2026 by rpki-client