This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json) Hash identifier: iiRsBdFZzMHQW+nvCTYYQ3nUD1mnXlAepcgO6JC60yg= Subject key identifier: FC:DF:CF:22:5E:AC:8D:20:BA:E8:67:1E:50:EA:01:E7:64:6D:B0:57 Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15 Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15 Certificate serial: 019C42EB0EC425A031DAB815DBD324B6AD1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: q/qZjVvQcBy86F8ObmWHStXU9rAF/3tUQYySTwYVORE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0e:c4:25:a0:31:da:b8:15:db:d3:24:b6:ad:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15 Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=fcdfcf225eac8d20bae8671e50ea01e7646db057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:9c:c0:f6:bc:1d:2b:4c:b1:5e:f1:d8:48: c7:4f:58:09:c1:bf:4a:73:c7:b4:ed:2a:ae:5d:be: 2e:12:6b:e3:59:af:77:32:b8:ac:97:41:25:2b:09: 5f:cb:69:81:8e:6d:40:28:e3:48:c0:d0:04:4c:e6: 1e:29:4e:f1:6a:68:52:48:1b:fa:eb:ce:36:da:f7: 80:4a:cf:68:82:4c:2c:0c:1e:76:45:cd:0a:5b:cd: ff:6f:b5:56:b0:c8:70:82:ce:ed:e4:14:a8:8c:71: 95:4f:ba:e0:55:43:bc:4c:41:f3:6a:5b:03:04:d1: 98:e9:5b:0f:6b:98:1f:92:c3:5e:1d:74:40:6c:0b: 52:c7:92:df:b6:5c:b7:76:ab:2f:ea:55:a9:ce:0a: bf:69:c7:38:e4:58:b9:8e:72:28:27:a5:62:f3:e0: 52:41:72:46:21:fa:72:29:c4:73:e0:ce:c3:3a:a1: a6:d4:aa:97:6e:65:1c:bf:2c:ab:de:3f:b2:55:d3: 44:59:21:fe:cd:69:9e:51:25:d3:9f:6d:30:d2:f8: 5a:11:e5:36:26:9c:10:04:37:36:e8:dd:a6:c5:33: 3a:4c:e0:96:9a:90:a2:a6:c5:49:31:a4:f8:33:d4: 61:12:fb:b4:6e:9f:d4:26:94:d0:65:39:0a:f3:ba: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DF:CF:22:5E:AC:8D:20:BA:E8:67:1E:50:EA:01:E7:64:6D:B0:57 X509v3 Authority Key Identifier: keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d4:5a:c0:53:db:fc:4b:97:33:fb:1c:28:69:6b:44:c8:e5: f6:e1:08:2a:29:d7:a4:e0:a2:74:b2:7a:ff:07:22:93:5c:04: 87:62:e8:a2:9a:98:60:27:f9:c1:2f:ba:55:a4:60:b3:ef:d7: 35:c6:58:ea:02:73:69:b4:37:2d:83:e9:42:8f:c6:5b:45:5f: ab:3c:8b:73:33:c8:27:1a:53:33:cb:f4:81:a7:40:2d:e9:72: 06:e5:52:41:18:8c:4d:a3:7e:09:e6:50:7e:01:c0:80:e6:83: db:4a:e5:32:24:63:15:8a:dd:1f:0e:2b:0f:c0:ae:14:18:1a: 2d:f0:b7:63:a7:be:47:55:0f:e0:b7:36:60:94:a7:ea:0a:d0: 5c:f7:eb:04:99:d5:ab:cd:72:f7:e8:a7:65:ef:f4:7f:24:91: 1c:f5:32:99:4d:df:09:6c:01:16:5e:2d:be:54:b5:a4:4b:c0: 90:e5:a0:fc:36:aa:b8:f7:e6:f4:af:ef:40:e0:f9:ac:12:97: 01:4a:da:d0:98:6b:2d:18:79:7b:49:ec:c1:50:58:0a:3e:b8: e9:73:cd:f6:6c:27:86:4e:a5:88:79:86:9b:d8:d2:b5:a9:37: 93:0a:c8:ef:32:e9:2d:73:d3:60:f1:8b:50:fb:a4:a3:53:63: 92:49:88:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w7EJaAx2rgV29Mktq0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2 ZWJiMTUwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD EyhmY2RmY2YyMjVlYWM4ZDIwYmFlODY3MWU1MGVhMDFlNzY0NmRiMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPicwPa8HStMsV7x2EjHT1gJwb9K c8e07SquXb4uEmvjWa93Mrisl0ElKwlfy2mBjm1AKONIwNAETOYeKU7xamhSSBv6 68422veASs9ogkwsDB52Rc0KW83/b7VWsMhwgs7t5BSojHGVT7rgVUO8TEHzalsD BNGY6VsPa5gfksNeHXRAbAtSx5Lftly3dqsv6lWpzgq/acc45Fi5jnIoJ6Vi8+BS QXJGIfpyKcRz4M7DOqGm1KqXbmUcvyyr3j+yVdNEWSH+zWmeUSXTn20w0vhaEeU2 JpwQBDc26N2mxTM6TOCWmpCipsVJMaT4M9RhEvu0bp/UJpTQZTkK87qYIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzfzyJerI0guuhnHlDqAedkbbBXMB8GA1UdIwQY MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9RawFPb /EuXM/scKGlrRMjl9uEIKinXpOCidLJ6/wcik1wEh2LoopqYYCf5wS+6VaRgs+/X NcZY6gJzabQ3LYPpQo/GW0VfqzyLczPIJxpTM8v0gadALelyBuVSQRiMTaN+CeZQ fgHAgOaD20rlMiRjFYrdHw4rD8CuFBgaLfC3Y6e+R1UP4Lc2YJSn6grQXPfrBJnV q81y9+inZe/0fySRHPUymU3fCWwBFl4tvlS1pEvAkOWg/DaquPfm9K/vQOD5rBKX AUra0JhrLRh5e0nswVBYCj646XPN9mwnhk6liHmGm9jStak3kwrI7zLpLXPTYPGL UPuko1NjkkmI6g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:50 2026 by rpki-client