This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json) Hash identifier: UEr22saFIEvAcS7QmAv3Ou/SDGsXolrw4u8EWXvgrZI= Subject key identifier: EA:46:5F:6B:EB:6D:8C:1C:A5:D1:8B:80:A5:6C:28:95:48:1F:9D:A2 Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e Certificate serial: 019C432290AA45D6294DC40B0BC44A62336B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: UXr2uuCdS3hPIsWeLcFnRLYLK7eYz1o0M3F2YSd03wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:90:aa:45:d6:29:4d:c4:0b:0b:c4:4a:62:33:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=ea465f6beb6d8c1ca5d18b80a56c2895481f9da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:30:da:9a:b4:89:a6:ad:43:bc:d9:f3:6c: 8d:76:40:c1:89:a7:a9:fa:31:48:7b:d8:16:c3:42: f5:08:41:2f:b0:1a:a8:d4:f3:59:a1:8c:87:a1:31: f5:54:43:45:cf:9f:79:e2:f1:e8:df:2c:6a:ed:33: 88:64:60:a4:2b:34:03:5b:9f:aa:b3:a2:ed:87:72: 65:12:8b:26:de:9f:a0:2c:3b:76:77:e1:47:3f:52: 7c:37:52:b3:f7:dc:f0:87:d0:2f:9c:55:7d:ac:f0: b5:af:59:f2:c2:a9:2d:1c:54:5a:ea:7b:48:4e:8c: ef:11:ab:d2:31:99:fa:86:40:6e:3a:0c:c8:b9:b9: 41:e0:54:d5:08:e6:80:72:c8:d5:5d:89:ab:e6:1f: 48:1e:d8:bc:b9:cf:7a:a3:c5:75:61:0e:af:dc:b1: 11:42:84:81:f6:7f:22:3e:17:04:fb:69:b8:c2:a2: cf:c8:5e:7e:91:eb:cf:39:1b:c4:a2:6a:d1:ab:0c: e8:b1:ff:df:b4:fd:9d:c8:95:d9:66:85:08:70:8c: 3e:fc:e5:5e:62:c5:ec:78:f2:d0:f0:ec:56:a8:aa: 55:a6:7d:66:64:4a:ed:88:7c:3b:fd:85:1a:f6:45: 22:63:6b:c2:96:6d:1f:9a:3c:d5:84:fa:0a:6e:f2: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:46:5F:6B:EB:6D:8C:1C:A5:D1:8B:80:A5:6C:28:95:48:1F:9D:A2 X509v3 Authority Key Identifier: keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:00:0d:56:42:0d:db:c1:97:6c:ce:05:04:99:6b:6b:79:ac: fa:56:96:23:35:d5:6b:27:76:30:b8:95:06:23:a4:39:87:57: a2:46:e6:c0:a0:12:66:fa:97:e4:4f:64:c4:c9:1f:d3:7c:1c: d5:21:18:42:fc:a4:77:c2:d5:e4:3d:24:8a:82:c7:23:78:b7: 78:ba:99:52:2c:ef:d0:a4:81:0b:f1:c3:f3:5c:cd:79:ae:d7: ed:31:48:b6:8d:a7:0c:bc:d8:51:6c:83:42:ad:64:f8:26:de: e3:60:5b:4c:0d:c8:fb:b4:2f:c2:b7:73:0a:48:f3:a0:de:4f: 69:62:5f:fb:e6:92:b9:70:c7:30:68:f8:45:7e:62:0d:16:fe: da:6f:fa:a5:4f:4c:d7:ad:7c:eb:a4:24:7b:ee:75:03:7b:21: ae:21:48:06:07:09:87:ef:65:95:6e:24:4e:4f:8e:23:3a:b7: 8a:0a:1b:48:e3:da:82:19:05:e3:22:71:af:12:8e:8f:f0:e4: d7:31:92:a8:99:c7:72:78:99:23:6e:8d:91:ed:bd:79:3b:df: cf:84:2a:fc:51:bb:0b:af:36:55:37:a8:8a:12:47:60:a2:0f: 28:c7:14:4a:98:1b:e8:f9:8e:e9:4c:72:25:74:8e:e1:68:d0: ec:e3:1a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpCqRdYpTcQLC8RKYjNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzQyMzNkMGJhOGU3ODYxOGEwOWE3MjU2MWRjY2QwNjQ5 OGM4NGUwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EyhlYTQ2NWY2YmViNmQ4YzFjYTVkMThiODBhNTZjMjg5NTQ4MWY5ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Ew2pq0iaatQ7zZ82yNdkDBiaep +jFIe9gWw0L1CEEvsBqo1PNZoYyHoTH1VENFz5954vHo3yxq7TOIZGCkKzQDW5+q s6Lth3JlEosm3p+gLDt2d+FHP1J8N1Kz99zwh9AvnFV9rPC1r1nywqktHFRa6ntI TozvEavSMZn6hkBuOgzIublB4FTVCOaAcsjVXYmr5h9IHti8uc96o8V1YQ6v3LER QoSB9n8iPhcE+2m4wqLPyF5+kevPORvEomrRqwzosf/ftP2dyJXZZoUIcIw+/OVe YsXsePLQ8OxWqKpVpn1mZErtiHw7/YUa9kUiY2vClm0fmjzVhPoKbvKkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpGX2vrbYwcpdGLgKVsKJVIH52iMB8GA1UdIwQY MBaAFJPEIz0LqOeGGKCaclYdzNBkmMhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTkt MjQ5NjExNmU0MTVkLzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTktMjQ5NjExNmU0MTVk LzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowANVkIN 28GXbM4FBJlra3ms+laWIzXVayd2MLiVBiOkOYdXokbmwKASZvqX5E9kxMkf03wc 1SEYQvykd8LV5D0kioLHI3i3eLqZUizv0KSBC/HD81zNea7X7TFIto2nDLzYUWyD Qq1k+Cbe42BbTA3I+7QvwrdzCkjzoN5PaWJf++aSuXDHMGj4RX5iDRb+2m/6pU9M 161866Qke+51A3shriFIBgcJh+9llW4kTk+OIzq3igobSOPaghkF4yJxrxKOj/Dk 1zGSqJnHcniZI26Nke29eTvfz4Qq/FG7C682VTeoihJHYKIPKMcUSpgb6PmO6Uxy JXSO4WjQ7OMa0g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:48 2026 by rpki-client