This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json) Hash identifier: JVxM6wFg9A2TJBMRsw0ak/y2LX9Qpujtv+//55+xtXI= Subject key identifier: C5:91:73:57:F3:24:43:28:5F:D4:67:71:CF:21:60:BD:2E:A6:3F:5E Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Certificate serial: 019C43221C0D87C4A872931C031A8BEA5FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 16:00:34 +0000 Manifest this update: Mon 09 Feb 2026 16:00:34 +0000 Manifest next update: Tue 10 Feb 2026 16:00:34 +0000 Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: vVXUpgVRuFQ+CDik/gjNcyEQAYmKp8m06+4BRw0iseA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1c:0d:87:c4:a8:72:93:1c:03:1a:8b:ea:5f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Validity Not Before: Feb 9 16:00:34 2026 GMT Not After : Feb 10 16:00:34 2026 GMT Subject: CN=c5917357f32443285fd46771cf2160bd2ea63f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:ab:00:a4:15:ff:f4:0f:57:37:c8:a8:1d: 74:aa:62:c4:03:84:ac:bc:9d:5f:d0:ed:91:49:ca: 1a:38:10:a1:9a:17:36:26:b4:c0:23:dd:94:7e:77: c4:d4:f5:78:9b:aa:59:70:a3:eb:09:f5:34:73:ba: b4:02:d5:02:1a:a9:6b:06:f0:a2:02:8c:99:60:4c: af:51:39:bb:9b:4f:48:93:a7:19:68:b2:6e:56:e1: ca:69:98:c7:b8:8c:8b:14:60:d4:13:65:d9:10:4a: 82:06:fe:e1:65:4b:e9:01:82:6e:41:9f:f8:bd:97: f4:b6:c8:2f:4a:37:68:00:de:e2:e3:e6:69:14:8d: 8f:40:c6:cd:f6:4d:5c:e6:83:80:1e:bd:3d:0a:af: a6:62:0d:6a:01:a4:09:8b:86:42:01:9f:58:2e:6f: f4:bd:b6:9e:6f:c5:bc:da:d1:15:ad:a4:f3:e8:1a: e6:47:ef:f7:65:16:59:b1:fc:eb:db:33:5c:45:1c: 52:53:e8:17:f4:c6:14:9a:d6:7e:ca:92:60:a6:a6: a9:d0:36:42:de:4d:4f:49:15:99:36:ca:64:88:53: d2:4e:1f:cb:5c:da:c3:5e:4a:04:17:a6:0b:fc:3a: 0b:eb:f4:00:b8:77:b2:3d:9e:27:23:de:ea:85:03: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:73:57:F3:24:43:28:5F:D4:67:71:CF:21:60:BD:2E:A6:3F:5E X509v3 Authority Key Identifier: keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:5c:3d:4e:c2:7c:d2:49:c1:a9:73:1a:27:53:9a:75:03: b5:55:da:26:89:3e:57:1b:8e:ce:47:03:86:9c:ca:2d:08:7a: 30:0e:7d:c9:70:e9:18:d9:41:4b:4b:bb:bc:ce:f6:a9:c6:29: 35:2f:c7:c2:a8:92:47:75:c8:99:62:8c:91:d4:1e:2c:ff:dd: 3b:bf:2f:da:5c:91:22:33:75:c3:99:65:ce:1b:86:0a:a0:3f: ab:ce:3a:da:97:33:f2:1e:b0:1e:08:3f:d2:07:4e:9a:f6:0a: c7:5f:66:45:59:36:90:54:89:54:16:e8:7b:a1:72:20:61:56: 8a:41:6a:ce:a3:76:e1:45:8b:e4:d7:7d:97:e9:8d:2c:d5:00: 5e:92:e5:84:59:c7:ec:42:b5:8e:67:35:45:97:1f:0c:d9:8d: 85:69:d3:8e:4f:e4:d2:86:eb:ed:93:15:cf:4b:51:14:e3:d4: e1:4b:02:74:b7:4a:17:26:05:cb:38:42:ae:54:65:c5:b1:93: e7:c1:4f:cf:ba:4a:9a:02:24:cc:df:e6:f2:57:5f:b5:bc:73: 78:b6:74:2c:8e:61:7b:f9:f1:28:23:25:e8:6c:ed:1a:d9:76: 5d:e1:b5:84:46:88:67:a4:44:d3:61:a8:3e:65:79:f9:b0:75: 70:50:55:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhwNh8SocpMcAxqL6l+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTFiZGE2Y2RjODk4ZjY3NDQ0MWZjZTVjNzQyMWI0NmY2 MTFkNTkwHhcNMjYwMjA5MTYwMDM0WhcNMjYwMjEwMTYwMDM0WjAzMTEwLwYDVQQD EyhjNTkxNzM1N2YzMjQ0MzI4NWZkNDY3NzFjZjIxNjBiZDJlYTYzZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zqrAKQV//QPVzfIqB10qmLEA4Ss vJ1f0O2RScoaOBChmhc2JrTAI92UfnfE1PV4m6pZcKPrCfU0c7q0AtUCGqlrBvCi AoyZYEyvUTm7m09Ik6cZaLJuVuHKaZjHuIyLFGDUE2XZEEqCBv7hZUvpAYJuQZ/4 vZf0tsgvSjdoAN7i4+ZpFI2PQMbN9k1c5oOAHr09Cq+mYg1qAaQJi4ZCAZ9YLm/0 vbaeb8W82tEVraTz6BrmR+/3ZRZZsfzr2zNcRRxSU+gX9MYUmtZ+ypJgpqap0DZC 3k1PSRWZNspkiFPSTh/LXNrDXkoEF6YL/DoL6/QAuHeyPZ4nI97qhQNjlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWRc1fzJEMoX9Rncc8hYL0upj9eMB8GA1UdIwQY MBaAFP5RvabNyJj2dEQfzlx0IbRvYR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTct ZDRjMGM4OGMwNWRmLzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTctZDRjMGM4OGMwNWRm LzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMblcPU7C fNJJwalzGidTmnUDtVXaJok+VxuOzkcDhpzKLQh6MA59yXDpGNlBS0u7vM72qcYp NS/HwqiSR3XImWKMkdQeLP/dO78v2lyRIjN1w5llzhuGCqA/q8462pcz8h6wHgg/ 0gdOmvYKx19mRVk2kFSJVBboe6FyIGFWikFqzqN24UWL5Nd9l+mNLNUAXpLlhFnH 7EK1jmc1RZcfDNmNhWnTjk/k0obr7ZMVz0tRFOPU4UsCdLdKFyYFyzhCrlRlxbGT 58FPz7pKmgIkzN/m8ldftbxzeLZ0LI5he/nxKCMl6GztGtl2XeG1hEaIZ6RE02Go PmV5+bB1cFBVHg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:16 2026 by rpki-client