This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json) Hash identifier: 3MxBYS+qOLk6x5BRmDUGeNsc0xIRNsOhHxHIxznRXYc= Subject key identifier: 9C:E0:1C:F4:69:1B:EB:15:A4:8E:E2:14:8C:75:91:46:40:C2:84:0C Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa Certificate serial: 019C41D86B17236AFDB6C854D422D6241D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft Manifest number: 0DB8 Signing time: Mon 09 Feb 2026 10:00:28 +0000 Manifest this update: Mon 09 Feb 2026 10:00:28 +0000 Manifest next update: Tue 10 Feb 2026 10:00:28 +0000 Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: dRAkfJ55zGYGHDKh8H3Vk6jGi0hAwkbXNHmJ0HWFa9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:6b:17:23:6a:fd:b6:c8:54:d4:22:d6:24:1d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa Validity Not Before: Feb 9 10:00:28 2026 GMT Not After : Feb 10 10:00:28 2026 GMT Subject: CN=9ce01cf4691beb15a48ee2148c75914640c2840c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:fe:1e:1f:c3:e1:7a:55:1f:60:15:3c:fa: 55:73:ce:f2:c8:e7:39:d9:fc:5f:9a:af:d4:4d:6d: 11:06:52:87:cd:f9:0d:0b:5a:ff:ef:3f:a7:89:a6: 4f:46:96:96:a1:39:6e:0a:fa:3a:1f:2a:75:2d:ff: 55:a7:44:50:98:af:10:24:fd:7a:35:30:5a:1a:34: e6:63:b2:ee:4b:29:67:e2:1d:c8:68:73:85:40:7b: 25:f9:2f:21:e7:49:db:50:c0:9c:8a:00:f3:a0:4c: ac:6e:ae:0e:b1:36:75:a5:93:1a:48:94:34:1a:b2: 54:07:18:d8:f1:d7:81:bd:d3:d2:ad:25:f3:86:18: 07:55:b9:3c:bb:bd:e4:9f:66:3d:3f:c4:09:19:72: ad:8a:6f:8e:3b:1c:d1:e7:01:82:e6:18:41:97:1f: cb:e4:1e:ae:cd:21:25:7c:f0:bb:77:e1:99:83:24: b9:8b:07:fa:51:03:7e:5a:25:08:72:39:f9:78:a6: 43:da:99:f9:f4:56:49:ec:68:28:6c:02:33:58:fb: 2e:d1:58:d7:76:a8:e3:83:1f:63:82:26:59:9f:e8: 29:6d:22:af:a4:05:9f:25:ab:35:1e:f3:3e:5f:e0: 45:9c:e5:ff:d3:20:ac:76:86:a7:6e:ca:15:cb:94: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:1C:F4:69:1B:EB:15:A4:8E:E2:14:8C:75:91:46:40:C2:84:0C X509v3 Authority Key Identifier: keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:35:46:3c:c2:da:47:92:0e:1e:da:be:22:70:48:14:ee:89: 2d:ab:73:cc:3c:1f:f4:16:6d:8c:0c:3d:73:17:08:3c:2a:f2: 0b:70:cd:5e:3a:d8:8b:d6:2e:9c:76:ab:b4:46:8e:2a:54:89: e6:4a:35:3b:58:e2:49:34:89:20:1d:b1:fa:35:34:b9:60:db: 8d:ca:63:87:60:68:1f:52:b5:07:76:ac:06:02:3c:19:e7:66: 39:d1:3f:de:98:f0:bf:41:bf:7f:6f:4e:69:3a:ed:ce:2c:14: dd:8b:6d:9f:bd:84:60:b2:62:08:0b:f0:bf:fe:d4:2a:25:1d: 07:ee:db:af:67:9c:17:bd:c3:55:92:4d:9a:30:08:c4:26:c5: 2f:99:13:47:73:fe:80:79:7c:7d:b9:f0:99:66:74:62:d9:ad: 15:9f:14:d1:58:84:0b:83:4d:36:a6:49:d7:70:7e:bf:f4:71: dd:3a:92:46:77:a5:b5:c6:b7:c6:bd:60:e2:ce:96:9d:ae:fc: ca:9d:ac:8f:76:3d:16:34:5b:ab:2e:1b:58:96:67:52:06:28: 67:48:f1:f0:2a:1d:bc:d2:1c:3d:98:3e:b4:c2:92:4f:ae:46: c2:d6:13:73:1d:a4:7e:6f:2a:cc:e8:40:84:eb:3b:03:6a:5b: 4c:4f:f1:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GsXI2r9tshU1CLWJB0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YWY0NGI0N2YwOGJkMGJlOGZjMDVmOWIwYzE1YTVhYmM2 MjAzYWEwHhcNMjYwMjA5MTAwMDI4WhcNMjYwMjEwMTAwMDI4WjAzMTEwLwYDVQQD Eyg5Y2UwMWNmNDY5MWJlYjE1YTQ4ZWUyMTQ4Yzc1OTE0NjQwYzI4NDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifD+Hh/D4XpVH2AVPPpVc87yyOc5 2fxfmq/UTW0RBlKHzfkNC1r/7z+niaZPRpaWoTluCvo6Hyp1Lf9Vp0RQmK8QJP16 NTBaGjTmY7LuSyln4h3IaHOFQHsl+S8h50nbUMCcigDzoEysbq4OsTZ1pZMaSJQ0 GrJUBxjY8deBvdPSrSXzhhgHVbk8u73kn2Y9P8QJGXKtim+OOxzR5wGC5hhBlx/L 5B6uzSElfPC7d+GZgyS5iwf6UQN+WiUIcjn5eKZD2pn59FZJ7GgobAIzWPsu0VjX dqjjgx9jgiZZn+gpbSKvpAWfJas1HvM+X+BFnOX/0yCsdoanbsoVy5Q7AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzgHPRpG+sVpI7iFIx1kUZAwoQMMB8GA1UdIwQY MBaAFNevRLR/CL0L6PwF+bDBWlq8YgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYt MTliMDI2OWQxMDNjLzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYtMTliMDI2OWQxMDNj LzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzVGPMLa R5IOHtq+InBIFO6JLatzzDwf9BZtjAw9cxcIPCryC3DNXjrYi9YunHartEaOKlSJ 5ko1O1jiSTSJIB2x+jU0uWDbjcpjh2BoH1K1B3asBgI8GedmOdE/3pjwv0G/f29O aTrtziwU3Yttn72EYLJiCAvwv/7UKiUdB+7br2ecF73DVZJNmjAIxCbFL5kTR3P+ gHl8fbnwmWZ0YtmtFZ8U0ViEC4NNNqZJ13B+v/Rx3TqSRneltca3xr1g4s6Wna78 yp2sj3Y9FjRbqy4bWJZnUgYoZ0jx8CodvNIcPZg+tMKST65GwtYTcx2kfm8qzOhA hOs7A2pbTE/xVg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:24 2026 by rpki-client