This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json) Hash identifier: XwMlt0kwjlOl/z8liRfKpNxpKb+KgzmLk8Bf/xFhK9s= Subject key identifier: F2:AD:34:E4:8C:75:F6:EB:64:DA:87:22:DD:57:81:D5:19:3E:F0:CE Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57 Certificate serial: 019C41D83934B2C86BA79EB63CA9B4EDB3E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft Manifest number: 0796 Signing time: Mon 09 Feb 2026 10:00:15 +0000 Manifest this update: Mon 09 Feb 2026 10:00:15 +0000 Manifest next update: Tue 10 Feb 2026 10:00:15 +0000 Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: J4sJ/Riu3YbkB35VSulsvZQY5ckgPqZHc17HULlKA+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:39:34:b2:c8:6b:a7:9e:b6:3c:a9:b4:ed:b3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57 Validity Not Before: Feb 9 10:00:15 2026 GMT Not After : Feb 10 10:00:15 2026 GMT Subject: CN=f2ad34e48c75f6eb64da8722dd5781d5193ef0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:25:77:85:30:6a:94:21:50:73:f3:c9:13: 0d:de:b7:d5:e7:d9:10:59:fa:d6:34:42:75:13:e5: e1:77:19:de:e1:ad:42:8f:01:7c:ff:b6:35:de:1d: e7:c6:c5:de:ce:f6:f8:8b:a3:4c:12:61:b8:de:56: 02:ea:c8:a3:c0:b8:a6:16:6b:f4:24:9a:b1:e0:94: 48:5f:b5:61:61:2d:63:16:7d:f9:03:56:f9:d5:8f: ba:93:94:57:fd:81:bb:d6:7c:68:f5:50:d9:22:b2: 60:bd:0d:f4:c1:ea:4d:6a:cb:5d:70:73:7e:14:c7: 20:50:f5:51:d3:8e:f9:17:9e:cb:c5:e1:73:ee:ea: 54:89:83:d0:81:46:18:82:fc:70:31:10:ea:f5:ba: 6e:55:68:19:54:0b:7d:70:a4:ff:4e:1e:4f:3c:d6: 95:8d:6a:27:b2:b3:94:1d:f1:5e:47:5a:46:9a:85: 3e:b7:17:b1:e2:62:ed:1b:93:ec:0c:a1:ff:cc:09: 66:1b:f7:54:75:64:50:6e:91:8e:4d:c3:fd:6f:6b: fb:db:ed:ee:67:6f:2e:b2:2b:b8:a8:4e:df:54:da: 70:fe:6e:ad:89:c5:40:4a:ea:6c:3f:2e:64:9c:84: 1b:1a:29:b1:f5:e4:56:cf:d6:45:11:6c:87:b0:aa: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AD:34:E4:8C:75:F6:EB:64:DA:87:22:DD:57:81:D5:19:3E:F0:CE X509v3 Authority Key Identifier: keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:56:f8:2d:04:c4:1a:3a:4b:90:f4:f2:0b:10:13:fd:fd:be: 29:55:fa:21:47:99:30:1a:2b:6e:8d:83:f1:e2:dd:dc:79:c2: 6d:ec:9b:a9:42:23:f0:9d:0c:27:06:13:77:80:18:cb:7d:b9: 45:05:50:fe:93:2a:48:4d:2d:1e:f0:18:bb:99:d2:f5:75:cd: 71:d0:e7:25:0e:a2:ab:e8:56:f7:b4:7b:f7:40:9e:40:12:00: f8:62:4c:17:78:e1:21:3a:c7:6c:45:ca:ef:ec:fb:bf:a2:a6: 67:90:bc:a1:36:46:2e:3e:80:5d:b7:ac:32:f0:9b:c6:9a:20: f0:a4:66:d9:58:0b:1b:5a:47:af:22:38:b6:59:74:e7:cb:37: 28:27:5e:17:b6:c5:66:91:d3:0c:71:65:68:c9:5c:3b:ca:3a: 4a:a0:ee:3b:1c:e7:1a:63:3f:33:4b:66:40:2d:10:d9:b3:9e: fc:74:d4:45:e4:eb:83:4f:90:60:fb:eb:56:dc:30:7d:13:e1: e7:d6:78:64:d6:b7:10:f5:ca:01:05:53:b2:11:1e:72:3d:e9: 08:a3:76:4c:22:3e:3c:88:25:41:47:5f:83:5a:5b:6d:20:83: c7:44:da:fc:14:5b:27:1c:ab:e0:2b:23:1b:ef:9b:c7:25:4a: f8:cb:87:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Dk0sshrp562PKm07bPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm ODNjNTcwHhcNMjYwMjA5MTAwMDE1WhcNMjYwMjEwMTAwMDE1WjAzMTEwLwYDVQQD EyhmMmFkMzRlNDhjNzVmNmViNjRkYTg3MjJkZDU3ODFkNTE5M2VmMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nold4UwapQhUHPzyRMN3rfV59kQ WfrWNEJ1E+Xhdxne4a1CjwF8/7Y13h3nxsXezvb4i6NMEmG43lYC6sijwLimFmv0 JJqx4JRIX7VhYS1jFn35A1b51Y+6k5RX/YG71nxo9VDZIrJgvQ30wepNastdcHN+ FMcgUPVR0475F57LxeFz7upUiYPQgUYYgvxwMRDq9bpuVWgZVAt9cKT/Th5PPNaV jWonsrOUHfFeR1pGmoU+txex4mLtG5PsDKH/zAlmG/dUdWRQbpGOTcP9b2v72+3u Z28usiu4qE7fVNpw/m6ticVASupsPy5knIQbGimx9eRWz9ZFEWyHsKoRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKtNOSMdfbrZNqHIt1XgdUZPvDOMB8GA1UdIwQY MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1b4LQTE GjpLkPTyCxAT/f2+KVX6IUeZMBorbo2D8eLd3HnCbeybqUIj8J0MJwYTd4AYy325 RQVQ/pMqSE0tHvAYu5nS9XXNcdDnJQ6iq+hW97R790CeQBIA+GJMF3jhITrHbEXK 7+z7v6KmZ5C8oTZGLj6AXbesMvCbxpog8KRm2VgLG1pHryI4tll058s3KCdeF7bF ZpHTDHFlaMlcO8o6SqDuOxznGmM/M0tmQC0Q2bOe/HTUReTrg0+QYPvrVtwwfRPh 59Z4ZNa3EPXKAQVTshEecj3pCKN2TCI+PIglQUdfg1pbbSCDx0Ta/BRbJxyr4Csj G++bxyVK+MuHwg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:33 2026 by rpki-client