This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json) Hash identifier: NQSlibtjk+WNcrbr04NpnLkoJ2gHS0blaqadX7dZTQ4= Subject key identifier: 4C:6A:31:5E:2D:E7:9B:42:BF:17:C9:78:E4:E8:3C:AF:15:60:AD:79 Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48 Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048 Certificate serial: 019C420F376118E2CA5A4630FEEB545136AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft Manifest number: 0ADE Signing time: Mon 09 Feb 2026 11:00:19 +0000 Manifest this update: Mon 09 Feb 2026 11:00:19 +0000 Manifest next update: Tue 10 Feb 2026 11:00:19 +0000 Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: O/AjLXBECGmkRGk7KWiwSxaTSjOD5FGOHA9HXnIGCHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:37:61:18:e2:ca:5a:46:30:fe:eb:54:51:36:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048 Validity Not Before: Feb 9 11:00:19 2026 GMT Not After : Feb 10 11:00:19 2026 GMT Subject: CN=4c6a315e2de79b42bf17c978e4e83caf1560ad79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:8e:33:21:bc:fa:26:73:e4:5f:e9:c9:79: 4d:3c:a0:f9:6d:39:f1:b7:18:56:08:79:bf:04:90: c5:fb:d0:03:63:ed:53:be:7c:e6:70:d4:0c:59:0b: ed:c3:57:b1:f4:18:ad:ab:18:98:a7:c4:b8:fc:22: ec:37:a6:98:d3:06:77:e2:14:ea:98:10:52:23:c1: 80:75:88:86:67:c9:9a:bb:04:10:92:44:98:5c:02: f4:dd:b2:b2:76:e1:49:e3:08:21:c0:1c:a9:e5:52: bc:24:7e:82:81:9c:10:b9:f2:7a:e7:17:14:43:d4: 26:ae:eb:b6:24:56:9f:c5:24:29:64:4d:b5:ce:99: 72:8f:87:ff:43:b7:72:c2:12:0a:86:cf:97:66:52: b1:7e:3b:2c:ae:e6:bf:71:5b:79:24:de:97:ea:cc: b8:d1:ec:77:6e:b9:94:77:c1:54:e4:f0:e4:d1:be: bf:4b:9d:d9:ac:04:a7:d1:ce:3d:72:ad:d1:8c:69: 09:68:9e:5b:e8:6f:b1:14:95:ea:0c:d3:c2:64:d0: 9d:e6:ae:b1:79:8d:fa:d5:80:64:38:b4:6b:08:36: 74:27:22:37:ec:4a:61:87:4d:a6:8d:60:d9:08:63: 6c:92:1e:e0:5f:49:55:03:b9:a2:18:f9:0a:07:93: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6A:31:5E:2D:E7:9B:42:BF:17:C9:78:E4:E8:3C:AF:15:60:AD:79 X509v3 Authority Key Identifier: keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fb:bf:ee:7d:5d:7d:f7:54:6e:cd:ec:2d:1c:b2:a4:70:0a: ac:b5:a7:88:53:15:68:e7:d1:09:3e:f7:59:56:9a:c4:46:15: 4d:79:c7:b9:77:be:d4:df:75:b0:44:6d:dc:c0:dc:a0:66:a9: 9f:9c:1c:b6:c8:5c:98:16:08:04:12:6f:25:66:91:4a:68:b7: b9:84:30:4a:35:ef:eb:52:57:43:3d:02:c4:2f:37:18:fa:e9: d1:6a:5c:5a:66:2b:d4:5c:37:a4:d1:f0:a4:84:95:76:e9:36: 60:2c:59:5a:60:75:67:1e:55:fb:9b:ef:29:c8:02:23:c6:4a: 33:13:57:8c:98:e8:5b:4c:59:bc:fd:55:06:f1:f1:44:0b:8d: ac:f9:62:2d:25:cd:91:11:4e:44:73:5f:5d:01:f3:05:91:60: 8f:70:16:fc:a5:7a:3c:88:e6:82:60:9b:c3:51:ef:0b:39:69: da:89:ea:f1:42:94:7b:0b:da:08:04:b3:91:45:86:2d:21:c2: 9f:84:7f:2e:b9:37:66:3b:b8:c3:d2:42:86:08:60:21:6e:54: 37:c5:fb:d8:87:d0:36:57:79:2f:8c:18:16:42:83:83:41:58: 94:d3:98:78:42:56:2d:1e:e6:ab:a3:c5:63:3c:f7:05:0f:bb: 19:e6:03:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzdhGOLKWkYw/utUUTatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmNlZjlmYTFmM2IxMzg0MjEzM2FhZDRmN2I0MDFlZGM5 OGUwNDgwHhcNMjYwMjA5MTEwMDE5WhcNMjYwMjEwMTEwMDE5WjAzMTEwLwYDVQQD Eyg0YzZhMzE1ZTJkZTc5YjQyYmYxN2M5NzhlNGU4M2NhZjE1NjBhZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bOOMyG8+iZz5F/pyXlNPKD5bTnx txhWCHm/BJDF+9ADY+1TvnzmcNQMWQvtw1ex9BitqxiYp8S4/CLsN6aY0wZ34hTq mBBSI8GAdYiGZ8mauwQQkkSYXAL03bKyduFJ4wghwByp5VK8JH6CgZwQufJ65xcU Q9Qmruu2JFafxSQpZE21zplyj4f/Q7dywhIKhs+XZlKxfjssrua/cVt5JN6X6sy4 0ex3brmUd8FU5PDk0b6/S53ZrASn0c49cq3RjGkJaJ5b6G+xFJXqDNPCZNCd5q6x eY361YBkOLRrCDZ0JyI37Ephh02mjWDZCGNskh7gX0lVA7miGPkKB5OLdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExqMV4t55tCvxfJeOToPK8VYK15MB8GA1UdIwQY MBaAFBe875+h87E4QhM6rU97QB7cmOBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUt Zjg0MTlmZTU4NzJiLzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUtZjg0MTlmZTU4NzJi LzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfu/7n1d ffdUbs3sLRyypHAKrLWniFMVaOfRCT73WVaaxEYVTXnHuXe+1N91sERt3MDcoGap n5wctshcmBYIBBJvJWaRSmi3uYQwSjXv61JXQz0CxC83GPrp0WpcWmYr1Fw3pNHw pISVduk2YCxZWmB1Zx5V+5vvKcgCI8ZKMxNXjJjoW0xZvP1VBvHxRAuNrPliLSXN kRFORHNfXQHzBZFgj3AW/KV6PIjmgmCbw1HvCzlp2onq8UKUewvaCASzkUWGLSHC n4R/Lrk3Zju4w9JChghgIW5UN8X72IfQNld5L4wYFkKDg0FYlNOYeEJWLR7mq6PF Yzz3BQ+7GeYD8A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:18 2026 by rpki-client