This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json) Hash identifier: bmXD16lqKbEPWf6cWN7r8c1CpnuAfCEyQGN9zYxx43k= Subject key identifier: 12:DB:D0:88:3D:D1:4E:C8:9E:5B:1B:17:88:FD:8C:02:20:D9:DA:69 Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Certificate serial: 019C432255928E8B034E66C03E2E9910FC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft Manifest number: 0A72 Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: wm0tjlcQucpepYuDlgzVrNWdFgEKbIsx+SlGKoDM6sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:55:92:8e:8b:03:4e:66:c0:3e:2e:99:10:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=12dbd0883dd14ec89e5b1b1788fd8c0220d9da69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:34:2f:57:ba:f6:ab:6d:47:4e:0d:ea:6b: 8f:6b:9a:2c:ee:65:43:64:65:42:e0:b5:5c:5b:b7: f3:21:15:98:9c:d5:33:c2:9d:c0:94:04:f5:a9:eb: ec:25:d8:f2:c5:40:b1:45:39:dd:d3:70:2f:2b:5f: c3:9c:73:da:c4:28:bf:08:ca:e3:15:37:39:2e:16: 87:ed:b8:44:3b:8c:5e:40:28:a2:cf:4c:f5:17:57: 52:5b:ac:c0:14:a5:d7:a5:34:bb:16:2c:f1:d0:b3: 91:05:32:bf:53:2a:6f:1b:d9:ca:a9:22:7f:57:7e: f8:cf:4f:3d:4c:51:4a:1c:2c:c7:5a:b6:b6:1e:46: 60:0f:dd:c3:e9:42:c5:d8:5b:ad:bc:dc:05:a7:da: 0a:cb:36:78:62:86:14:09:1f:77:7f:6e:ae:85:8d: c7:14:e3:47:74:eb:29:48:81:0d:51:71:a1:84:e6: 40:84:72:ba:8a:eb:b3:4e:cd:ca:12:0d:37:7c:ba: a5:6b:31:9f:98:09:88:41:ce:b6:81:61:05:a0:ed: 7b:37:58:ce:78:13:1b:76:61:85:54:dc:58:c2:8e: 10:8a:0c:e5:db:23:cf:ad:de:a4:40:e8:de:ee:cb: 0b:9f:9e:2e:61:e5:69:cc:65:7c:a6:5d:1e:88:12: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:D0:88:3D:D1:4E:C8:9E:5B:1B:17:88:FD:8C:02:20:D9:DA:69 X509v3 Authority Key Identifier: keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f3:53:5a:03:f1:41:bc:4d:2d:55:99:23:68:07:f1:04:05: 46:28:2c:12:60:69:c8:44:ef:64:50:90:18:fa:3f:14:69:54: d5:42:ee:8f:f3:4c:54:ff:9a:07:30:22:f1:f1:b9:61:94:f6: 56:76:c1:37:31:66:62:83:96:57:79:b3:41:75:ea:79:3e:cf: e3:17:5c:a5:be:7d:63:bf:82:af:41:76:a9:05:63:20:2b:3c: f5:20:11:0f:51:a9:19:b3:af:31:9b:9b:41:69:60:de:ad:eb: e7:20:2c:ee:55:6f:83:92:21:e2:61:88:06:9e:8f:cd:7b:ab: fc:56:e8:f4:c3:b9:81:ce:7c:74:46:60:73:11:5b:b0:06:65: d8:c4:5e:94:91:94:bb:0b:7e:d7:0b:c1:2e:90:aa:e1:02:a0: bf:4f:a9:64:a2:85:63:43:fb:a4:0f:bd:d7:7a:6d:79:54:f9: 8d:11:28:ae:7b:4a:70:02:39:d2:6d:b8:1e:2c:fe:dd:33:6a: 39:50:09:65:1e:be:d7:88:01:45:a4:7a:91:23:6b:f4:7e:83: 5f:6e:3a:92:ec:4c:27:bb:48:39:e3:d3:ba:c9:de:c3:37:14: c4:a9:7b:46:d0:71:10:b8:3e:c8:63:d4:32:69:9d:3e:bc:8c: 85:5f:26:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlWSjosDTmbAPi6ZEPxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz OTJlMjkwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD EygxMmRiZDA4ODNkZDE0ZWM4OWU1YjFiMTc4OGZkOGMwMjIwZDlkYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY40L1e69qttR04N6muPa5os7mVD ZGVC4LVcW7fzIRWYnNUzwp3AlAT1qevsJdjyxUCxRTnd03AvK1/DnHPaxCi/CMrj FTc5LhaH7bhEO4xeQCiiz0z1F1dSW6zAFKXXpTS7Fizx0LORBTK/UypvG9nKqSJ/ V374z089TFFKHCzHWra2HkZgD93D6ULF2FutvNwFp9oKyzZ4YoYUCR93f26uhY3H FONHdOspSIENUXGhhOZAhHK6iuuzTs3KEg03fLqlazGfmAmIQc62gWEFoO17N1jO eBMbdmGFVNxYwo4Qigzl2yPPrd6kQOje7ssLn54uYeVpzGV8pl0eiBJB9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLb0Ig90U7InlsbF4j9jAIg2dppMB8GA1UdIwQY MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfNTWgPx QbxNLVWZI2gH8QQFRigsEmBpyETvZFCQGPo/FGlU1ULuj/NMVP+aBzAi8fG5YZT2 VnbBNzFmYoOWV3mzQXXqeT7P4xdcpb59Y7+Cr0F2qQVjICs89SARD1GpGbOvMZub QWlg3q3r5yAs7lVvg5Ih4mGIBp6PzXur/Fbo9MO5gc58dEZgcxFbsAZl2MRelJGU uwt+1wvBLpCq4QKgv0+pZKKFY0P7pA+913pteVT5jREorntKcAI50m24Hiz+3TNq OVAJZR6+14gBRaR6kSNr9H6DX246kuxMJ7tIOePTusnewzcUxKl7RtBxELg+yGPU MmmdPryMhV8m8g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:29 2026 by rpki-client