This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json) Hash identifier: kGybeJoOA1tKCejo9nRyuWfiUU9p+fkkG8WLTFT2aCk= Subject key identifier: C4:DC:1E:36:5B:C5:6B:E4:24:A8:F2:96:95:CB:A2:63:B4:B7:9E:36 Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Certificate serial: 019C43FE78A565490B5C7592253D88A473A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft Manifest number: 08F5 Signing time: Mon 09 Feb 2026 20:01:16 +0000 Manifest this update: Mon 09 Feb 2026 20:01:16 +0000 Manifest next update: Tue 10 Feb 2026 20:01:16 +0000 Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: oOEzjPj14PGXxIm0pJzCzSPzuCGTM36Wuifj1k123N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:78:a5:65:49:0b:5c:75:92:25:3d:88:a4:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Validity Not Before: Feb 9 20:01:16 2026 GMT Not After : Feb 10 20:01:16 2026 GMT Subject: CN=c4dc1e365bc56be424a8f29695cba263b4b79e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:df:db:d4:3e:f0:a8:86:45:d4:e3:93:71: 22:be:e5:da:0a:d7:b3:ce:0f:5e:25:f9:29:db:6c: a9:04:a5:c4:bd:b2:67:a4:7d:6a:6f:51:1a:f6:46: 60:3a:e4:2f:44:4d:c5:4d:3e:57:43:3d:4c:8f:12: 83:af:13:df:84:79:33:62:8e:db:c3:f5:47:02:82: cb:6b:ec:27:4b:02:2d:7d:7a:4a:61:5b:98:1c:c0: a6:27:ac:b4:13:6c:c6:bf:6d:db:24:7a:c4:7e:20: e4:89:3d:1b:2d:7b:91:de:a5:f1:bc:82:12:29:84: 8a:be:e3:07:47:9b:0d:64:e7:c6:dc:4d:51:0c:67: b4:56:93:8a:bc:d6:9b:60:4d:33:88:85:11:32:59: 72:ee:04:62:35:9e:c0:f1:fe:88:62:d2:06:83:c2: 9b:4c:92:2a:5b:0e:53:af:36:db:e0:1e:fd:5a:fc: 61:3f:ae:52:b6:93:c4:ee:16:dc:44:f6:50:18:81: 76:62:bc:eb:2d:79:0e:f1:e4:95:13:ad:bc:f2:c0: 84:d3:33:4b:b3:4c:ee:f7:fc:3a:56:1e:b4:50:09: fd:f4:40:dd:ec:f8:b3:e4:8f:c7:bc:6e:a3:43:6e: 32:a9:65:29:c1:32:db:ff:b1:7e:82:fe:b3:ae:8f: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DC:1E:36:5B:C5:6B:E4:24:A8:F2:96:95:CB:A2:63:B4:B7:9E:36 X509v3 Authority Key Identifier: keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:da:0b:30:52:d0:5b:31:ed:eb:41:f0:d1:35:89:c8:5e: 61:c3:22:f2:ca:5c:5e:17:0e:f1:e3:10:91:67:5d:b9:7d:c7: ef:ba:1e:78:13:91:9f:d7:40:38:8e:68:80:9c:2e:6b:45:56: 00:5a:63:2f:64:96:a3:cb:de:23:d3:13:77:c2:f6:67:25:f2: 7f:cd:76:86:2c:f6:bb:6e:44:a8:b5:ba:08:b8:ba:b3:50:19: bb:77:9c:cd:5b:cc:a7:b3:40:b1:95:9f:88:31:0a:36:b5:e5: b6:e9:0d:92:6b:68:27:cf:60:68:01:4b:b0:d4:32:e2:2b:25: 13:2c:22:d6:f6:40:13:b1:43:c8:0f:85:1c:23:bc:16:db:fc: c6:a8:24:1b:29:3c:e3:d2:d3:45:c2:d4:0d:02:0c:be:43:a1: 14:d9:fb:9b:82:58:9c:57:d4:f4:5f:0f:de:4b:85:15:b2:9f: 7e:81:f1:db:c8:7f:4c:ee:a3:0b:f3:b9:6f:11:ac:b0:e7:24: 82:ff:d2:46:39:d3:c8:8d:33:0f:8b:9c:22:a7:73:9a:ef:87: 59:06:ba:50:98:e4:e9:52:13:70:ed:f1:03:61:95:f9:be:61: fd:e5:ad:7e:6e:6c:f9:6e:70:a8:10:d2:af:fd:5f:c1:a0:e3: 1b:cb:67:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nilZUkLXHWSJT2IpHOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx NTU0NGIwHhcNMjYwMjA5MjAwMTE2WhcNMjYwMjEwMjAwMTE2WjAzMTEwLwYDVQQD EyhjNGRjMWUzNjViYzU2YmU0MjRhOGYyOTY5NWNiYTI2M2I0Yjc5ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI3f29Q+8KiGRdTjk3EivuXaCtez zg9eJfkp22ypBKXEvbJnpH1qb1Ea9kZgOuQvRE3FTT5XQz1MjxKDrxPfhHkzYo7b w/VHAoLLa+wnSwItfXpKYVuYHMCmJ6y0E2zGv23bJHrEfiDkiT0bLXuR3qXxvIIS KYSKvuMHR5sNZOfG3E1RDGe0VpOKvNabYE0ziIURMlly7gRiNZ7A8f6IYtIGg8Kb TJIqWw5Trzbb4B79WvxhP65StpPE7hbcRPZQGIF2YrzrLXkO8eSVE6288sCE0zNL s0zu9/w6Vh60UAn99EDd7Piz5I/HvG6jQ24yqWUpwTLb/7F+gv6zro/mAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTcHjZbxWvkJKjylpXLomO0t542MB8GA1UdIwQY MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSzaCzBS 0Fsx7etB8NE1icheYcMi8spcXhcO8eMQkWdduX3H77oeeBORn9dAOI5ogJwua0VW AFpjL2SWo8veI9MTd8L2ZyXyf812hiz2u25EqLW6CLi6s1AZu3eczVvMp7NAsZWf iDEKNrXltukNkmtoJ89gaAFLsNQy4islEywi1vZAE7FDyA+FHCO8Ftv8xqgkGyk8 49LTRcLUDQIMvkOhFNn7m4JYnFfU9F8P3kuFFbKffoHx28h/TO6jC/O5bxGssOck gv/SRjnTyI0zD4ucIqdzmu+HWQa6UJjk6VITcO3xA2GV+b5h/eWtfm5s+W5wqBDS r/1fwaDjG8tnpg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:09 2026 by rpki-client