This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json) Hash identifier: /NCzP66jWlOIyVdSNFn31IuErSJ4fKPXH+fvtc1kTdo= Subject key identifier: 95:7B:6B:B8:1C:8E:CB:93:53:F6:1F:7C:13:8A:AF:B2:3E:07:EB:47 Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Certificate serial: 019C427D767204F0BFAE889991F2850335B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft Manifest number: 14F4 Signing time: Mon 09 Feb 2026 13:00:44 +0000 Manifest this update: Mon 09 Feb 2026 13:00:44 +0000 Manifest next update: Tue 10 Feb 2026 13:00:44 +0000 Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: wqZQwY2K6eQb1jY1bGQtWRgX490ME/tcB0aVYuzpNtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:76:72:04:f0:bf:ae:88:99:91:f2:85:03:35:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Validity Not Before: Feb 9 13:00:44 2026 GMT Not After : Feb 10 13:00:44 2026 GMT Subject: CN=957b6bb81c8ecb9353f61f7c138aafb23e07eb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f3:0e:69:f9:75:69:2e:18:9f:37:81:a1:ac: e4:1d:fc:27:6d:30:9d:56:e9:42:c9:33:a8:7b:dc: dc:89:73:22:25:b4:80:f7:55:3b:9d:42:cf:f2:5f: 10:39:25:f8:65:11:85:6b:db:fb:b2:cf:64:35:51: a7:ed:e6:11:ea:20:48:86:75:ad:fc:4d:5d:4f:2e: d4:1f:c3:59:9a:40:db:50:86:07:4d:d2:59:80:61: 32:48:d6:7c:45:b7:0f:e0:e8:66:0e:79:d8:7e:72: e9:b3:32:3f:7a:d8:09:53:35:d0:36:23:03:f7:fc: 2e:a3:62:a6:95:3c:15:56:91:23:d9:d8:ec:2e:df: 91:c7:e0:d7:fa:13:4b:5e:63:17:77:fd:23:4c:02: 2a:47:6e:1e:a8:90:92:89:53:07:c5:21:b9:71:a1: 3d:cb:2f:39:85:82:4d:65:1f:e8:ae:39:b8:dc:6b: 52:f7:c6:b7:1a:da:3f:e8:0a:18:d4:b2:1a:f0:44: f9:ea:f4:fc:d8:14:a3:87:5b:94:d0:9c:2e:da:37: ab:91:a3:1f:07:c7:6e:84:72:87:b9:5d:18:d3:77: d1:e2:8c:c3:f4:8c:ec:c4:5d:70:c5:43:98:b9:6b: cb:66:22:9d:2e:a8:ae:91:71:a4:e4:46:16:6a:0e: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:6B:B8:1C:8E:CB:93:53:F6:1F:7C:13:8A:AF:B2:3E:07:EB:47 X509v3 Authority Key Identifier: keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0d:b4:6f:f3:06:6a:5f:1d:90:df:2b:77:f2:65:8d:64:11: 34:53:2a:2d:ea:e7:03:da:6e:ce:2e:0d:05:02:e0:80:1f:70: de:fb:09:85:6b:14:5b:7e:75:e4:fb:1d:f4:4a:e2:90:6f:88: 2e:2f:4a:5d:b4:66:ae:6a:ae:72:e5:a0:ca:ad:be:0a:6e:31: 51:08:1f:b2:12:e2:fa:1d:6e:6d:5f:5d:ca:52:23:d2:28:b6: 5b:91:44:a8:4a:24:84:8a:e5:18:57:37:a0:6b:64:f8:3b:bb: 26:6e:d6:d1:ac:a7:8b:e2:0c:70:8d:00:14:35:96:3d:4c:12: ef:6f:aa:b2:28:8a:60:de:04:40:2c:73:3c:6e:ac:fb:79:d6: 03:51:d9:17:50:60:cf:e8:5b:27:18:6e:8f:3f:2c:ac:3e:99: c4:51:09:f1:47:cf:6b:b4:62:bd:81:e4:2b:e4:a7:a7:d5:0d: ca:75:1d:4e:a5:54:12:9a:1c:5a:de:6f:fd:e7:77:8f:d3:21: 86:1a:bd:82:44:c5:4d:ef:6e:22:4b:1d:41:2d:35:c0:85:a5: 80:b7:34:c3:9b:64:b9:4a:89:32:dc:2b:da:9e:6c:78:b0:87: b1:e0:9e:33:9a:51:b1:0d:9d:3f:0f:9f:d4:63:15:63:0a:d9: b0:78:19:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXZyBPC/roiZkfKFAzW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODIzYTRjYTRkNzY4OTdiNWRkZmU3OTg4ZTI3MWZmNjgx MzE4ZjIwHhcNMjYwMjA5MTMwMDQ0WhcNMjYwMjEwMTMwMDQ0WjAzMTEwLwYDVQQD Eyg5NTdiNmJiODFjOGVjYjkzNTNmNjFmN2MxMzhhYWZiMjNlMDdlYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fMOafl1aS4YnzeBoazkHfwnbTCd VulCyTOoe9zciXMiJbSA91U7nULP8l8QOSX4ZRGFa9v7ss9kNVGn7eYR6iBIhnWt /E1dTy7UH8NZmkDbUIYHTdJZgGEySNZ8RbcP4OhmDnnYfnLpszI/etgJUzXQNiMD 9/wuo2KmlTwVVpEj2djsLt+Rx+DX+hNLXmMXd/0jTAIqR24eqJCSiVMHxSG5caE9 yy85hYJNZR/orjm43GtS98a3Gto/6AoY1LIa8ET56vT82BSjh1uU0Jwu2jerkaMf B8duhHKHuV0Y03fR4ozD9IzsxF1wxUOYuWvLZiKdLqiukXGk5EYWag4oZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV7a7gcjsuTU/YffBOKr7I+B+tHMB8GA1UdIwQY MBaAFNSCOkyk12iXtd3+eYjicf9oExjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEt NGUyZjg5Y2FlMWRhLzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEtNGUyZjg5Y2FlMWRh LzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw20b/MG al8dkN8rd/JljWQRNFMqLernA9puzi4NBQLggB9w3vsJhWsUW3515Psd9ErikG+I Li9KXbRmrmqucuWgyq2+Cm4xUQgfshLi+h1ubV9dylIj0ii2W5FEqEokhIrlGFc3 oGtk+Du7Jm7W0ayni+IMcI0AFDWWPUwS72+qsiiKYN4EQCxzPG6s+3nWA1HZF1Bg z+hbJxhujz8srD6ZxFEJ8UfPa7RivYHkK+Snp9UNynUdTqVUEpocWt5v/ed3j9Mh hhq9gkTFTe9uIksdQS01wIWlgLc0w5tkuUqJMtwr2p5seLCHseCeM5pRsQ2dPw+f 1GMVYwrZsHgZTw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:40 2026 by rpki-client