This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json) Hash identifier: G54gnVkHlPIGOfCFav1A4qlmt85JBxmc3rSnZAA15vA= Subject key identifier: 22:DC:86:8A:F1:DF:32:FE:89:CC:A3:6E:CA:8D:85:34:15:5F:04:07 Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Certificate serial: 019C4322D28E3974F07741D30639374E5142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: PEUtThhYrg94ZQo8akvLJOWHQhf6sdFsDmn56xw0jBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d2:8e:39:74:f0:77:41:d3:06:39:37:4e:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=22dc868af1df32fe89cca36eca8d8534155f0407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:05:ca:a1:ad:07:c3:bb:8e:7f:d9:67:6c: 3f:69:84:72:40:1a:38:3e:7e:cc:b9:e8:db:5a:29: be:cc:bc:e2:33:a7:32:50:6f:42:80:00:57:5a:ad: 69:3f:46:7b:8f:72:f0:64:9d:70:12:6e:05:02:0a: 84:f7:33:06:62:41:fc:f3:0e:d8:46:dd:06:33:73: d7:e1:53:49:1b:6c:22:4e:35:ab:26:c3:41:ec:85: cc:14:53:d9:6b:fa:fc:32:7d:49:8e:c2:76:f2:82: 7f:73:d2:ea:a6:25:cb:95:c6:d8:e2:6a:6e:22:65: ac:f7:d6:85:0e:b7:ae:e6:67:bf:32:e6:c7:c7:40: 1c:da:df:5e:bf:c1:0e:95:16:49:f4:cc:30:36:88: 81:60:aa:85:6b:c3:18:17:16:22:8f:b0:c3:24:36: 36:58:2a:70:d2:42:d9:57:c2:17:93:3b:ac:ec:d8: 05:c2:54:49:81:da:d5:05:0f:e0:20:27:33:27:ff: 3f:5c:ef:2a:96:31:e5:f8:01:c7:a8:8b:aa:34:e5: b6:75:7f:1a:71:0b:10:7d:74:84:7c:02:3a:4f:5e: fe:2f:13:ee:0f:10:ec:71:dd:76:c4:a2:17:be:ec: 0b:a3:1c:d3:5d:2f:c2:65:7c:70:37:9f:6c:7f:4b: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:86:8A:F1:DF:32:FE:89:CC:A3:6E:CA:8D:85:34:15:5F:04:07 X509v3 Authority Key Identifier: keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:aa:bc:0a:48:7a:a6:94:f6:52:d4:a3:19:78:41:c5:64:d9: d2:8b:06:17:8a:30:e3:37:6e:25:e0:75:01:bd:98:f7:2e:b4: df:d1:3f:83:27:3a:21:f4:3d:56:ea:9b:c7:8f:22:9b:74:ed: 16:03:7f:d8:f6:05:e2:1a:4c:63:bc:13:3f:23:87:08:a7:36: e5:b9:27:49:14:41:64:8c:31:8c:84:df:47:a0:23:a1:10:2a: 86:e0:7e:51:4b:21:24:f5:bc:5b:56:4d:32:d0:bd:57:00:9c: 96:85:f0:15:21:15:af:bb:6e:8b:4e:f4:d1:2e:e6:4b:42:6d: 2a:3e:46:07:5c:9f:e5:28:6c:4e:00:6d:0a:9b:73:e4:af:98: 12:59:0f:ed:1a:7e:65:37:51:62:0e:f5:06:ef:00:b8:fb:2d: bb:5e:c1:e7:e2:17:cb:c0:47:71:c0:9d:05:ca:bf:53:df:8d: f1:be:54:60:30:73:b0:fe:30:8f:7c:c0:ae:50:ae:d9:d4:19: 98:47:49:b7:ce:cf:64:d3:96:99:21:38:7f:7c:b9:23:92:99: 8d:44:d4:9a:f0:7f:0f:3d:f5:db:24:77:ee:5f:43:d9:91:2d: 8c:6b:e9:68:b1:48:38:f6:79:bb:ec:8f:26:f3:41:eb:f1:50: 10:63:9f:38 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDItKOOXTwd0HTBjk3TlFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2Y3MzM3NmViNjNmMWRjZmIyNzA0MDJiZmRjZjMwMzFm NWQ4MjUwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD EygyMmRjODY4YWYxZGYzMmZlODljY2EzNmVjYThkODUzNDE1NWYwNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPUFyqGtB8O7jn/ZZ2w/aYRyQBo4 Pn7MuejbWim+zLziM6cyUG9CgABXWq1pP0Z7j3LwZJ1wEm4FAgqE9zMGYkH88w7Y Rt0GM3PX4VNJG2wiTjWrJsNB7IXMFFPZa/r8Mn1JjsJ28oJ/c9LqpiXLlcbY4mpu ImWs99aFDreu5me/MubHx0Ac2t9ev8EOlRZJ9MwwNoiBYKqFa8MYFxYij7DDJDY2 WCpw0kLZV8IXkzus7NgFwlRJgdrVBQ/gICczJ/8/XO8qljHl+AHHqIuqNOW2dX8a cQsQfXSEfAI6T17+LxPuDxDscd12xKIXvuwLoxzTXS/CZXxwN59sf0unzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCLchorx3zL+icyjbsqNhTQVXwQHMB8GA1UdIwQY MBaAFPvPczdutj8dz7JwQCv9zzAx9dglMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04OXpOMjYyUHgzUHNuQkFLXzNQTURIMTJDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIzLWY1Y2MtNDg2OC04YjIx LTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJBS18zUE1ESDEyQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0LzYyNjJiMy1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5 ZTMvMS8xLTg5ek4yNjJQeDNQc25CQUtfM1BNREgxMkNVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6q8 Ckh6ppT2UtSjGXhBxWTZ0osGF4ow4zduJeB1Ab2Y9y6039E/gyc6IfQ9Vuqbx48i m3TtFgN/2PYF4hpMY7wTPyOHCKc25bknSRRBZIwxjITfR6AjoRAqhuB+UUshJPW8 W1ZNMtC9VwCcloXwFSEVr7tui0700S7mS0JtKj5GB1yf5ShsTgBtCptz5K+YElkP 7Rp+ZTdRYg71Bu8AuPstu17B5+IXy8BHccCdBcq/U9+N8b5UYDBzsP4wj3zArlCu 2dQZmEdJt87PZNOWmSE4f3y5I5KZjUTUmvB/Dz312yR37l9D2ZEtjGvpaLFIOPZ5 u+yPJvNB6/FQEGOfOA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:09 2026 by rpki-client