This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json) Hash identifier: RBcwzKY02c/OtidqFuCbZIFUWv52X+glYXN6OWhC9u0= Subject key identifier: A6:E1:91:FA:F4:CE:CA:77:C3:E0:0B:3E:28:91:85:92:FC:56:DE:72 Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71 Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671 Certificate serial: 019C4322B642D81C6E12DE5AF312869EF71F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft Manifest number: 0B42 Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: +7UnIPwx4UAK6cXifXSIqJGDgpEd5CEEUXXoNPq+FzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b6:42:d8:1c:6e:12:de:5a:f3:12:86:9e:f7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=a6e191faf4ceca77c3e00b3e28918592fc56de72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:55:81:12:07:68:b8:7c:8f:28:42:e0:4e: e4:aa:1d:0d:72:69:59:24:34:76:62:62:e3:e0:34: 29:94:bd:f0:bc:4b:4d:78:52:d8:3e:56:4f:86:16: 09:92:fb:ab:4c:12:a0:01:9e:bc:24:bd:98:ad:2b: 58:cb:33:b8:0b:18:81:69:03:58:47:d1:d2:9b:ef: 46:d0:7b:1a:a3:d0:8e:8d:16:b2:07:cf:9b:c1:db: 91:75:19:14:b7:d6:08:ed:95:7d:78:97:61:d6:ea: 65:80:23:82:be:cf:d2:e4:ae:f1:09:72:bc:46:1b: 70:e6:da:ab:96:0b:d2:9f:b6:50:60:d1:c6:e1:db: f9:9a:4c:d8:00:f1:80:c8:b3:b2:64:a8:1c:26:0e: a1:04:82:33:84:d2:33:a3:f2:ba:da:f9:27:f7:d5: 4f:e7:c7:ed:5e:eb:2e:87:65:b2:d9:6c:31:28:74: 7c:9a:10:27:0a:c1:06:be:03:47:85:b4:5f:58:45: 70:84:69:bb:75:2e:76:b3:07:36:d2:1e:d1:ba:c2: 45:20:e7:5a:49:9d:49:7f:4d:70:d6:5d:5a:d2:ef: 36:eb:52:73:95:9a:cc:12:cd:96:45:d3:c7:e4:e9: 10:23:d5:be:61:92:ba:57:b5:9d:01:dd:3c:c2:88: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:91:FA:F4:CE:CA:77:C3:E0:0B:3E:28:91:85:92:FC:56:DE:72 X509v3 Authority Key Identifier: keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:73:2e:de:c3:e3:13:c8:d4:58:d0:e8:e5:73:a9:06:7a: eb:72:b1:22:fb:55:b8:0a:00:0c:2c:be:8d:37:03:41:5d:fb: e8:88:7d:41:8a:7a:1d:9b:18:c0:b1:29:52:62:57:06:1b:d6: 62:6e:63:3e:ab:71:83:4e:95:2e:bf:ec:57:5c:c3:7b:f4:f5: b5:3c:0f:c4:bb:87:95:26:1f:f9:cd:3f:b6:cb:c5:d5:11:87: 65:09:90:4a:10:2f:ca:67:ae:6c:96:7d:5d:c8:78:f5:e9:b3: 53:35:df:14:c3:3a:cb:02:3b:5e:99:8c:ed:11:a0:97:b6:36: 14:53:c7:29:b2:38:72:20:5f:fe:04:86:0f:e1:77:a4:64:85: 5d:a4:9b:7c:fd:44:56:be:d4:2b:9a:5e:4a:76:1d:d7:20:77: 0f:1b:eb:b3:15:59:a1:e8:c3:cb:83:b3:5a:08:67:93:b2:f5: 18:e5:96:81:3f:fa:09:7d:d7:5e:11:92:ea:71:4f:ef:9b:7e: 5a:df:96:43:91:1b:5d:d8:ea:5e:4c:38:4b:42:de:43:e7:5e: 33:98:2a:d4:ba:87:1f:4c:9a:83:1a:be:43:6d:b9:11:4f:9d: 3f:cc:11:f3:1b:d2:11:b2:75:1c:06:d7:fe:b1:f7:a3:df:c8: 90:f8:6f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrZC2BxuEt5a8xKGnvcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3 NGI2NzEwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD EyhhNmUxOTFmYWY0Y2VjYTc3YzNlMDBiM2UyODkxODU5MmZjNTZkZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiNVgRIHaLh8jyhC4E7kqh0NcmlZ JDR2YmLj4DQplL3wvEtNeFLYPlZPhhYJkvurTBKgAZ68JL2YrStYyzO4CxiBaQNY R9HSm+9G0Hsao9COjRayB8+bwduRdRkUt9YI7ZV9eJdh1uplgCOCvs/S5K7xCXK8 Rhtw5tqrlgvSn7ZQYNHG4dv5mkzYAPGAyLOyZKgcJg6hBIIzhNIzo/K62vkn99VP 58ftXusuh2Wy2WwxKHR8mhAnCsEGvgNHhbRfWEVwhGm7dS52swc20h7RusJFIOda SZ1Jf01w1l1a0u8261JzlZrMEs2WRdPH5OkQI9W+YZK6V7WdAd08wogQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbhkfr0zsp3w+ALPiiRhZL8Vt5yMB8GA1UdIwQY MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACT5zLt7D 4xPI1FjQ6OVzqQZ663KxIvtVuAoADCy+jTcDQV376Ih9QYp6HZsYwLEpUmJXBhvW Ym5jPqtxg06VLr/sV1zDe/T1tTwPxLuHlSYf+c0/tsvF1RGHZQmQShAvymeubJZ9 Xch49emzUzXfFMM6ywI7XpmM7RGgl7Y2FFPHKbI4ciBf/gSGD+F3pGSFXaSbfP1E Vr7UK5peSnYd1yB3DxvrsxVZoejDy4OzWghnk7L1GOWWgT/6CX3XXhGS6nFP75t+ Wt+WQ5EbXdjqXkw4S0LeQ+deM5gq1LqHH0yagxq+Q225EU+dP8wR8xvSEbJ1HAbX /rH3o9/IkPhvEw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:49 2026 by rpki-client